$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: OZYYcjDioFaonaJ6OhEdGyJCcPJkzar654FYVVeYQUo= Subject key identifier: 31:A3:FF:C4:28:2B:0A:4F:D8:E7:44:EB:FB:9B:1A:5F:DE:79:4C:B9 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 7BA63D3C2ACA93C709E7AAC56CAA41F01234B0CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 94 Signing time: Sat 17 Oct 2026 17:39:06 +0000 Manifest this update: Sat 17 Oct 2026 17:34:06 +0000 Manifest next update: Tue 20 Oct 2026 19:16:06 +0000 Files and hashes: 1: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) 2: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: mpDVnYmgSnfm1zJ0dfSMXsfy5NFIvXQ9kQDxLDxv07M=) 3: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 4: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a6:3d:3c:2a:ca:93:c7:09:e7:aa:c5:6c:aa:41:f0:12:34:b0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Oct 17 17:34:06 2026 GMT Not After : Oct 20 19:16:06 2026 GMT Subject: CN=31A3FFC4282B0A4FD8E744EBFB9B1A5FDE794CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:16:48:5f:70:87:62:16:dd:78:ce:39:89: df:0b:21:fb:0e:c4:83:8e:88:7e:0b:7f:e5:48:07: d2:6b:6e:21:11:76:34:d9:c0:2e:f6:31:23:10:db: 77:45:fe:5b:82:db:11:90:80:40:f9:18:b7:f0:9a: eb:c7:87:59:9b:47:62:9a:bd:46:1a:b5:ee:db:bd: 71:ce:67:8a:c8:3d:b7:fe:01:28:14:a7:a9:6f:52: 74:e9:aa:a2:07:a8:40:2a:68:0b:0b:e2:db:3c:90: 7b:64:b4:f9:a0:ac:c3:ac:7d:0a:c0:b2:ff:c5:c8: 03:60:ca:3b:3a:a8:8b:24:12:07:a4:af:59:30:10: 0f:3b:ce:c2:fd:a9:a7:ab:8d:1b:93:f2:7b:5e:3e: e3:32:f0:86:fa:e1:a4:e0:8c:47:44:70:c4:8f:4d: 90:a4:f6:b5:d3:4d:ab:3a:1c:9a:1c:6f:50:5b:c6: ee:e2:16:b6:1c:65:df:8f:25:77:c6:8a:de:d2:bf: f0:7e:c3:cf:40:6b:8a:16:0a:93:90:3c:4d:6e:f5: 91:81:6d:28:bf:51:6a:1c:17:db:2f:e6:00:7c:a9: 63:af:a3:ff:a9:c5:f4:1b:69:f8:7a:93:18:14:2b: 9e:98:89:ab:3d:c8:73:41:87:86:bc:77:5a:0f:df: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A3:FF:C4:28:2B:0A:4F:D8:E7:44:EB:FB:9B:1A:5F:DE:79:4C:B9 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:e9:d8:72:33:36:98:fa:9f:04:50:6e:39:94:56:c6:50:b2: c8:27:3c:7f:e0:06:2b:cf:9c:7f:09:8c:3d:ed:67:55:8a:8f: 63:cb:6d:e3:ce:85:b8:29:ae:05:eb:f7:29:f0:bf:21:2c:15: 7a:7f:b4:d9:de:a3:91:58:8e:ed:e0:d4:43:49:dd:04:57:5c: 15:6a:cd:33:40:4a:21:e7:9d:e7:c4:23:d5:55:1e:e1:fe:6b: 4c:65:b0:b9:57:36:da:7b:b9:c5:c8:2a:0c:39:9b:6d:e5:0c: 07:57:dc:be:5f:31:a0:ec:49:30:6e:2a:12:f0:da:ff:b0:96: 5c:57:c9:af:d4:a3:92:c9:a5:aa:93:44:6c:b9:c0:51:96:66: 60:f1:85:28:f6:1b:d7:6e:e9:8a:e0:4c:20:00:9c:8e:36:c1: e1:70:96:9f:2b:ed:50:be:22:0c:a6:6a:21:dd:90:5c:20:3d: 85:f0:3f:cf:f0:25:bb:f6:06:5d:b1:06:2f:34:12:e4:b7:ae: 58:23:90:94:ca:be:fe:64:b0:83:eb:04:de:f0:50:99:15:fc: 58:d9:35:21:23:b8:62:3e:60:df:4b:fa:c6:37:fa:d1:64:55: 11:90:b8:82:a9:1a:16:d3:31:b7:3d:c9:d7:a7:28:b3:22:57: cf:1c:c1:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe6Y9PCrKk8cJ56rFbKpB8BI0sM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjEwMTcxNzM0MDZaFw0yNjEwMjAxOTE2MDZaMDMxMTAvBgNV BAMTKDMxQTNGRkM0MjgyQjBBNEZEOEU3NDRFQkZCOUIxQTVGREU3OTRDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbehZIX3CHYhbdeM45id8LIfsO xIOOiH4Lf+VIB9JrbiERdjTZwC72MSMQ23dF/luC2xGQgED5GLfwmuvHh1mbR2Ka vUYate7bvXHOZ4rIPbf+ASgUp6lvUnTpqqIHqEAqaAsL4ts8kHtktPmgrMOsfQrA sv/FyANgyjs6qIskEgekr1kwEA87zsL9qaerjRuT8ntePuMy8Ib64aTgjEdEcMSP TZCk9rXTTas6HJocb1Bbxu7iFrYcZd+PJXfGit7Sv/B+w89Aa4oWCpOQPE1u9ZGB bSi/UWocF9sv5gB8qWOvo/+pxfQbafh6kxgUK56Yias9yHNBh4a8d1oP3yj3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMaP/xCgrCk/Y50Tr+5saX955TLkwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0unYcjM2mPqf BFBuOZRWxlCyyCc8f+AGK8+cfwmMPe1nVYqPY8tt486FuCmuBev3KfC/ISwVen+0 2d6jkViO7eDUQ0ndBFdcFWrNM0BKIeed58Qj1VUe4f5rTGWwuVc22nu5xcgqDDmb beUMB1fcvl8xoOxJMG4qEvDa/7CWXFfJr9SjksmlqpNEbLnAUZZmYPGFKPYb127p iuBMIACcjjbB4XCWnyvtUL4iDKZqId2QXCA9hfA/z/Alu/YGXbEGLzQS5LeuWCOQ lMq+/mSwg+sE3vBQmRX8WNk1ISO4Yj5g30v6xjf60WRVEZC4gqkaFtMxtz3J16co syJXzxzBMQ== -----END CERTIFICATE-----Generated at Sun Oct 18 13:35:17 2026 by rpki-client