$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: +LdWpX6J3Kfks6VvTSS3fiON6aPV7NR1jaxRzLGvkQc= Subject key identifier: 6C:35:92:21:10:DF:67:18:9B:01:4E:FD:98:D1:B2:0E:74:3E:07:B7 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 500A29FC793E64DC9ADF32B9A88FD725C1ECE484 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: 1B Signing time: Fri 29 May 2026 10:47:47 +0000 Manifest this update: Fri 29 May 2026 10:42:47 +0000 Manifest next update: Sat 30 May 2026 11:46:47 +0000 Files and hashes: 1: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 2: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 3: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 4: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 5: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 6: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 7: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 8: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 9: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: ai6acfbr7n4UbRknNSP4uXmlqY4uhpH2S2UWa/r9dsw=) 10: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 11: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 12: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 13: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 14: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 15: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 16: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 17: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 18: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 19: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 20: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0a:29:fc:79:3e:64:dc:9a:df:32:b9:a8:8f:d7:25:c1:ec:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 29 10:42:47 2026 GMT Not After : May 30 11:46:47 2026 GMT Subject: CN=6C35922110DF67189B014EFD98D1B20E743E07B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:20:e9:33:5e:15:9d:82:12:dc:25:27:86: 7b:73:ad:a6:50:e1:46:b3:ed:f9:2c:b3:ce:0e:ad: 58:47:bf:e1:33:f3:d1:44:1e:d5:7b:2c:d2:86:96: 9a:05:ea:4a:9f:eb:23:4b:72:b5:6f:95:90:d8:52: 9e:05:85:36:9d:81:27:f0:55:cd:23:95:7d:88:6d: ff:14:05:c7:1e:26:79:e9:17:1f:f0:3d:9a:09:1d: 2a:ca:bb:56:5d:af:fb:66:89:fd:27:78:a7:eb:6d: ff:51:e0:18:3c:75:c2:f3:a9:07:29:73:91:2e:e7: 7d:f0:7c:a8:1d:74:01:1e:a9:49:6d:d4:a8:8e:73: 84:c7:4c:46:72:e8:d9:31:63:33:03:fb:27:46:ee: ec:86:45:06:57:ed:ca:fa:b1:89:c4:9c:ee:47:a6: 99:82:4c:2e:13:ac:46:c8:57:dc:62:e2:14:44:87: 18:63:b1:78:2e:fc:92:c9:7f:cf:6d:5a:7c:dc:51: 5a:54:b5:e1:73:9f:57:37:26:14:07:74:1a:71:cb: 3b:87:3c:df:c7:67:0a:c9:72:2c:aa:b6:84:ed:ea: d5:78:be:aa:a4:15:90:df:fd:58:39:4b:d9:71:94: 1b:f1:2a:ea:d1:af:41:da:b0:91:f0:0d:8f:81:3b: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:35:92:21:10:DF:67:18:9B:01:4E:FD:98:D1:B2:0E:74:3E:07:B7 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6d:f3:e8:80:98:33:21:2d:0d:b2:70:76:06:ac:e9:00:dc: ba:78:e9:fe:e6:d0:d2:a5:13:ff:4c:e2:e1:2c:15:f8:55:32: 0c:9b:f7:b1:a3:ce:ff:e2:20:79:b7:65:fc:d2:af:a9:49:84: 1b:3e:0f:13:04:a0:bd:32:0e:20:7b:79:56:30:cc:2c:50:ff: c4:31:7e:98:3f:f3:a0:7c:22:ca:20:d5:a3:80:1b:a8:6d:3a: 9b:28:d6:b9:0f:ed:38:fb:b9:95:87:83:2b:a3:15:83:85:a8: 26:c9:85:95:57:7d:ea:9e:5f:79:4a:fd:08:3d:9c:5b:d9:38: d5:d9:1d:ba:d4:54:64:6b:ec:5e:c1:78:20:85:1b:5f:84:cc: 93:96:42:0e:1e:95:b9:96:e4:79:94:c4:ae:32:95:ba:27:a2: b0:c9:1a:8a:8e:3a:09:57:03:d7:5e:ce:ad:03:97:2b:53:64: 05:9c:94:86:be:1c:11:32:1d:f9:e2:c4:c2:d0:71:9c:31:ea: 1a:9a:34:6c:ec:e4:3a:3d:0d:6c:8b:a7:f5:fe:35:e9:aa:9a: e6:c7:7d:53:7f:99:f8:fd:33:70:72:fc:d2:27:d0:d5:53:c0: 77:92:e8:70:8b:fc:ab:b3:18:65:e6:d4:19:c9:6b:66:af:20: 4c:e7:be:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUAop/Hk+ZNya3zK5qI/XJcHs5IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MjkxMDQyNDdaFw0yNjA1MzAxMTQ2NDdaMDMxMTAvBgNV BAMTKDZDMzU5MjIxMTBERjY3MTg5QjAxNEVGRDk4RDFCMjBFNzQzRTA3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTniDpM14VnYIS3CUnhntzraZQ 4Uaz7fkss84OrVhHv+Ez89FEHtV7LNKGlpoF6kqf6yNLcrVvlZDYUp4FhTadgSfw Vc0jlX2Ibf8UBcceJnnpFx/wPZoJHSrKu1Zdr/tmif0neKfrbf9R4Bg8dcLzqQcp c5Eu533wfKgddAEeqUlt1KiOc4THTEZy6NkxYzMD+ydG7uyGRQZX7cr6sYnEnO5H ppmCTC4TrEbIV9xi4hREhxhjsXgu/JLJf89tWnzcUVpUteFzn1c3JhQHdBpxyzuH PN/HZwrJciyqtoTt6tV4vqqkFZDf/Vg5S9lxlBvxKurRr0HasJHwDY+BO1xbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbDWSIRDfZxibAU79mNGyDnQ+B7cwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw23z6ICYMyEt DbJwdgas6QDcunjp/ubQ0qUT/0zi4SwV+FUyDJv3saPO/+Igebdl/NKvqUmEGz4P EwSgvTIOIHt5VjDMLFD/xDF+mD/zoHwiyiDVo4AbqG06myjWuQ/tOPu5lYeDK6MV g4WoJsmFlVd96p5feUr9CD2cW9k41dkdutRUZGvsXsF4IIUbX4TMk5ZCDh6VuZbk eZTErjKVuieisMkaio46CVcD117OrQOXK1NkBZyUhr4cETId+eLEwtBxnDHqGpo0 bOzkOj0NbIun9f416aqa5sd9U3+Z+P0zcHL80ifQ1VPAd5LocIv8q7MYZebUGclr Zq8gTOe+CQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:46 2026 by rpki-client