$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: 0aboJyO/3WRb6e9E5lEgYxXCR6cmaEwmolNou7vSNHM= Subject key identifier: 68:27:6D:08:B7:73:A9:ED:3F:10:FA:1A:E9:C9:CE:11:59:16:9A:E6 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 7B26583A0F806FB0B2ADB41A6ECA2D368CFCBB4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 0100 Signing time: Tue 28 Jul 2026 23:12:55 +0000 Manifest this update: Tue 28 Jul 2026 23:07:55 +0000 Manifest next update: Thu 30 Jul 2026 00:35:55 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: fOOEDqh4QjRmj8WtSaOWDubI092M3MUr3fvuHUA29BY=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:26:58:3a:0f:80:6f:b0:b2:ad:b4:1a:6e:ca:2d:36:8c:fc:bb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Jul 28 23:07:55 2026 GMT Not After : Jul 30 00:35:55 2026 GMT Subject: CN=68276D08B773A9ED3F10FA1AE9C9CE1159169AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:d2:bb:25:6b:32:3b:3e:79:f0:88:28:c4: c6:16:e0:d9:10:4d:d6:c3:f0:89:43:92:64:ef:38: d3:3e:dc:80:a9:d7:d2:f7:8b:31:5c:fb:0a:c1:d1: 03:fb:8b:00:27:86:35:64:93:89:c9:c9:30:b5:31: f3:03:46:16:ec:8d:e7:d0:d4:e7:3b:98:55:70:5d: a5:9f:1e:7b:6c:ef:c6:5e:b8:5a:a0:11:8d:c5:01: 1f:e5:7d:e6:75:cc:7d:20:11:01:65:2d:28:33:d1: 7e:f2:21:a8:63:e7:e8:31:9c:ce:e3:8b:51:98:a4: bf:5c:19:98:98:eb:6a:6d:f4:ae:f0:ac:66:e0:c3: 75:db:75:17:34:12:b1:3a:f6:84:d0:da:81:06:03: db:c7:ad:10:1e:bd:e9:55:a2:12:fe:6e:45:ec:3f: 02:48:4b:42:35:a6:c7:ac:bf:af:51:ce:68:70:b7: 11:38:12:ae:d3:72:cd:e3:f4:72:f2:92:d0:42:d7: 04:ba:7a:97:3f:b0:37:5b:bd:34:c4:29:f9:ee:48: 82:b3:3f:c0:9e:45:ca:12:3c:e3:e3:90:cc:9f:aa: 23:a8:2c:be:c4:9b:ca:31:12:a0:76:43:5d:93:1d: 2c:68:d0:59:4a:8c:cc:29:4a:6c:c0:5c:0c:a3:2d: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:27:6D:08:B7:73:A9:ED:3F:10:FA:1A:E9:C9:CE:11:59:16:9A:E6 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d3:11:3b:fb:df:c0:b0:0e:d9:99:00:21:4f:1c:e9:8e:fa: 68:60:9c:ab:81:6f:00:14:8c:9e:32:cd:e6:12:de:d4:8e:5f: 45:5b:a5:0c:7c:aa:8b:68:d1:0a:70:59:d1:5e:7f:d3:39:90: ea:0a:a6:59:40:e5:0d:2c:9f:29:05:db:3a:f4:d9:22:8d:76: e1:ae:2c:cc:03:33:ad:e8:19:b9:de:84:c0:18:b9:60:15:c3: 53:9a:ba:50:0c:fa:77:2d:7d:a1:a1:fd:10:d4:1e:a1:68:f1: 15:3a:51:8f:be:56:e2:b2:24:9c:1a:4d:fc:b9:d6:f7:68:4e: 4a:c2:56:e7:4b:2f:4d:ff:1c:ea:af:89:90:ee:f5:f6:6c:32: 3d:c0:c8:e5:f0:c3:08:29:ba:23:76:65:68:05:9b:7e:e9:59: 98:13:b7:40:28:44:14:d6:70:b6:7c:9f:cf:b1:f0:bb:59:e1: b0:91:10:1b:b1:f9:c1:1e:fd:37:eb:d7:91:46:29:02:65:95: 10:76:b5:2f:2a:e6:b0:ee:4a:9c:0a:68:e3:1a:3c:7d:66:3f: 39:64:5b:ba:ec:80:b5:13:83:c0:7b:5d:00:67:2d:b1:0d:8e: d4:2a:aa:28:88:46:b5:18:da:86:0b:35:5e:15:c4:0c:c8:2d: ec:7e:20:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeyZYOg+Ab7CyrbQabsotNoz8u00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA3MjgyMzA3NTVaFw0yNjA3MzAwMDM1NTVaMDMxMTAvBgNV BAMTKDY4Mjc2RDA4Qjc3M0E5RUQzRjEwRkExQUU5QzlDRTExNTkxNjlBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZydK7JWsyOz558IgoxMYW4NkQ TdbD8IlDkmTvONM+3ICp19L3izFc+wrB0QP7iwAnhjVkk4nJyTC1MfMDRhbsjefQ 1Oc7mFVwXaWfHnts78ZeuFqgEY3FAR/lfeZ1zH0gEQFlLSgz0X7yIahj5+gxnM7j i1GYpL9cGZiY62pt9K7wrGbgw3XbdRc0ErE69oTQ2oEGA9vHrRAevelVohL+bkXs PwJIS0I1psesv69RzmhwtxE4Eq7Tcs3j9HLyktBC1wS6epc/sDdbvTTEKfnuSIKz P8CeRcoSPOPjkMyfqiOoLL7Em8oxEqB2Q12THSxo0FlKjMwpSmzAXAyjLZU/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaCdtCLdzqe0/EPoa6cnOEVkWmuYwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9MRO/vfwLAO 2ZkAIU8c6Y76aGCcq4FvABSMnjLN5hLe1I5fRVulDHyqi2jRCnBZ0V5/0zmQ6gqm WUDlDSyfKQXbOvTZIo124a4szAMzregZud6EwBi5YBXDU5q6UAz6dy19oaH9ENQe oWjxFTpRj75W4rIknBpN/LnW92hOSsJW50svTf8c6q+JkO719mwyPcDI5fDDCCm6 I3ZlaAWbfulZmBO3QChEFNZwtnyfz7Hwu1nhsJEQG7H5wR79N+vXkUYpAmWVEHa1 LyrmsO5KnApo4xo8fWY/OWRbuuyAtRODwHtdAGctsQ2O1CqqKIhGtRjahgs1XhXE DMgt7H4gHg== -----END CERTIFICATE-----Generated at Wed Jul 29 15:38:37 2026 by rpki-client