$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: aMeIs6imBw+ma4w801VvyXYXqMQ01Zz9Klh8oChE9Ng= Subject key identifier: 2C:22:0B:D5:EC:E9:C2:80:7D:88:E8:C2:F6:97:C6:0A:47:F2:65:AA Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 3B6EC833832C4A22862363E7D2E1F1E150B396F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:48:17 +0000 Manifest this update: Fri 28 Aug 2026 06:43:17 +0000 Manifest next update: Mon 31 Aug 2026 14:25:17 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: opN2zn9iaiW+qadhiZpIldiTw+v2uIZH449GGaD2Eh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:c8:33:83:2c:4a:22:86:23:63:e7:d2:e1:f1:e1:50:b3:96:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Aug 28 06:43:17 2026 GMT Not After : Aug 31 14:25:17 2026 GMT Subject: CN=2C220BD5ECE9C2807D88E8C2F697C60A47F265AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:cc:9b:6f:46:1c:ca:11:7c:0d:0a:8c:55: e8:7c:4f:f1:b8:29:98:02:7b:0e:b5:6d:18:72:57: 2d:d1:1c:95:d0:4c:e4:2b:59:18:5b:56:54:7a:48: 70:f5:70:61:99:e2:09:ac:71:04:fa:cc:24:fa:c5: d0:e4:d2:4a:c4:bf:4f:23:0a:80:6b:97:db:00:a3: cd:79:7a:4f:57:b7:31:29:28:91:c5:8e:74:1d:1f: 16:24:e1:10:36:39:c0:9c:57:fc:a1:b8:5d:a7:c4: b1:06:37:8e:c4:4a:df:67:e5:9e:5f:7b:5d:41:bc: 5a:73:0b:f7:ea:39:d5:b7:32:2c:ec:ce:45:46:29: 9f:95:60:e1:94:d3:62:3c:29:c1:ce:ac:ca:5b:15: 73:ec:01:97:0a:24:42:aa:c2:3f:bf:34:cc:e3:90: c5:78:9f:9f:5e:f5:72:6b:20:9b:94:bd:ae:28:fd: b5:c7:a6:65:c5:77:be:fc:61:3e:3f:22:cc:e3:80: b1:08:63:ba:c7:bb:7f:b7:c7:51:d6:60:b7:f1:2e: 57:96:bf:c9:c1:90:d9:0e:d7:26:ab:80:71:74:08: 27:d1:b8:e4:a7:ca:46:60:1a:da:7a:2b:aa:d8:6f: 53:f1:9c:be:ba:78:60:db:da:72:66:31:61:fa:36: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:0B:D5:EC:E9:C2:80:7D:88:E8:C2:F6:97:C6:0A:47:F2:65:AA X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:ef:a8:a7:0f:69:45:bb:01:fb:74:4b:c1:f8:50:14:55: 9f:91:d5:1f:5d:a1:42:23:0c:48:9d:9d:b7:e7:bc:48:8d:73: 40:c3:a9:b5:ee:b9:14:29:be:48:29:59:a2:1e:34:f7:25:db: be:52:e8:e6:3d:2b:f7:75:81:1d:61:df:50:c5:01:71:74:8c: 7a:0b:bb:bc:31:53:f6:23:61:61:fb:5b:14:e1:dd:aa:b0:c3: 43:42:ff:f9:69:6d:9b:c0:78:f1:3f:90:1b:b3:d3:76:91:cb: ba:0f:05:21:6b:f6:83:8c:f9:17:3f:d6:1a:7c:9e:d8:96:6a: 3f:ec:c8:94:26:8a:c7:f5:0c:ca:47:f2:78:72:9a:1d:fc:9e: e4:63:9e:8e:de:73:0b:f6:cf:c9:b7:da:54:b2:6d:af:af:31: fe:16:51:f6:78:f3:5f:52:42:9d:86:06:d0:b6:38:e2:ee:96: e3:e0:bf:37:aa:de:71:33:91:5f:fe:c2:7c:52:e6:9a:06:81: 10:ed:84:ed:a3:8c:19:58:ae:df:39:dd:f6:a9:57:c5:ad:d4: 1c:13:30:01:db:c3:e2:bc:6f:e4:77:65:92:df:11:ae:02:80: d8:59:6b:f4:8b:39:a7:91:82:cb:fb:f4:85:f1:ed:d6:36:a4: f0:e7:83:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO27IM4MsSiKGI2Pn0uHx4VCzlvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA4MjgwNjQzMTdaFw0yNjA4MzExNDI1MTdaMDMxMTAvBgNV BAMTKDJDMjIwQkQ1RUNFOUMyODA3RDg4RThDMkY2OTdDNjBBNDdGMjY1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Mybb0YcyhF8DQqMVeh8T/G4 KZgCew61bRhyVy3RHJXQTOQrWRhbVlR6SHD1cGGZ4gmscQT6zCT6xdDk0krEv08j CoBrl9sAo815ek9XtzEpKJHFjnQdHxYk4RA2OcCcV/yhuF2nxLEGN47ESt9n5Z5f e11BvFpzC/fqOdW3MizszkVGKZ+VYOGU02I8KcHOrMpbFXPsAZcKJEKqwj+/NMzj kMV4n59e9XJrIJuUva4o/bXHpmXFd778YT4/IszjgLEIY7rHu3+3x1HWYLfxLleW v8nBkNkO1yargHF0CCfRuOSnykZgGtp6K6rYb1PxnL66eGDb2nJmMWH6NtXpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULCIL1ezpwoB9iOjC9pfGCkfyZaowHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSHvqKcPaUW7 Aft0S8H4UBRVn5HVH12hQiMMSJ2dt+e8SI1zQMOpte65FCm+SClZoh409yXbvlLo 5j0r93WBHWHfUMUBcXSMegu7vDFT9iNhYftbFOHdqrDDQ0L/+Wltm8B48T+QG7PT dpHLug8FIWv2g4z5Fz/WGnye2JZqP+zIlCaKx/UMykfyeHKaHfye5GOejt5zC/bP ybfaVLJtr68x/hZR9njzX1JCnYYG0LY44u6W4+C/N6recTORX/7CfFLmmgaBEO2E 7aOMGViu3znd9qlXxa3UHBMwAdvD4rxv5Hdlkt8RrgKA2Flr9Is5p5GCy/v0hfHt 1jak8OeDdA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:45 2026 by rpki-client