$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: YL8twwNbS/qaHeIDNlI2DyLMVGiqJG92WlHv6F+uTyQ= Subject key identifier: EA:30:C0:5A:42:1C:E3:48:1C:23:4D:A9:DA:80:D6:74:4F:31:C4:89 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 274A8AAC56783A232967E00F33429D7ABAA1E71B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 0212 Signing time: Sun 11 Oct 2026 20:15:58 +0000 Manifest this update: Sun 11 Oct 2026 20:10:58 +0000 Manifest next update: Thu 15 Oct 2026 03:03:58 +0000 Files and hashes: 1: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 2: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 3: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 4: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 5: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 6: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 7: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 8: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 9: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 10: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 11: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 12: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: SClA4S7mJbI3ADr7iUe4xnN8/GBtbNAWzbR2+7SaJuw=) 13: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 14: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 15: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 16: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 17: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 18: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 19: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4a:8a:ac:56:78:3a:23:29:67:e0:0f:33:42:9d:7a:ba:a1:e7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Oct 11 20:10:58 2026 GMT Not After : Oct 15 03:03:58 2026 GMT Subject: CN=EA30C05A421CE3481C234DA9DA80D6744F31C489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:9b:16:c4:9b:49:7b:b1:d6:8e:64:67:65: a4:95:bc:e9:7e:a9:c5:99:d7:8f:d3:d9:ce:40:59: 63:e6:ae:d3:87:aa:1a:fb:23:bc:7b:0e:3c:f4:f5: 88:d9:98:94:ad:5b:77:e5:b4:59:38:54:79:ef:2f: 48:83:0c:05:65:1c:7c:f2:4c:96:21:f7:43:57:a2: 07:7c:52:d2:77:fd:ca:c0:3a:55:0d:b3:02:7c:8d: 4f:08:f2:5e:1a:c6:ee:35:c6:08:b8:73:c4:f7:57: 84:3c:05:07:b5:23:6e:3a:bb:cf:70:d8:94:61:23: 36:29:21:4d:da:1d:01:1b:3e:b4:b8:7d:bd:83:ac: 22:7e:95:f3:0f:9c:82:2d:18:57:d4:11:cd:9d:07: 19:0d:59:4a:4c:a7:32:b7:c3:a9:4b:29:cd:be:77: 02:3c:ed:d0:aa:54:e4:7f:7d:3c:cb:0b:77:d9:5d: 74:01:a1:e8:fe:3e:c9:70:e8:1a:21:75:b3:02:da: 40:17:64:fb:4f:3f:ed:95:7d:8c:a7:0d:9c:73:6b: f9:94:11:78:d3:1b:77:8d:2f:63:56:40:6f:f7:9d: 2a:24:63:eb:81:fa:f7:70:a7:74:e8:26:c2:b3:94: 61:da:72:16:33:76:d2:94:63:29:90:01:24:45:2f: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:30:C0:5A:42:1C:E3:48:1C:23:4D:A9:DA:80:D6:74:4F:31:C4:89 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fb:3c:e2:0f:6f:bb:76:e2:7e:5a:91:07:80:c7:49:a3:77: be:0b:1a:e2:00:e5:84:2e:ff:ed:46:43:c7:87:49:ac:7d:dd: 83:0c:f0:6e:3e:b7:dd:b5:93:00:10:1f:76:fd:44:85:e5:a2: 1c:7e:b3:fe:bf:13:5c:d3:04:3b:58:58:fc:56:4d:20:09:58: 38:06:4c:6b:6c:18:dd:b3:12:61:da:77:68:1d:7f:ea:0b:1b: 28:1a:01:fb:ef:76:db:96:50:0d:a7:b8:b9:7c:53:ce:9b:e1: 58:f9:ef:6f:28:b3:e7:f7:04:91:a2:3a:0d:da:99:75:4c:7e: 60:37:f6:0c:ab:da:27:75:dd:dd:c1:66:b0:89:d3:3b:af:db: 08:8f:2b:3d:d5:d6:40:3c:c6:2b:fd:69:9f:7c:89:d4:02:b1: 64:73:87:d0:e6:aa:0e:c0:12:bd:3c:d0:7e:df:af:f1:60:2d: be:71:cf:e8:76:06:d3:0f:85:c3:6e:91:0d:25:43:7a:05:e5: 3b:1a:45:fd:bc:12:0d:66:a0:96:a7:10:0e:7a:4d:f3:2a:84: ce:d8:c2:2e:51:bd:4f:97:95:30:5a:45:3e:20:e0:1e:b1:07: cf:38:21:41:99:51:e0:54:ab:2d:58:8b:07:03:b0:ef:18:10: 48:7a:b3:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ0qKrFZ4OiMpZ+APM0Kderqh5xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjEwMTEyMDEwNThaFw0yNjEwMTUwMzAzNThaMDMxMTAvBgNV BAMTKEVBMzBDMDVBNDIxQ0UzNDgxQzIzNERBOURBODBENjc0NEYzMUM0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zJsWxJtJe7HWjmRnZaSVvOl+ qcWZ14/T2c5AWWPmrtOHqhr7I7x7Djz09YjZmJStW3fltFk4VHnvL0iDDAVlHHzy TJYh90NXogd8UtJ3/crAOlUNswJ8jU8I8l4axu41xgi4c8T3V4Q8BQe1I246u89w 2JRhIzYpIU3aHQEbPrS4fb2DrCJ+lfMPnIItGFfUEc2dBxkNWUpMpzK3w6lLKc2+ dwI87dCqVOR/fTzLC3fZXXQBoej+Pslw6BohdbMC2kAXZPtPP+2VfYynDZxza/mU EXjTG3eNL2NWQG/3nSokY+uB+vdwp3ToJsKzlGHachYzdtKUYymQASRFLyA/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6jDAWkIc40gcI02p2oDWdE8xxIkwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvs84g9vu3bi flqRB4DHSaN3vgsa4gDlhC7/7UZDx4dJrH3dgwzwbj633bWTABAfdv1EheWiHH6z /r8TXNMEO1hY/FZNIAlYOAZMa2wY3bMSYdp3aB1/6gsbKBoB++9225ZQDae4uXxT zpvhWPnvbyiz5/cEkaI6DdqZdUx+YDf2DKvaJ3Xd3cFmsInTO6/bCI8rPdXWQDzG K/1pn3yJ1AKxZHOH0OaqDsASvTzQft+v8WAtvnHP6HYG0w+Fw26RDSVDegXlOxpF /bwSDWaglqcQDnpN8yqEztjCLlG9T5eVMFpFPiDgHrEHzzghQZlR4FSrLViLBwOw 7xgQSHqzwg== -----END CERTIFICATE-----Generated at Tue Oct 13 20:46:07 2026 by rpki-client