$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: GAIMA12r2GMq93YIvlD/r/itlxnhlch8vD5B1qRVm/g= Subject key identifier: 05:47:7B:42:30:68:9C:FD:20:6D:EC:F1:3B:B8:7D:FE:BF:06:CE:B5 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 5AEE37EB849EAF457131373B4767F2007B1A573D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:54:46 +0000 Manifest this update: Fri 17 Apr 2026 17:49:46 +0000 Manifest next update: Sat 18 Apr 2026 20:10:46 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: edGjF/nPrLa0GVI6DM5efclDBsFtfJjUOMeR+F3Q68A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ee:37:eb:84:9e:af:45:71:31:37:3b:47:67:f2:00:7b:1a:57:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Apr 17 17:49:46 2026 GMT Not After : Apr 18 20:10:46 2026 GMT Subject: CN=05477B4230689CFD206DECF13BB87DFEBF06CEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:ff:32:15:b6:80:93:0f:84:56:d7:50:05: d1:0c:c5:99:57:83:98:e5:93:f1:42:a8:2e:6a:ff: 23:83:1b:81:f3:e1:cb:0f:f0:e0:b4:2c:a7:57:68: 52:4b:bb:71:25:89:08:36:01:ce:26:86:d2:25:46: db:d1:cc:5b:85:37:9d:95:ce:34:9d:90:ed:bb:b3: 40:58:32:a0:92:aa:df:be:ee:84:d3:51:62:ff:f5: d3:8c:f4:e8:50:63:6a:87:5e:80:d4:4f:53:5a:3f: e1:53:ae:6d:13:ae:f4:31:aa:ad:4c:f4:6f:93:a3: 67:94:27:45:53:d5:df:82:6b:f8:5c:c7:82:39:91: 72:75:48:2c:b6:d7:ee:ec:e0:67:05:75:1a:7d:93: 71:3e:c0:5a:e8:f8:3c:24:d0:33:4b:c0:30:40:b5: cc:8d:3e:8b:28:2a:dd:51:48:f9:b2:9f:4b:e1:8c: ba:3a:fd:86:52:e0:da:94:0b:0e:7a:70:3b:17:87: 57:bd:ca:23:d9:ec:09:75:de:21:ae:bc:2f:14:55: 4f:c7:c0:13:48:44:bb:39:e7:a3:52:0d:ec:f1:17: 28:50:fc:2e:51:51:19:83:7c:33:a4:80:49:c3:70: a8:f3:3c:ab:d5:a2:3b:cd:c1:70:c9:3d:72:81:77: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:7B:42:30:68:9C:FD:20:6D:EC:F1:3B:B8:7D:FE:BF:06:CE:B5 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:66:4e:4a:8e:6f:82:fd:f3:78:fd:d1:5b:f5:b3:bd:a9:4d: 49:f9:95:34:31:e0:cc:d9:27:df:05:81:bd:3e:5d:5b:3f:6b: 7a:51:15:47:9b:1a:cf:cf:24:00:8a:10:16:7b:1c:88:e2:5b: f8:e1:62:02:33:3f:b4:c3:4a:16:2b:81:8b:85:fc:3b:e9:11: 42:4c:71:63:b5:39:44:00:78:34:ed:7d:45:39:ac:0d:ea:0c: a5:9c:1d:bf:59:7e:56:60:b9:53:17:49:ee:19:07:5d:5f:ae: 56:5d:36:26:03:da:60:2e:3c:02:ac:9a:6e:77:89:b1:03:bd: 05:72:c0:29:40:8c:d0:aa:6f:94:89:bd:e0:5a:fc:99:39:ec: 6f:dd:78:f6:ea:e7:ed:60:9c:b6:11:d9:89:d5:53:2c:5b:cf: 1d:bd:88:48:b4:87:c0:9e:9f:58:86:59:a1:e6:7f:1f:19:a0: 5f:36:85:bb:70:9d:73:9e:b2:24:24:45:af:27:59:41:60:aa: 41:f9:39:ef:5a:ba:f4:4a:0f:6a:b8:50:86:24:5d:ff:c4:2b: d5:78:f9:bf:b3:6c:2a:55:68:e7:37:91:48:9d:db:d9:fe:ad: 0c:85:a5:a0:90:3f:4e:0d:52:3c:15:9a:ea:3a:7f:be:54:3f: ff:49:79:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWu4364Ser0VxMTc7R2fyAHsaVz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA0MTcxNzQ5NDZaFw0yNjA0MTgyMDEwNDZaMDMxMTAvBgNV BAMTKDA1NDc3QjQyMzA2ODlDRkQyMDZERUNGMTNCQjg3REZFQkYwNkNFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Zf8yFbaAkw+EVtdQBdEMxZlX g5jlk/FCqC5q/yODG4Hz4csP8OC0LKdXaFJLu3EliQg2Ac4mhtIlRtvRzFuFN52V zjSdkO27s0BYMqCSqt++7oTTUWL/9dOM9OhQY2qHXoDUT1NaP+FTrm0TrvQxqq1M 9G+To2eUJ0VT1d+Ca/hcx4I5kXJ1SCy21+7s4GcFdRp9k3E+wFro+Dwk0DNLwDBA tcyNPosoKt1RSPmyn0vhjLo6/YZS4NqUCw56cDsXh1e9yiPZ7Al13iGuvC8UVU/H wBNIRLs556NSDezxFyhQ/C5RURmDfDOkgEnDcKjzPKvVojvNwXDJPXKBd94LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBUd7QjBonP0gbezxO7h9/r8GzrUwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2ZOSo5vgv3z eP3RW/WzvalNSfmVNDHgzNkn3wWBvT5dWz9relEVR5saz88kAIoQFnsciOJb+OFi AjM/tMNKFiuBi4X8O+kRQkxxY7U5RAB4NO19RTmsDeoMpZwdv1l+VmC5UxdJ7hkH XV+uVl02JgPaYC48AqyabneJsQO9BXLAKUCM0KpvlIm94Fr8mTnsb9149urn7WCc thHZidVTLFvPHb2ISLSHwJ6fWIZZoeZ/HxmgXzaFu3Cdc56yJCRFrydZQWCqQfk5 71q69EoParhQhiRd/8Qr1Xj5v7NsKlVo5zeRSJ3b2f6tDIWloJA/Tg1SPBWa6jp/ vlQ//0l55A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:49:23 2026 by rpki-client