$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: hY2KYscu54gGWsJyAHQHrd7aQO1pHMe6AzVD5DPwNZM= Subject key identifier: FF:1F:49:C9:E5:79:02:BA:1E:60:5F:D1:48:6E:84:F0:6E:11:30:99 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 48B53D320F119DC791706589492F0C923899A161 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 03:09:17 +0000 Manifest this update: Mon 13 Apr 2026 03:04:17 +0000 Manifest next update: Tue 14 Apr 2026 06:15:17 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: GUOosrX980Q7x5L9mgp28o4W/WK6mMz2cAIOXJgvc+w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b5:3d:32:0f:11:9d:c7:91:70:65:89:49:2f:0c:92:38:99:a1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Apr 13 03:04:17 2026 GMT Not After : Apr 14 06:15:17 2026 GMT Subject: CN=FF1F49C9E57902BA1E605FD1486E84F06E113099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b7:d2:e2:d6:4a:2e:0c:71:f6:8e:92:98:aa: 79:ca:ae:ca:1e:e7:4b:95:3f:94:af:68:34:c3:39: 0e:a8:06:e3:7d:30:eb:ab:35:9d:cc:b4:a8:fe:de: 65:04:1a:d2:20:a6:9c:bc:43:4a:04:1f:ca:4a:a5: 14:d0:6f:91:36:7a:b9:41:3c:9c:76:04:ee:88:60: 6c:f4:1b:03:da:c7:29:ee:b8:3b:68:ca:56:59:55: 59:bf:9c:2b:5a:4f:c0:ad:3e:ee:1b:c3:9f:84:19: e7:c0:2e:26:0c:d3:e9:ed:5a:6f:ce:1c:39:9c:33: e5:2a:33:4e:ea:57:e6:8c:1d:0f:a1:9e:62:4f:08: ee:89:64:71:a5:b7:d8:5f:76:e5:fd:fe:08:62:0d: 67:6f:e1:73:f9:8c:2b:b7:84:00:cf:65:a8:23:f2: 72:86:16:1f:98:a8:aa:70:50:dd:c7:ea:f1:d0:1d: 49:c6:ff:e7:c4:5c:ff:da:39:7e:d5:0a:8f:ea:75: 2f:07:b4:f3:e7:da:93:6d:f9:47:e7:fb:b7:96:25: ed:2d:d5:ae:14:4b:43:60:60:19:56:61:bf:6a:1f: b1:0d:a2:f3:3f:d6:64:7b:e5:ab:b8:7d:d2:96:b8: cb:54:64:43:c5:f1:66:91:9f:21:41:7b:d1:36:8b: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:49:C9:E5:79:02:BA:1E:60:5F:D1:48:6E:84:F0:6E:11:30:99 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:26:dc:42:96:c5:49:a5:52:d4:78:b8:3c:55:4f:1c:2b: bc:2d:7d:b2:b4:58:e1:7c:76:fd:9e:19:2f:ad:f2:ed:95:4d: 3a:e1:4a:61:ae:9c:76:4a:ff:98:14:7b:06:6f:74:21:52:11: a7:fe:f2:16:40:b0:d8:b9:21:a8:64:27:a1:79:93:f6:3e:c9: f4:90:4d:e7:60:06:ce:d3:1d:47:eb:2d:2c:14:88:55:45:d3: 2b:67:f3:45:13:02:db:db:61:cf:02:a2:0e:4c:84:c7:d6:2f: 50:ec:cb:d9:5b:29:50:5e:1f:7b:f7:81:ba:e0:a1:60:48:eb: 98:c7:a1:f8:1c:b4:c8:15:87:e7:ba:8a:e2:3a:25:77:7b:00: cb:02:59:5e:f5:97:65:98:5c:40:5c:be:a9:ee:7e:f6:59:1a: da:a0:bb:20:9d:24:93:55:d8:25:56:6e:5e:89:a2:8c:99:12: 4f:83:68:92:18:cc:94:38:a8:b3:ef:91:e8:9b:a1:56:d5:cf: bd:40:d1:05:7f:aa:3e:94:28:94:70:49:f6:c4:11:80:d3:d1: 63:9f:61:fb:17:2f:f9:2d:13:41:c0:5c:fd:54:33:59:36:d6: a0:1b:69:9e:3c:08:5e:92:04:b9:4a:86:87:a4:17:08:5d:26: fc:48:2d:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSLU9Mg8RnceRcGWJSS8MkjiZoWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA0MTMwMzA0MTdaFw0yNjA0MTQwNjE1MTdaMDMxMTAvBgNV BAMTKEZGMUY0OUM5RTU3OTAyQkExRTYwNUZEMTQ4NkU4NEYwNkUxMTMwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDut9Li1kouDHH2jpKYqnnKrsoe 50uVP5SvaDTDOQ6oBuN9MOurNZ3MtKj+3mUEGtIgppy8Q0oEH8pKpRTQb5E2erlB PJx2BO6IYGz0GwPaxynuuDtoylZZVVm/nCtaT8CtPu4bw5+EGefALiYM0+ntWm/O HDmcM+UqM07qV+aMHQ+hnmJPCO6JZHGlt9hfduX9/ghiDWdv4XP5jCu3hADPZagj 8nKGFh+YqKpwUN3H6vHQHUnG/+fEXP/aOX7VCo/qdS8HtPPn2pNt+Ufn+7eWJe0t 1a4US0NgYBlWYb9qH7ENovM/1mR75au4fdKWuMtUZEPF8WaRnyFBe9E2i9xxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/x9JyeV5AroeYF/RSG6E8G4RMJkwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhUm3EKWxUml UtR4uDxVTxwrvC19srRY4Xx2/Z4ZL63y7ZVNOuFKYa6cdkr/mBR7Bm90IVIRp/7y FkCw2LkhqGQnoXmT9j7J9JBN52AGztMdR+stLBSIVUXTK2fzRRMC29thzwKiDkyE x9YvUOzL2VspUF4fe/eBuuChYEjrmMeh+By0yBWH57qK4jold3sAywJZXvWXZZhc QFy+qe5+9lka2qC7IJ0kk1XYJVZuXomijJkST4NokhjMlDios++R6JuhVtXPvUDR BX+qPpQolHBJ9sQRgNPRY59h+xcv+S0TQcBc/VQzWTbWoBtpnjwIXpIEuUqGh6QX CF0m/Egt2A== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:40 2026 by rpki-client