$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: C1+Mdbxa0Xg5ahDjzBelFxdifmaPdNEizf1KHepxJR8= Subject key identifier: 5E:F0:C1:58:F2:01:73:82:F2:2A:2C:1D:B1:9E:98:6C:05:6C:C6:D7 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 769237A8E5CF51F5AB6603597574012F67CB6E90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 0A Signing time: Thu 04 Jun 2026 03:09:10 +0000 Manifest this update: Thu 04 Jun 2026 03:04:10 +0000 Manifest next update: Fri 05 Jun 2026 03:15:10 +0000 Files and hashes: 1: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: pr3QFY+CI6BwKio2n3024KLoAkzeFxgDGJjf6T1K++U=) 2: 3136302e3235302e3130322e302f32332d3233203d3e2030.roa (hash: JW88x4+4fxDvop6T+azr09az/tjTTipb/R1jsOGCEb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:92:37:a8:e5:cf:51:f5:ab:66:03:59:75:74:01:2f:67:cb:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Jun 4 03:04:10 2026 GMT Not After : Jun 5 03:15:10 2026 GMT Subject: CN=5EF0C158F2017382F22A2C1DB19E986C056CC6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:0d:14:ff:25:2f:77:13:57:34:2d:82:35: ad:9a:6e:2e:f4:73:32:d3:78:1e:8e:e2:a7:4a:04: 9d:b4:1e:76:92:4a:13:1c:54:da:c6:7b:1f:68:60: 4d:c4:55:be:9c:a6:22:48:5d:76:fe:05:10:e7:29: 97:73:2a:97:ff:c0:9e:c9:21:b8:fe:51:65:73:f0: ba:b3:71:fd:1e:db:06:30:e0:00:36:8e:c5:97:28: 22:a2:18:61:d8:6e:a0:85:23:8a:93:01:30:a9:58: 6a:0e:c5:c4:b5:48:e4:e2:3d:c7:e9:96:4b:6e:4f: ac:93:9a:28:a9:a4:c6:7a:c8:71:4e:83:9c:24:ed: 14:f2:14:cc:03:45:e4:e1:0e:0c:c5:59:f1:bc:70: a3:9f:b1:91:84:09:0c:49:c2:56:00:aa:5a:a2:52: ac:1b:a9:ca:44:4a:ac:77:04:5a:48:9c:2a:68:76: 3d:8c:8f:1d:d8:36:e7:78:1f:df:e3:41:b3:7b:40: b5:f9:e9:ba:e0:c3:81:d8:be:1d:f9:90:57:56:97: b6:33:7e:fc:49:06:99:6f:f8:08:f1:3b:65:04:0f: 03:3f:61:66:35:d9:72:9a:22:f2:9c:ad:e3:aa:b6: 55:29:33:67:c0:63:2c:d9:ee:a2:4b:14:86:43:8a: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F0:C1:58:F2:01:73:82:F2:2A:2C:1D:B1:9E:98:6C:05:6C:C6:D7 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:82:bf:46:b7:f0:30:79:b7:c2:1b:70:33:37:94:4f:2b:0d: bd:62:76:d1:e9:bf:07:7e:d6:1a:62:ae:87:49:77:62:24:c5: 97:18:03:0d:38:1b:46:5d:6a:6c:79:4e:93:e3:9b:31:f0:fa: 13:9c:21:b6:70:81:af:43:0c:07:3d:c5:e4:55:ed:57:0f:c0: 57:c9:d5:41:e7:a4:85:89:90:9c:c3:ca:a9:26:af:8c:c9:0b: d7:31:a2:1e:7a:98:73:02:16:b1:fa:81:5a:b1:b6:e9:fe:dc: 4d:40:26:f6:19:b3:69:9a:71:bd:b2:95:e6:58:02:89:c0:87: 56:c9:a2:c2:41:e8:46:8f:8e:e1:83:98:4b:44:79:a0:e6:f9: 05:94:08:88:69:b6:f6:6d:c4:43:14:c2:f3:5f:9e:0c:45:30: 76:8a:01:4f:81:22:7a:13:b8:a5:6a:4e:ee:2b:76:9c:cf:62: 71:52:2e:ca:76:51:a4:47:59:e4:19:1f:8f:10:53:0e:59:03: aa:3a:b2:ba:f0:be:eb:1f:16:92:2b:db:df:b5:ee:93:4f:4b: 1b:f4:83:ac:87:92:a8:ac:24:d7:17:c1:b9:6d:59:23:a4:e8: 8d:7d:b8:f1:63:99:1d:d2:30:84:89:5e:84:8f:b5:d7:2a:df: 25:90:1d:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdpI3qOXPUfWrZgNZdXQBL2fLbpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA2MDQwMzA0MTBaFw0yNjA2MDUwMzE1MTBaMDMxMTAvBgNV BAMTKDVFRjBDMTU4RjIwMTczODJGMjJBMkMxREIxOUU5ODZDMDU2Q0M2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/w0U/yUvdxNXNC2CNa2abi70 czLTeB6O4qdKBJ20HnaSShMcVNrGex9oYE3EVb6cpiJIXXb+BRDnKZdzKpf/wJ7J Ibj+UWVz8Lqzcf0e2wYw4AA2jsWXKCKiGGHYbqCFI4qTATCpWGoOxcS1SOTiPcfp lktuT6yTmiippMZ6yHFOg5wk7RTyFMwDReThDgzFWfG8cKOfsZGECQxJwlYAqlqi UqwbqcpESqx3BFpInCpodj2Mjx3YNud4H9/jQbN7QLX56brgw4HYvh35kFdWl7Yz fvxJBplv+AjxO2UEDwM/YWY12XKaIvKcreOqtlUpM2fAYyzZ7qJLFIZDihg3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXvDBWPIBc4LyKiwdsZ6YbAVsxtcwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIK/RrfwMHm3 whtwMzeUTysNvWJ20em/B37WGmKuh0l3YiTFlxgDDTgbRl1qbHlOk+ObMfD6E5wh tnCBr0MMBz3F5FXtVw/AV8nVQeekhYmQnMPKqSavjMkL1zGiHnqYcwIWsfqBWrG2 6f7cTUAm9hmzaZpxvbKV5lgCicCHVsmiwkHoRo+O4YOYS0R5oOb5BZQIiGm29m3E QxTC81+eDEUwdooBT4EiehO4pWpO7it2nM9icVIuynZRpEdZ5BkfjxBTDlkDqjqy uvC+6x8Wkivb37Xuk09LG/SDrIeSqKwk1xfBuW1ZI6TojX248WOZHdIwhIlehI+1 1yrfJZAdIg== -----END CERTIFICATE-----Generated at Thu Jun 4 15:02:43 2026 by rpki-client