$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: 7n0rQH1V4fXLpcFH+jvspNQ/uBQQV+2wUSFEcewDnyE= Subject key identifier: B1:DA:0C:B4:C4:02:DE:B0:78:83:04:0E:14:8C:E4:26:72:0D:45:40 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 3B752A3E4BB244D485507B3CC739D5EF0983DFA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 013F Signing time: Wed 14 Oct 2026 18:39:24 +0000 Manifest this update: Wed 14 Oct 2026 18:34:24 +0000 Manifest next update: Sun 18 Oct 2026 02:39:24 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 4: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: PqB3wMBuNPdvKS8sPmiLQnwJMd5L1iM2KCaU5yQUtos=) 5: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:75:2a:3e:4b:b2:44:d4:85:50:7b:3c:c7:39:d5:ef:09:83:df:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Oct 14 18:34:24 2026 GMT Not After : Oct 18 02:39:24 2026 GMT Subject: CN=B1DA0CB4C402DEB07883040E148CE426720D4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:09:88:42:e4:33:a9:42:cc:62:f4:b7:c1:d2: 46:71:56:2c:f0:b1:ea:d6:8d:5e:10:d6:3f:93:15: 10:e1:2d:8e:32:93:5e:79:6d:0b:b7:8e:03:d5:cc: e7:04:a0:0b:82:02:28:aa:54:d7:44:79:ce:d6:8a: 5b:1f:a9:ee:d1:5a:61:f1:24:0e:4d:94:c1:5e:53: 38:45:0c:b6:c8:1a:24:66:2b:e3:0a:5a:52:19:02: a1:4c:a7:93:c0:2d:43:ed:db:1c:95:19:e4:f5:2b: 20:8a:f7:76:74:be:11:28:58:81:1e:85:6e:60:a1: c2:b7:a4:6c:b2:61:3c:c5:7c:38:41:f9:cc:9c:ef: 34:6a:c2:e8:c4:f5:0e:b7:9e:54:31:70:87:30:d3: ec:5a:34:13:ed:e9:f1:a6:bd:be:be:61:34:f3:fc: 4e:8a:7f:57:58:eb:fc:b2:99:46:1b:08:ce:ea:d8: c8:ab:78:de:d9:45:6a:11:94:c6:56:15:8c:47:e5: b7:9c:81:22:8d:8f:73:b0:41:08:19:e4:15:94:40: 2a:c0:09:23:cd:55:c2:31:89:2a:56:ce:25:50:2d: 23:35:e5:ed:25:7b:e9:35:d3:80:fd:86:75:ba:d7: 6f:e5:60:9d:c3:83:4a:ae:0d:cc:cd:e6:6d:20:1d: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DA:0C:B4:C4:02:DE:B0:78:83:04:0E:14:8C:E4:26:72:0D:45:40 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:62:dc:34:df:8e:c1:01:26:ec:95:32:0b:b7:ed:11:b5:de: e4:83:86:d8:a7:75:d2:ba:af:5e:d4:ad:f3:3c:b0:c0:05:53: 19:1b:16:fa:48:c6:24:d6:51:00:14:1a:91:bf:b0:fb:41:89: f2:f2:bb:8b:c9:5d:f0:21:52:8c:79:ec:60:b1:a5:df:78:b0: 4c:9d:94:38:7c:af:a0:a7:6a:12:ee:51:15:c3:1f:8a:5a:13: 78:14:a0:0c:23:37:93:44:bd:86:4a:5a:a3:60:da:6f:95:e7: ba:8c:65:5e:46:af:a0:f1:5c:f4:bf:be:e2:df:e0:9f:03:c9: 82:fb:66:a3:cf:5c:a8:ea:af:ea:15:3f:7c:e5:83:a4:da:21: 10:8a:c7:c1:dc:7b:d3:ca:10:f4:13:34:8a:8e:6b:ff:fd:8e: 93:b2:8d:66:61:1b:62:74:27:0a:9d:39:02:51:05:8d:ab:c9: f6:e2:57:c8:7b:d1:59:68:0a:dd:1c:ae:fa:55:48:fb:2e:5b: 65:13:18:ac:cd:93:76:7b:46:83:25:eb:14:fe:bf:c1:c3:32: 65:57:d1:1c:73:ec:15:57:eb:fe:dd:3c:65:32:5f:1f:5f:68: 5f:40:50:bd:a8:e8:0c:90:98:3e:95:f0:0d:9d:35:71:78:06: 36:c9:58:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO3UqPkuyRNSFUHs8xznV7wmD36IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjEwMTQxODM0MjRaFw0yNjEwMTgwMjM5MjRaMDMxMTAvBgNV BAMTKEIxREEwQ0I0QzQwMkRFQjA3ODgzMDQwRTE0OENFNDI2NzIwRDQ1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcCYhC5DOpQsxi9LfB0kZxVizw serWjV4Q1j+TFRDhLY4yk155bQu3jgPVzOcEoAuCAiiqVNdEec7Wilsfqe7RWmHx JA5NlMFeUzhFDLbIGiRmK+MKWlIZAqFMp5PALUPt2xyVGeT1KyCK93Z0vhEoWIEe hW5gocK3pGyyYTzFfDhB+cyc7zRqwujE9Q63nlQxcIcw0+xaNBPt6fGmvb6+YTTz /E6Kf1dY6/yymUYbCM7q2MireN7ZRWoRlMZWFYxH5becgSKNj3OwQQgZ5BWUQCrA CSPNVcIxiSpWziVQLSM15e0le+k104D9hnW612/lYJ3Dg0quDczN5m0gHXF7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsdoMtMQC3rB4gwQOFIzkJnINRUAwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGLcNN+OwQEm 7JUyC7ftEbXe5IOG2Kd10rqvXtSt8zywwAVTGRsW+kjGJNZRABQakb+w+0GJ8vK7 i8ld8CFSjHnsYLGl33iwTJ2UOHyvoKdqEu5RFcMfiloTeBSgDCM3k0S9hkpao2Da b5XnuoxlXkavoPFc9L++4t/gnwPJgvtmo89cqOqv6hU/fOWDpNohEIrHwdx708oQ 9BM0io5r//2Ok7KNZmEbYnQnCp05AlEFjavJ9uJXyHvRWWgK3Ryu+lVI+y5bZRMY rM2TdntGgyXrFP6/wcMyZVfRHHPsFVfr/t08ZTJfH19oX0BQvajoDJCYPpXwDZ01 cXgGNslYCQ== -----END CERTIFICATE-----Generated at Thu Oct 15 15:22:54 2026 by rpki-client