$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: FzyDXYXpgdAw3PHUZd1x7J51DqPJA/L+1foxv7sFfwQ= Subject key identifier: 5C:6A:98:39:E5:0A:70:93:65:42:31:FC:02:33:62:82:E5:DA:99:53 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 3BF51F2AC5B03AA2B5F6CE87525B467C5227DF26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 19 Signing time: Sun 14 Jun 2026 01:17:33 +0000 Manifest this update: Sun 14 Jun 2026 01:12:33 +0000 Manifest next update: Mon 15 Jun 2026 02:07:33 +0000 Files and hashes: 1: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: DGIuz2QRcCgA4wTYNvDOxnlv5TQXVgBqWEy+u7zNQx8=) 2: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 3: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f5:1f:2a:c5:b0:3a:a2:b5:f6:ce:87:52:5b:46:7c:52:27:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Jun 14 01:12:33 2026 GMT Not After : Jun 15 02:07:33 2026 GMT Subject: CN=5C6A9839E50A7093654231FC02336282E5DA9953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:e1:de:a8:1b:9c:45:6b:d5:cc:c8:c2:d2: 21:59:5f:b8:e8:6c:fb:d5:da:37:bd:b7:75:28:a7: 27:6f:b4:d8:ca:2d:a3:cd:24:4e:fd:4a:aa:8b:cb: 4e:36:82:84:ae:fb:99:1d:0a:7a:2d:5a:fa:0b:bc: bf:fc:72:e5:de:35:68:82:14:22:33:3f:14:f3:fd: cc:d5:4e:96:b2:92:cd:1a:df:6e:dc:54:6b:30:79: 13:f5:bc:91:6a:8b:74:3a:c1:0c:17:c2:e1:ea:f3: af:99:02:2f:78:84:94:08:80:9c:84:a7:e1:e3:2e: 06:6f:55:a8:ce:27:68:5d:e0:09:23:c9:f3:d5:19: 6b:1c:9b:5d:11:51:d6:19:3c:28:ba:f7:5a:79:a2: cd:74:bd:3a:8d:c1:6e:e3:fd:e6:3c:04:a3:47:3e: a5:32:97:ad:80:df:aa:8e:c0:95:e7:7f:34:bd:88: 9b:1a:3a:de:35:af:d9:55:4a:ed:35:af:34:50:78: a9:b9:17:41:9d:06:e2:83:b7:da:92:34:6b:8b:9f: 26:63:11:b6:c6:02:75:86:c1:77:80:a6:d6:da:df: 10:76:2e:0c:65:7b:02:fd:67:33:74:8a:b0:46:46: aa:1c:07:f2:76:48:22:20:85:96:e1:0c:60:4c:04: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6A:98:39:E5:0A:70:93:65:42:31:FC:02:33:62:82:E5:DA:99:53 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a7:62:a7:24:93:60:ac:00:a5:89:ee:0b:30:4b:ca:b9:4c: 14:25:42:f4:c5:42:ac:96:cb:34:9d:eb:8c:69:a1:65:a4:74: 91:aa:a1:2b:e6:e2:a0:02:8e:32:0d:47:80:c1:77:2c:2c:7a: 76:e9:b1:cc:2c:0a:ca:1d:65:15:bb:ad:7e:ea:b8:0c:f5:3e: a2:8b:85:71:59:d6:f6:b8:a8:08:8a:cd:00:2c:23:f7:d6:cd: b0:3c:89:02:70:e5:60:09:01:43:9b:e6:e1:41:ba:8a:0e:0f: d8:23:d2:24:7a:4e:90:78:3b:67:b2:16:d0:8c:06:5a:a6:d2: 7a:4e:f7:aa:c9:3e:05:72:d9:57:76:2d:db:ff:6d:eb:72:e3: 84:6d:da:d5:ba:aa:83:d0:84:fb:ad:20:a2:d1:33:9d:0c:02: ee:22:b9:e4:f5:b6:0b:67:5b:6d:8c:2d:76:a1:23:a9:69:d0: 16:38:45:04:e4:9f:ef:04:fe:71:1f:98:49:3a:a3:40:a1:1a: e8:ee:0f:bc:b6:57:ae:4c:e2:e2:cc:c4:7b:dc:35:d9:b3:cd: 27:de:5e:6a:ce:71:c6:ee:74:cc:d7:6e:80:41:bf:6d:47:bc: 5d:cf:58:56:f4:e2:dc:48:db:51:bd:f3:de:24:5b:d3:fe:4a: ee:77:27:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/UfKsWwOqK19s6HUltGfFIn3yYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA2MTQwMTEyMzNaFw0yNjA2MTUwMjA3MzNaMDMxMTAvBgNV BAMTKDVDNkE5ODM5RTUwQTcwOTM2NTQyMzFGQzAyMzM2MjgyRTVEQTk5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRuHeqBucRWvVzMjC0iFZX7jo bPvV2je9t3UopydvtNjKLaPNJE79SqqLy042goSu+5kdCnotWvoLvL/8cuXeNWiC FCIzPxTz/czVTpayks0a327cVGsweRP1vJFqi3Q6wQwXwuHq86+ZAi94hJQIgJyE p+HjLgZvVajOJ2hd4AkjyfPVGWscm10RUdYZPCi691p5os10vTqNwW7j/eY8BKNH PqUyl62A36qOwJXnfzS9iJsaOt41r9lVSu01rzRQeKm5F0GdBuKDt9qSNGuLnyZj EbbGAnWGwXeAptba3xB2LgxlewL9ZzN0irBGRqocB/J2SCIghZbhDGBMBDBhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXGqYOeUKcJNlQjH8AjNiguXamVMwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKdipySTYKwA pYnuCzBLyrlMFCVC9MVCrJbLNJ3rjGmhZaR0kaqhK+bioAKOMg1HgMF3LCx6dumx zCwKyh1lFbutfuq4DPU+oouFcVnW9rioCIrNACwj99bNsDyJAnDlYAkBQ5vm4UG6 ig4P2CPSJHpOkHg7Z7IW0IwGWqbSek73qsk+BXLZV3Yt2/9t63LjhG3a1bqqg9CE +60gotEznQwC7iK55PW2C2dbbYwtdqEjqWnQFjhFBOSf7wT+cR+YSTqjQKEa6O4P vLZXrkzi4szEe9w12bPNJ95eas5xxu50zNdugEG/bUe8Xc9YVvTi3EjbUb3z3iRb 0/5K7ncnXA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:57 2026 by rpki-client