$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json) Hash identifier: Mc/hm7nw5GkQUvC3s+pEoLc7Gv9ZiimQipbT0y9+cHc= Subject key identifier: 12:2D:2B:1E:A6:DD:4B:7D:22:49:47:36:D8:D9:39:2B:FD:AF:DA:E3 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 20B006F179226E951FD46CB11915915B86E321FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft Manifest number: 83 Signing time: Sun 26 Apr 2026 16:33:27 +0000 Manifest this update: Sun 26 Apr 2026 16:28:27 +0000 Manifest next update: Mon 27 Apr 2026 20:09:27 +0000 Files and hashes: 1: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: TC/yo5pFnOwmdiYdRqOhzrX6CnwSs0G2sFf4Ls1q+Ns=) 2: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=) 3: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=) 4: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=) 5: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=) 6: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=) 7: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=) 8: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=) 9: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=) 10: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=) 11: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=) 12: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=) 13: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=) 14: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=) 15: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=) 16: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=) 17: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=) 18: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=) 19: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=) 20: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=) 21: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=) 22: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=) 23: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=) 24: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=) 25: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=) 26: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=) 27: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=) 28: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=) 29: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=) 30: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=) 31: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=) 32: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=) 33: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=) 34: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=) 35: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=) 36: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=) 37: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=) 38: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=) 39: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=) 40: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=) 41: 3136332e34372e342e302f32322d3232203d3e2034383132.roa (hash: zvELJzYBuK5WrSDweO8nyM7DD2RtUW8B/UrBG13cLPA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b0:06:f1:79:22:6e:95:1f:d4:6c:b1:19:15:91:5b:86:e3:21:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Apr 26 16:28:27 2026 GMT Not After : Apr 27 20:09:27 2026 GMT Subject: CN=122D2B1EA6DD4B7D22494736D8D9392BFDAFDAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:72:9c:c6:ad:5d:90:ef:97:40:4b:45:a8: 29:a1:5e:65:f1:28:d2:72:f5:42:26:a6:bc:fc:f7: 5a:f9:b6:12:83:8c:3c:08:7b:47:d2:a8:6a:a3:7e: 7c:f5:6c:d5:01:2d:47:81:1d:d4:93:4d:36:fc:e4: 2c:be:14:be:13:39:e2:41:e1:e7:9f:af:e7:1e:8a: 5d:64:e7:a6:0b:8f:6e:e3:da:8d:b3:98:f5:b5:66: 8c:9c:b2:6e:33:fb:ae:a2:a5:11:c0:bc:68:5e:e8: de:35:9b:29:4e:a6:1d:a1:20:5d:2d:cb:fe:16:0d: fd:e0:0d:c7:73:10:6d:1c:09:89:49:9d:6d:2d:ab: 1b:96:6c:08:0c:71:a2:89:8e:92:c9:0b:d4:46:2a: e3:c8:59:13:10:90:50:f8:da:7a:96:f2:d9:b9:6c: 4a:78:d5:1a:55:57:5f:17:68:6e:3c:7e:a7:ba:ab: bd:66:06:c9:3a:e3:df:f6:e4:c8:72:e2:26:d4:21: a3:e0:55:43:e7:80:95:99:3a:36:7c:eb:67:33:37: 99:e9:0e:b9:86:54:d2:e0:cd:74:ea:7b:7d:b9:7d: bf:d5:30:49:e3:f7:be:fd:b4:24:91:dc:b3:c3:53: 2b:d3:96:cb:02:2d:fa:01:b9:82:db:d4:70:e6:d5: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2D:2B:1E:A6:DD:4B:7D:22:49:47:36:D8:D9:39:2B:FD:AF:DA:E3 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:96:09:7d:b7:ca:29:9c:9e:21:9e:fd:e8:6d:38:ee:e5: d3:83:db:02:02:65:04:aa:2d:c6:5a:67:99:39:a4:d7:0b:9f: 7f:2d:f2:55:d7:61:fd:f0:23:df:1f:aa:5b:ea:ca:26:2f:b2: bd:2c:87:e6:64:19:5d:37:63:69:66:72:83:4e:05:e7:11:dc: 44:01:b5:10:94:ef:b4:0e:8e:7e:3f:be:b8:e7:e9:db:49:a4: a2:4b:0f:ac:27:e4:24:29:3d:13:e6:70:08:3d:fe:20:79:0e: 71:2c:ed:c4:79:a6:47:dd:4d:c2:f8:f1:5c:33:b9:65:0a:09: 60:cb:7c:c5:60:ee:df:7c:cb:ae:c0:9b:1c:da:7b:fa:ed:71: f0:6b:01:04:4b:83:c1:c6:67:9f:03:1a:08:23:54:67:e3:d3: 00:41:29:b4:00:e2:e4:cc:f8:ab:d9:e6:3b:4d:59:04:7b:ea: 0a:8f:51:ef:c4:34:96:95:e2:eb:2d:2c:75:5c:37:01:5f:08: 49:09:fd:eb:05:7f:e9:44:c4:f0:16:db:46:e3:09:8d:2a:bb: 1f:a8:74:9a:65:62:0b:52:da:3f:ad:52:18:95:69:2d:f8:0b: 33:fc:4e:c2:cb:45:8c:8b:fa:bd:ee:31:ae:15:68:f2:51:45: 39:7d:8f:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUILAG8XkibpUf1GyxGRWRW4bjIf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA0MjYxNjI4MjdaFw0yNjA0MjcyMDA5MjdaMDMxMTAvBgNV BAMTKDEyMkQyQjFFQTZERDRCN0QyMjQ5NDczNkQ4RDkzOTJCRkRBRkRBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOnKcxq1dkO+XQEtFqCmhXmXx KNJy9UImprz891r5thKDjDwIe0fSqGqjfnz1bNUBLUeBHdSTTTb85Cy+FL4TOeJB 4eefr+ceil1k56YLj27j2o2zmPW1Zoycsm4z+66ipRHAvGhe6N41mylOph2hIF0t y/4WDf3gDcdzEG0cCYlJnW0tqxuWbAgMcaKJjpLJC9RGKuPIWRMQkFD42nqW8tm5 bEp41RpVV18XaG48fqe6q71mBsk649/25Mhy4ibUIaPgVUPngJWZOjZ862czN5np DrmGVNLgzXTqe325fb/VMEnj9779tCSR3LPDUyvTlssCLfoBuYLb1HDm1bbXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEi0rHqbdS30iSUc22Nk5K/2v2uMwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1 MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDuWCX23yimc niGe/ehtOO7l04PbAgJlBKotxlpnmTmk1wuffy3yVddh/fAj3x+qW+rKJi+yvSyH 5mQZXTdjaWZyg04F5xHcRAG1EJTvtA6Ofj++uOfp20mkoksPrCfkJCk9E+ZwCD3+ IHkOcSztxHmmR91NwvjxXDO5ZQoJYMt8xWDu33zLrsCbHNp7+u1x8GsBBEuDwcZn nwMaCCNUZ+PTAEEptADi5Mz4q9nmO01ZBHvqCo9R78Q0lpXi6y0sdVw3AV8ISQn9 6wV/6UTE8BbbRuMJjSq7H6h0mmViC1LaP61SGJVpLfgLM/xOwstFjIv6ve4xrhVo 8lFFOX2PlA== -----END CERTIFICATE-----Generated at Mon Apr 27 09:50:42 2026 by rpki-client