$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: Nek2rNMYHZPgMxWjAH5fLNSKywSk9CdW7m9n3/EQSSI= Subject key identifier: BA:62:36:D9:46:EE:7E:18:14:7C:21:49:66:6A:A2:E1:78:69:BF:62 Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 21A0CF508E59A6682B3EA113DC1965BB06C5E9C0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02B0 Signing time: Tue 28 Jul 2026 08:01:29 +0000 Manifest this update: Tue 28 Jul 2026 07:56:29 +0000 Manifest next update: Wed 29 Jul 2026 10:18:29 +0000 Files and hashes: 1: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: pO/rMtS+dK44qC0s12gVOnBHtO/SR9zpxbKE3yJIjFQ=) 2: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 10:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a0:cf:50:8e:59:a6:68:2b:3e:a1:13:dc:19:65:bb:06:c5:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Jul 28 07:56:29 2026 GMT Not After : Jul 29 10:18:29 2026 GMT Subject: CN=BA6236D946EE7E18147C2149666AA2E17869BF62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:82:de:f6:22:cc:14:ac:50:ba:a1:53:a8: f5:f3:99:30:76:3f:73:41:d6:da:56:62:ac:e5:25: 49:3f:2f:6c:30:54:06:7b:2d:04:12:8c:13:74:44: f1:4f:15:b9:3a:6f:b1:34:c6:87:3b:c1:0c:95:8a: f1:3b:94:d4:03:d2:88:8a:52:ef:99:af:e1:82:7a: de:1f:49:9e:00:1a:02:33:38:f5:73:47:32:82:95: a9:47:11:4b:60:af:8c:2f:23:13:6e:2c:6a:d7:f1: 3c:7b:c4:7f:7b:03:59:99:58:f8:46:cb:3e:b5:76: f3:97:ca:b6:2a:3f:4e:98:b2:7b:70:34:03:ad:10: 96:cf:2e:2f:a3:ae:9f:28:33:87:65:11:bc:a7:11: 7c:71:98:fc:fd:86:a8:bf:88:e4:4b:58:e0:e1:e8: 43:76:cd:28:d0:ed:d2:6d:f5:86:05:37:ce:4a:26: 84:fe:36:7c:a3:1d:80:51:11:99:be:ec:20:ee:16: 6a:51:34:4a:86:49:f8:40:83:e4:09:dc:97:61:92: eb:cd:de:15:53:df:bd:55:1b:01:1c:c7:45:03:f5: a0:7c:f7:f6:22:61:19:fc:52:de:d5:74:43:04:c3: 1d:a1:fe:73:55:aa:51:ea:93:62:71:a4:93:df:fe: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:36:D9:46:EE:7E:18:14:7C:21:49:66:6A:A2:E1:78:69:BF:62 X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:54:83:5d:9a:04:ed:0e:c1:f9:62:b9:9a:c1:54:05:08:e9: 3a:ec:c4:a8:37:6b:37:9f:38:71:3a:f9:2b:28:56:df:68:b1: 11:d9:73:9e:2c:86:61:69:4e:b5:07:bf:98:f8:8f:56:d5:0c: 2c:d1:74:8e:30:ba:e8:da:0f:f9:c8:29:f7:30:aa:f8:ed:9c: 73:16:d8:41:c9:42:59:3c:34:91:be:6d:6f:07:04:f9:af:9e: a8:90:31:cb:ce:07:c9:61:cf:f6:b5:7c:b9:2e:e2:b8:83:01: 34:b4:ee:bb:00:07:49:b2:14:ab:13:ba:f3:29:93:15:b3:bf: 56:46:8e:da:54:ee:11:db:09:8d:36:8d:ca:e4:cd:96:a0:3b: d6:85:82:5d:a6:0b:7b:7d:c1:35:a3:55:b9:8b:f4:1c:55:5d: 99:d6:89:c9:7a:a4:49:5b:5b:69:ad:74:c3:05:8f:8f:6d:09: 5a:ce:7f:8e:12:24:89:b5:68:fb:27:8c:bc:21:6e:b8:a6:9c: 88:19:5e:94:c1:cd:c7:57:de:e5:82:f5:9c:31:c4:a1:61:cb: 9b:55:f7:97:67:26:7e:cd:9e:1f:11:4e:19:d5:dd:f5:f5:ee: c1:de:c2:5e:3f:eb:a4:c7:58:49:23:69:70:c7:d6:28:a6:dd: 80:5a:81:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIaDPUI5ZpmgrPqET3BlluwbF6cAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDcyODA3NTYyOVoX DTI2MDcyOTEwMTgyOVowMzExMC8GA1UEAxMoQkE2MjM2RDk0NkVFN0UxODE0N0My MTQ5NjY2QUEyRTE3ODY5QkY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNGgt72IswUrFC6oVOo9fOZMHY/c0HW2lZirOUlST8vbDBUBnstBBKME3RE 8U8VuTpvsTTGhzvBDJWK8TuU1APSiIpS75mv4YJ63h9JngAaAjM49XNHMoKVqUcR S2CvjC8jE24satfxPHvEf3sDWZlY+EbLPrV285fKtio/Tpiye3A0A60Qls8uL6Ou nygzh2URvKcRfHGY/P2GqL+I5EtY4OHoQ3bNKNDt0m31hgU3zkomhP42fKMdgFER mb7sIO4WalE0SoZJ+ECD5Ancl2GS683eFVPfvVUbARzHRQP1oHz39iJhGfxS3tV0 QwTDHaH+c1WqUeqTYnGkk9/+F98CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS6YjbZ Ru5+GBR8IUlmaqLheGm/YjAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBzVINdmgTtDsH5YrmawVQFCOk67MSoN2s3nzhxOvkrKFbf aLER2XOeLIZhaU61B7+Y+I9W1Qws0XSOMLro2g/5yCn3MKr47ZxzFthByUJZPDSR vm1vBwT5r56okDHLzgfJYc/2tXy5LuK4gwE0tO67AAdJshSrE7rzKZMVs79WRo7a VO4R2wmNNo3K5M2WoDvWhYJdpgt7fcE1o1W5i/QcVV2Z1onJeqRJW1tprXTDBY+P bQlazn+OEiSJtWj7J4y8IW64ppyIGV6Uwc3HV97lgvWcMcShYcubVfeXZyZ+zZ4f EU4Z1d319e7B3sJeP+ukx1hJI2lwx9Yopt2AWoEa -----END CERTIFICATE-----Generated at Tue Jul 28 18:03:18 2026 by rpki-client