$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: rtdpPA6Y75TVUbeDL5O0MobLybAKFZlL2dT7sPk3fG8= Subject key identifier: 8B:88:82:6A:18:B1:95:91:3A:C2:F1:18:6E:4F:70:ED:1F:F5:97:A1 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 6CB005ECD679F3AF7D51E53300D284BF660EABD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: EA Signing time: Tue 14 Jul 2026 00:50:02 +0000 Manifest this update: Tue 14 Jul 2026 00:45:02 +0000 Manifest next update: Wed 15 Jul 2026 03:18:02 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: Jw/MBC5UF02Jf6qvcAHlYs5iv8YU51GGC08bw/g3W+A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b0:05:ec:d6:79:f3:af:7d:51:e5:33:00:d2:84:bf:66:0e:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Jul 14 00:45:02 2026 GMT Not After : Jul 15 03:18:02 2026 GMT Subject: CN=8B88826A18B195913AC2F1186E4F70ED1FF597A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:dd:66:5b:a7:aa:f0:2f:03:a4:70:7f:fe: 24:36:80:a3:07:0c:a2:b6:ce:72:ef:80:ef:ee:3f: a9:60:a6:bc:4d:66:9c:51:c4:e4:7b:74:5e:be:d7: fa:61:d9:1e:5f:68:37:ac:33:c9:07:9a:03:57:c8: e7:ae:c0:9e:5e:e4:27:3b:45:86:9f:fc:ad:bf:49: d1:1d:03:cd:3f:14:67:90:8c:06:2a:83:f1:2c:11: d1:07:69:dc:f0:32:62:a5:ff:92:80:39:f8:89:3a: 0a:de:05:4f:ba:1e:8e:4b:a5:56:e6:d5:b4:ec:2a: ea:5b:18:7f:dd:a3:ba:a1:27:31:ff:02:c6:0c:58: 9d:15:95:3e:20:9a:72:a6:d1:fa:19:d1:10:61:04: 54:3b:44:ca:7f:ab:41:3b:c9:3c:0a:8a:97:b9:14: 9d:1a:61:6e:80:a5:4b:a5:c1:75:75:35:a4:1b:f0: 92:f3:3c:5b:c3:10:8b:6c:f7:68:f5:af:c8:77:9c: 15:af:0a:44:a7:da:24:97:f4:34:f4:13:66:14:49: d8:d5:20:3d:94:bb:0b:48:e6:3c:c8:a9:33:1f:ae: 45:5f:53:cb:8a:8a:51:98:25:2d:c7:44:de:b2:29: 0c:67:42:8f:71:c0:8a:e9:06:a5:45:a3:1c:c5:29: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:88:82:6A:18:B1:95:91:3A:C2:F1:18:6E:4F:70:ED:1F:F5:97:A1 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:01:18:3f:6a:4e:ec:dd:ff:c0:ef:4f:1f:44:b6:93:02:01: fc:30:47:10:8d:30:2b:ab:cb:a8:9f:ca:60:b2:a4:bd:82:f2: 10:c8:d6:f4:de:0d:de:a0:56:02:5a:19:98:ef:90:e3:99:cd: 29:72:12:d9:7c:eb:53:59:57:bb:d0:fc:e2:f0:a9:23:96:d7: b1:3a:db:7b:3f:11:28:18:d0:c6:d1:c2:67:a3:bd:d2:99:0d: 78:77:86:68:73:db:07:15:f3:65:35:8b:28:ad:7f:47:af:cf: 80:1c:d7:c1:9d:24:a0:83:53:86:4a:50:66:f3:d4:29:2b:87: 94:06:a0:54:ee:3e:65:6a:9d:36:67:d3:8b:81:49:13:cc:25: 46:ff:59:9a:4d:b7:ee:5b:9c:3c:d0:78:31:55:06:df:11:00: 73:83:c4:b0:f0:e9:3a:5f:2f:55:10:76:86:5e:c6:55:47:0f: d5:31:85:77:fa:29:17:cb:6c:7b:73:35:db:ef:c6:75:2b:f7: 0e:4a:65:de:47:f6:09:19:45:21:04:95:32:f2:d8:1a:99:da: b2:ad:a3:cc:c0:e3:82:d7:96:ac:b5:e8:6d:e8:69:49:aa:a4: b8:a4:19:8a:80:bf:90:a4:1c:bc:c4:60:4d:db:34:a2:70:c8: c8:89:40:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbLAF7NZ58699UeUzANKEv2YOq9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA3MTQwMDQ1MDJaFw0yNjA3MTUwMzE4MDJaMDMxMTAvBgNV BAMTKDhCODg4MjZBMThCMTk1OTEzQUMyRjExODZFNEY3MEVEMUZGNTk3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYN1mW6eq8C8DpHB//iQ2gKMH DKK2znLvgO/uP6lgprxNZpxRxOR7dF6+1/ph2R5faDesM8kHmgNXyOeuwJ5e5Cc7 RYaf/K2/SdEdA80/FGeQjAYqg/EsEdEHadzwMmKl/5KAOfiJOgreBU+6Ho5LpVbm 1bTsKupbGH/do7qhJzH/AsYMWJ0VlT4gmnKm0foZ0RBhBFQ7RMp/q0E7yTwKipe5 FJ0aYW6ApUulwXV1NaQb8JLzPFvDEIts92j1r8h3nBWvCkSn2iSX9DT0E2YUSdjV ID2UuwtI5jzIqTMfrkVfU8uKilGYJS3HRN6yKQxnQo9xwIrpBqVFoxzFKQe3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi4iCahixlZE6wvEYbk9w7R/1l6EwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgEYP2pO7N3/ wO9PH0S2kwIB/DBHEI0wK6vLqJ/KYLKkvYLyEMjW9N4N3qBWAloZmO+Q45nNKXIS 2XzrU1lXu9D84vCpI5bXsTrbez8RKBjQxtHCZ6O90pkNeHeGaHPbBxXzZTWLKK1/ R6/PgBzXwZ0koINThkpQZvPUKSuHlAagVO4+ZWqdNmfTi4FJE8wlRv9Zmk237luc PNB4MVUG3xEAc4PEsPDpOl8vVRB2hl7GVUcP1TGFd/opF8tse3M12+/GdSv3Dkpl 3kf2CRlFIQSVMvLYGpnasq2jzMDjgteWrLXobehpSaqkuKQZioC/kKQcvMRgTds0 onDIyIlAZQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:51 2026 by rpki-client