$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: cHBDZS+ZSVP2WvNHlpeg8e41z/YFL1CzhzI4CNTc9Yg= Subject key identifier: B4:06:19:47:0F:BF:08:5F:DC:D4:8A:19:AE:59:1D:98:79:59:15:EE Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 42A09CCDC71FA66B1005976DBF81379B64D5A96C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: AE Signing time: Fri 29 May 2026 04:57:38 +0000 Manifest this update: Fri 29 May 2026 04:52:38 +0000 Manifest next update: Sat 30 May 2026 07:13:38 +0000 Files and hashes: 1: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) 2: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: AhWf0O93u2rZdOPDuBLH80hShFTP++Mn+lzIXCHDJIM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a0:9c:cd:c7:1f:a6:6b:10:05:97:6d:bf:81:37:9b:64:d5:a9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: May 29 04:52:38 2026 GMT Not After : May 30 07:13:38 2026 GMT Subject: CN=B40619470FBF085FDCD48A19AE591D98795915EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:75:e1:49:02:d5:5d:c1:90:ef:9c:4d:d6: 0e:37:db:89:d9:c5:c0:28:03:de:87:b7:d4:dc:d7: 00:9c:02:f0:d4:be:57:39:15:3f:b4:a9:df:87:ca: fc:c1:5a:72:45:f4:00:6a:7c:39:93:93:cd:d4:5e: 00:a4:9a:43:a3:3a:83:a1:e2:18:2e:2b:95:49:63: 52:5c:18:4c:25:30:c1:97:4a:2a:04:81:06:f3:51: 78:9e:fb:33:28:3f:12:3a:a0:3a:8d:2a:19:d8:de: 3f:3f:ce:b3:0a:92:ba:44:df:f3:1d:54:d7:c8:61: 50:fa:fe:be:d6:10:11:7e:48:99:d1:e6:05:12:aa: b0:8e:04:cf:b8:69:77:1f:9d:35:83:42:95:7e:e6: 75:7e:d5:f5:50:85:52:67:ff:10:1d:ee:31:e4:ef: 7d:ad:5a:f2:1e:ef:82:aa:89:0a:a7:f3:2d:3c:f8: 42:3c:b7:87:c4:65:2a:ea:08:04:34:fc:cd:61:dd: 78:79:60:25:98:ee:60:ae:5f:5e:e7:ca:5b:8a:9d: e0:04:be:a9:d9:ad:ab:99:2c:fc:f3:fe:c8:7e:a2: 5a:a3:6f:94:8c:4d:83:d4:a6:fa:1e:07:d2:53:c1: 4a:ae:94:49:53:b0:21:f9:67:22:4e:40:9f:e1:ce: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:06:19:47:0F:BF:08:5F:DC:D4:8A:19:AE:59:1D:98:79:59:15:EE X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:10:4d:27:79:f0:7c:1f:5d:a2:8d:d1:f9:ca:8b:9d:5b:d2: ab:40:52:c4:2a:60:4c:ec:b8:0d:b5:f8:77:21:aa:c6:d2:72: 87:d9:2d:f6:8c:dd:85:d1:ee:57:f1:16:68:8d:d0:5d:94:c3: 12:a1:0b:73:a6:28:74:d0:6b:ed:d2:f4:68:be:96:c1:d8:cb: de:d0:2a:fa:d3:04:9f:6c:9d:2b:27:fe:d8:2e:80:64:c8:89: d1:70:cb:dc:33:80:08:66:fe:62:bd:9b:2a:c0:27:80:0e:bb: af:39:57:cf:b8:ab:35:f8:3e:89:5b:3e:7b:1f:32:61:0d:9b: 5f:90:8f:0f:66:80:a7:0f:14:c5:03:55:06:91:55:bc:58:65: 7f:2f:e2:29:18:3a:16:bb:d9:e2:2a:ac:b7:56:8b:24:0a:6e: e3:5f:91:0b:ac:fb:61:3f:0d:26:7a:e7:2f:d6:2b:e1:cd:c2: cb:52:e9:ac:84:8c:52:f1:5a:e8:2d:18:d8:2d:4c:20:aa:82: 5d:96:43:9b:d9:7f:9e:97:c3:c6:c4:82:20:55:cf:62:4d:07: 8b:03:3d:6e:26:06:32:a6:6d:a2:6e:1f:dd:5b:da:a3:07:d6: ed:3a:b1:f6:a8:8f:8b:26:2b:2b:63:16:93:32:ac:ee:97:83: 96:88:42:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQqCczccfpmsQBZdtv4E3m2TVqWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA1MjkwNDUyMzhaFw0yNjA1MzAwNzEzMzhaMDMxMTAvBgNV BAMTKEI0MDYxOTQ3MEZCRjA4NUZEQ0Q0OEExOUFFNTkxRDk4Nzk1OTE1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUHXhSQLVXcGQ75xN1g4324nZ xcAoA96Ht9Tc1wCcAvDUvlc5FT+0qd+HyvzBWnJF9ABqfDmTk83UXgCkmkOjOoOh 4hguK5VJY1JcGEwlMMGXSioEgQbzUXie+zMoPxI6oDqNKhnY3j8/zrMKkrpE3/Md VNfIYVD6/r7WEBF+SJnR5gUSqrCOBM+4aXcfnTWDQpV+5nV+1fVQhVJn/xAd7jHk 732tWvIe74KqiQqn8y08+EI8t4fEZSrqCAQ0/M1h3Xh5YCWY7mCuX17nyluKneAE vqnZrauZLPzz/sh+olqjb5SMTYPUpvoeB9JTwUqulElTsCH5ZyJOQJ/hzpfFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtAYZRw+/CF/c1IoZrlkdmHlZFe4wHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghBNJ3nwfB9d oo3R+cqLnVvSq0BSxCpgTOy4DbX4dyGqxtJyh9kt9ozdhdHuV/EWaI3QXZTDEqEL c6YodNBr7dL0aL6WwdjL3tAq+tMEn2ydKyf+2C6AZMiJ0XDL3DOACGb+Yr2bKsAn gA67rzlXz7irNfg+iVs+ex8yYQ2bX5CPD2aApw8UxQNVBpFVvFhlfy/iKRg6FrvZ 4iqst1aLJApu41+RC6z7YT8NJnrnL9Yr4c3Cy1LprISMUvFa6C0Y2C1MIKqCXZZD m9l/npfDxsSCIFXPYk0HiwM9biYGMqZtom4f3VvaowfW7Tqx9qiPiyYrK2MWkzKs 7peDlohCUA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client