$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: V5yt4/61BZfNhFTbEruJ3ljx2Wx0wYtcwdyqC8870D8= Subject key identifier: F1:C5:30:1E:E8:95:85:42:36:81:98:BC:84:11:BF:C1:E6:AA:E3:50 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 7DFDF5140F91D3CCA3074774542331DD4E706245 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: ED Signing time: Tue 14 Jul 2026 10:51:07 +0000 Manifest this update: Tue 14 Jul 2026 10:46:07 +0000 Manifest next update: Wed 15 Jul 2026 13:41:07 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: y4/luQzHKvr7m9yKJjZpknAM6wDQyrGG6fj3FrhtuIg=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fd:f5:14:0f:91:d3:cc:a3:07:47:74:54:23:31:dd:4e:70:62:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Jul 14 10:46:07 2026 GMT Not After : Jul 15 13:41:07 2026 GMT Subject: CN=F1C5301EE8958542368198BC8411BFC1E6AAE350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:f5:1d:ab:74:c6:28:8d:d4:c9:fd:92:f0: fb:c1:d0:c7:e5:06:50:9e:18:08:ba:fc:2c:e1:bf: 1a:bb:2e:be:ab:f1:61:8b:54:5a:a5:b1:f4:b8:7a: 47:6b:9f:17:4f:60:ee:a1:f1:25:41:a2:4e:1a:a1: d8:c2:25:15:cc:6f:b7:56:40:78:31:a4:d9:af:64: 95:59:d5:da:b9:b7:b5:da:d8:49:74:26:5e:88:fb: ce:23:07:04:6c:4e:a4:38:09:56:c4:7e:59:a9:59: de:ef:da:5c:71:26:c3:90:84:79:7c:bc:a0:a7:96: 22:52:5c:11:56:20:ce:e1:e4:eb:31:e9:f0:a0:1b: 06:70:7c:9f:78:62:25:0c:ef:f6:c9:33:3f:0b:7a: b1:65:30:40:8b:07:b3:1f:3e:61:80:ac:21:bc:d3: c8:f4:6e:de:b2:9d:b8:ef:3e:ba:5e:cc:e7:cd:68: 01:95:e1:62:43:1b:e7:46:f7:42:8f:fd:1f:f5:5d: f1:48:ed:e7:5d:86:69:8b:de:61:f0:d3:dc:88:5c: 56:69:f5:c0:79:8b:8b:86:69:ba:b7:b6:56:55:65: df:b9:b4:6b:6b:6b:4a:31:98:7a:58:e1:c4:e3:93: cc:f0:1a:d7:58:13:6d:82:28:26:ed:68:23:98:ec: ac:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C5:30:1E:E8:95:85:42:36:81:98:BC:84:11:BF:C1:E6:AA:E3:50 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:79:10:b2:15:8d:e9:3e:a2:fc:93:8a:5b:17:97:e2:98:92: cc:2d:64:51:74:61:be:c7:3f:b2:fd:bd:b5:83:be:f9:36:d6: 73:2c:46:45:37:53:c6:9e:99:84:00:02:ec:b0:71:fc:55:b2: 07:c7:d5:8d:12:c2:94:ce:ae:3f:90:95:12:d5:7a:40:14:ad: b3:f2:f6:36:5f:f1:68:57:9c:88:5b:5e:75:30:85:03:b7:fa: 08:9e:67:91:33:64:72:66:2b:9c:cc:d3:1e:c6:c2:37:ff:0d: ff:9e:50:f9:11:d0:b1:d2:0c:37:89:32:c4:f8:75:e1:f7:7f: 30:23:80:35:b0:76:89:bc:28:1d:76:21:a2:59:c0:51:c4:02: a4:4e:0f:01:f5:cf:e4:7a:8f:71:cd:1b:19:36:c4:d5:a3:8d: 63:04:6e:0c:c5:0f:ac:89:88:1b:a6:69:59:fa:0b:f6:93:9b: 14:42:41:b1:c0:94:e9:83:dd:75:74:18:a7:0a:f7:28:3c:08: fd:23:06:76:d7:a8:12:07:8f:6f:dc:66:0b:ec:d9:e0:a8:e3: 36:df:b1:83:4f:39:7a:86:27:bf:93:29:c7:2b:4a:eb:bd:15: 85:f3:a8:a3:95:b4:f8:ea:d9:c3:3c:75:9b:a7:e3:7a:33:fa: 73:e8:19:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUff31FA+R08yjB0d0VCMx3U5wYkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA3MTQxMDQ2MDdaFw0yNjA3MTUxMzQxMDdaMDMxMTAvBgNV BAMTKEYxQzUzMDFFRTg5NTg1NDIzNjgxOThCQzg0MTFCRkMxRTZBQUUzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrvUdq3TGKI3Uyf2S8PvB0Mfl BlCeGAi6/Czhvxq7Lr6r8WGLVFqlsfS4ekdrnxdPYO6h8SVBok4aodjCJRXMb7dW QHgxpNmvZJVZ1dq5t7Xa2El0Jl6I+84jBwRsTqQ4CVbEflmpWd7v2lxxJsOQhHl8 vKCnliJSXBFWIM7h5Osx6fCgGwZwfJ94YiUM7/bJMz8LerFlMECLB7MfPmGArCG8 08j0bt6ynbjvPrpezOfNaAGV4WJDG+dG90KP/R/1XfFI7eddhmmL3mHw09yIXFZp 9cB5i4uGabq3tlZVZd+5tGtra0oxmHpY4cTjk8zwGtdYE22CKCbtaCOY7Kz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8cUwHuiVhUI2gZi8hBG/weaq41AwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnkQshWN6T6i /JOKWxeX4piSzC1kUXRhvsc/sv29tYO++TbWcyxGRTdTxp6ZhAAC7LBx/FWyB8fV jRLClM6uP5CVEtV6QBSts/L2Nl/xaFeciFtedTCFA7f6CJ5nkTNkcmYrnMzTHsbC N/8N/55Q+RHQsdIMN4kyxPh14fd/MCOANbB2ibwoHXYholnAUcQCpE4PAfXP5HqP cc0bGTbE1aONYwRuDMUPrImIG6ZpWfoL9pObFEJBscCU6YPddXQYpwr3KDwI/SMG dteoEgePb9xmC+zZ4KjjNt+xg085eoYnv5MpxytK670VhfOoo5W0+OrZwzx1m6fj ejP6c+gZew== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:52 2026 by rpki-client