$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: bk2ZRDKJS+CybdQgMhoopb2RGvI7crBK5Ck3H5sqkdw= Subject key identifier: 18:07:52:75:8B:36:85:DD:BF:7C:40:F6:D6:06:75:62:61:F2:E0:E5 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 6C3FF4200E075FE2DF3ADA7157EAAB0B54D02843 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 06:49:17 +0000 Manifest this update: Mon 13 Apr 2026 06:44:17 +0000 Manifest next update: Tue 14 Apr 2026 10:06:17 +0000 Files and hashes: 1: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 2: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 3: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: 0SL85PF2UoHpE6C9lp9thXI6g6Mmrwx2LWo+EUzipYE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3f:f4:20:0e:07:5f:e2:df:3a:da:71:57:ea:ab:0b:54:d0:28:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 13 06:44:17 2026 GMT Not After : Apr 14 10:06:17 2026 GMT Subject: CN=180752758B3685DDBF7C40F6D606756261F2E0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:08:a8:37:9c:1e:e1:1b:ff:5d:e9:71:4b: d7:44:c0:87:a1:da:2d:3c:d5:18:2b:d6:d2:c4:24: 3b:11:6b:40:d2:d2:df:e7:4e:16:f0:90:ac:b7:02: 5f:01:14:4d:63:da:0e:bc:0b:80:4c:cc:0b:2d:66: 9e:fa:79:9a:f0:ae:5e:17:c7:ad:0d:f4:55:e2:bc: 5a:af:a9:fa:38:e8:f6:32:17:28:86:57:cb:ca:8f: 45:6c:cd:e8:c3:9b:3a:61:53:35:ff:34:0e:fe:ec: cc:0c:30:aa:34:f5:16:66:42:53:f2:71:c7:b7:9a: 23:9b:fd:21:f1:6d:f6:e3:24:47:bf:d3:2e:7b:7a: bd:11:b1:e4:4d:16:24:c6:a8:b6:0e:5b:55:87:bc: f8:bd:8b:a3:da:c1:67:0f:a7:1d:7c:6f:68:7a:a1: fa:06:08:85:a4:d4:f0:6c:f9:0a:55:1e:9c:ad:eb: e9:f3:cb:f2:92:0c:a3:da:10:f8:c0:ec:5c:d9:59: 78:71:a4:f8:7b:99:db:a5:33:68:dd:c1:a1:28:77: 16:81:bd:a0:46:e5:13:66:b2:dc:01:2e:99:81:43: 22:9e:cb:7b:6f:7f:82:02:57:f9:d7:76:47:77:26: 99:d7:ac:f6:a5:34:25:ee:36:80:f2:ba:fd:2b:a9: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:52:75:8B:36:85:DD:BF:7C:40:F6:D6:06:75:62:61:F2:E0:E5 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b8:03:cc:f3:35:4a:5b:30:0b:b3:10:ed:be:ef:88:e8:dd: c9:66:76:60:01:56:c7:ce:ae:a2:e5:a9:f5:fd:0f:aa:4f:c3: 7f:d9:d2:70:94:02:ef:21:50:7a:18:e5:da:b7:81:86:e2:7e: 43:4f:2b:4a:6e:d8:0a:56:f7:bd:dd:cc:30:c4:3c:0c:6e:79: 3f:36:ff:60:1b:fa:a8:ad:95:45:b3:6d:12:fa:32:96:b5:41: d3:fd:39:b4:7f:00:38:01:60:03:be:ff:82:ab:80:13:50:1c: f0:51:d4:d3:cf:7f:54:ca:a6:e9:1f:6d:3c:c7:ae:75:b3:08: 52:67:a3:a3:e0:83:78:d2:23:77:0f:05:fe:c3:72:bf:15:d2: d8:c3:b0:6c:f9:00:f1:44:eb:d8:bd:81:bb:cc:0f:ab:6c:d1: 82:b8:b5:5c:72:94:ac:97:6f:bb:78:0f:c6:fa:54:f3:ca:ee: 27:cc:9b:d0:12:2c:80:db:1e:d6:20:2c:6a:5d:7c:96:29:b5: fd:cd:0b:f2:f2:78:9c:48:83:8a:26:e9:b2:bc:49:f4:2b:b1: ee:fb:84:26:4e:d2:01:3f:86:79:fc:14:62:e3:4d:a3:c7:70: 32:eb:7a:38:77:52:c2:55:25:bf:18:c9:6b:0d:7e:96:64:a8: 4b:57:12:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbD/0IA4HX+LfOtpxV+qrC1TQKEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTMwNjQ0MTdaFw0yNjA0MTQxMDA2MTdaMDMxMTAvBgNV BAMTKDE4MDc1Mjc1OEIzNjg1RERCRjdDNDBGNkQ2MDY3NTYyNjFGMkUwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvjwioN5we4Rv/XelxS9dEwIeh 2i081Rgr1tLEJDsRa0DS0t/nThbwkKy3Al8BFE1j2g68C4BMzAstZp76eZrwrl4X x60N9FXivFqvqfo46PYyFyiGV8vKj0VszejDmzphUzX/NA7+7MwMMKo09RZmQlPy cce3miOb/SHxbfbjJEe/0y57er0RseRNFiTGqLYOW1WHvPi9i6PawWcPpx18b2h6 ofoGCIWk1PBs+QpVHpyt6+nzy/KSDKPaEPjA7FzZWXhxpPh7mdulM2jdwaEodxaB vaBG5RNmstwBLpmBQyKey3tvf4ICV/nXdkd3JpnXrPalNCXuNoDyuv0rqSBDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGAdSdYs2hd2/fED21gZ1YmHy4OUwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLgDzPM1Slsw C7MQ7b7viOjdyWZ2YAFWx86uouWp9f0Pqk/Df9nScJQC7yFQehjl2reBhuJ+Q08r Sm7YClb3vd3MMMQ8DG55Pzb/YBv6qK2VRbNtEvoylrVB0/05tH8AOAFgA77/gquA E1Ac8FHU089/VMqm6R9tPMeudbMIUmejo+CDeNIjdw8F/sNyvxXS2MOwbPkA8UTr 2L2Bu8wPq2zRgri1XHKUrJdvu3gPxvpU88ruJ8yb0BIsgNse1iAsal18lim1/c0L 8vJ4nEiDiibpsrxJ9Cux7vuEJk7SAT+GefwUYuNNo8dwMut6OHdSwlUlvxjJaw1+ lmSoS1cSkQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client