$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json) Hash identifier: NcTkAQvwZMKuCrvqqJZusnoRj0Ys7NALakEXI05Ayws= Subject key identifier: 66:9F:B4:D5:37:30:65:EF:B5:15:91:50:7B:4E:16:B9:E2:CF:D9:BA Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 4B16C38E9F33BB13617B027ECBE1CEE4845F5A64 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:18:17 +0000 Manifest this update: Mon 02 Mar 2026 09:13:17 +0000 Manifest next update: Tue 03 Mar 2026 11:27:17 +0000 Files and hashes: 1: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=) 2: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=) 3: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=) 4: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=) 5: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=) 6: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=) 7: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=) 8: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=) 9: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=) 10: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=) 11: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=) 12: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=) 13: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=) 14: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=) 15: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=) 16: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=) 17: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=) 18: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=) 19: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=) 20: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=) 21: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=) 22: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=) 23: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: CRSA+pmnBnm/gJKM1wtahx6IbbajL86KVJOV7/5NXDA=) 24: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=) 25: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=) 26: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=) 27: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=) 28: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=) 29: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=) 30: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=) 31: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=) 32: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=) 33: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=) 34: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=) 35: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=) 36: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=) 37: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=) 38: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=) 39: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=) 40: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:16:c3:8e:9f:33:bb:13:61:7b:02:7e:cb:e1:ce:e4:84:5f:5a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Mar 2 09:13:17 2026 GMT Not After : Mar 3 11:27:17 2026 GMT Subject: CN=669FB4D5373065EFB51591507B4E16B9E2CFD9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:bd:be:5b:67:67:e2:a7:b9:ca:14:5e:31: d7:36:db:0e:77:27:33:12:37:24:7e:0d:d4:cf:0b: a8:e7:78:95:09:ef:67:b5:27:05:83:88:bc:6f:48: 72:47:0e:f4:71:20:d0:84:d6:15:a7:9c:79:d5:33: 51:68:a0:d9:86:bd:a4:d2:0f:a6:57:b1:54:ed:85: 8b:24:d5:20:d4:94:08:e9:3c:63:2d:79:0c:54:aa: 25:ca:1b:e5:96:c2:13:92:8d:66:c3:06:5e:46:1f: 3d:69:16:6f:13:e0:35:7c:5b:ec:6e:f9:f9:5a:79: 4e:3b:e3:40:ac:f9:44:cd:de:10:78:3c:65:2d:e7: ee:a9:7d:3b:2e:17:d0:fc:87:0b:b1:0b:a0:86:96: e6:ba:00:8f:e6:bc:aa:55:3f:27:17:41:3d:62:cf: ea:de:ff:de:64:0a:c1:44:e8:e1:9d:04:7d:a7:49: 31:27:6e:f6:bb:a3:e3:6c:99:d6:9e:cf:6b:82:3d: c4:88:82:c3:7f:c6:da:aa:e8:d6:5e:cd:3c:ed:7d: 6a:9a:00:b3:b0:ec:0a:c4:f2:0e:6b:86:7c:ec:9e: a3:49:e0:84:ca:52:35:9f:e7:e9:df:1f:36:7c:0c: 74:cb:0f:89:10:87:98:a1:69:af:1f:67:11:15:de: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:B4:D5:37:30:65:EF:B5:15:91:50:7B:4E:16:B9:E2:CF:D9:BA X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9a:f6:86:ca:b0:19:d0:3d:98:10:cb:96:a7:eb:d3:c0:58: eb:0c:ea:13:03:a9:56:25:ba:09:23:45:f3:26:f6:c1:3c:44: d8:45:4a:48:cd:23:0a:f9:03:87:59:2d:f3:8b:95:34:a1:d9: 83:2b:33:86:f5:03:b3:e8:c4:ce:68:6a:26:b9:52:31:13:7d: 81:a5:d6:41:e7:c5:16:3e:54:e6:f5:b7:bc:4a:0d:f3:ca:6f: 7b:01:d4:2b:9d:2f:ff:87:2c:0c:49:66:65:cf:1e:20:89:cc: 3d:72:b8:db:2a:44:0a:3f:da:c9:11:43:8a:77:0f:c1:39:2d: ea:b0:27:49:8b:43:db:ef:92:29:55:cc:52:ea:cd:75:53:d9: fb:12:99:9e:75:97:f9:84:51:ea:e1:af:2d:6b:f2:83:d8:4c: c7:0c:6c:f7:03:19:28:73:7f:34:7e:52:f1:af:43:95:71:bb: 95:a5:04:c2:98:af:8f:fc:55:9a:5a:e5:88:21:a5:7e:8c:a2: 04:35:bf:e3:3c:4b:ff:41:28:e6:e4:84:df:32:e6:b8:e2:16: fb:8f:61:61:e9:35:83:36:51:bd:da:cd:e2:89:19:d0:e0:fd: 3e:c3:06:b7:02:ee:a6:94:00:68:fc:54:22:a5:46:9b:33:a2: 90:e6:21:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSxbDjp8zuxNhewJ+y+HO5IRfWmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAzMDIwOTEzMTdaFw0yNjAzMDMxMTI3MTdaMDMxMTAvBgNV BAMTKDY2OUZCNEQ1MzczMDY1RUZCNTE1OTE1MDdCNEUxNkI5RTJDRkQ5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdMr2+W2dn4qe5yhReMdc22w53 JzMSNyR+DdTPC6jneJUJ72e1JwWDiLxvSHJHDvRxINCE1hWnnHnVM1FooNmGvaTS D6ZXsVTthYsk1SDUlAjpPGMteQxUqiXKG+WWwhOSjWbDBl5GHz1pFm8T4DV8W+xu +flaeU4740Cs+UTN3hB4PGUt5+6pfTsuF9D8hwuxC6CGlua6AI/mvKpVPycXQT1i z+re/95kCsFE6OGdBH2nSTEnbva7o+Nsmdaez2uCPcSIgsN/xtqq6NZezTztfWqa ALOw7ArE8g5rhnzsnqNJ4ITKUjWf5+nfHzZ8DHTLD4kQh5ihaa8fZxEV3jIXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZp+01TcwZe+1FZFQe04WueLP2bowHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1 MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJr2hsqwGdA9 mBDLlqfr08BY6wzqEwOpViW6CSNF8yb2wTxE2EVKSM0jCvkDh1kt84uVNKHZgysz hvUDs+jEzmhqJrlSMRN9gaXWQefFFj5U5vW3vEoN88pvewHUK50v/4csDElmZc8e IInMPXK42ypECj/ayRFDincPwTkt6rAnSYtD2++SKVXMUurNdVPZ+xKZnnWX+YRR 6uGvLWvyg9hMxwxs9wMZKHN/NH5S8a9DlXG7laUEwpivj/xVmlrliCGlfoyiBDW/ 4zxL/0Eo5uSE3zLmuOIW+49hYek1gzZRvdrN4okZ0OD9PsMGtwLuppQAaPxUIqVG mzOikOYhKQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:30:06 2026 by rpki-client