$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json) Hash identifier: XlfU8WEMrAtYODV0KLADxrHcdrleDhYyAnulkGUGBwE= Subject key identifier: D5:C5:B0:29:C6:89:FD:6E:C0:6E:CF:41:F7:E0:D9:3F:64:B6:ED:C9 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 9DFD926B87D2E4F2F13C407DD6FF5EDA9E32C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 02:49:38 +0000 Manifest this update: Fri 17 Apr 2026 02:44:38 +0000 Manifest next update: Sat 18 Apr 2026 04:38:38 +0000 Files and hashes: 1: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=) 2: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=) 3: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=) 4: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=) 5: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=) 6: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=) 7: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=) 8: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=) 9: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=) 10: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=) 11: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=) 12: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=) 13: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=) 14: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=) 15: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=) 16: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: mUeAAzK4z/JsOP4YhLM+TY15NI94nxrTHu/Q6gxxwBQ=) 17: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=) 18: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=) 19: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=) 20: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=) 21: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=) 22: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=) 23: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=) 24: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=) 25: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=) 26: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=) 27: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=) 28: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=) 29: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=) 30: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=) 31: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=) 32: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=) 33: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=) 34: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=) 35: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=) 36: 3136332e34372e342e302f32322d3232203d3e2034383132.roa (hash: zvELJzYBuK5WrSDweO8nyM7DD2RtUW8B/UrBG13cLPA=) 37: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=) 38: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=) 39: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=) 40: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=) 41: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9d:fd:92:6b:87:d2:e4:f2:f1:3c:40:7d:d6:ff:5e:da:9e:32:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Apr 17 02:44:38 2026 GMT Not After : Apr 18 04:38:38 2026 GMT Subject: CN=D5C5B029C689FD6EC06ECF41F7E0D93F64B6EDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:55:59:e3:13:18:da:e7:df:67:c9:53:e1: 90:80:ce:7f:8b:d4:a6:95:82:10:9e:9a:0b:de:fa: 22:91:ad:a3:8e:85:27:c7:05:3a:c3:7c:a4:47:09: 99:9a:a3:e8:b3:35:3b:12:dc:07:b1:34:fe:99:5b: fc:c4:f3:06:8d:a8:6a:0e:3a:ea:8e:dd:60:28:b9: 00:0b:75:17:91:f5:bf:2a:3c:11:03:fc:66:80:23: f6:4e:63:4e:c5:57:8c:28:eb:e8:aa:16:67:c7:20: 09:fb:8e:91:eb:5a:fc:42:94:29:1f:92:7b:65:61: ed:d4:2d:f7:1c:e7:63:5e:30:31:6c:c4:a4:3b:3d: a9:ba:47:1e:99:55:80:50:78:cf:c6:4a:74:a9:ae: 4c:f7:b4:60:60:31:7f:2d:2f:cf:4e:53:97:08:a1: 08:02:b2:07:19:1e:6f:95:90:bc:d8:9a:01:8e:96: 0f:4a:72:1e:d7:77:16:80:86:e7:ca:6d:44:67:81: 9d:0a:7d:f3:81:61:12:16:ef:51:56:b9:0e:b4:75: 52:94:6c:86:08:46:b6:76:63:09:f8:3e:de:21:67: fc:9e:9b:ce:bf:26:a3:63:f9:14:a3:0a:90:ae:ab: 82:4b:6c:38:82:61:4f:e3:c6:7c:10:61:88:c1:10: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:B0:29:C6:89:FD:6E:C0:6E:CF:41:F7:E0:D9:3F:64:B6:ED:C9 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:27:fa:d8:2b:3b:25:a5:50:c6:b6:ab:ba:39:67:52:47:f7: a7:5d:20:38:e7:02:32:26:21:d4:e8:a5:b1:3d:2f:b2:dc:a8: 26:03:20:b0:3b:f4:9d:fe:a9:89:53:9a:d5:5d:61:2f:d0:12: 83:b4:6a:ae:6e:0d:b7:50:68:34:a8:0b:a6:06:af:c6:4b:9b: 3f:e7:33:8f:68:df:44:c3:1e:66:2f:fb:30:72:52:8b:33:fb: 42:5c:35:38:20:36:67:39:65:9a:0b:d4:56:7a:01:91:0c:a8: 86:e7:9d:34:d8:c8:c0:3c:5c:82:1c:63:a3:34:12:94:97:05: 35:bd:87:0b:db:54:08:0c:f7:2d:cd:42:d5:58:ae:c6:fe:c4: 21:0b:a2:35:1a:dd:bb:8f:3b:28:19:fe:87:44:7d:b0:00:75: 63:8d:e0:d6:27:5f:b9:a1:48:30:53:06:0e:49:43:b8:56:80: 8d:cd:a7:58:f8:40:4d:b9:20:e2:3e:f2:25:41:cb:ac:73:e1: 18:f2:86:8b:de:d3:28:dd:6e:be:25:59:06:fa:21:58:43:94: 91:f2:af:d7:c1:43:68:43:8c:6f:e0:6f:f5:f5:f2:a7:d7:25: 25:0c:3b:3f:16:0d:e1:26:33:51:35:c0:a4:a9:f1:9c:0d:62: 6f:8a:ee:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAJ39kmuH0uTy8TxAfdb/XtqeMsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjA0MTcwMjQ0MzhaFw0yNjA0MTgwNDM4MzhaMDMxMTAvBgNV BAMTKEQ1QzVCMDI5QzY4OUZENkVDMDZFQ0Y0MUY3RTBEOTNGNjRCNkVEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFFVZ4xMY2uffZ8lT4ZCAzn+L 1KaVghCemgve+iKRraOOhSfHBTrDfKRHCZmao+izNTsS3AexNP6ZW/zE8waNqGoO OuqO3WAouQALdReR9b8qPBED/GaAI/ZOY07FV4wo6+iqFmfHIAn7jpHrWvxClCkf kntlYe3ULfcc52NeMDFsxKQ7Pam6Rx6ZVYBQeM/GSnSprkz3tGBgMX8tL89OU5cI oQgCsgcZHm+VkLzYmgGOlg9Kch7XdxaAhufKbURngZ0KffOBYRIW71FWuQ60dVKU bIYIRrZ2Ywn4Pt4hZ/yem86/JqNj+RSjCpCuq4JLbDiCYU/jxnwQYYjBEFbDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1cWwKcaJ/W7Abs9B9+DZP2S27ckwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1 MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSf62Cs7JaVQ xrarujlnUkf3p10gOOcCMiYh1OilsT0vstyoJgMgsDv0nf6piVOa1V1hL9ASg7Rq rm4Nt1BoNKgLpgavxkubP+czj2jfRMMeZi/7MHJSizP7Qlw1OCA2ZzllmgvUVnoB kQyohuedNNjIwDxcghxjozQSlJcFNb2HC9tUCAz3Lc1C1Viuxv7EIQuiNRrdu487 KBn+h0R9sAB1Y43g1idfuaFIMFMGDklDuFaAjc2nWPhATbkg4j7yJUHLrHPhGPKG i97TKN1uviVZBvohWEOUkfKv18FDaEOMb+Bv9fXyp9clJQw7PxYN4SYzUTXApKnx nA1ib4ruSw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:55 2026 by rpki-client