$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: 0aJKF/AfKTzsL5xGK+DDcWy9JtEiAuIRzcxgMoWaIL8= Subject key identifier: AF:3B:7C:AD:21:E8:1F:7B:63:4E:53:69:20:1E:CF:53:E5:69:95:66 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 2C195FA456D9A98BE38FC9CF79655BB79301902D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 01FE Signing time: Fri 28 Aug 2026 06:47:55 +0000 Manifest this update: Fri 28 Aug 2026 06:42:55 +0000 Manifest next update: Mon 31 Aug 2026 11:05:55 +0000 Files and hashes: 1: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 2: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 3: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 4: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 5: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 6: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 7: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 8: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 9: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 10: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 11: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 12: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 13: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 14: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 15: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: o7YGRdSv8IssAcjgcdf/AX6t9SnjzX7Z2HOoXvrZyT8=) 16: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 17: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 18: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 19: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:19:5f:a4:56:d9:a9:8b:e3:8f:c9:cf:79:65:5b:b7:93:01:90:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Aug 28 06:42:55 2026 GMT Not After : Aug 31 11:05:55 2026 GMT Subject: CN=AF3B7CAD21E81F7B634E5369201ECF53E5699566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:a7:6d:a6:22:4e:2f:aa:6b:3c:cf:e1:fd: 4a:68:58:d1:24:ae:24:69:6f:71:8e:b1:1d:b5:01: 09:91:14:a8:4d:fe:81:4d:58:43:60:0c:1f:09:cd: d1:53:e0:c4:be:2b:bc:2f:f9:89:a3:6a:f4:a7:7e: 8a:29:ff:8e:b0:db:e2:13:3b:75:d1:65:b2:ac:ec: 21:fe:97:66:67:6c:41:f7:d8:71:fe:81:73:5a:ff: 57:a9:03:16:41:db:70:1e:e9:2d:10:0b:de:dc:10: ad:83:a8:e2:c8:73:32:ba:a2:3d:c7:41:db:7b:bc: 1b:5e:a4:25:af:f2:4c:a1:3a:04:e5:cf:1b:70:d0: 28:5e:35:4f:c2:8a:7f:eb:6f:1c:c4:8d:90:8c:1a: 6e:ba:47:d1:3c:57:58:bf:97:fb:81:a2:68:11:c3: 15:ec:6c:de:26:6c:36:c5:37:5c:96:82:09:e0:13: 15:ae:25:ad:80:2a:5c:b2:80:88:f7:a8:a2:8b:cb: ed:1f:9e:83:88:78:ce:4d:74:2d:71:58:e6:e1:57: ef:0f:e2:b6:51:3b:e4:f8:ff:56:b9:5e:83:56:f3: 2b:ac:a1:2a:8a:95:30:28:0b:5b:94:7e:62:45:86: 2c:f7:e0:6b:e9:8f:ba:cb:9f:16:6b:53:80:4d:7f: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3B:7C:AD:21:E8:1F:7B:63:4E:53:69:20:1E:CF:53:E5:69:95:66 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b2:04:d0:4a:07:85:65:3c:99:21:50:e8:a8:08:99:8b:92: e0:33:1a:7c:a6:6c:f4:30:50:c4:60:92:7f:fb:9b:9c:d0:4d: 59:b8:ac:43:b0:71:35:23:e3:45:e0:7f:f0:75:14:72:5c:dc: 5d:71:ca:52:ab:f5:c9:8c:25:ea:6f:fe:4f:98:18:0b:b9:74: 65:dd:35:ad:d6:7f:03:8b:f2:91:41:ea:d3:83:5d:c8:b9:90: a3:2e:08:af:70:d0:24:56:f9:6c:2b:74:2c:b4:e5:ee:de:05: e5:28:0d:30:ca:75:67:5b:47:77:e1:88:0f:cc:6e:d7:a0:47: 33:2b:f4:e1:13:7b:b4:de:a8:0c:f9:fb:38:18:63:06:e5:47: b3:7b:26:fe:ca:49:c6:c6:17:77:20:cb:5b:1e:9d:6c:98:eb: 17:ac:6c:6e:de:3d:a1:da:65:e7:50:5c:4c:53:02:d0:91:bc: f1:2f:04:b0:3a:36:ec:7c:ed:71:6e:15:2c:7d:f4:fa:42:d6: f5:7d:a9:23:f1:e3:f9:b0:47:b8:72:db:0c:de:70:50:e1:fb: ec:47:c5:49:f5:db:fc:bf:bb:6f:15:4b:7b:3b:b1:c3:28:37: e9:be:cf:9e:a0:51:ab:d2:03:64:09:a8:75:4d:b4:e8:16:84: 26:36:5e:a7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULBlfpFbZqYvjj8nPeWVbt5MBkC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA4MjgwNjQyNTVaFw0yNjA4MzExMTA1NTVaMDMxMTAvBgNV BAMTKEFGM0I3Q0FEMjFFODFGN0I2MzRFNTM2OTIwMUVDRjUzRTU2OTk1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdN6dtpiJOL6prPM/h/UpoWNEk riRpb3GOsR21AQmRFKhN/oFNWENgDB8JzdFT4MS+K7wv+YmjavSnfoop/46w2+IT O3XRZbKs7CH+l2ZnbEH32HH+gXNa/1epAxZB23Ae6S0QC97cEK2DqOLIczK6oj3H Qdt7vBtepCWv8kyhOgTlzxtw0CheNU/Cin/rbxzEjZCMGm66R9E8V1i/l/uBomgR wxXsbN4mbDbFN1yWggngExWuJa2AKlyygIj3qKKLy+0fnoOIeM5NdC1xWObhV+8P 4rZRO+T4/1a5XoNW8yusoSqKlTAoC1uUfmJFhiz34Gvpj7rLnxZrU4BNf+T5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrzt8rSHoH3tjTlNpIB7PU+VplWYwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbIE0EoHhWU8 mSFQ6KgImYuS4DMafKZs9DBQxGCSf/ubnNBNWbisQ7BxNSPjReB/8HUUclzcXXHK Uqv1yYwl6m/+T5gYC7l0Zd01rdZ/A4vykUHq04NdyLmQoy4Ir3DQJFb5bCt0LLTl 7t4F5SgNMMp1Z1tHd+GID8xu16BHMyv04RN7tN6oDPn7OBhjBuVHs3sm/spJxsYX dyDLWx6dbJjrF6xsbt49odpl51BcTFMC0JG88S8EsDo27HztcW4VLH30+kLW9X2p I/Hj+bBHuHLbDN5wUOH77EfFSfXb/L+7bxVLezuxwyg36b7PnqBRq9IDZAmodU20 6BaEJjZepw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:51 2026 by rpki-client