$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: tOGKaPL/8/2CCfCFkSoTV8ok1OaXh8enBbJNxhDzCe4= Subject key identifier: 73:F2:D8:F5:D2:48:0D:0A:10:DE:6B:93:99:7A:01:DF:F8:C5:4D:71 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 6C5B1901C6C99FE139FBF48D5DF06DB4F8956778 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 05:13:16 +0000 Manifest this update: Mon 02 Mar 2026 05:08:16 +0000 Manifest next update: Tue 03 Mar 2026 06:01:16 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: 9oyHzT38TGMQCaxy7qSG9iufGALGC725VPYSXYKIsQE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5b:19:01:c6:c9:9f:e1:39:fb:f4:8d:5d:f0:6d:b4:f8:95:67:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Mar 2 05:08:16 2026 GMT Not After : Mar 3 06:01:16 2026 GMT Subject: CN=73F2D8F5D2480D0A10DE6B93997A01DFF8C54D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:01:a7:ce:d4:d5:1c:ab:af:86:cd:73:37: 5e:f5:de:ff:9b:f7:8f:5e:23:33:3c:30:fb:40:9a: bf:9a:d4:d5:00:f3:f7:4a:67:b2:18:b0:0d:cb:09: e6:00:26:39:8b:d3:fd:f0:e8:2b:06:3e:38:71:d4: a9:b0:e7:2b:0a:65:ab:85:8e:a7:13:82:68:63:e6: 1a:c8:4f:ca:ea:ca:a3:da:1e:1a:48:8d:a5:fc:85: b2:12:cb:32:7d:ed:9f:37:1e:51:b7:bf:e0:49:88: 13:bc:1d:ad:51:04:96:c2:ed:84:81:56:ff:00:0d: 37:e7:8d:ef:c1:83:2f:d3:69:f7:81:0c:cb:b7:03: f6:d3:a7:85:94:74:8d:b3:70:83:94:30:96:e5:b8: 38:41:1c:75:eb:b6:4b:46:62:f5:e1:2f:a7:cc:ea: 15:59:d9:7c:f5:f0:6a:aa:12:4f:8b:52:dd:bd:80: 7a:5e:b4:23:b4:c2:d1:01:51:10:0b:e9:34:42:7a: 35:2a:dd:88:a1:b6:5f:fb:b2:c2:98:af:e5:96:1e: cd:90:4c:66:c3:f9:f5:ef:90:d5:99:04:63:e3:c2: f7:d1:29:67:ac:7e:8f:30:4f:88:a5:40:7f:9a:7c: ac:ba:b7:d7:47:68:ac:7e:71:94:b0:e5:72:84:01: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F2:D8:F5:D2:48:0D:0A:10:DE:6B:93:99:7A:01:DF:F8:C5:4D:71 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:ae:51:c3:dc:1a:b5:8f:ab:37:54:6d:74:d6:19:f8:6b: 4c:95:36:d3:6e:7a:8c:8d:0a:73:71:c4:f7:09:7f:53:62:26: 67:f0:1d:60:15:f4:14:4d:0f:5c:fd:57:ab:ae:2a:39:52:44: 4b:75:22:8d:ff:2c:0d:3b:52:aa:10:5e:f7:26:e9:9e:ae:9e: e4:6c:ff:e4:77:58:c2:9f:68:68:76:12:8a:73:e3:b7:f1:1a: e8:72:c4:20:b4:c9:9d:30:c5:1f:8b:cf:42:7a:21:28:21:6c: cc:55:91:89:f4:e9:69:d6:66:b5:b7:59:97:6a:40:8d:51:3c: c8:51:7e:2b:8c:a5:12:08:7c:cc:11:52:42:fe:bd:c9:bc:0d: eb:b1:de:13:77:bf:45:9b:94:82:4c:6c:0b:4d:bb:60:e5:eb: 25:5e:4b:a7:ba:b3:26:4b:71:af:3e:53:ff:62:3c:48:88:b8: e6:e4:72:0f:0b:95:18:79:fb:a4:f0:10:0c:02:fe:34:91:ca: 5b:e8:78:bb:49:11:36:a3:ae:d5:5f:f1:cf:9b:10:9f:ba:b2: c5:1a:26:7b:53:73:79:d7:43:35:c0:94:95:ab:1d:4e:6a:32: 9c:00:aa:81:a4:8a:19:a0:53:32:04:bf:7a:ea:d6:76:26:54: 32:26:4c:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbFsZAcbJn+E5+/SNXfBttPiVZ3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjAzMDIwNTA4MTZaFw0yNjAzMDMwNjAxMTZaMDMxMTAvBgNV BAMTKDczRjJEOEY1RDI0ODBEMEExMERFNkI5Mzk5N0EwMURGRjhDNTRENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48gGnztTVHKuvhs1zN1713v+b 949eIzM8MPtAmr+a1NUA8/dKZ7IYsA3LCeYAJjmL0/3w6CsGPjhx1Kmw5ysKZauF jqcTgmhj5hrIT8rqyqPaHhpIjaX8hbISyzJ97Z83HlG3v+BJiBO8Ha1RBJbC7YSB Vv8ADTfnje/Bgy/TafeBDMu3A/bTp4WUdI2zcIOUMJbluDhBHHXrtktGYvXhL6fM 6hVZ2Xz18GqqEk+LUt29gHpetCO0wtEBURAL6TRCejUq3Yihtl/7ssKYr+WWHs2Q TGbD+fXvkNWZBGPjwvfRKWesfo8wT4ilQH+afKy6t9dHaKx+cZSw5XKEASZ1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc/LY9dJIDQoQ3muTmXoB3/jFTXEwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqGuUcPcGrWP qzdUbXTWGfhrTJU20256jI0Kc3HE9wl/U2ImZ/AdYBX0FE0PXP1Xq64qOVJES3Ui jf8sDTtSqhBe9ybpnq6e5Gz/5HdYwp9oaHYSinPjt/Ea6HLEILTJnTDFH4vPQnoh KCFszFWRifTpadZmtbdZl2pAjVE8yFF+K4ylEgh8zBFSQv69ybwN67HeE3e/RZuU gkxsC027YOXrJV5Lp7qzJktxrz5T/2I8SIi45uRyDwuVGHn7pPAQDAL+NJHKW+h4 u0kRNqOu1V/xz5sQn7qyxRome1NzeddDNcCUlasdTmoynACqgaSKGaBTMgS/eurW diZUMiZMSQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:52:43 2026 by rpki-client