$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: pkg1Bm/+nQf5FcWEX/CYmfvp2bUJmA048kHtjtzZm2M= Subject key identifier: 77:F4:30:DF:F4:B2:6D:74:FB:B4:07:1E:03:5E:18:04:E9:AD:91:D7 Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 16E41E3692F86E49E9FE1827481645E122BAA786 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02A2 Signing time: Fri 17 Jul 2026 12:41:21 +0000 Manifest this update: Fri 17 Jul 2026 12:36:21 +0000 Manifest next update: Sat 18 Jul 2026 16:13:21 +0000 Files and hashes: 1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) 2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: FkZ6mm+IvNIE3709n7ToN4tp5CRuaplXlFut8hVUPic=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 16:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e4:1e:36:92:f8:6e:49:e9:fe:18:27:48:16:45:e1:22:ba:a7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Jul 17 12:36:21 2026 GMT Not After : Jul 18 16:13:21 2026 GMT Subject: CN=77F430DFF4B26D74FBB4071E035E1804E9AD91D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:38:ad:05:91:bb:c4:10:6d:9a:ec:6d:7f: 7d:d3:de:ef:9d:c6:11:ae:22:b0:e4:b6:66:f1:8d: 26:e9:e4:83:82:e4:cb:d6:3a:61:21:05:e7:27:83: 17:6f:aa:77:4c:fe:45:33:37:0f:8e:51:d5:da:26: f7:0e:ee:7a:e4:6e:53:92:b9:f1:66:d6:01:ca:98: 74:1a:96:39:16:73:05:5a:37:39:53:3d:f9:6a:02: db:de:9d:73:d6:85:93:1c:aa:56:72:cd:9b:d8:b4: d8:e2:79:40:85:74:5e:5d:d8:fe:2e:ec:d4:1b:8a: 38:d7:4c:91:b0:58:08:28:34:c0:9c:b9:c7:35:17: de:53:17:69:0f:c2:d9:11:21:6f:6b:4c:e2:44:5f: ad:f1:09:3e:38:51:b4:17:05:9a:d3:61:36:74:e9: b1:c8:3b:d2:3f:a5:d1:a3:5c:54:27:e5:e2:27:25: 13:55:b8:fe:5f:ff:1a:a6:e4:7f:0d:3e:0f:4b:84: 43:ff:8b:0d:ce:09:9b:b7:e4:a5:a8:75:16:d0:37: 4a:d9:3c:10:41:c9:a1:ff:96:07:c5:29:11:a8:a1: 5e:6c:01:74:7c:bc:8e:cb:3e:ce:2f:e8:69:20:32: d8:bd:65:c5:78:c1:c1:7b:ce:97:4a:d9:db:18:1c: 1a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:30:DF:F4:B2:6D:74:FB:B4:07:1E:03:5E:18:04:E9:AD:91:D7 X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:16:8a:a7:78:68:b2:08:d2:02:90:d8:ed:f1:dc:21:77: 90:21:bb:c5:09:86:2d:97:02:9d:a5:63:b7:2e:12:2e:d7:9a: 11:3f:23:31:5f:dc:e7:89:2c:27:d5:8b:38:3e:98:72:b0:92: 53:b4:4c:33:6f:c0:ce:0d:ec:f4:d1:3b:4c:db:44:2e:3f:57: c1:a6:d3:dc:cd:2f:25:c6:80:af:3a:02:da:df:fa:e3:b3:a6: e8:9a:8f:19:65:9e:8f:7d:87:47:db:6d:53:e2:89:09:d3:80: 85:dc:89:8c:25:bc:7f:73:d0:4b:c9:72:dd:2b:3e:c5:71:dc: 87:ff:ea:c2:ea:69:0c:ef:ac:2f:d8:84:8a:dc:b7:8b:09:e7: ef:73:54:3c:28:0e:8b:6a:45:3d:d9:bb:c0:96:da:1c:8f:df: 57:7f:52:77:a3:13:93:b0:da:c7:59:30:73:b2:a4:be:31:58: 20:00:a4:0a:c6:1f:30:de:7b:f0:18:59:ae:7a:2b:a5:99:1b: 77:fc:0f:2d:63:52:eb:de:a9:67:05:4a:9c:e3:f7:a0:10:0c: 7c:9b:f7:55:3b:2d:00:3b:3b:e8:c8:03:46:27:8f:8e:f1:20: 01:a9:0f:37:91:85:75:c8:d7:33:f1:a3:24:f0:be:96:41:60: 7a:f7:c1:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFuQeNpL4bknp/hgnSBZF4SK6p4YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDcxNzEyMzYyMVoX DTI2MDcxODE2MTMyMVowMzExMC8GA1UEAxMoNzdGNDMwREZGNEIyNkQ3NEZCQjQw NzFFMDM1RTE4MDRFOUFEOTFENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqXOK0FkbvEEG2a7G1/fdPe753GEa4isOS2ZvGNJunkg4Lky9Y6YSEF5yeD F2+qd0z+RTM3D45R1dom9w7ueuRuU5K58WbWAcqYdBqWORZzBVo3OVM9+WoC296d c9aFkxyqVnLNm9i02OJ5QIV0Xl3Y/i7s1BuKONdMkbBYCCg0wJy5xzUX3lMXaQ/C 2REhb2tM4kRfrfEJPjhRtBcFmtNhNnTpscg70j+l0aNcVCfl4iclE1W4/l//Gqbk fw0+D0uEQ/+LDc4Jm7fkpah1FtA3Stk8EEHJof+WB8UpEaihXmwBdHy8jss+zi/o aSAy2L1lxXjBwXvOl0rZ2xgcGicCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBR39DDf 9LJtdPu0Bx4DXhgE6a2R1zAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBOSRaKp3hosgjSApDY7fHcIXeQIbvFCYYtlwKdpWO3LhIu 15oRPyMxX9zniSwn1Ys4PphysJJTtEwzb8DODez00TtM20QuP1fBptPczS8lxoCv OgLa3/rjs6bomo8ZZZ6PfYdH221T4okJ04CF3ImMJbx/c9BLyXLdKz7FcdyH/+rC 6mkM76wv2ISK3LeLCefvc1Q8KA6LakU92bvAltocj99Xf1J3oxOTsNrHWTBzsqS+ MVggAKQKxh8w3nvwGFmueiulmRt3/A8tY1Lr3qlnBUqc4/egEAx8m/dVOy0AOzvo yANGJ4+O8SABqQ83kYV1yNcz8aMk8L6WQWB698Ex -----END CERTIFICATE-----Generated at Sat Jul 18 07:05:06 2026 by rpki-client