$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: bGBVuVCo//x9k6R5L5XzVBePBc2COZzBH7DlW9mtbW4= Subject key identifier: 33:12:31:B0:3D:24:4B:31:A6:46:21:E0:BB:DA:02:A8:35:0B:38:0D Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 501F2D2D37722E08E426FC4E316AD8690D9BBFDF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:17 +0000 Manifest this update: Fri 28 Aug 2026 06:43:17 +0000 Manifest next update: Mon 31 Aug 2026 18:42:17 +0000 Files and hashes: 1: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) 2: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: YWhXiRAl5TvOuzcpidee6QA+J5jxrbMwenHvgjYmI+g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1f:2d:2d:37:72:2e:08:e4:26:fc:4e:31:6a:d8:69:0d:9b:bf:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Aug 28 06:43:17 2026 GMT Not After : Aug 31 18:42:17 2026 GMT Subject: CN=331231B03D244B31A64621E0BBDA02A8350B380D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:56:6f:e1:ed:3e:69:99:23:65:67:a0:b8:1a: b8:6f:c5:95:8d:fa:64:ac:3d:0c:d5:37:36:63:b3: 0d:10:b1:c0:bf:9e:28:f8:b4:0f:12:ce:01:0e:40: 5a:4e:af:81:e4:f6:08:d7:50:81:4e:35:cb:80:ca: f5:09:6c:d4:49:b4:b2:15:10:d2:8e:3b:84:ce:b2: 4b:de:a0:86:ec:2d:1e:08:40:9f:92:12:56:3f:4c: 6e:d8:7d:f7:2d:6c:00:c8:8d:62:a2:c5:83:1b:e1: 0f:4c:ca:f6:d2:e4:22:7a:10:02:5f:45:af:38:35: be:a2:bd:5a:fd:3c:d3:5e:c1:35:21:57:39:e1:df: f2:e9:cc:e4:79:50:3e:1e:c9:eb:28:1c:7b:df:bd: 5d:95:da:96:ad:1e:4b:f9:0d:52:79:51:41:19:5f: 04:3e:fc:42:93:46:17:2c:b3:85:ee:ce:fa:9e:43: f3:42:ed:45:d3:7d:0b:d7:4d:17:f1:e5:59:17:86: 06:75:f1:f2:83:72:58:47:33:fb:a0:9b:c6:c7:cc: 9e:e4:04:44:c1:4a:f2:e4:91:aa:85:55:6c:79:e7: 17:d2:a7:62:9e:b1:54:fe:f9:55:4b:77:a4:0c:15: 55:8e:e9:a4:45:7b:6f:7f:23:8d:ed:ca:ba:2a:c1: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:31:B0:3D:24:4B:31:A6:46:21:E0:BB:DA:02:A8:35:0B:38:0D X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4e:25:95:fc:d6:ef:d1:c7:ad:8b:21:a6:45:a7:29:45:81: e3:94:bf:e4:c7:4f:67:80:07:5c:90:60:d7:d4:58:16:8c:f4: ca:58:4c:d0:ad:bd:04:ca:c8:1d:ad:de:e1:81:95:a3:11:24: bd:7d:b6:7f:c6:52:d3:d8:89:45:43:35:e4:72:0a:85:a6:13: d3:b2:0c:85:8f:e1:b4:74:c9:6c:55:38:07:57:1e:d1:b9:71: c2:fd:87:a1:07:8b:1a:00:dd:2f:a6:17:66:3d:a2:bc:da:ea: 16:98:aa:64:bd:a0:93:54:ea:66:34:69:25:3d:2d:0f:83:c2: 56:85:05:9c:f3:9d:8b:7c:d2:d9:a9:64:c3:42:fc:43:a1:c4: da:a4:f5:7f:7b:13:ff:a9:14:b2:45:5d:24:bf:03:9f:49:97: 2f:06:f6:cb:ef:d3:09:a0:9a:c6:43:44:ea:4e:11:cc:0b:54: b5:83:36:6e:1f:bc:98:65:ea:1b:98:56:80:8f:f1:c0:3c:b3: 43:d7:bb:6f:5b:db:53:bf:e6:3d:43:e2:d3:9e:02:c5:9d:07: bd:54:94:58:41:aa:9e:d3:ac:ab:29:83:24:f0:cf:2e:66:62: fa:42:33:d4:89:df:75:d4:4e:a6:bf:d1:e6:bb:57:c0:f0:7d: 45:75:d4:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUB8tLTdyLgjkJvxOMWrYaQ2bv98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA4MjgwNjQzMTdaFw0yNjA4MzExODQyMTdaMDMxMTAvBgNV BAMTKDMzMTIzMUIwM0QyNDRCMzFBNjQ2MjFFMEJCREEwMkE4MzUwQjM4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgVm/h7T5pmSNlZ6C4GrhvxZWN +mSsPQzVNzZjsw0QscC/nij4tA8SzgEOQFpOr4Hk9gjXUIFONcuAyvUJbNRJtLIV ENKOO4TOskveoIbsLR4IQJ+SElY/TG7YffctbADIjWKixYMb4Q9MyvbS5CJ6EAJf Ra84Nb6ivVr9PNNewTUhVznh3/LpzOR5UD4eyesoHHvfvV2V2patHkv5DVJ5UUEZ XwQ+/EKTRhcss4XuzvqeQ/NC7UXTfQvXTRfx5VkXhgZ18fKDclhHM/ugm8bHzJ7k BETBSvLkkaqFVWx55xfSp2KesVT++VVLd6QMFVWO6aRFe29/I43tyroqwS1RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMxIxsD0kSzGmRiHgu9oCqDULOA0wHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOU4llfzW79HH rYshpkWnKUWB45S/5MdPZ4AHXJBg19RYFoz0ylhM0K29BMrIHa3e4YGVoxEkvX22 f8ZS09iJRUM15HIKhaYT07IMhY/htHTJbFU4B1ce0blxwv2HoQeLGgDdL6YXZj2i vNrqFpiqZL2gk1TqZjRpJT0tD4PCVoUFnPOdi3zS2alkw0L8Q6HE2qT1f3sT/6kU skVdJL8Dn0mXLwb2y+/TCaCaxkNE6k4RzAtUtYM2bh+8mGXqG5hWgI/xwDyzQ9e7 b1vbU7/mPUPi054CxZ0HvVSUWEGqntOsqymDJPDPLmZi+kIz1InfddROpr/R5rtX wPB9RXXUqg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:36 2026 by rpki-client