$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: U4qb6ZxyWZhWCvm5hVweITRCGfp+42Nxb0RiVCqgzuk= Subject key identifier: 98:C6:60:E0:97:5C:F6:1A:AF:DE:9E:E7:45:8A:EB:64:C2:3B:B7:3E Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 2ABB84B3AD707A9A0E8B5294CD20E6C1E0E5ECAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 81 Signing time: Thu 03 Sep 2026 20:59:08 +0000 Manifest this update: Thu 03 Sep 2026 20:54:08 +0000 Manifest next update: Mon 07 Sep 2026 05:25:08 +0000 Files and hashes: 1: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 2: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 3: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: PIswaanSGVIIlY4CRGxXxapKyKQXm0JaRJpjSo2fOIs=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bb:84:b3:ad:70:7a:9a:0e:8b:52:94:cd:20:e6:c1:e0:e5:ec:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Sep 3 20:54:08 2026 GMT Not After : Sep 7 05:25:08 2026 GMT Subject: CN=98C660E0975CF61AAFDE9EE7458AEB64C23BB73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:98:76:56:78:e5:22:2e:38:e4:54:ca:e1: 08:08:23:ec:48:b3:c3:18:28:d5:c0:a7:34:15:89: f1:09:bf:d7:b3:c8:60:15:f4:44:c2:4e:16:74:fd: c4:08:12:cf:11:8c:42:70:94:32:7c:6a:83:16:d6: b3:1c:0f:f2:da:d5:fd:61:6f:53:2d:bb:97:ab:70: 8b:ad:ec:b8:1b:9f:79:fb:60:0d:63:74:46:3f:d5: 47:92:d5:84:3a:b2:b1:e9:8f:d2:d0:a9:b8:1c:2a: b9:1a:56:58:9e:86:fd:43:72:b6:21:bd:c6:22:fb: cc:10:41:07:f0:66:95:6b:c8:46:47:eb:e8:70:b7: b3:02:8c:d6:8f:d1:e8:8e:5c:dd:be:f4:fc:df:ae: c7:32:cd:91:a2:0f:89:0e:dc:4a:48:e2:b9:81:44: f3:a6:0b:12:e2:f4:2a:93:2c:61:1a:76:95:59:57: fb:9f:25:d9:b9:e8:d0:30:18:36:1e:1d:56:b9:1e: ce:4a:ec:c8:35:3c:2b:a2:bb:69:97:e1:c5:4c:49: d7:1b:b2:46:8f:9a:96:e9:3d:b2:31:34:c7:4b:4f: 9b:2b:8d:f5:f0:94:f9:cb:2c:4f:35:d7:84:f6:d9: d4:3d:ca:26:b7:76:57:de:b1:2c:d3:42:fc:36:df: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:60:E0:97:5C:F6:1A:AF:DE:9E:E7:45:8A:EB:64:C2:3B:B7:3E X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:09:04:3d:a4:e0:e4:ea:fa:82:a6:99:22:33:1c:37:34:cd: 58:b9:05:ba:9a:4f:18:5d:2a:40:26:d8:84:8b:e3:4b:73:34: 45:27:a9:6d:4f:ec:41:cc:9d:e7:cb:8b:c4:90:10:e7:bf:86: 41:66:dd:d0:65:95:45:1d:d4:b1:f7:b6:4d:78:89:51:6c:04: 32:d8:1e:5c:d1:81:40:bf:19:47:e9:7f:8c:c6:ce:7d:94:8b: 9c:a2:20:49:ff:b0:52:39:d4:9d:d4:a7:a2:65:af:fc:3c:b8: a9:4d:e5:ed:bb:70:cc:ea:9e:ae:dd:82:30:3a:6d:fe:a2:a9: b0:79:9f:57:00:ac:bd:76:4f:01:62:0d:55:aa:71:99:55:5e: b8:dc:f5:dd:1a:c5:4b:4b:be:a9:f7:52:46:ef:1c:3a:c4:b1: ff:45:fe:11:e0:f6:fb:95:9a:18:8a:e0:c0:21:b5:13:41:df: c2:bd:a5:86:46:09:b0:b6:78:bc:f4:3b:f0:18:97:e2:44:bf: 79:0d:8c:bc:a3:75:79:a4:0c:39:32:07:4f:2e:f2:7a:73:c1: eb:75:b1:90:01:1c:11:c5:71:94:3c:10:1c:b4:af:18:33:91: 9e:c9:22:fb:bc:99:b1:e1:08:65:a3:b5:cb:05:eb:0d:53:fe: f9:87:82:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKruEs61wepoOi1KUzSDmweDl7K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA5MDMyMDU0MDhaFw0yNjA5MDcwNTI1MDhaMDMxMTAvBgNV BAMTKDk4QzY2MEUwOTc1Q0Y2MUFBRkRFOUVFNzQ1OEFFQjY0QzIzQkI3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTph2VnjlIi445FTK4QgII+xI s8MYKNXApzQVifEJv9ezyGAV9ETCThZ0/cQIEs8RjEJwlDJ8aoMW1rMcD/La1f1h b1Mtu5ercIut7Lgbn3n7YA1jdEY/1UeS1YQ6srHpj9LQqbgcKrkaVliehv1DcrYh vcYi+8wQQQfwZpVryEZH6+hwt7MCjNaP0eiOXN2+9PzfrscyzZGiD4kO3EpI4rmB RPOmCxLi9CqTLGEadpVZV/ufJdm56NAwGDYeHVa5Hs5K7Mg1PCuiu2mX4cVMSdcb skaPmpbpPbIxNMdLT5srjfXwlPnLLE8114T22dQ9yia3dlfesSzTQvw23ywJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmMZg4Jdc9hqv3p7nRYrrZMI7tz4wHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQkEPaTg5Or6 gqaZIjMcNzTNWLkFuppPGF0qQCbYhIvjS3M0RSepbU/sQcyd58uLxJAQ57+GQWbd 0GWVRR3Usfe2TXiJUWwEMtgeXNGBQL8ZR+l/jMbOfZSLnKIgSf+wUjnUndSnomWv /Dy4qU3l7btwzOqert2CMDpt/qKpsHmfVwCsvXZPAWINVapxmVVeuNz13RrFS0u+ qfdSRu8cOsSx/0X+EeD2+5WaGIrgwCG1E0Hfwr2lhkYJsLZ4vPQ78BiX4kS/eQ2M vKN1eaQMOTIHTy7yenPB63WxkAEcEcVxlDwQHLSvGDORnski+7yZseEIZaO1ywXr DVP++YeCQA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:26 2026 by rpki-client