$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: DSTER563z9vFW6POLXW/f/KwzIV6OT2ddb116ntEiSE= Subject key identifier: 18:0B:06:3D:F4:8D:5D:38:7A:D5:A7:CD:17:DE:10:C9:48:12:CC:B2 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 3676BD242F13CF7B9F705007CD17245960C09615 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 17:57:14 +0000 Manifest this update: Mon 12 Oct 2026 17:52:14 +0000 Manifest next update: Fri 16 Oct 2026 00:57:14 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: QTG0vgkMvDaz0fRWFTELitZL406VEPfHZH/Te97PUYM=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:76:bd:24:2f:13:cf:7b:9f:70:50:07:cd:17:24:59:60:c0:96:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Oct 12 17:52:14 2026 GMT Not After : Oct 16 00:57:14 2026 GMT Subject: CN=180B063DF48D5D387AD5A7CD17DE10C94812CCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:25:13:48:80:0f:27:59:fa:0b:03:b1:93: dc:ec:9c:46:3d:99:0e:9f:8c:b8:e2:67:84:88:05: 88:03:22:48:4e:6e:47:76:d3:69:ad:da:cd:4a:f9: a6:54:72:09:52:ce:96:d9:10:25:c4:e6:6b:bf:d4: d6:94:19:04:b0:16:f3:a6:22:91:7e:4c:63:a4:87: 48:76:0c:f9:e7:db:ac:20:c8:c6:37:dd:33:fd:c4: 3a:4d:c7:00:0c:a1:66:cd:9f:51:a9:1c:69:1c:a1: da:2a:5d:df:60:cb:57:4e:3f:65:93:5c:ea:31:e3: 66:36:46:16:f0:9a:91:02:98:be:94:f2:0d:97:5e: 6c:a3:32:79:32:a1:7c:4b:3c:f9:0a:12:8a:94:71: 67:45:07:6d:75:db:45:22:9d:0f:a2:bc:80:84:cb: 1c:7f:de:ae:6f:ac:a5:7c:cd:f4:0b:52:4a:7f:cb: 72:5d:f3:4f:d5:9f:98:7f:42:7a:42:b1:4d:34:ee: 07:38:9a:ee:a3:1c:e3:f1:0d:fb:e8:11:5b:eb:b4: cb:4a:bf:6d:4e:5d:6c:64:72:0e:cb:94:b3:af:53: d6:b2:f0:0c:ea:42:fa:94:00:49:49:d1:1c:4e:e0: a8:9a:d1:7e:72:f7:a2:ad:d3:21:38:1d:37:fa:ca: d9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0B:06:3D:F4:8D:5D:38:7A:D5:A7:CD:17:DE:10:C9:48:12:CC:B2 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:37:fb:57:6d:4b:5a:89:77:68:ec:ac:d6:bd:f4:e4:df: 08:ec:d1:64:89:0b:00:4d:bf:9f:fa:88:76:93:d2:7c:a0:3e: 87:40:18:f7:aa:da:72:bd:69:d9:30:df:b3:7e:33:fe:eb:29: 7e:bd:e7:dd:2d:fa:59:27:73:a1:b3:f4:cd:9e:76:26:2e:d8: ae:93:44:57:81:c7:bd:c0:2f:12:7d:ea:b9:39:81:03:3b:5d: 88:09:11:2f:04:24:87:28:55:36:16:06:ae:55:e7:a1:3a:bd: 5a:3c:8d:5d:c3:ff:ce:31:96:89:83:23:43:bb:f2:24:5f:86: d3:41:6b:4b:fd:ec:77:27:f6:00:18:31:f7:f4:f4:0d:af:68: 1b:e6:ba:87:ce:89:44:37:4a:df:7a:97:be:72:42:6b:5c:d3: b3:6e:d4:0c:f9:54:c6:2a:30:a7:7a:38:57:14:15:9a:a1:d5: 27:ad:a4:83:57:46:24:21:ef:14:a6:17:3e:2e:67:88:ee:04: 86:73:cb:a4:cd:12:11:81:e6:b8:98:f0:c6:4f:c6:f6:1e:34: 64:93:a6:15:15:7a:41:43:ed:7e:21:cf:86:f8:f3:61:d8:13: db:24:ba:44:3d:ee:5b:f4:23:a5:dc:55:0c:8f:24:9c:01:b0: 43:d0:41:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNna9JC8Tz3ufcFAHzRckWWDAlhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjEwMTIxNzUyMTRaFw0yNjEwMTYwMDU3MTRaMDMxMTAvBgNV BAMTKDE4MEIwNjNERjQ4RDVEMzg3QUQ1QTdDRDE3REUxMEM5NDgxMkNDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0yUTSIAPJ1n6CwOxk9zsnEY9 mQ6fjLjiZ4SIBYgDIkhObkd202mt2s1K+aZUcglSzpbZECXE5mu/1NaUGQSwFvOm IpF+TGOkh0h2DPnn26wgyMY33TP9xDpNxwAMoWbNn1GpHGkcodoqXd9gy1dOP2WT XOox42Y2RhbwmpECmL6U8g2XXmyjMnkyoXxLPPkKEoqUcWdFB21120UinQ+ivICE yxx/3q5vrKV8zfQLUkp/y3Jd80/Vn5h/QnpCsU007gc4mu6jHOPxDfvoEVvrtMtK v21OXWxkcg7LlLOvU9ay8AzqQvqUAElJ0RxO4Kia0X5y96Kt0yE4HTf6ytmBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGAsGPfSNXTh61afNF94QyUgSzLIwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/E3+1dtS1qJ d2jsrNa99OTfCOzRZIkLAE2/n/qIdpPSfKA+h0AY96racr1p2TDfs34z/uspfr3n 3S36WSdzobP0zZ52Ji7YrpNEV4HHvcAvEn3quTmBAztdiAkRLwQkhyhVNhYGrlXn oTq9WjyNXcP/zjGWiYMjQ7vyJF+G00FrS/3sdyf2ABgx9/T0Da9oG+a6h86JRDdK 33qXvnJCa1zTs27UDPlUxiowp3o4VxQVmqHVJ62kg1dGJCHvFKYXPi5niO4EhnPL pM0SEYHmuJjwxk/G9h40ZJOmFRV6QUPtfiHPhvjzYdgT2yS6RD3uW/QjpdxVDI8k nAGwQ9BB/Q== -----END CERTIFICATE-----Generated at Wed Oct 14 13:09:07 2026 by rpki-client