$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: GknlHrcEOhKza48XFZ+JNmpNfnb40LEZjASErddcOPA= Subject key identifier: D1:42:7A:F6:1F:CB:02:1F:95:5B:56:0B:CD:69:3A:27:EA:9F:D4:2B Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 3DD3DC6D97F5740B987A69DB303AFFCBCF6E8A04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: 2F Signing time: Sat 13 Jun 2026 13:56:50 +0000 Manifest this update: Sat 13 Jun 2026 13:51:50 +0000 Manifest next update: Sun 14 Jun 2026 15:21:50 +0000 Files and hashes: 1: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: 0S2T4ZyGbj7GBORQ4LcL8km1OGRMAdWnQ0xgwcaU/ho=) 2: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 3: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 4: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 5: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 6: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 7: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 8: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 9: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 10: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 11: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 12: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 13: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 14: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 15: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 16: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 17: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 18: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 19: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 20: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d3:dc:6d:97:f5:74:0b:98:7a:69:db:30:3a:ff:cb:cf:6e:8a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: Jun 13 13:51:50 2026 GMT Not After : Jun 14 15:21:50 2026 GMT Subject: CN=D1427AF61FCB021F955B560BCD693A27EA9FD42B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:06:7d:61:0b:15:37:c6:f5:a2:ff:37:0d: d7:26:b9:bf:26:71:fa:6e:30:13:f7:1b:fa:03:d0: 89:25:4c:fd:d1:19:5a:7a:65:47:bc:d7:f2:f6:df: 8d:d3:3c:78:d0:33:b2:2d:6d:06:9a:b1:7a:cd:18: 74:97:be:ec:aa:f9:15:a2:16:2c:05:ec:94:98:81: 4e:7e:07:c2:17:15:81:93:2c:4b:90:c8:b9:e1:5e: f1:2f:68:3a:ad:d6:5e:14:d6:6a:52:41:ec:c4:ba: 04:e4:3c:e8:49:c0:67:36:0c:f8:a9:73:da:db:7e: 92:58:0d:8a:9e:51:7d:8d:0e:b2:49:71:ee:18:a3: 9d:28:f1:00:d8:16:ce:96:3e:bf:c3:a4:24:63:98: 93:15:42:9f:ba:e5:60:02:91:32:b5:f1:2c:1b:e4: aa:f0:d5:d2:b9:c9:99:5f:2c:28:d7:92:8f:63:72: 94:ad:2e:e0:f6:3d:56:60:eb:e2:f5:12:98:82:0b: 80:72:86:52:69:85:76:8e:dd:32:16:67:28:a3:dc: d9:b4:8c:bf:d2:27:41:f2:68:45:3f:ff:6f:06:48: b5:5f:04:4d:03:8d:ea:fd:c0:b6:e0:37:10:31:21: 75:89:4c:20:a2:e6:28:e4:b4:8d:2f:b6:a2:0b:2d: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:42:7A:F6:1F:CB:02:1F:95:5B:56:0B:CD:69:3A:27:EA:9F:D4:2B X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:da:97:e7:64:d0:3c:e2:8f:5d:63:38:00:31:7b:f4:f5:25: 26:72:0e:fa:74:bf:0d:58:e4:b7:bc:7d:ff:72:c4:db:2c:32: c8:33:eb:92:54:c2:85:ba:86:64:45:4f:8d:5e:de:46:bc:b3: f6:9f:ab:d7:06:54:e6:a6:c2:87:db:e8:b8:b4:16:00:52:2c: 9b:8b:bd:51:a3:a8:99:30:0e:8e:a9:04:a0:63:d3:91:7b:07: 72:6c:54:f7:c0:15:d4:f3:d6:fd:99:38:6c:71:91:5f:04:99: a4:e0:35:91:4d:0d:ea:52:6e:f9:47:6e:d8:21:3f:e3:81:24: 7a:64:c8:97:db:24:45:b5:76:79:4f:3e:a8:cc:2c:da:3e:f7: 18:e9:0e:56:0c:a0:a1:d6:a3:43:f6:1a:09:e8:fa:45:dc:1c: 35:13:19:7b:de:4a:3d:d8:b5:07:dc:35:e2:05:95:f5:0a:9d: 46:fd:76:27:57:2f:c5:01:55:1a:78:5f:83:12:c1:c5:65:5c: 1b:1d:38:20:15:c7:8b:d3:6a:84:96:62:df:a5:d1:6a:f3:e1: b1:68:58:27:91:16:90:85:8f:8d:5b:4d:0a:eb:71:9d:ad:91: 20:73:06:df:82:79:fd:4b:22:eb:08:0a:e8:ac:d7:80:ab:94: 2d:49:cd:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPdPcbZf1dAuYemnbMDr/y89uigQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA2MTMxMzUxNTBaFw0yNjA2MTQxNTIxNTBaMDMxMTAvBgNV BAMTKEQxNDI3QUY2MUZDQjAyMUY5NTVCNTYwQkNENjkzQTI3RUE5RkQ0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVgZ9YQsVN8b1ov83Ddcmub8m cfpuMBP3G/oD0IklTP3RGVp6ZUe81/L2343TPHjQM7ItbQaasXrNGHSXvuyq+RWi FiwF7JSYgU5+B8IXFYGTLEuQyLnhXvEvaDqt1l4U1mpSQezEugTkPOhJwGc2DPip c9rbfpJYDYqeUX2NDrJJce4Yo50o8QDYFs6WPr/DpCRjmJMVQp+65WACkTK18Swb 5Krw1dK5yZlfLCjXko9jcpStLuD2PVZg6+L1EpiCC4ByhlJphXaO3TIWZyij3Nm0 jL/SJ0HyaEU//28GSLVfBE0Djer9wLbgNxAxIXWJTCCi5ijktI0vtqILLbPtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0UJ69h/LAh+VW1YLzWk6J+qf1CswHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdqX52TQPOKP XWM4ADF79PUlJnIO+nS/DVjkt7x9/3LE2ywyyDPrklTChbqGZEVPjV7eRryz9p+r 1wZU5qbCh9vouLQWAFIsm4u9UaOomTAOjqkEoGPTkXsHcmxU98AV1PPW/Zk4bHGR XwSZpOA1kU0N6lJu+Udu2CE/44EkemTIl9skRbV2eU8+qMws2j73GOkOVgygodaj Q/YaCej6RdwcNRMZe95KPdi1B9w14gWV9QqdRv12J1cvxQFVGnhfgxLBxWVcGx04 IBXHi9NqhJZi36XRavPhsWhYJ5EWkIWPjVtNCutxna2RIHMG34J5/Usi6wgK6KzX gKuULUnN8w== -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:47 2026 by rpki-client