$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: kjzE9uNHFwejTrSD2bv7p4yzse+WVbVCq7m1ZX6ru98= Subject key identifier: 08:FD:E1:86:B6:39:B5:86:B7:06:A0:0A:09:8A:C9:5F:75:6D:43:9C Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 48A870C9C79F001FC7E180A8370583D71F8910D1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02E6 Signing time: Sun 20 Sep 2026 07:03:04 +0000 Manifest this update: Sun 20 Sep 2026 06:58:04 +0000 Manifest next update: Wed 23 Sep 2026 14:52:04 +0000 Files and hashes: 1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) 2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: 2b8EwwfnMG9lDsLmLCJFcwruBA7c8yf8c6o2M6RBuqU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a8:70:c9:c7:9f:00:1f:c7:e1:80:a8:37:05:83:d7:1f:89:10:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Sep 20 06:58:04 2026 GMT Not After : Sep 23 14:52:04 2026 GMT Subject: CN=08FDE186B639B586B706A00A098AC95F756D439C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:0c:e9:7c:d3:22:63:f8:26:7c:64:b5:9b: f8:df:62:65:a0:cf:1c:ad:ed:77:24:2c:1c:74:78: 4d:8d:73:5b:3f:64:0e:9a:ed:36:d6:50:7b:c8:15: de:b1:2b:cd:cc:28:02:9f:57:24:95:07:8f:03:8f: 0f:b9:2b:a7:bb:a2:bd:db:59:f9:6d:c7:ea:52:13: 9d:d2:b3:89:40:43:58:59:bc:0c:3e:a5:6b:16:d6: 6d:73:ac:25:83:05:2c:d0:ca:e5:e1:a2:72:c7:da: 0c:2f:7a:b0:68:8d:58:7b:25:c0:e4:c5:96:47:75: 5c:af:bd:84:d9:d1:d0:2d:fa:07:cb:f2:bb:1c:df: 24:14:57:74:68:2c:c8:7e:8c:1a:7f:76:f3:e0:3e: b3:64:a5:4e:7d:db:18:0b:60:4c:ed:90:bc:c6:2c: ec:5c:d9:ec:05:f3:e9:3b:6f:d2:59:c7:0f:5b:6f: 64:0b:35:c8:7b:cb:37:d9:d4:16:e6:d4:32:c6:93: db:a5:4c:4d:5e:b1:64:e4:67:aa:78:7a:e8:8b:1c: 3b:18:4f:9a:69:47:63:23:97:be:fb:24:ec:2f:1c: 00:a0:a5:44:d8:13:9f:f7:70:8e:f1:10:0d:4b:ed: 03:4c:74:62:8f:62:85:e0:77:dc:02:2a:d9:8b:a0: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FD:E1:86:B6:39:B5:86:B7:06:A0:0A:09:8A:C9:5F:75:6D:43:9C X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:ad:19:24:d2:e6:14:0a:bc:23:14:20:6e:1c:87:d5:f9: 71:cb:a0:d8:26:f4:81:f5:e8:09:1a:89:6b:71:60:b8:fb:6b: 40:8a:14:6b:93:99:09:c5:68:a1:ad:9c:02:f8:88:3b:14:04: 24:7e:a0:ef:c4:f4:89:14:4c:e4:bf:2e:41:fb:57:06:a9:a3: 01:c7:26:8b:9c:f9:99:9f:89:02:3c:57:c1:4b:56:52:72:a5: 1b:4f:3a:a7:e5:82:8c:9e:06:27:76:5c:23:3b:e7:d4:ed:32: c8:3d:63:fc:72:ff:a5:ad:ca:db:82:e3:80:d4:c6:68:e7:c1: 4c:07:44:4f:5f:19:65:a1:db:f4:6f:8d:dd:45:87:7b:e6:36: 9c:e4:4a:df:de:78:2b:2b:0c:7d:cb:c1:95:40:ab:bf:36:17: c5:5c:fc:a7:d3:c1:69:35:80:bf:98:69:e4:e7:94:8f:f1:73: ba:27:3e:e0:ee:91:22:7e:ba:eb:81:a2:6c:f2:8b:4d:76:5e: 60:26:f7:21:e7:8f:32:45:13:04:18:4f:be:c7:38:99:15:15: 01:3b:c2:3c:0a:55:cb:84:6c:bf:1a:e2:37:3e:7a:3b:7a:b5: 2e:9a:3e:35:70:8d:45:49:fd:61:ae:75:18:9e:d6:a2:c5:6f: a4:d0:c2:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSKhwycefAB/H4YCoNwWD1x+JENEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDkyMDA2NTgwNFoX DTI2MDkyMzE0NTIwNFowMzExMC8GA1UEAxMoMDhGREUxODZCNjM5QjU4NkI3MDZB MDBBMDk4QUM5NUY3NTZENDM5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALv7DOl80yJj+CZ8ZLWb+N9iZaDPHK3tdyQsHHR4TY1zWz9kDprtNtZQe8gV 3rErzcwoAp9XJJUHjwOPD7krp7uivdtZ+W3H6lITndKziUBDWFm8DD6laxbWbXOs JYMFLNDK5eGicsfaDC96sGiNWHslwOTFlkd1XK+9hNnR0C36B8vyuxzfJBRXdGgs yH6MGn928+A+s2SlTn3bGAtgTO2QvMYs7FzZ7AXz6Ttv0lnHD1tvZAs1yHvLN9nU FubUMsaT26VMTV6xZORnqnh66IscOxhPmmlHYyOXvvsk7C8cAKClRNgTn/dwjvEQ DUvtA0x0Yo9iheB33AIq2YugUHcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQI/eGG tjm1hrcGoAoJislfdW1DnDAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCaCq0ZJNLmFAq8IxQgbhyH1flxy6DYJvSB9egJGolrcWC4 +2tAihRrk5kJxWihrZwC+Ig7FAQkfqDvxPSJFEzkvy5B+1cGqaMBxyaLnPmZn4kC PFfBS1ZScqUbTzqn5YKMngYndlwjO+fU7TLIPWP8cv+lrcrbguOA1MZo58FMB0RP Xxllodv0b43dRYd75jac5Erf3ngrKwx9y8GVQKu/NhfFXPyn08FpNYC/mGnk55SP 8XO6Jz7g7pEifrrrgaJs8otNdl5gJvch548yRRMEGE++xziZFRUBO8I8ClXLhGy/ GuI3Pno7erUumj41cI1FSf1hrnUYntaixW+k0MLp -----END CERTIFICATE-----Generated at Tue Sep 22 10:59:14 2026 by rpki-client