$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: vOJ+iCafLhthdIfpWsuSsDqWwSx89s90PJsjDySlaRM= Subject key identifier: 68:F8:E0:19:99:9D:85:D5:74:87:98:C9:0D:5C:61:32:B6:29:0E:DA Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 3BE0FDE2C320AF8132DDA2428598A5F49848272B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 012A Signing time: Fri 28 Aug 2026 06:47:37 +0000 Manifest this update: Fri 28 Aug 2026 06:42:37 +0000 Manifest next update: Mon 31 Aug 2026 08:21:37 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 4: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: TPrBuoSslPJDA4bMQlhEYycSrbCyj0oIJAWliW2lcWw=) 5: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e0:fd:e2:c3:20:af:81:32:dd:a2:42:85:98:a5:f4:98:48:27:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Aug 28 06:42:37 2026 GMT Not After : Aug 31 08:21:37 2026 GMT Subject: CN=68F8E019999D85D5748798C90D5C6132B6290EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:98:6d:b2:61:40:a2:cb:d3:5a:20:70:6c: 7e:e8:49:36:fe:fe:36:a1:cd:ae:74:f9:2e:46:cc: d7:08:a4:7b:39:d1:1c:06:24:94:97:d6:01:9b:8e: 86:49:0a:7f:4a:9f:a6:02:8a:ea:25:32:bf:30:3d: c0:6f:5a:ed:c9:b9:e9:c2:16:99:57:02:a8:3d:8e: 47:b1:b1:d2:9a:06:d4:5f:e3:42:c6:94:11:ad:f6: 46:83:95:ef:ce:45:f6:0f:37:39:dd:c9:6e:65:b8: 51:88:d6:6d:a1:51:f8:14:bd:3b:37:b7:85:6d:5d: c1:2c:93:f5:68:9e:68:0c:c4:46:4e:81:f3:08:66: 05:af:92:57:3d:b4:59:28:87:24:63:73:2e:7d:bb: f4:bd:e5:5d:e1:c6:d5:e7:f4:00:06:88:4b:90:a8: 7f:40:5e:70:de:69:46:b2:ba:cf:10:05:90:bb:fa: bf:6c:5a:c8:dc:1d:35:ae:7b:6c:32:56:b0:7d:fb: ae:f0:97:42:e3:ee:8a:6f:ac:a9:8c:38:e3:3d:68: c2:88:93:49:1a:96:ab:8f:31:ea:9d:70:55:9d:51: b1:df:31:d0:ee:fd:a1:3e:25:c4:7b:6c:d0:b9:7b: 89:51:54:17:90:01:0e:32:65:0c:26:16:e6:cc:40: 51:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:E0:19:99:9D:85:D5:74:87:98:C9:0D:5C:61:32:B6:29:0E:DA X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:04:1c:6d:b0:a3:3b:18:2e:6e:4d:d4:f8:b2:25:93:0f:2f: 0f:6a:b5:ba:0f:fa:95:76:d9:20:20:49:3f:32:58:b6:5f:1a: 30:65:33:d8:1c:96:c2:98:d1:3c:5c:6b:c9:84:9d:9b:6a:2a: 7f:23:d1:a1:b0:6f:d8:a8:f9:47:88:e7:f7:7b:bb:af:e3:f2: 0e:d3:d6:5a:e6:5c:8d:13:0b:27:41:52:b0:5d:e7:1b:31:ae: 4d:11:ae:ca:aa:fe:a9:ff:63:ee:da:4d:3d:b4:a4:b6:01:d3: 21:06:40:1d:15:08:e2:91:4b:ec:7a:86:78:64:98:bd:a4:c8: 50:d4:ad:85:65:7e:56:14:aa:ec:1c:39:df:e6:2a:d1:4b:bf: 07:91:25:3a:f3:5e:5a:70:4c:da:69:15:29:5a:4e:76:7b:42: 82:a4:81:85:70:b0:f1:6c:a7:58:0d:9f:61:33:32:e7:7f:85: e8:75:1d:dd:ae:f8:57:bb:72:ff:b1:60:f0:82:45:3a:43:5f: 88:2d:ea:20:6f:d7:9f:62:b8:53:b9:51:bf:9e:f6:2b:7f:6c: 06:e5:18:db:b5:a2:e2:96:4e:ad:c3:07:8e:0e:b5:39:03:b4: 71:89:21:a2:d3:04:b6:35:4d:c9:65:ca:8d:5e:31:eb:4f:fb: a5:9f:ff:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO+D94sMgr4Ey3aJChZil9JhIJyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA4MjgwNjQyMzdaFw0yNjA4MzEwODIxMzdaMDMxMTAvBgNV BAMTKDY4RjhFMDE5OTk5RDg1RDU3NDg3OThDOTBENUM2MTMyQjYyOTBFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdZhtsmFAosvTWiBwbH7oSTb+ /jahza50+S5GzNcIpHs50RwGJJSX1gGbjoZJCn9Kn6YCiuolMr8wPcBvWu3JuenC FplXAqg9jkexsdKaBtRf40LGlBGt9kaDle/ORfYPNzndyW5luFGI1m2hUfgUvTs3 t4VtXcEsk/VonmgMxEZOgfMIZgWvklc9tFkohyRjcy59u/S95V3hxtXn9AAGiEuQ qH9AXnDeaUayus8QBZC7+r9sWsjcHTWue2wyVrB9+67wl0Lj7opvrKmMOOM9aMKI k0kalquPMeqdcFWdUbHfMdDu/aE+JcR7bNC5e4lRVBeQAQ4yZQwmFubMQFFRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaPjgGZmdhdV0h5jJDVxhMrYpDtowHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwQcbbCjOxgu bk3U+LIlkw8vD2q1ug/6lXbZICBJPzJYtl8aMGUz2ByWwpjRPFxryYSdm2oqfyPR obBv2Kj5R4jn93u7r+PyDtPWWuZcjRMLJ0FSsF3nGzGuTRGuyqr+qf9j7tpNPbSk tgHTIQZAHRUI4pFL7HqGeGSYvaTIUNSthWV+VhSq7Bw53+Yq0Uu/B5ElOvNeWnBM 2mkVKVpOdntCgqSBhXCw8WynWA2fYTMy53+F6HUd3a74V7ty/7Fg8IJFOkNfiC3q IG/Xn2K4U7lRv572K39sBuUY27Wi4pZOrcMHjg61OQO0cYkhotMEtjVNyWXKjV4x 60/7pZ//jQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:00 2026 by rpki-client