$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: bm4y+R6Z5uR3O882tbDqYxJhaTsuU6KZe0veyEdU1Mo= Subject key identifier: 25:12:28:9F:52:CC:C9:FB:87:34:7C:8D:C6:B8:6C:3E:E9:6E:1D:CD Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 69BA6EA7678ADF51566ECBC641A5BE205AA017EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 4B Signing time: Tue 21 Jul 2026 20:19:33 +0000 Manifest this update: Tue 21 Jul 2026 20:14:33 +0000 Manifest next update: Wed 22 Jul 2026 20:27:33 +0000 Files and hashes: 1: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 2: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: YFsKMPr5U1ERC7iyXfFCu6g6ChRvTRl2JhqEfeUbPKU=) 3: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ba:6e:a7:67:8a:df:51:56:6e:cb:c6:41:a5:be:20:5a:a0:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Jul 21 20:14:33 2026 GMT Not After : Jul 22 20:27:33 2026 GMT Subject: CN=2512289F52CCC9FB87347C8DC6B86C3EE96E1DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:89:44:ea:5c:90:c1:45:97:f1:0a:8a:0e: 77:b1:43:0a:f9:53:4e:b5:78:82:c5:4c:e5:13:eb: f2:e9:4d:02:af:45:7e:77:02:7a:2f:16:1d:17:03: 7b:c0:7a:2e:38:02:d8:e6:e7:78:4f:34:8b:bc:78: 9f:3e:56:b1:e9:9d:bc:90:f2:c8:b7:e1:f3:5d:2f: b4:6e:ff:7d:4c:46:cb:4d:b4:bd:58:d1:ee:cc:8c: 36:45:d7:b8:5b:71:77:c9:0e:48:09:b4:56:fb:68: f2:f8:15:65:47:31:8f:7f:bd:07:cf:36:f2:7a:af: 55:ac:a5:7a:35:0c:7c:1f:dc:60:22:61:ad:59:d7: c3:57:80:2a:56:89:ad:5e:1d:16:fa:60:70:dd:73: e1:39:5e:34:4a:db:db:7c:7b:6e:b5:16:a3:4f:a5: 61:fd:59:a2:b2:f1:0b:67:c0:58:fa:c6:73:b6:e8: 2d:77:81:c7:86:a0:61:3e:dc:be:7c:ff:30:02:40: b1:be:68:f6:a5:79:ae:bc:e0:c5:22:b6:1a:8d:33: 13:33:bf:9c:ca:a9:4a:73:f0:bd:da:59:0a:bd:ac: 3a:77:e5:bd:89:91:84:c6:b2:99:1e:75:58:9f:93: b0:1d:84:75:a9:3d:61:b2:87:a6:f6:ba:80:11:1a: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:28:9F:52:CC:C9:FB:87:34:7C:8D:C6:B8:6C:3E:E9:6E:1D:CD X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:eb:4b:e3:eb:a6:9c:df:f9:2f:60:eb:86:f6:26:34:37:97: be:2c:b0:95:1f:8b:a4:78:09:65:76:b4:b2:86:8c:cf:7b:97: 9d:66:46:a5:55:71:fa:36:d5:99:d2:7e:31:c1:c3:9e:0c:9b: dd:d6:1f:93:28:e2:93:28:da:ba:07:b5:c0:11:b8:0c:b9:fa: 78:13:c9:7a:7d:e5:14:3f:cf:db:f0:f8:f5:5b:1a:14:2e:dc: 4e:6a:40:65:a6:e5:13:d8:94:50:f1:9c:ad:aa:2a:30:0e:22: a0:87:83:9d:5b:9a:34:c9:71:a5:86:dc:30:8c:4f:a0:e2:cb: 88:9d:e7:72:b0:1c:26:b1:a8:31:76:5c:02:31:68:ee:dc:5a: d5:f6:0d:10:cd:f7:9f:5b:37:b6:46:d0:39:18:d3:5c:b8:94: d6:47:98:25:ac:7b:d3:d3:33:05:f6:dd:c1:8e:e4:25:4a:ba: 24:a4:93:a4:f1:18:3c:04:ea:36:08:7e:5a:ae:65:db:a0:c8: 68:4a:4c:a4:2c:6a:14:5b:0e:a7:7e:95:0b:6f:b2:b3:4e:f6: 61:b3:2e:6b:25:41:a8:d6:b4:a5:62:eb:63:c8:b3:d8:34:02: 13:38:f4:35:3d:b8:58:2e:53:f3:6c:b9:46:1e:e7:9e:b6:7b: 15:ee:fc:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUabpup2eK31FWbsvGQaW+IFqgF+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA3MjEyMDE0MzNaFw0yNjA3MjIyMDI3MzNaMDMxMTAvBgNV BAMTKDI1MTIyODlGNTJDQ0M5RkI4NzM0N0M4REM2Qjg2QzNFRTk2RTFEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ColE6lyQwUWX8QqKDnexQwr5 U061eILFTOUT6/LpTQKvRX53AnovFh0XA3vAei44Atjm53hPNIu8eJ8+VrHpnbyQ 8si34fNdL7Ru/31MRstNtL1Y0e7MjDZF17hbcXfJDkgJtFb7aPL4FWVHMY9/vQfP NvJ6r1WspXo1DHwf3GAiYa1Z18NXgCpWia1eHRb6YHDdc+E5XjRK29t8e261FqNP pWH9WaKy8QtnwFj6xnO26C13gceGoGE+3L58/zACQLG+aPalea684MUithqNMxMz v5zKqUpz8L3aWQq9rDp35b2JkYTGspkedVifk7AdhHWpPWGyh6b2uoARGhbXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJRIon1LMyfuHNHyNxrhsPuluHc0wHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+tL4+umnN/5 L2DrhvYmNDeXviywlR+LpHgJZXa0soaMz3uXnWZGpVVx+jbVmdJ+McHDngyb3dYf kyjikyjauge1wBG4DLn6eBPJen3lFD/P2/D49VsaFC7cTmpAZablE9iUUPGcraoq MA4ioIeDnVuaNMlxpYbcMIxPoOLLiJ3ncrAcJrGoMXZcAjFo7txa1fYNEM33n1s3 tkbQORjTXLiU1keYJax709MzBfbdwY7kJUq6JKSTpPEYPATqNgh+Wq5l26DIaEpM pCxqFFsOp36VC2+ys072YbMuayVBqNa0pWLrY8iz2DQCEzj0NT24WC5T82y5Rh7n nrZ7Fe78vg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:52 2026 by rpki-client