$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft File: 3EC2D884A54E878D848EDE42517466153F747434.mft (raw, json) Hash identifier: F8AAzPvA0OvWXFTVpMKv0aA5EmpTQ6NzyBhzgNVMacE= Subject key identifier: 6B:48:7E:0F:7D:52:14:66:D7:73:31:CA:4F:DA:FA:C5:3F:90:44:4A Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 3F4773C81181A49B04A734BFB67B5A4C14CD929C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft Manifest number: 0143 Signing time: Mon 26 Oct 2026 10:48:40 +0000 Manifest this update: Mon 26 Oct 2026 10:43:40 +0000 Manifest next update: Thu 29 Oct 2026 22:03:40 +0000 Files and hashes: 1: 3EC2D884A54E878D848EDE42517466153F747434.crl (hash: zL/C9vFt/N8a3k8DjZ7Sw6pM5Qg7fTXHhqHR6UANHlE=) 2: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (hash: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0=) 3: 323430343a373630303a3134303a3a2f34322d3438203d3e203233383533.roa (hash: n0MfpilYxndV+jqDS8exxpxqYgr1fsEsIT+crxU5XVo=) 4: 3132302e3133362e3138342e302f32322d3234203d3e203137363231.roa (hash: 2XZ6Wj+H4+dbv42I6hTxWGZPC0hEqA78PvKpNBT8VZo=) 5: 323430343a373630303a3130343a3a2f34362d3438203d3e203233383533.roa (hash: d1eJqMP5YfCyn8Wc7+TAvtOozqMk+QHCAnc6VRkVxPI=) 6: 323430343a373630303a3138303a3a2f34312d3438203d3e203233383533.roa (hash: aunTiAHKjyeUV/sc131a8lfRxB3Nx5vYnbVdDdai6VQ=) 7: 323430343a373630303a3132303a3a2f34332d3438203d3e203233383533.roa (hash: gAdo8ADtR4RetFs5LNJO13qOa49M95qQ6gGknw4ixwY=) 8: 3132302e3133362e3134342e302f32312d3234203d3e203233383533.roa (hash: E24J4lCzhRkOqJW0ZJR5Sy9+c+JL4dSoESoQ2DvI8xM=) 9: 323430343a373630303a383030303a3a2f33332d3438203d3e203233383533.roa (hash: fTmJpfjG5rFWUHt78W20T5FCeQCzqWTtpcwU81dVJpU=) 10: 3132302e3133362e3138342e302f32322d3234203d3e2034383132.roa (hash: BBrDoRY3ExcENU4ctRyXVP2PbTjkSEZ+9gPf4QMEJss=) 11: 3231312e3134372e36342e302f32302d3234203d3e203233383533.roa (hash: ZoYffD8IKbj1vSW7VJAnZE41nQLEZpcIWhkP7Bjqnh8=) 12: 323430343a373630303a3230303a3a2f33392d3438203d3e203233383533.roa (hash: cyhtimNKiPazxHSLkJWYWLioZ1R3OZ7jxpd19Dg1r/c=) 13: 323430343a373630303a3a2f34302d3438203d3e203233383533.roa (hash: OqBJbFgkXOA8ytCt0FeN7xcisr8mHY653xaGqd4KnlM=) 14: 323430343a373630303a343030303a3a2f33342d3438203d3e203233383533.roa (hash: /fu4aSWhqGo6ZRsoisnDTlZ6OTkiU2vp3cXxxf4XM/U=) 15: 3132302e3133362e3138302e302f32322d3234203d3e203233383533.roa (hash: xG1I6r6UAJfACKwK5sIgDn22lg/beJ2nLiIhCgnhcBM=) 16: 323430343a373630303a3131303a3a2f34342d3438203d3e203233383533.roa (hash: Ti+/Rm9k9nl9QkQ0HTSlgjMJARIlcWY3iAEagqwFPeY=) 17: 3132302e3133362e3135362e302f32322d3235203d3e2034383132.roa (hash: OnasBPeYiAc7CPUt61VD4fxvgQNJKDbysbqT/JbSqVM=) 18: 323430343a373630303a323030303a3a2f33352d3438203d3e203233383533.roa (hash: y+M/qZwS/XTRkvFfUDV45SoQu9e/Ff6mcwCf/CtgXI0=) 19: 323430343a373630303a3130313a3a2f34382d3438203d3e203137363231.roa (hash: 53WwxkzLgajW94jdc19ZpZKiO/Un9MBV2/BAKwqdMxk=) 20: 323430343a373630303a3130383a3a2f34352d3438203d3e203233383533.roa (hash: 6k8+E27CjXy1QpRMXLwb0dRw0O3ojV7lCwwljlv+PBc=) 21: 3132302e3133362e3136302e302f32312d3235203d3e2034383132.roa (hash: 41Ot4VYNeMxzAiGO0NS6zo91p0ehJQQlBEZBcAZkgco=) 22: 3230332e39352e3132382e302f32332d3234203d3e2034383437.roa (hash: raJHohu1PhKXXDQxq7Zw6mLF7Xtxfw/jencxtzoXqDY=) 23: 323430343a373630303a3130313a3a2f34382d3438203d3e203233383533.roa (hash: ZFlwG31dKYO0/g+LJU9ArEn1sPWllQoWhcqmX3EsA0g=) 24: 3231312e3134342e3139322e302f32302d3234203d3e203137363231.roa (hash: 56FeL/Q8HrbrTIIk/VbYkxStJuveqHE7OIlN4M+vJ7I=) 25: 323430343a373630303a313030303a3a2f33362d3438203d3e203233383533.roa (hash: 9DyTNlUhXNY3ispo7mahXA+2yrvAvTKWI63YDfGkmLY=) 26: 3132302e3133362e3138382e302f32322d3234203d3e203233383533.roa (hash: bOMoD4GkZR5G7bg1hwUbmvGxSHBuMAi8FYq4NpkEpt0=) 27: 323430343a373630303a3830303a3a2f33372d3438203d3e203233383533.roa (hash: VqSUICDaSppFGoi1SAsi6Ypi+m+G27vw4EzGKLKQECc=) 28: 3132302e3133362e3138342e302f32322d3234203d3e203233383533.roa (hash: hVPov1kOz0B8RxA/exLnT5ko5IfZEeq8iveO7JtNPuo=) 29: 323430343a373630303a3130313a3a2f34382d3438203d3e2034383132.roa (hash: Yc91+8CGMZSxP5psZTdvb6ZBDS79NnZXS/a+L4jsnec=) 30: 323430343a373630303a3a2f33322d3332203d3e203233383533.roa (hash: gKtWmniIjY7C6+YlmHdzCK3hP/+EVEt8A1Yl3RllWsc=) 31: 3132302e3133362e3136382e302f32312d3234203d3e203137363231.roa (hash: slBni5ICatSGcW1GqnhbdqRvpmiTN7Kzij7sN4RhbQM=) 32: 3231312e3134372e38302e302f32302d3234203d3e203233383533.roa (hash: XR+oZrjOkM2w57Uq7YPW9IG73CT+RetisCGIsCg1jbw=) 33: 3132302e3133362e3135322e302f32322d3234203d3e203233383533.roa (hash: erIblciMvEQNpFoiI29fK8Db0M3ixaF8v4DyoPNB8/8=) 34: 323430343a373630303a3130323a3a2f34372d3438203d3e203233383533.roa (hash: xLT1h2/rQBWMWfDw9aaWC8+LUeh04j3aKEWKGe28DIo=) 35: 3231312e3134342e3230382e302f32302d3234203d3e203233383533.roa (hash: K1a5ssxkHL1/UwyXDbJTsLy91iKzaVCQ+pNZGcum0HA=) 36: 3132302e3133362e3134302e302f32322d3234203d3e203233383533.roa (hash: sJNFmFXoGKjrXXYM8WkTLWH9FsRgIw0tU5UB7xfQNtw=) 37: 323430343a373630303a3430303a3a2f33382d3438203d3e203233383533.roa (hash: teUTRzl3guiSSoe+pqghDptfEnxyU78Pd42mree9bFI=) 38: 323430343a373630303a3130303a3a2f34382d3438203d3e203233383533.roa (hash: O8tKc/PhMqqbl2HjjA/vIOUURHnfh/O+XaeaWEc2i8Q=) 39: 3132302e3133362e3132382e302f32312d3234203d3e203233383533.roa (hash: oQV16GNjZEu3tvmwo1wV2ZymBLqImLjauMtKJ3aPI7A=) 40: 3132302e3133362e3137362e302f32322d3234203d3e203137363231.roa (hash: LNF0gXzQy56B5AhZ0lMSF0hSqGhnN6qBtOXtggN8j5A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:47:73:c8:11:81:a4:9b:04:a7:34:bf:b6:7b:5a:4c:14:cd:92:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Oct 26 10:43:40 2026 GMT Not After : Oct 29 22:03:40 2026 GMT Subject: CN=6B487E0F7D521466D77331CA4FDAFAC53F90444A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:ed:9b:63:5a:91:de:91:9b:51:06:b8:81: 42:ba:fa:9d:c5:ad:51:85:34:80:8c:ff:1b:ba:59: a8:30:be:2c:8d:6e:24:c9:ca:33:d9:26:1f:71:22: 3b:a3:76:ef:37:65:5e:ed:38:e7:6e:7a:ce:a1:0b: e0:34:4d:e7:ae:ae:a0:04:71:9e:3c:bd:8c:67:4e: 4a:c0:bb:d8:74:4b:8d:b9:99:7d:79:7f:cd:fb:30: 6b:9f:14:c6:e6:cf:ec:d7:b3:e2:2f:45:88:19:e4: b0:c1:21:13:03:5b:ec:a8:45:7d:a2:3e:eb:b8:57: 3a:5e:7d:db:7d:99:d3:02:ab:ce:db:ca:da:14:ce: 0d:ca:15:e2:8b:c8:46:23:d2:27:13:22:f6:c5:6f: 88:a6:c0:e7:c5:5d:2a:fe:9e:c9:99:1e:e4:30:69: 0e:d8:26:88:51:f1:95:dc:5e:06:71:72:e2:1f:6a: f8:09:25:4b:ee:9e:43:01:33:7d:0d:b1:b6:cf:4f: d8:f8:fd:00:75:3d:9a:6f:cf:88:1c:a9:f6:2c:9b: e9:4d:ac:24:66:fe:aa:00:83:9f:48:4f:8c:b7:16: 89:0a:4c:77:09:bb:0f:c5:26:bd:fc:29:4f:57:ba: c5:9a:a1:cc:da:ce:81:12:62:cf:ca:31:0c:af:74: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:48:7E:0F:7D:52:14:66:D7:73:31:CA:4F:DA:FA:C5:3F:90:44:4A X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:de:df:ce:f3:a0:a2:b2:c6:c1:10:2b:80:8a:22:d4:65:a2: ca:75:1c:12:a0:82:7b:2a:ca:72:11:fd:d1:8d:91:b4:e1:41: f8:5f:47:ae:42:5b:1d:97:f5:32:e5:d9:e0:39:46:f5:a0:20: 16:2f:b9:cf:16:21:4a:79:1b:fb:69:0b:7e:46:a9:10:3d:7f: 42:ff:ea:d8:90:b0:a3:01:ae:36:7d:22:4f:bb:05:82:f2:c0: 5f:73:8c:fa:d1:cf:13:9e:a6:83:2d:f2:03:a2:ba:75:b0:66: d5:61:66:cf:2d:db:33:82:8e:12:db:ea:ee:a5:41:b1:fc:8d: f8:e5:8a:c4:a7:24:26:4b:c7:c4:73:ad:ab:24:96:69:3b:b8: 54:15:44:7c:64:85:eb:38:5a:b6:bb:38:79:b3:46:0e:d0:c1: a3:f2:2e:99:f9:72:0a:95:1c:2a:90:83:e0:c2:00:ea:f5:b8: 4d:65:44:98:91:8f:d7:69:a2:d1:7d:fc:f8:55:8e:c4:1c:12: 22:bc:d3:11:91:75:15:0f:41:1b:4b:b0:ea:b5:a3:c5:75:b2: a7:f8:b8:0c:c4:05:25:fd:d4:13:57:ed:36:89:74:08:cf:ff: 9c:df:06:63:f2:b8:d3:75:5b:4c:65:bd:0b:2f:91:e9:21:45: a7:9a:62:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP0dzyBGBpJsEpzS/tntaTBTNkpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjEwMjYxMDQzNDBaFw0yNjEwMjkyMjAzNDBaMDMxMTAvBgNV BAMTKDZCNDg3RTBGN0Q1MjE0NjZENzczMzFDQTRGREFGQUM1M0Y5MDQ0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4e2bY1qR3pGbUQa4gUK6+p3F rVGFNICM/xu6WagwviyNbiTJyjPZJh9xIjujdu83ZV7tOOdues6hC+A0TeeurqAE cZ48vYxnTkrAu9h0S425mX15f837MGufFMbmz+zXs+IvRYgZ5LDBIRMDW+yoRX2i Puu4Vzpefdt9mdMCq87bytoUzg3KFeKLyEYj0icTIvbFb4imwOfFXSr+nsmZHuQw aQ7YJohR8ZXcXgZxcuIfavgJJUvunkMBM30NsbbPT9j4/QB1PZpvz4gcqfYsm+lN rCRm/qoAg59IT4y3FokKTHcJuw/FJr38KU9XusWaoczazoESYs/KMQyvdPclAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa0h+D31SFGbXczHKT9r6xT+QREowHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE3ODYyNDIvMC8zRUMyRDg4NEE1NEU4 NzhEODQ4RURFNDI1MTc0NjYxNTNGNzQ3NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt7fzvOgorLG wRArgIoi1GWiynUcEqCCeyrKchH90Y2RtOFB+F9HrkJbHZf1MuXZ4DlG9aAgFi+5 zxYhSnkb+2kLfkapED1/Qv/q2JCwowGuNn0iT7sFgvLAX3OM+tHPE56mgy3yA6K6 dbBm1WFmzy3bM4KOEtvq7qVBsfyN+OWKxKckJkvHxHOtqySWaTu4VBVEfGSF6zha trs4ebNGDtDBo/IumflyCpUcKpCD4MIA6vW4TWVEmJGP12mi0X38+FWOxBwSIrzT EZF1FQ9BG0uw6rWjxXWyp/i4DMQFJf3UE1ftNol0CM//nN8GY/K403VbTGW9Cy+R 6SFFp5pidw== -----END CERTIFICATE-----Generated at Tue Oct 27 16:30:55 2026 by rpki-client