$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: sBJFtKHUUPAq1Ae3tV2ljGU/ch4oD5jtnHjF51glx7I= Subject key identifier: B1:8F:C5:1E:3C:50:24:AC:A8:F0:CF:EB:97:29:0C:17:C1:85:06:50 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 6E1F53A4719262865095491225CF723144E5F233 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: A7 Signing time: Mon 12 Oct 2026 17:17:11 +0000 Manifest this update: Mon 12 Oct 2026 17:12:11 +0000 Manifest next update: Thu 15 Oct 2026 21:00:11 +0000 Files and hashes: 1: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 2: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 3: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 4: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 5: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) 6: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 7: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 8: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: 3nKE74EzfVSQR8P5gPPWJ5Haiedx0kVgB+SopkrZdCg=) 9: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 10: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 11: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 12: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 13: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 14: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 15: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 16: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 17: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 18: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 19: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 20: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 21:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1f:53:a4:71:92:62:86:50:95:49:12:25:cf:72:31:44:e5:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: Oct 12 17:12:11 2026 GMT Not After : Oct 15 21:00:11 2026 GMT Subject: CN=B18FC51E3C5024ACA8F0CFEB97290C17C1850650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:22:2a:79:d6:2d:b7:f5:50:5f:98:e5:4e: fc:ab:52:9a:2d:49:68:5f:d5:02:bf:31:07:4c:89: 02:20:59:97:ee:f7:b7:c2:62:25:a6:bc:12:42:f5: 8e:21:25:c0:dd:7f:a6:59:d6:55:7b:c9:88:73:c4: 6b:5c:83:e7:f9:88:2d:db:db:42:60:c8:f5:68:34: ca:d8:60:5c:84:94:86:9c:a7:40:a0:f7:d7:3a:ee: 09:24:81:d1:23:46:31:ac:75:9a:35:1b:58:cd:af: c1:17:5e:02:f1:67:98:2f:b0:9b:ce:1a:00:75:d5: bc:57:84:34:a4:ce:4e:94:0a:5c:ad:2b:12:35:db: b3:e7:87:30:63:1a:64:39:46:bc:6d:24:e7:a7:f2: ba:f2:a0:65:7e:1e:84:16:73:14:7a:3c:0e:2d:4d: a4:8c:eb:6a:8e:93:f9:c9:c4:91:2c:fb:bf:50:63: 10:11:a1:0e:02:ce:5b:a6:bd:cd:fd:ea:ce:2c:7c: f3:ca:fa:3d:e9:cd:1c:49:70:93:35:96:53:d9:66: c5:d5:5c:10:41:ed:66:57:47:72:77:d0:3a:67:2c: 2b:3c:06:fb:98:9c:5f:50:20:3b:df:bf:e7:1f:2c: c5:6a:2c:8e:2a:a7:58:98:74:16:7c:b1:87:53:3a: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8F:C5:1E:3C:50:24:AC:A8:F0:CF:EB:97:29:0C:17:C1:85:06:50 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:44:98:3b:15:09:15:9c:2a:5f:da:fa:58:c8:2c:66:2b:a9: fd:f6:5a:61:32:5d:96:7d:02:e9:11:fa:c6:14:53:91:47:4a: 5a:f4:44:da:59:38:a2:eb:24:f5:8e:a2:e3:1e:ba:22:42:95: 63:d3:97:0b:b9:44:d0:70:aa:56:fc:82:d0:95:ea:28:79:b2: b7:bb:30:99:bd:e7:72:94:77:83:1b:12:4b:31:53:2b:6f:27: b9:42:15:24:d9:c6:51:12:de:ba:ee:72:64:36:19:65:14:41: 78:44:c2:ba:25:fd:8b:cc:3d:86:8c:e8:70:04:f9:42:10:7c: 12:91:3e:a0:f6:93:40:5c:7b:be:0a:96:2f:27:2a:06:28:2a: a4:51:33:63:56:7b:72:2f:31:48:ad:be:44:0b:bd:8b:95:fb: fb:fb:35:13:09:23:c3:d1:00:92:8a:c6:10:56:40:5a:00:6f: 94:c8:6d:8d:63:31:4d:c9:96:cf:80:2b:d0:30:48:2f:56:64: 85:6b:67:fd:af:ce:9f:65:a2:ce:9a:80:48:d9:93:4d:70:e9: e9:f9:d9:7f:e8:15:0f:9e:8a:14:eb:78:fc:0b:69:eb:11:f0: fb:91:66:94:0b:0b:88:56:02:79:a0:d6:0c:5b:27:c1:e1:78: ed:97:9a:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbh9TpHGSYoZQlUkSJc9yMUTl8jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjEwMTIxNzEyMTFaFw0yNjEwMTUyMTAwMTFaMDMxMTAvBgNV BAMTKEIxOEZDNTFFM0M1MDI0QUNBOEYwQ0ZFQjk3MjkwQzE3QzE4NTA2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/SIqedYtt/VQX5jlTvyrUpot SWhf1QK/MQdMiQIgWZfu97fCYiWmvBJC9Y4hJcDdf6ZZ1lV7yYhzxGtcg+f5iC3b 20JgyPVoNMrYYFyElIacp0Cg99c67gkkgdEjRjGsdZo1G1jNr8EXXgLxZ5gvsJvO GgB11bxXhDSkzk6UClytKxI127PnhzBjGmQ5RrxtJOen8rryoGV+HoQWcxR6PA4t TaSM62qOk/nJxJEs+79QYxARoQ4Czlumvc396s4sfPPK+j3pzRxJcJM1llPZZsXV XBBB7WZXR3J30DpnLCs8BvuYnF9QIDvfv+cfLMVqLI4qp1iYdBZ8sYdTOqmbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsY/FHjxQJKyo8M/rlykMF8GFBlAwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkSYOxUJFZwq X9r6WMgsZiup/fZaYTJdln0C6RH6xhRTkUdKWvRE2lk4ousk9Y6i4x66IkKVY9OX C7lE0HCqVvyC0JXqKHmyt7swmb3ncpR3gxsSSzFTK28nuUIVJNnGURLeuu5yZDYZ ZRRBeETCuiX9i8w9hozocAT5QhB8EpE+oPaTQFx7vgqWLycqBigqpFEzY1Z7ci8x SK2+RAu9i5X7+/s1Ewkjw9EAkorGEFZAWgBvlMhtjWMxTcmWz4Ar0DBIL1ZkhWtn /a/On2WizpqASNmTTXDp6fnZf+gVD56KFOt4/Atp6xHw+5FmlAsLiFYCeaDWDFsn weF47Zea1g== -----END CERTIFICATE-----Generated at Wed Oct 14 12:54:45 2026 by rpki-client