$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: xyf4GY6hmZ8ekOZgbTyDb0aG2gDuC4m2tgxvQQboraU= Subject key identifier: DF:B4:CE:69:1E:FD:87:F0:C8:1A:AB:F7:79:3A:BF:2F:07:EE:20:23 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 1857B56863E13DBA55C8B3E1C8BDC752353FEB00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 0184 Signing time: Fri 29 May 2026 05:57:41 +0000 Manifest this update: Fri 29 May 2026 05:52:41 +0000 Manifest next update: Sat 30 May 2026 08:58:41 +0000 Files and hashes: 1: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 2: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 3: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 4: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 5: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 6: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 7: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 8: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 9: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: ORWOFjuyWrLPg8KO3ufFOxx7xgj00afy3Wf3uWcTq/M=) 10: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 11: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 12: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 13: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 14: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 15: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 16: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 17: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 18: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 19: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:57:b5:68:63:e1:3d:ba:55:c8:b3:e1:c8:bd:c7:52:35:3f:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: May 29 05:52:41 2026 GMT Not After : May 30 08:58:41 2026 GMT Subject: CN=DFB4CE691EFD87F0C81AABF7793ABF2F07EE2023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:5a:2e:7e:33:01:20:dc:93:f3:35:b6:84: 9b:fc:69:d9:47:48:8c:be:2b:38:ab:24:c1:22:f8: 44:6c:f1:f8:75:81:92:a9:0c:44:ea:ca:00:08:7d: a3:4c:b5:ec:15:5b:81:db:ab:02:a6:13:27:ac:c6: 24:85:55:9a:0f:f3:f2:5e:23:b3:53:db:18:49:cd: ad:bf:1c:71:66:65:59:a6:f0:5d:7a:8d:31:ac:1e: f1:32:23:64:00:5e:30:cd:4f:80:5d:8a:3c:66:ab: 28:b9:ca:18:be:79:c0:4d:64:4d:19:1d:28:96:b6: e2:40:eb:64:4b:c7:da:4d:fd:16:53:33:ef:9c:71: 88:19:5a:a8:0d:1e:0e:05:66:06:96:ef:da:8c:40: 86:9a:ab:99:96:69:cc:5e:04:d3:55:f9:62:19:b7: 1b:98:c2:79:1b:af:39:99:6e:fc:d8:7a:18:f9:0b: 5f:d1:9d:a6:4c:1a:29:20:ad:87:9f:f9:e8:c9:a2: 31:1f:0d:e8:17:6b:57:18:28:42:b1:0c:4b:0c:89: db:01:e1:85:96:77:da:2f:e5:42:67:e6:f1:d0:ea: bc:21:1f:81:ed:27:da:fa:89:94:ff:bf:82:5e:55: 0f:af:6c:e6:9f:ee:a6:50:0d:fd:eb:33:c2:63:68: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:CE:69:1E:FD:87:F0:C8:1A:AB:F7:79:3A:BF:2F:07:EE:20:23 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:58:6c:03:c5:00:20:01:fd:e8:76:54:b1:bb:99:c4:e5: c2:99:58:07:de:55:da:57:2f:37:b5:6a:be:9c:2d:69:dc:c4: fc:c2:2a:bd:63:70:d0:d0:2e:2b:3e:8b:a4:3d:40:fd:79:ee: 13:fc:a6:46:4d:be:24:c4:e3:20:8f:d2:c1:f0:52:13:6e:0d: 3e:43:32:33:eb:4e:30:63:f7:bc:bc:ee:8c:0b:d1:90:e4:1d: cd:22:e9:0f:67:74:3f:1a:68:9b:bd:ad:3e:c1:7b:0a:c3:b7: eb:b6:41:03:8d:80:56:3e:10:d6:11:ac:a0:03:0b:62:02:2a: 8f:c5:b8:71:34:09:2c:08:56:f2:61:e5:fd:2b:97:7d:fe:e5: a3:ed:9d:6a:64:a6:e5:71:79:f6:07:de:db:14:34:30:52:80: e7:cf:b7:1e:df:f6:3d:d0:c9:06:d7:8f:f4:05:9d:52:05:0f: e5:3d:aa:88:cd:ad:50:3a:8f:80:57:87:d8:eb:d5:c9:57:ba: 5d:44:82:1f:5a:dd:70:45:ad:41:d7:87:89:75:51:81:72:8a: 73:a8:ca:1a:b1:3d:f5:ef:db:be:b1:a0:e5:2e:ac:77:24:b1: 5a:e8:e0:b5:59:bd:58:2b:8d:8c:32:78:8a:22:18:24:bd:26: 0c:02:6a:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGFe1aGPhPbpVyLPhyL3HUjU/6wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA1MjkwNTUyNDFaFw0yNjA1MzAwODU4NDFaMDMxMTAvBgNV BAMTKERGQjRDRTY5MUVGRDg3RjBDODFBQUJGNzc5M0FCRjJGMDdFRTIwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6q1oufjMBINyT8zW2hJv8adlH SIy+KzirJMEi+ERs8fh1gZKpDETqygAIfaNMtewVW4HbqwKmEyesxiSFVZoP8/Je I7NT2xhJza2/HHFmZVmm8F16jTGsHvEyI2QAXjDNT4Bdijxmqyi5yhi+ecBNZE0Z HSiWtuJA62RLx9pN/RZTM++ccYgZWqgNHg4FZgaW79qMQIaaq5mWacxeBNNV+WIZ txuYwnkbrzmZbvzYehj5C1/RnaZMGikgrYef+ejJojEfDegXa1cYKEKxDEsMidsB 4YWWd9ov5UJn5vHQ6rwhH4HtJ9r6iZT/v4JeVQ+vbOaf7qZQDf3rM8JjaOlzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU37TOaR79h/DIGqv3eTq/LwfuICMwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntpYbAPFACAB /eh2VLG7mcTlwplYB95V2lcvN7VqvpwtadzE/MIqvWNw0NAuKz6LpD1A/XnuE/ym Rk2+JMTjII/SwfBSE24NPkMyM+tOMGP3vLzujAvRkOQdzSLpD2d0Pxpom72tPsF7 CsO367ZBA42AVj4Q1hGsoAMLYgIqj8W4cTQJLAhW8mHl/SuXff7lo+2damSm5XF5 9gfe2xQ0MFKA58+3Ht/2PdDJBteP9AWdUgUP5T2qiM2tUDqPgFeH2OvVyVe6XUSC H1rdcEWtQdeHiXVRgXKKc6jKGrE99e/bvrGg5S6sdySxWujgtVm9WCuNjDJ4iiIY JL0mDAJqPQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:21 2026 by rpki-client