$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: UxAStIy9+C10Y6N3Cr8WTTetetz0ubJSpGZxPRngxCs= Subject key identifier: 41:69:D2:B3:A6:27:64:9A:FA:C1:71:64:9E:B4:14:45:D0:74:75:92 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 050E0CDA8CBE7B431EF4831675F9054A337F65F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 22:24:17 +0000 Manifest this update: Sun 12 Apr 2026 22:19:17 +0000 Manifest next update: Tue 14 Apr 2026 00:18:17 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: /6yiNrUr7xPi0Av0WOw6242aLI69HxgwZcxJ0NUe5IE=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 00:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0e:0c:da:8c:be:7b:43:1e:f4:83:16:75:f9:05:4a:33:7f:65:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Apr 12 22:19:17 2026 GMT Not After : Apr 14 00:18:17 2026 GMT Subject: CN=4169D2B3A627649AFAC171649EB41445D0747592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:4f:62:6e:0f:d7:94:35:40:63:cc:88:32: 81:94:c5:36:db:8a:6c:1b:eb:94:01:dc:90:e3:23: 27:46:50:d1:87:f5:c1:0d:d6:51:2e:12:b4:9e:92: 19:c9:33:f9:e8:22:30:31:01:4a:cf:05:96:cc:b6: 94:c9:73:5d:15:7f:a4:aa:bb:d6:90:c6:e3:6d:c7: df:46:48:8c:b4:52:3c:95:f8:08:2c:34:18:72:b6: 47:de:cf:1d:3b:fc:89:56:f2:96:72:2d:77:89:5e: 26:c7:f8:e1:75:17:73:67:1b:a6:24:07:03:68:9a: 2f:3e:16:db:2b:55:5e:de:cb:8d:54:e5:55:9b:61: e8:37:e6:a6:69:33:de:18:23:43:f7:6a:87:37:73: d4:88:7d:39:e0:20:bd:ad:1c:d7:42:7e:2e:92:12: 45:43:9b:db:88:2a:df:32:4a:8b:7f:eb:ed:14:5e: 59:21:8c:b9:a7:ac:a4:dc:26:f3:1f:ce:e2:02:09: ed:99:50:95:01:ee:b1:7e:5a:2c:3e:4f:b6:0c:e2: a9:2f:e8:e6:b2:55:92:19:59:aa:49:d0:1d:05:ec: 28:92:73:61:21:b2:a7:88:72:7d:7b:c6:44:c6:42: 22:f2:26:73:0b:68:12:83:1e:77:11:f2:29:09:a6: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:D2:B3:A6:27:64:9A:FA:C1:71:64:9E:B4:14:45:D0:74:75:92 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2a:f2:ab:54:e6:c5:62:40:4b:ad:ae:13:54:95:08:5e:8f: 74:6c:ed:2a:90:45:85:ce:49:08:c5:3e:98:dc:ca:9b:0b:36: 66:54:ba:c7:3c:50:d9:67:e6:de:a4:ba:3d:07:87:2e:86:e5: 41:97:30:82:4c:c4:d2:13:3a:1b:ca:50:a6:ae:51:5f:ac:db: e4:5f:9a:39:00:ff:f8:6a:68:19:96:3b:c0:83:4d:30:b1:9d: 9d:1b:78:ae:fe:6b:75:8f:2b:8b:7c:5d:5e:3a:01:37:4e:88: ed:83:be:60:b2:42:c4:4a:b3:79:09:d5:52:c1:33:f4:21:49: 71:ae:6c:3e:36:1e:3d:92:d1:8a:e3:ab:d2:24:ac:ba:16:26: 7d:f2:2c:54:da:95:15:4f:21:30:4d:c7:db:e0:4f:f9:8f:2b: 25:55:8a:35:47:1a:2e:b6:dd:76:f8:61:e4:b8:c5:ac:94:9b: 2f:5c:16:5d:c5:28:1e:7f:57:a4:60:32:32:98:dc:1f:ae:0c: eb:0c:38:99:72:e5:a5:ec:f9:37:c7:91:32:3c:4b:69:83:34: 6d:ef:3e:53:ab:96:ae:f5:c6:dc:81:c0:d1:16:19:c1:fe:e8: 99:da:bb:35:d3:ca:f8:83:89:98:64:ff:3d:1b:b0:7e:43:10: 3f:dd:14:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBQ4M2oy+e0Me9IMWdfkFSjN/ZfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA0MTIyMjE5MTdaFw0yNjA0MTQwMDE4MTdaMDMxMTAvBgNV BAMTKDQxNjlEMkIzQTYyNzY0OUFGQUMxNzE2NDlFQjQxNDQ1RDA3NDc1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxU9ibg/XlDVAY8yIMoGUxTbb imwb65QB3JDjIydGUNGH9cEN1lEuErSekhnJM/noIjAxAUrPBZbMtpTJc10Vf6Sq u9aQxuNtx99GSIy0UjyV+AgsNBhytkfezx07/IlW8pZyLXeJXibH+OF1F3NnG6Yk BwNomi8+FtsrVV7ey41U5VWbYeg35qZpM94YI0P3aoc3c9SIfTngIL2tHNdCfi6S EkVDm9uIKt8ySot/6+0UXlkhjLmnrKTcJvMfzuICCe2ZUJUB7rF+Wiw+T7YM4qkv 6OayVZIZWapJ0B0F7CiSc2EhsqeIcn17xkTGQiLyJnMLaBKDHncR8ikJpqjHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQWnSs6YnZJr6wXFknrQURdB0dZIwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyryq1TmxWJA S62uE1SVCF6PdGztKpBFhc5JCMU+mNzKmws2ZlS6xzxQ2Wfm3qS6PQeHLoblQZcw gkzE0hM6G8pQpq5RX6zb5F+aOQD/+GpoGZY7wINNMLGdnRt4rv5rdY8ri3xdXjoB N06I7YO+YLJCxEqzeQnVUsEz9CFJca5sPjYePZLRiuOr0iSsuhYmffIsVNqVFU8h ME3H2+BP+Y8rJVWKNUcaLrbddvhh5LjFrJSbL1wWXcUoHn9XpGAyMpjcH64M6ww4 mXLlpez5N8eRMjxLaYM0be8+U6uWrvXG3IHA0RYZwf7omdq7NdPK+IOJmGT/PRuw fkMQP90UWA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:28 2026 by rpki-client