$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: 977fMItAuqlIwGmMwN3NshnNtbBUool92zsQ2KtFsdY= Subject key identifier: 80:46:03:C7:38:1B:E8:4D:C2:DF:16:59:B1:1E:2B:2F:52:BC:AA:EE Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 76D0F6E4CA7CB02A7BBE190F4CA563E1AF93FA0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 013D Signing time: Sat 17 Oct 2026 05:08:31 +0000 Manifest this update: Sat 17 Oct 2026 05:03:31 +0000 Manifest next update: Tue 20 Oct 2026 15:21:31 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: hGl54QoOuDVU7367jceifxGuD9YryAMwNSJCQFbEUeQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d0:f6:e4:ca:7c:b0:2a:7b:be:19:0f:4c:a5:63:e1:af:93:fa:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Oct 17 05:03:31 2026 GMT Not After : Oct 20 15:21:31 2026 GMT Subject: CN=804603C7381BE84DC2DF1659B11E2B2F52BCAAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:e4:4d:dd:3c:55:60:a9:52:0c:2b:c0:85: 79:d8:00:c3:f3:59:67:6c:8c:f4:f1:30:f7:b2:b7: 7e:e2:5d:d5:20:7c:c1:26:1f:fe:61:03:f9:c5:9b: 9b:a8:b1:6a:1c:99:74:fe:2e:1e:f5:16:cd:f3:21: e4:c4:d9:92:b1:3e:d6:39:4b:d6:b6:cd:a6:e3:bb: 8a:15:37:f5:3b:62:19:54:e0:21:51:a9:14:3d:0b: a5:b9:cd:eb:26:6b:4b:a3:98:00:15:0a:22:37:2d: 3e:eb:79:7b:dc:33:ac:0d:73:37:e1:9c:7d:f5:e8: 61:b4:92:22:32:c3:82:a9:49:ee:b1:ac:1a:91:bd: 61:7e:27:78:ee:ad:96:30:af:37:85:c9:f7:91:88: 75:0b:07:19:f0:7d:29:39:2b:87:ae:f1:61:ee:6f: ba:76:19:86:5f:02:e4:4d:2b:a5:49:2c:ae:86:14: 1a:2b:53:07:19:3c:51:fe:c3:71:07:c4:22:08:5f: 6b:a2:29:68:52:72:9b:4d:7e:42:5d:94:27:be:3f: de:13:d7:3b:7f:c1:21:5c:32:3f:82:df:d3:b4:9e: b1:d4:6d:fe:71:53:13:5f:bc:b3:8b:1a:1d:40:56: 37:77:ad:aa:6b:5f:c6:47:97:55:8d:f4:0a:90:c1: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:46:03:C7:38:1B:E8:4D:C2:DF:16:59:B1:1E:2B:2F:52:BC:AA:EE X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b6:27:18:c8:ab:5f:0c:53:41:ef:48:e5:f1:f1:2f:85:a5: 65:93:73:67:59:b4:1e:aa:09:49:49:90:e4:56:1b:71:e7:32: 95:88:96:98:28:b0:a5:5a:a6:33:df:72:d4:a6:e8:28:7e:6a: e0:dd:0c:cb:e9:05:97:ab:c5:ed:cc:9c:5f:2e:94:c0:05:23: 3b:c8:f7:e3:a0:79:fc:4e:69:2b:fc:18:40:a5:ac:bf:e1:37: 24:41:b9:f1:de:d7:41:fd:da:2f:6e:bb:64:48:5c:63:19:35: 1e:38:27:40:4a:c2:0e:10:9a:3f:45:57:22:5d:df:d1:7c:a1: fd:3c:8b:31:43:cd:b4:63:dd:6c:38:49:09:b3:81:fe:bd:84: 14:6b:91:88:a1:d9:ec:1f:d0:d7:25:f0:ff:0f:b7:ad:62:fa: a7:b8:b6:18:7a:93:98:ec:71:83:33:28:aa:44:11:57:74:f6: 14:be:f3:fe:b8:27:e1:70:76:4d:22:32:33:03:dc:69:ed:0c: 14:be:35:eb:48:a7:55:09:fe:78:ef:3e:ba:82:0e:a7:e9:81: d2:0e:bf:a6:a3:60:12:11:96:7f:a7:fe:9c:7d:2f:c1:c9:e2: 81:5b:ba:8e:87:71:be:15:e7:3c:18:77:ce:b4:d2:73:19:af: 53:e8:0f:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdtD25Mp8sCp7vhkPTKVj4a+T+gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjEwMTcwNTAzMzFaFw0yNjEwMjAxNTIxMzFaMDMxMTAvBgNV BAMTKDgwNDYwM0M3MzgxQkU4NERDMkRGMTY1OUIxMUUyQjJGNTJCQ0FBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHORN3TxVYKlSDCvAhXnYAMPz WWdsjPTxMPeyt37iXdUgfMEmH/5hA/nFm5uosWocmXT+Lh71Fs3zIeTE2ZKxPtY5 S9a2zabju4oVN/U7YhlU4CFRqRQ9C6W5zesma0ujmAAVCiI3LT7reXvcM6wNczfh nH316GG0kiIyw4KpSe6xrBqRvWF+J3jurZYwrzeFyfeRiHULBxnwfSk5K4eu8WHu b7p2GYZfAuRNK6VJLK6GFBorUwcZPFH+w3EHxCIIX2uiKWhScptNfkJdlCe+P94T 1zt/wSFcMj+C39O0nrHUbf5xUxNfvLOLGh1AVjd3raprX8ZHl1WN9AqQwRY/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgEYDxzgb6E3C3xZZsR4rL1K8qu4wHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubYnGMirXwxT Qe9I5fHxL4WlZZNzZ1m0HqoJSUmQ5FYbcecylYiWmCiwpVqmM99y1KboKH5q4N0M y+kFl6vF7cycXy6UwAUjO8j346B5/E5pK/wYQKWsv+E3JEG58d7XQf3aL267ZEhc Yxk1HjgnQErCDhCaP0VXIl3f0Xyh/TyLMUPNtGPdbDhJCbOB/r2EFGuRiKHZ7B/Q 1yXw/w+3rWL6p7i2GHqTmOxxgzMoqkQRV3T2FL7z/rgn4XB2TSIyMwPcae0MFL41 60inVQn+eO8+uoIOp+mB0g6/pqNgEhGWf6f+nH0vwcnigVu6jodxvhXnPBh3zrTS cxmvU+gPbA== -----END CERTIFICATE-----Generated at Sat Oct 17 15:33:48 2026 by rpki-client