$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: eLLmCpJ5PZ5+uD6C61TctQZKFzwuqZVo6b4FAcN6smA= Subject key identifier: 2D:D7:A1:25:C4:DE:B4:27:1A:BF:B3:80:01:E8:23:35:55:4F:D7:0D Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 6E970C85DEA77C8736F0E9CDD9692D90CED391EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 013B Signing time: Mon 12 Oct 2026 20:42:20 +0000 Manifest this update: Mon 12 Oct 2026 20:37:20 +0000 Manifest next update: Fri 16 Oct 2026 00:46:20 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: ITUbSrA23cqlN9xGODB5ZLm0pQTMto07pqqnQ4m5HNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:97:0c:85:de:a7:7c:87:36:f0:e9:cd:d9:69:2d:90:ce:d3:91:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Oct 12 20:37:20 2026 GMT Not After : Oct 16 00:46:20 2026 GMT Subject: CN=2DD7A125C4DEB4271ABFB38001E82335554FD70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:ff:51:2a:0f:54:9d:11:35:89:b1:7c:6f: f5:65:bc:33:3b:10:a8:f5:c1:66:fe:c5:85:dc:87: 9a:45:57:56:92:29:a7:3e:b1:df:16:12:2d:fa:1a: 37:c7:17:9c:91:54:d7:de:2d:77:cd:b2:45:97:22: c0:31:6b:b6:fc:2a:47:fc:e1:06:17:8e:a7:f5:bd: 0f:9c:09:5a:ef:3f:88:4c:d0:fe:63:85:a4:e0:70: cd:f9:3f:00:ce:d6:e6:5f:92:17:6f:d7:29:f4:28: 77:a3:a8:7d:da:0d:43:97:2d:92:33:c7:3f:65:1d: c6:7a:be:8d:c5:24:61:f9:52:68:ce:d4:7d:71:f8: 74:b9:c0:a2:a6:14:b4:22:c1:20:de:b2:1e:5f:22: b0:a6:97:2f:33:a3:46:b0:7f:c0:61:34:03:47:6a: 55:b1:df:45:c5:49:eb:59:a7:6e:86:1c:74:6e:70: fd:0a:9c:c2:ad:ac:2f:7e:28:e2:99:ff:da:d9:a5: 09:8b:fb:96:07:ec:ee:9e:ca:1e:46:08:54:ff:c1: 4a:56:35:23:4b:9c:dd:d8:11:f9:b2:66:0f:0d:1f: 7a:66:af:c2:50:a0:f5:f6:15:ca:eb:f2:c0:ca:1a: 4a:79:83:6d:6e:9e:41:68:0b:2c:bd:49:b0:96:1f: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:A1:25:C4:DE:B4:27:1A:BF:B3:80:01:E8:23:35:55:4F:D7:0D X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a6:3f:5c:d9:a3:15:89:ac:6e:c4:51:03:96:68:44:a1:b4: ae:8a:6e:c6:30:f0:96:f7:4f:13:82:be:20:3a:9c:93:2c:ce: bf:72:70:97:4f:84:5e:9e:3e:ad:a0:b0:13:d8:32:2d:22:93: d9:2d:06:90:8a:20:b4:8c:14:bf:11:75:34:fd:a9:76:ba:d5: 92:1e:db:18:c4:89:9d:f9:f8:ee:ce:87:01:61:6a:96:e8:17: 51:69:fe:40:84:33:95:c0:92:2f:f3:30:c0:3e:45:d2:fb:5d: cb:00:c2:17:9a:9f:52:99:6b:62:d8:5b:46:65:de:4a:32:14: 4d:11:ec:1d:b8:07:a2:54:6e:1e:01:21:1e:31:fb:fb:24:73: 5f:4e:ba:90:c2:f0:ca:64:33:0b:b3:b7:58:15:7a:5e:f3:e7: fe:c1:bc:62:88:22:97:5e:33:6a:7c:f7:9a:f9:8c:00:90:47: d1:e1:0a:11:62:76:b7:2e:a2:3f:0f:72:84:d1:24:63:0e:1e: e0:3e:3e:99:4c:63:57:e3:49:a6:e6:11:f4:19:fe:2d:b2:2a: a9:39:90:0f:1d:9e:00:ee:25:e6:ba:d4:57:a8:2c:a4:cc:1b: c8:f6:2c:df:37:b3:55:f5:27:6d:ee:09:01:ff:91:f1:1d:b6: 76:7c:36:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbpcMhd6nfIc28OnN2WktkM7Tke8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjEwMTIyMDM3MjBaFw0yNjEwMTYwMDQ2MjBaMDMxMTAvBgNV BAMTKDJERDdBMTI1QzRERUI0MjcxQUJGQjM4MDAxRTgyMzM1NTU0RkQ3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RP9RKg9UnRE1ibF8b/VlvDM7 EKj1wWb+xYXch5pFV1aSKac+sd8WEi36GjfHF5yRVNfeLXfNskWXIsAxa7b8Kkf8 4QYXjqf1vQ+cCVrvP4hM0P5jhaTgcM35PwDO1uZfkhdv1yn0KHejqH3aDUOXLZIz xz9lHcZ6vo3FJGH5UmjO1H1x+HS5wKKmFLQiwSDesh5fIrCmly8zo0awf8BhNANH alWx30XFSetZp26GHHRucP0KnMKtrC9+KOKZ/9rZpQmL+5YH7O6eyh5GCFT/wUpW NSNLnN3YEfmyZg8NH3pmr8JQoPX2Fcrr8sDKGkp5g21unkFoCyy9SbCWH++XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULdehJcTetCcav7OAAegjNVVP1w0wHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaY/XNmjFYms bsRRA5ZoRKG0ropuxjDwlvdPE4K+IDqckyzOv3Jwl0+EXp4+raCwE9gyLSKT2S0G kIogtIwUvxF1NP2pdrrVkh7bGMSJnfn47s6HAWFqlugXUWn+QIQzlcCSL/MwwD5F 0vtdywDCF5qfUplrYthbRmXeSjIUTRHsHbgHolRuHgEhHjH7+yRzX066kMLwymQz C7O3WBV6XvPn/sG8Yogil14zanz3mvmMAJBH0eEKEWJ2ty6iPw9yhNEkYw4e4D4+ mUxjV+NJpuYR9Bn+LbIqqTmQDx2eAO4l5rrUV6gspMwbyPYs3zezVfUnbe4JAf+R 8R22dnw24g== -----END CERTIFICATE-----Generated at Tue Oct 13 20:47:53 2026 by rpki-client