$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: WOEvAU7fSoDRusADLmqVUT91OJhlEIrSeO58THI1Wpo= Subject key identifier: 7C:E3:B5:7E:45:A6:F5:53:00:27:D9:93:86:84:A6:AF:70:20:2F:E5 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 048C984ADE91F48203D1ED6FF173CFE4ADF61776 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: AD Signing time: Fri 29 May 2026 04:47:36 +0000 Manifest this update: Fri 29 May 2026 04:42:36 +0000 Manifest next update: Sat 30 May 2026 06:42:36 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: 3QnlLY8ZbgULE/LjJjTqJ+c/HpeTypxbepKi/iGAmyg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8c:98:4a:de:91:f4:82:03:d1:ed:6f:f1:73:cf:e4:ad:f6:17:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: May 29 04:42:36 2026 GMT Not After : May 30 06:42:36 2026 GMT Subject: CN=7CE3B57E45A6F5530027D9938684A6AF70202FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:b6:66:aa:9e:4b:38:22:16:be:42:c6:78: 80:4d:7b:83:2f:c1:52:5c:4c:4c:dc:ad:8d:31:57: 69:24:8a:e7:9d:41:c4:9b:6d:ca:f8:ab:54:73:a2: 84:5c:67:55:3f:00:e7:50:70:ed:9f:6c:41:f7:13: 2e:d2:a3:75:a0:16:f6:5d:c9:76:89:cd:9e:dd:a3: 74:92:3c:8c:df:e5:39:87:ae:92:72:2a:50:56:5b: 54:d0:63:0b:b4:2a:94:25:02:cf:0b:48:83:ab:f8: 57:d6:1b:fe:b4:2b:4e:a4:0e:f2:6a:5b:b3:03:4e: 84:18:c4:15:36:22:35:0b:a7:86:40:be:d7:43:7d: db:fe:b4:1b:bb:ae:19:95:d8:fb:30:4c:29:3d:4e: ed:8b:3e:33:a2:c2:d1:9c:13:36:8f:f3:c9:17:04: a4:90:b6:89:83:77:51:4f:d7:a4:63:b3:ee:21:26: ec:91:0f:20:b6:c9:3b:1b:a5:e2:ea:a0:6c:5f:dc: ef:68:9e:fd:e9:43:d4:e0:cc:a8:57:03:4f:0a:83: f7:94:58:07:da:33:89:13:a8:06:ec:8a:20:9b:72: 7b:89:90:38:22:1e:37:59:61:f9:3f:d8:1d:ef:1f: 1b:1e:59:cb:fb:e6:b8:e9:bf:48:93:2d:d3:a2:9e: cb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E3:B5:7E:45:A6:F5:53:00:27:D9:93:86:84:A6:AF:70:20:2F:E5 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:b3:bc:5f:bb:6e:e5:09:77:65:80:9b:aa:4e:80:f2:ad:5e: 15:46:1f:b8:3b:c4:d7:08:35:1c:77:18:7a:b4:61:c1:1c:5d: e7:3c:71:cd:55:1b:86:e4:bb:e9:64:c0:42:d9:15:37:35:6a: ed:11:d2:9c:42:30:3f:e3:2a:69:dd:0e:10:89:2d:30:7f:49: cf:f1:f0:35:34:db:f3:f4:e1:e5:e6:89:df:1e:56:d4:14:ce: e0:43:5e:33:75:00:80:4c:43:61:58:d1:0a:54:cf:3e:87:aa: 37:2b:a8:9d:2f:bf:09:80:0b:5a:63:0f:aa:ac:25:70:d3:84: f6:f0:b0:28:aa:f0:b3:10:d8:d5:7f:55:e1:84:70:a7:06:9e: 7a:5b:bd:f9:79:a1:f9:ea:07:e3:52:75:b0:25:ce:9b:cd:2e: 60:07:0c:fc:0d:25:0f:81:5a:1f:51:31:a1:ff:c5:39:a6:a7: b0:44:1e:ef:3a:b6:bd:59:9a:4e:16:81:9e:ef:5e:de:50:1e: 3f:0e:f3:2d:b3:a0:f3:c2:3d:e4:b9:d4:31:8a:c9:1a:a7:b2: 01:00:64:b7:0e:8b:14:8f:6c:8b:cf:cb:64:70:55:1a:54:fd: 0a:42:87:b9:5d:c6:93:9e:6e:b0:0b:81:63:2e:9b:5b:d7:44: f3:dc:1f:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBIyYSt6R9IID0e1v8XPP5K32F3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA1MjkwNDQyMzZaFw0yNjA1MzAwNjQyMzZaMDMxMTAvBgNV BAMTKDdDRTNCNTdFNDVBNkY1NTMwMDI3RDk5Mzg2ODRBNkFGNzAyMDJGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73LZmqp5LOCIWvkLGeIBNe4Mv wVJcTEzcrY0xV2kkiuedQcSbbcr4q1RzooRcZ1U/AOdQcO2fbEH3Ey7So3WgFvZd yXaJzZ7do3SSPIzf5TmHrpJyKlBWW1TQYwu0KpQlAs8LSIOr+FfWG/60K06kDvJq W7MDToQYxBU2IjULp4ZAvtdDfdv+tBu7rhmV2PswTCk9Tu2LPjOiwtGcEzaP88kX BKSQtomDd1FP16Rjs+4hJuyRDyC2yTsbpeLqoGxf3O9onv3pQ9TgzKhXA08Kg/eU WAfaM4kTqAbsiiCbcnuJkDgiHjdZYfk/2B3vHxseWcv75rjpv0iTLdOinst9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfOO1fkWm9VMAJ9mThoSmr3AgL+UwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwbO8X7tu5Ql3 ZYCbqk6A8q1eFUYfuDvE1wg1HHcYerRhwRxd5zxxzVUbhuS76WTAQtkVNzVq7RHS nEIwP+Mqad0OEIktMH9Jz/HwNTTb8/Th5eaJ3x5W1BTO4ENeM3UAgExDYVjRClTP PoeqNyuonS+/CYALWmMPqqwlcNOE9vCwKKrwsxDY1X9V4YRwpwaeelu9+Xmh+eoH 41J1sCXOm80uYAcM/A0lD4FaH1Exof/FOaansEQe7zq2vVmaThaBnu9e3lAePw7z LbOg88I95LnUMYrJGqeyAQBktw6LFI9si8/LZHBVGlT9CkKHuV3Gk55usAuBYy6b W9dE89wfxg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:31 2026 by rpki-client