$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: i5ImNgH3MHektIM5wkP+qdumeAQUXF7LzilBQvp51Eg= Subject key identifier: 42:75:77:A5:8E:5B:B7:F9:71:3D:12:A1:1D:14:6A:45:02:F9:1A:A3 Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 34A91BE71F3670B6D7B937513368ECDA14BC2525 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02DE Signing time: Wed 02 Sep 2026 09:23:02 +0000 Manifest this update: Wed 02 Sep 2026 09:18:02 +0000 Manifest next update: Sat 05 Sep 2026 16:15:02 +0000 Files and hashes: 1: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: iBwt652Sg8g2ALWOPRoWl4NY0z6bnqgjXCJXVn8wE+o=) 2: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 16:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a9:1b:e7:1f:36:70:b6:d7:b9:37:51:33:68:ec:da:14:bc:25:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Sep 2 09:18:02 2026 GMT Not After : Sep 5 16:15:02 2026 GMT Subject: CN=427577A58E5BB7F9713D12A11D146A4502F91AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:76:b9:68:2f:c6:30:84:61:db:65:1b:72:55: b7:d4:fa:d7:75:3d:d9:e6:3d:a0:2a:76:50:10:b7: bf:32:41:03:76:f0:bc:39:d6:2f:3f:56:b0:65:ec: 13:8e:3b:f6:77:f9:c7:db:0f:ac:79:ba:b2:93:6d: 30:58:d0:ac:31:f4:66:28:ab:a7:73:f3:cc:eb:8c: d4:a5:17:2b:0e:c2:68:ce:2d:83:4b:ca:46:cf:cb: 2f:27:e4:17:2c:41:a2:64:e9:d7:ff:65:26:3e:9c: b3:ad:fb:99:76:d8:57:40:1d:e3:31:af:90:c9:e3: da:07:d0:be:b1:2d:49:ec:bf:ff:10:bb:3d:2c:43: 96:93:75:af:ee:b3:2b:9e:17:64:7d:38:93:ee:b4: 93:7d:04:6a:1b:28:89:2a:42:f1:91:c3:bd:70:13: 05:f0:a3:8e:5b:97:2f:52:66:1d:64:28:3d:ee:65: 51:05:c9:a8:dc:5d:67:16:6c:fb:2a:b1:e7:76:77: fd:57:e6:4f:cd:de:89:2c:02:bf:ac:94:92:14:29: a2:98:68:7f:71:e2:7a:61:f2:a5:a1:a3:fe:b7:4d: 09:93:15:91:cf:de:82:8b:84:53:55:8a:6f:83:63: d0:87:1e:62:4e:06:74:42:8f:ca:bf:38:4e:37:b0: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:75:77:A5:8E:5B:B7:F9:71:3D:12:A1:1D:14:6A:45:02:F9:1A:A3 X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:f3:fe:03:cd:3c:80:ae:34:49:72:72:5a:88:7a:42:f8: 34:e5:cc:90:05:38:d2:3f:2c:d0:6c:02:20:15:92:3b:7e:b2: c6:bc:b7:61:85:cc:94:2c:4c:95:09:f1:93:79:1c:dc:4f:15: af:84:a5:c9:5c:08:d3:a1:38:2b:42:65:63:cf:0f:ea:b3:e4: 68:6b:1e:5b:24:29:49:36:31:1b:49:24:62:81:9d:24:a9:d0: af:e8:bd:0d:fc:d6:1f:b3:c3:f8:7b:67:29:4d:d1:34:95:75: d5:f9:58:2a:b5:d9:62:2a:cb:6b:19:dc:23:2a:85:13:08:a2: 42:02:4b:d5:48:d5:7c:d9:d0:eb:7b:e4:9e:a5:9a:1a:21:bf: 36:40:8a:2a:65:96:4b:d5:29:c7:de:77:4a:59:1f:a6:9d:19: 82:fd:c7:ae:e3:be:55:36:36:4c:15:5c:d2:b9:b1:60:bc:92: 96:b2:1e:f8:60:d9:a0:49:a5:5b:d4:c0:a2:85:48:ef:8d:cc: a0:ab:e2:ec:4a:d8:38:08:80:3f:b7:69:83:1e:91:38:f9:41: 75:9d:b7:d5:2e:f4:2a:2b:4d:e9:33:3b:ee:74:5b:ec:cb:f6: 0c:fc:19:f5:00:74:a0:5d:32:02:ea:ba:58:9c:03:14:f5:1b: 07:0f:9b:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNKkb5x82cLbXuTdRM2js2hS8JSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDkwMjA5MTgwMloX DTI2MDkwNTE2MTUwMlowMzExMC8GA1UEAxMoNDI3NTc3QTU4RTVCQjdGOTcxM0Qx MkExMUQxNDZBNDUwMkY5MUFBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIx2uWgvxjCEYdtlG3JVt9T613U92eY9oCp2UBC3vzJBA3bwvDnWLz9WsGXs E4479nf5x9sPrHm6spNtMFjQrDH0Ziirp3PzzOuM1KUXKw7CaM4tg0vKRs/LLyfk FyxBomTp1/9lJj6cs637mXbYV0Ad4zGvkMnj2gfQvrEtSey//xC7PSxDlpN1r+6z K54XZH04k+60k30EahsoiSpC8ZHDvXATBfCjjluXL1JmHWQoPe5lUQXJqNxdZxZs +yqx53Z3/VfmT83eiSwCv6yUkhQpophof3HiemHypaGj/rdNCZMVkc/egouEU1WK b4Nj0IceYk4GdEKPyr84TjewvJkCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRCdXel jlu3+XE9EqEdFGpFAvkaozAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAf9fP+A808gK40SXJyWoh6Qvg05cyQBTjSPyzQbAIgFZI7 frLGvLdhhcyULEyVCfGTeRzcTxWvhKXJXAjToTgrQmVjzw/qs+Roax5bJClJNjEb SSRigZ0kqdCv6L0N/NYfs8P4e2cpTdE0lXXV+VgqtdliKstrGdwjKoUTCKJCAkvV SNV82dDre+SepZoaIb82QIoqZZZL1SnH3ndKWR+mnRmC/ceu475VNjZMFVzSubFg vJKWsh74YNmgSaVb1MCihUjvjcygq+LsStg4CIA/t2mDHpE4+UF1nbfVLvQqK03p MzvudFvsy/YM/Bn1AHSgXTIC6rpYnAMU9RsHD5v+ -----END CERTIFICATE-----Generated at Thu Sep 3 23:29:29 2026 by rpki-client