$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: aAj4UpI2G2LiFBm5p1R4vQSt2dfZq3K272Ee5F6r+as= Subject key identifier: D2:EC:16:AD:DA:F7:3B:98:75:4E:CC:AA:7A:2F:4D:CC:0E:DC:87:E3 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 7AB28D151CF657F994560AD064D269BF35B7316C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 98 Signing time: Mon 26 Oct 2026 13:43:45 +0000 Manifest this update: Mon 26 Oct 2026 13:38:45 +0000 Manifest next update: Thu 29 Oct 2026 19:02:45 +0000 Files and hashes: 1: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 2: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 3: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: KyMTKc4RBpBFW9QXOr8W/xTXTJptS+ijyO4S7Eo2Lk4=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b2:8d:15:1c:f6:57:f9:94:56:0a:d0:64:d2:69:bf:35:b7:31:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Oct 26 13:38:45 2026 GMT Not After : Oct 29 19:02:45 2026 GMT Subject: CN=D2EC16ADDAF73B98754ECCAA7A2F4DCC0EDC87E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:80:fc:6c:41:c2:d9:79:3e:ae:2c:90:a7: 53:8e:e2:50:7e:d5:a2:f5:4a:c7:f7:b3:03:6f:7e: df:53:84:c8:0f:5f:53:3b:a1:52:ed:d2:30:a9:f5: da:8f:87:9f:be:ae:c3:f7:49:72:dd:21:33:3c:af: 41:ab:75:c5:bc:e9:53:b3:d4:fa:d1:f5:f1:d7:d2: 40:e5:6f:cd:d3:e3:b2:79:db:90:a3:83:db:a3:4b: 12:2c:e2:4d:71:c1:1f:e2:a6:ea:a5:62:c0:3a:40: d0:9f:d9:5b:69:3d:44:10:f8:7e:01:cb:1c:61:4a: 70:ac:7e:cf:48:bf:e2:ac:04:62:52:dc:77:5d:ba: 11:4e:be:92:19:f7:e3:3f:c8:be:0f:0f:a3:b0:71: 81:d9:21:09:22:a7:b8:2a:17:ef:16:39:d3:82:43: bd:65:9a:ce:78:5c:65:de:f4:95:07:50:9b:35:e2: 7a:80:58:a2:94:e5:25:c1:97:4e:52:a7:91:5d:44: 99:8e:5b:5d:05:78:94:7c:5f:bb:ef:df:77:f8:6b: bd:56:de:81:01:52:59:c4:71:fd:52:74:1b:59:79: a4:72:93:7d:bf:0e:d4:bf:01:f5:24:29:14:86:26: 8d:6f:5a:0b:c8:df:a2:98:10:49:92:30:1e:2d:41: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:16:AD:DA:F7:3B:98:75:4E:CC:AA:7A:2F:4D:CC:0E:DC:87:E3 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9f:ad:3b:64:fe:db:e9:74:1d:6e:a1:d1:8a:a4:d3:db:f6: a2:85:fe:58:36:b7:e2:09:44:9d:3d:ef:08:20:42:16:03:9b: db:3e:e7:a8:90:c3:9d:83:98:f5:b7:e8:90:75:78:26:43:d3: 90:3c:ec:d5:74:f6:06:41:b5:9b:d5:b4:92:bd:7c:b9:9e:ab: b6:04:bf:f6:cd:2c:f4:4c:23:e2:9f:c3:ed:00:67:5c:78:61: 47:fe:62:8d:d5:d8:a3:b7:a2:49:56:9e:80:1d:c1:6f:2c:f9: 0e:28:7d:81:33:f0:d8:7d:2f:e4:b1:73:90:66:e8:a8:2a:c2: a3:fb:cd:26:4d:ef:f6:31:36:09:94:31:e0:15:6d:f6:ed:37: 78:17:f8:f9:ed:45:1a:50:15:07:80:48:1d:aa:e6:38:67:90: 20:fb:d1:8d:ad:b2:5d:b8:b8:96:7e:2a:5a:3d:36:c5:89:42: 89:47:d3:d1:91:ef:eb:a6:02:37:87:79:0e:12:e0:d4:46:dc: c6:1d:73:93:5e:fc:32:88:6c:b9:93:12:4b:ae:af:5f:01:f2: a5:2a:4c:7c:4a:90:d6:75:88:02:f9:f1:99:2a:98:c9:68:2e: 2b:5f:b2:f2:0f:13:f5:2c:ad:b8:16:91:72:b7:72:c9:c1:a6: 14:8d:7b:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUerKNFRz2V/mUVgrQZNJpvzW3MWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjEwMjYxMzM4NDVaFw0yNjEwMjkxOTAyNDVaMDMxMTAvBgNV BAMTKEQyRUMxNkFEREFGNzNCOTg3NTRFQ0NBQTdBMkY0RENDMEVEQzg3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIID8bEHC2Xk+riyQp1OO4lB+ 1aL1Ssf3swNvft9ThMgPX1M7oVLt0jCp9dqPh5++rsP3SXLdITM8r0GrdcW86VOz 1PrR9fHX0kDlb83T47J525Cjg9ujSxIs4k1xwR/ipuqlYsA6QNCf2VtpPUQQ+H4B yxxhSnCsfs9Iv+KsBGJS3HdduhFOvpIZ9+M/yL4PD6OwcYHZIQkip7gqF+8WOdOC Q71lms54XGXe9JUHUJs14nqAWKKU5SXBl05Sp5FdRJmOW10FeJR8X7vv33f4a71W 3oEBUlnEcf1SdBtZeaRyk32/DtS/AfUkKRSGJo1vWgvI36KYEEmSMB4tQcXjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0uwWrdr3O5h1Tsyqei9NzA7ch+MwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5+tO2T+2+l0 HW6h0Yqk09v2ooX+WDa34glEnT3vCCBCFgOb2z7nqJDDnYOY9bfokHV4JkPTkDzs 1XT2BkG1m9W0kr18uZ6rtgS/9s0s9Ewj4p/D7QBnXHhhR/5ijdXYo7eiSVaegB3B byz5Dih9gTPw2H0v5LFzkGboqCrCo/vNJk3v9jE2CZQx4BVt9u03eBf4+e1FGlAV B4BIHarmOGeQIPvRja2yXbi4ln4qWj02xYlCiUfT0ZHv66YCN4d5DhLg1Ebcxh1z k178MohsuZMSS66vXwHypSpMfEqQ1nWIAvnxmSqYyWguK1+y8g8T9SytuBaRcrdy ycGmFI170g== -----END CERTIFICATE-----Generated at Wed Oct 28 04:55:14 2026 by rpki-client