
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json)
Hash identifier: IyzVQvizHPfyi+psnRyg3SAdajTEAArnH3s41sYMgog=
Subject key identifier: 84:55:A7:4E:5D:50:08:40:15:5C:C4:ED:3D:00:78:98:E8:FE:73:C9
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 6BDFBD2041F50C18BD196A961A114CF287006D17
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
Manifest number: 47
Signing time: Fri 13 Mar 2026 01:18:39 +0000
Manifest this update: Fri 13 Mar 2026 01:13:39 +0000
Manifest next update: Sat 14 Mar 2026 02:31:39 +0000
Files and hashes: 1: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=)
2: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=)
3: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=)
4: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=)
5: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=)
6: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=)
7: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=)
8: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=)
9: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=)
10: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=)
11: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=)
12: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=)
13: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=)
14: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=)
15: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=)
16: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=)
17: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=)
18: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=)
19: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: eBtib5CL58R2eEmXVuaVdJw+ymEn+W55hKpz3170lR4=)
20: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=)
21: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=)
22: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=)
23: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=)
24: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=)
25: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=)
26: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=)
27: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=)
28: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=)
29: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=)
30: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=)
31: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=)
32: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=)
33: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=)
34: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=)
35: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=)
36: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=)
37: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=)
38: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=)
39: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=)
40: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:df:bd:20:41:f5:0c:18:bd:19:6a:96:1a:11:4c:f2:87:00:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Mar 13 01:13:39 2026 GMT
Not After : Mar 14 02:31:39 2026 GMT
Subject: CN=8455A74E5D500840155CC4ED3D007898E8FE73C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:73:20:7b:85:49:cb:ae:e1:97:6c:e5:ab:
16:86:04:c1:5e:de:52:f2:c3:97:be:bc:b6:55:a6:
40:40:e9:ba:81:a7:12:ea:c0:6c:89:49:f6:69:a8:
9d:c7:56:4a:10:d0:07:f4:6a:d0:21:68:58:ba:8d:
b6:f7:13:13:44:08:5e:e5:21:fa:4d:a3:c6:2d:e9:
d8:98:bc:a2:6e:f5:06:99:4b:8c:06:57:e7:9a:0c:
58:e4:0b:c2:74:66:2c:74:1d:98:60:97:a0:ad:78:
ab:e8:bf:c7:2d:37:68:16:89:40:c9:e7:91:a9:66:
df:32:7d:78:5c:04:f4:9e:98:b3:7f:98:53:23:ff:
e5:05:00:b1:d4:01:13:1b:68:2a:93:ad:ae:60:0d:
27:b3:5b:a6:60:97:6e:01:49:93:88:7e:e5:d9:ae:
78:95:42:2c:fe:a2:1b:6e:15:65:b7:2e:8e:b7:76:
6a:f4:e8:37:60:9b:c0:89:4f:08:82:8a:da:dd:28:
be:46:8c:5e:6b:38:cf:89:b8:80:6f:7d:04:e9:a0:
36:9d:f3:ca:07:a9:58:2f:3d:60:1c:e4:a8:97:51:
bc:94:85:6b:0c:ac:c4:f7:9b:2e:ea:2c:a0:ef:38:
e9:d7:36:b9:58:31:38:b6:78:93:d5:99:f3:43:ba:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:A7:4E:5D:50:08:40:15:5C:C4:ED:3D:00:78:98:E8:FE:73:C9
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:75:0b:68:14:24:59:d9:9e:16:61:3a:14:7a:75:df:f9:ec:
ae:c5:a2:bd:a6:20:89:ff:7e:2f:1e:d3:2f:ba:5f:a0:64:52:
1a:ac:88:a8:c7:8b:36:2d:a5:a4:10:ca:41:52:24:ab:9e:39:
9e:70:24:36:21:ec:44:cf:4b:f5:10:86:1d:35:68:72:ba:9f:
c0:db:e8:9f:38:b3:df:ed:11:b9:cb:16:01:98:ae:df:a4:c3:
12:33:d9:36:65:82:65:d6:c0:c1:40:47:55:37:3a:40:75:9e:
d5:7c:9a:11:53:81:8f:e1:be:f2:26:3a:14:fc:9b:78:51:31:
1c:8f:13:13:33:d9:89:8f:69:3a:4a:c0:97:9d:f7:2d:70:6d:
ee:92:3c:28:0f:c7:f0:e4:3c:d8:b0:69:2d:b0:9e:ee:19:5f:
8e:88:ef:1a:ff:ea:f1:ff:14:25:65:24:46:34:05:dc:13:7b:
b2:1e:e3:72:f4:a7:48:2c:d5:67:ff:18:74:5f:f4:23:c0:59:
1e:5d:7e:8b:2f:d4:fe:ff:71:7e:2d:f1:dc:ab:f4:ce:ca:28:
68:f7:4f:2a:57:61:86:57:b6:07:88:7b:28:c7:9f:27:fe:e8:
82:69:8d:57:f5:11:0d:5f:ab:b9:26:e2:2f:9c:53:49:8c:62:
97:59:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:26 2026 by rpki-client