$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: XxhXeHKytLExMxAjD8nad6qGNhrYg4ej8zq2rl9LcA0= Subject key identifier: A8:AB:D9:13:D6:BE:5D:8B:EE:45:F6:8C:7C:B0:84:36:13:89:A3:24 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 16BB360C83571039565BFEDF8E0C65A764F52C34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 01C2 Signing time: Tue 14 Jul 2026 17:26:47 +0000 Manifest this update: Tue 14 Jul 2026 17:21:47 +0000 Manifest next update: Wed 15 Jul 2026 17:43:47 +0000 Files and hashes: 1: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 2: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 3: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 4: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 5: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 6: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 7: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 8: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 9: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 10: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 11: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 12: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 13: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 14: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: eDejYctZyd50jJANIWtpw2Irc6lsKoPGszew+vw/DMg=) 15: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 16: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 17: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 18: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 19: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:bb:36:0c:83:57:10:39:56:5b:fe:df:8e:0c:65:a7:64:f5:2c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jul 14 17:21:47 2026 GMT Not After : Jul 15 17:43:47 2026 GMT Subject: CN=A8ABD913D6BE5D8BEE45F68C7CB084361389A324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:59:60:10:29:70:73:f8:08:f4:75:c6:a3: 79:5e:9b:f1:61:72:95:b8:08:0e:1c:38:0f:f4:1b: 84:33:7f:56:00:ec:0d:bc:95:11:43:94:99:93:01: 88:0e:37:b3:ee:ff:7f:ef:48:fe:21:52:6c:55:67: 0c:d4:94:fb:42:a4:ea:6e:2a:28:e2:bc:b3:50:c1: 62:52:5c:2f:d6:d8:3f:cf:eb:c0:99:a6:7c:14:83: 32:09:03:ac:4c:f6:3f:92:b6:e9:46:7f:94:7a:c7: 48:13:00:0d:41:3a:a6:bf:a2:2f:c1:18:ff:28:17: 01:d2:ca:de:bc:b1:15:fe:a1:d5:a5:31:e7:44:67: 4b:f6:76:5c:06:26:49:f5:49:7b:bb:55:de:f1:24: c2:90:d8:4d:2a:3d:55:6e:cd:57:ce:00:df:69:0a: 81:2d:4f:ab:07:e5:66:d7:b6:5c:37:92:90:eb:67: 80:4b:29:53:29:ee:5a:25:63:5e:7c:b3:5d:17:6c: 64:c9:13:51:8b:b4:8d:e6:e0:e9:83:58:8b:55:fd: 3c:17:d6:82:ec:5c:43:d9:62:b2:a8:53:fb:f6:d8: 30:1e:8e:d4:36:bd:a0:da:d7:84:81:6b:81:b8:34: 55:25:40:85:ca:49:a6:72:43:cb:41:67:d2:8d:b4: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:D9:13:D6:BE:5D:8B:EE:45:F6:8C:7C:B0:84:36:13:89:A3:24 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b6:32:7e:8b:29:7f:b4:0e:77:d5:fb:5f:71:09:58:14:43: ed:f2:60:b1:d3:c6:4b:f7:5b:70:2a:f2:1e:ca:1c:6c:64:5f: 80:93:8f:07:18:97:dc:6a:2e:56:58:d5:a7:76:7d:a8:84:7d: ff:2c:87:32:16:f0:14:36:0e:5a:75:29:9a:aa:41:c2:e8:19: b6:03:63:35:63:f3:59:e8:44:56:86:4f:04:20:9a:61:6d:5c: dd:36:fc:94:27:9b:bd:b6:5f:12:b8:ae:a3:1e:d6:92:e6:94: 43:5b:1c:2b:2e:31:88:fa:93:97:2b:58:ff:ed:1a:84:e9:92: 2a:20:3b:8e:c1:89:11:06:9d:ad:c9:0f:e7:37:9f:2f:e8:1d: 72:54:21:01:fa:0a:11:42:71:78:aa:c2:b3:e4:9e:14:ea:10: 61:1a:09:f1:76:dc:83:5b:2e:fd:b5:88:f3:b3:10:8e:b0:2d: 41:d5:eb:0c:53:26:ed:39:2d:48:c4:d1:3b:a8:4c:ef:f1:1a: 39:a5:b2:b0:63:29:50:20:d5:8b:2b:77:e2:90:e3:68:f2:bf: 13:1b:b9:99:da:36:54:bc:3b:f5:2d:37:37:f8:b8:c1:d7:9d: 46:e7:3b:f2:f6:b4:9b:3f:d6:37:04:ac:4b:a2:e3:c9:5d:31: 76:62:35:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFrs2DINXEDlWW/7fjgxlp2T1LDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA3MTQxNzIxNDdaFw0yNjA3MTUxNzQzNDdaMDMxMTAvBgNV BAMTKEE4QUJEOTEzRDZCRTVEOEJFRTQ1RjY4QzdDQjA4NDM2MTM4OUEzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ91lgEClwc/gI9HXGo3lem/Fh cpW4CA4cOA/0G4Qzf1YA7A28lRFDlJmTAYgON7Pu/3/vSP4hUmxVZwzUlPtCpOpu KijivLNQwWJSXC/W2D/P68CZpnwUgzIJA6xM9j+StulGf5R6x0gTAA1BOqa/oi/B GP8oFwHSyt68sRX+odWlMedEZ0v2dlwGJkn1SXu7Vd7xJMKQ2E0qPVVuzVfOAN9p CoEtT6sH5WbXtlw3kpDrZ4BLKVMp7lolY158s10XbGTJE1GLtI3m4OmDWItV/TwX 1oLsXEPZYrKoU/v22DAejtQ2vaDa14SBa4G4NFUlQIXKSaZyQ8tBZ9KNtG6lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqKvZE9a+XYvuRfaMfLCENhOJoyQwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrYyfospf7QO d9X7X3EJWBRD7fJgsdPGS/dbcCryHsocbGRfgJOPBxiX3GouVljVp3Z9qIR9/yyH MhbwFDYOWnUpmqpBwugZtgNjNWPzWehEVoZPBCCaYW1c3Tb8lCebvbZfEriuox7W kuaUQ1scKy4xiPqTlytY/+0ahOmSKiA7jsGJEQadrckP5zefL+gdclQhAfoKEUJx eKrCs+SeFOoQYRoJ8Xbcg1su/bWI87MQjrAtQdXrDFMm7TktSMTRO6hM7/EaOaWy sGMpUCDViyt34pDjaPK/Exu5mdo2VLw79S03N/i4wdedRuc78va0mz/WNwSsS6Lj yV0xdmI1uQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:54 2026 by rpki-client