$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: yLsYhFUfLl+jsCmROGb0ooqG66CqZxvEVbUfc9l2m8Y= Subject key identifier: A3:72:A8:FB:C6:A6:F7:88:89:DA:CC:A5:D1:07:2F:F1:6A:AB:A1:B5 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 41698C35E0948FD3EF842E6B05E054E074F9F2F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 55 Signing time: Wed 29 Jul 2026 00:02:57 +0000 Manifest this update: Tue 28 Jul 2026 23:57:57 +0000 Manifest next update: Thu 30 Jul 2026 01:56:57 +0000 Files and hashes: 1: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: RW8ujetQ7tdKUD3MMRTrMqDAlREE/NK76DKLp+9Wmdo=) 2: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 3: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:69:8c:35:e0:94:8f:d3:ef:84:2e:6b:05:e0:54:e0:74:f9:f2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Jul 28 23:57:57 2026 GMT Not After : Jul 30 01:56:57 2026 GMT Subject: CN=A372A8FBC6A6F78889DACCA5D1072FF16AABA1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:7e:b0:4b:17:66:d3:2a:37:10:37:e6:ac: 15:96:c8:ac:74:c0:f6:3b:19:47:c0:2c:ab:68:32: 5a:c7:3b:33:ec:98:9d:65:cc:f1:c3:99:ac:f8:db: 25:fd:81:d6:07:4d:e2:01:d7:b5:69:b5:c7:8a:23: af:87:6b:74:8d:08:eb:b8:ed:5a:17:32:08:5d:fc: eb:7c:58:6a:fc:8e:ad:c9:42:51:71:23:99:5a:d4: 02:79:5d:61:86:70:14:48:27:8c:7b:f0:0d:4f:e8: 7e:32:ca:15:75:4e:90:8b:67:e7:38:8b:88:16:b6: 49:78:ba:91:95:7f:d1:a1:fb:0e:99:7f:db:0d:66: 9c:31:11:a9:fd:6f:0e:b0:16:21:9a:97:f0:10:d9: c3:60:f4:74:a5:c4:7d:bb:3a:12:7b:1b:b7:45:1c: 35:8c:ef:f5:a1:e7:05:47:a4:10:a5:e1:bb:5f:b4: 19:12:75:23:75:40:55:c9:a4:fc:2d:5c:67:44:46: fa:5e:de:04:11:2a:93:19:92:f0:78:ca:9f:9a:9d: 11:65:a9:cf:6f:17:c4:39:31:58:8b:8f:68:f2:ca: 70:39:7a:7d:74:7d:97:74:c4:9c:5f:8f:a3:54:cd: 47:04:8d:60:a8:61:c6:f4:1f:52:45:e1:09:67:b2: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:72:A8:FB:C6:A6:F7:88:89:DA:CC:A5:D1:07:2F:F1:6A:AB:A1:B5 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1a:11:0c:d8:e2:53:96:33:69:f1:3c:71:ad:f9:61:1c:bc: 7b:c6:8a:b8:5f:b0:88:c5:0a:fb:47:a6:65:43:d7:90:9e:20: 4d:e1:15:33:e6:a0:2e:ff:0f:d0:59:72:57:bb:72:55:2a:4e: d0:40:1d:97:50:9b:34:cc:bf:9f:94:0a:a7:41:bc:fd:9f:87: 86:bb:4a:a9:9f:08:51:57:96:55:1b:57:ab:06:3c:fe:d6:92: 66:57:8b:19:58:88:2c:27:fb:6a:7b:5b:ea:3d:ea:74:b6:51: e4:14:0c:bd:93:3b:ca:e3:c9:14:39:b6:97:f4:a8:09:9e:0a: 53:ae:bf:b8:cc:0e:e9:90:77:a6:15:00:76:a7:1c:1d:25:8e: cb:1e:d4:8b:e5:65:7c:56:a0:0d:c6:b8:e9:ea:47:84:24:ff: 41:49:6f:a9:51:d1:2b:da:1c:a2:5f:2e:7e:dd:49:b4:79:6f: 7d:72:73:18:2a:ee:70:36:b2:82:d5:8b:79:5a:85:19:54:e7: 95:2d:68:b8:80:69:39:2c:31:d5:b4:95:5f:f4:86:22:ee:8a: 11:fd:52:ed:92:a7:96:14:a5:aa:d6:e2:d4:24:f7:fb:a3:50: e9:20:7a:86:07:58:2c:87:22:65:8e:ad:d6:ab:3f:87:b3:14: cb:80:cf:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQWmMNeCUj9PvhC5rBeBU4HT58vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA3MjgyMzU3NTdaFw0yNjA3MzAwMTU2NTdaMDMxMTAvBgNV BAMTKEEzNzJBOEZCQzZBNkY3ODg4OURBQ0NBNUQxMDcyRkYxNkFBQkExQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzS36wSxdm0yo3EDfmrBWWyKx0 wPY7GUfALKtoMlrHOzPsmJ1lzPHDmaz42yX9gdYHTeIB17VptceKI6+Ha3SNCOu4 7VoXMghd/Ot8WGr8jq3JQlFxI5la1AJ5XWGGcBRIJ4x78A1P6H4yyhV1TpCLZ+c4 i4gWtkl4upGVf9Gh+w6Zf9sNZpwxEan9bw6wFiGal/AQ2cNg9HSlxH27OhJ7G7dF HDWM7/Wh5wVHpBCl4btftBkSdSN1QFXJpPwtXGdERvpe3gQRKpMZkvB4yp+anRFl qc9vF8Q5MViLj2jyynA5en10fZd0xJxfj6NUzUcEjWCoYcb0H1JF4QlnsnYTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo3Ko+8am94iJ2syl0Qcv8WqrobUwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxoRDNjiU5Yz afE8ca35YRy8e8aKuF+wiMUK+0emZUPXkJ4gTeEVM+agLv8P0FlyV7tyVSpO0EAd l1CbNMy/n5QKp0G8/Z+HhrtKqZ8IUVeWVRtXqwY8/taSZleLGViILCf7antb6j3q dLZR5BQMvZM7yuPJFDm2l/SoCZ4KU66/uMwO6ZB3phUAdqccHSWOyx7Ui+VlfFag Dca46epHhCT/QUlvqVHRK9ocol8uft1JtHlvfXJzGCrucDaygtWLeVqFGVTnlS1o uIBpOSwx1bSVX/SGIu6KEf1S7ZKnlhSlqtbi1CT3+6NQ6SB6hgdYLIciZY6t1qs/ h7MUy4DP8Q== -----END CERTIFICATE-----Generated at Wed Jul 29 08:51:09 2026 by rpki-client