$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: 03Hm04qosi6ODurzc+LNyhdUSVpBs/rLAUaQmgVxus4= Subject key identifier: 11:A9:11:6B:EA:BA:91:49:D5:61:76:6F:4F:88:AF:01:6B:54:C0:75 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 1053A1385A924B215A62C74B5B9C21CB83B32901 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: B0 Signing time: Fri 29 May 2026 14:52:58 +0000 Manifest this update: Fri 29 May 2026 14:47:58 +0000 Manifest next update: Sat 30 May 2026 16:30:58 +0000 Files and hashes: 1: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: GCq1ypGHl7USfgesEAwkSSHFa3S4n981/cApLPw2IjM=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 4: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 5: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:53:a1:38:5a:92:4b:21:5a:62:c7:4b:5b:9c:21:cb:83:b3:29:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: May 29 14:47:58 2026 GMT Not After : May 30 16:30:58 2026 GMT Subject: CN=11A9116BEABA9149D561766F4F88AF016B54C075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:2a:03:89:e8:b5:7a:03:fd:84:5c:da:f4: 66:08:66:a9:ef:aa:f6:7b:c5:b0:2b:f4:c8:51:10: 75:e6:f1:c8:b5:77:fb:80:9f:4e:50:4d:91:96:7e: c0:18:ba:30:de:ce:4f:3a:c9:c8:58:46:8f:1a:c7: 14:02:70:10:94:95:8b:f4:8b:9f:37:26:f0:f1:51: 56:6c:c2:6f:12:25:c1:28:8e:58:24:5e:d2:8b:f3: 0a:e0:75:af:eb:78:47:b2:b9:b5:32:f1:f4:4c:95: 4a:aa:b6:ba:3b:47:d5:79:b3:1b:8f:4a:51:de:03: dc:0c:e6:b2:a2:49:a1:9d:e9:3e:f8:07:6a:4a:ef: 67:e2:25:a1:db:0b:c5:55:ea:a4:57:26:1b:8c:02: e0:6c:71:ec:f8:a5:10:49:bd:47:6e:00:99:67:cf: 93:32:60:19:b9:c1:32:80:03:0a:7b:62:cb:1b:63: fb:99:5f:45:8b:23:2d:a5:54:39:66:b6:21:89:fe: 7f:f6:60:12:18:a5:eb:ab:e0:14:a8:62:75:d3:53: 62:08:f1:3a:4c:0e:a5:83:23:9a:d5:03:97:1e:6b: e3:0d:c3:2c:6c:55:01:3a:b7:6c:c0:45:24:81:db: 6a:34:92:8f:f9:96:3f:af:ae:1d:e9:42:05:4a:62: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A9:11:6B:EA:BA:91:49:D5:61:76:6F:4F:88:AF:01:6B:54:C0:75 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:35:46:06:a9:06:62:57:02:73:f9:48:1f:4d:d5:7b:99:b1: 30:5d:74:c7:a6:2d:b2:e1:22:7a:06:e8:ea:33:11:9d:14:81: 0a:27:ba:bd:02:7c:67:76:33:d6:b7:7b:1f:a1:59:bb:4b:cd: 10:92:ca:73:92:9b:0c:8c:da:8e:6a:0d:7e:d2:07:5c:99:90: d0:b0:8c:a5:75:42:2e:41:96:4f:6b:ca:0c:5c:24:21:3f:3f: 0e:ab:a8:bb:56:0e:6d:48:dc:4c:7e:9c:21:0f:f3:05:20:cc: 9d:08:15:21:1b:2d:bf:11:df:28:3c:58:f4:e1:07:5f:5a:01: 71:e0:2a:2d:b2:55:c9:89:f9:80:27:6f:82:f7:20:35:83:8e: ff:d6:59:78:fc:f7:c5:ab:b8:d0:52:3b:4d:1e:e3:82:2f:58: c1:43:aa:d3:14:f7:7b:53:fe:6c:05:d1:f4:41:51:81:51:98: 5f:7a:6d:62:42:ed:76:e9:4d:23:3e:6b:b4:6a:b4:6b:2c:bb: 09:ae:7f:48:9a:74:ee:93:f6:52:cb:70:27:9e:d3:72:a6:89: 86:ea:3e:67:e8:b9:77:b2:d1:47:19:3d:d9:a3:b2:76:f6:d8: 04:24:3c:36:fc:36:e2:25:63:06:c8:e8:4a:9c:a8:dc:7b:e5: 16:99:28:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEFOhOFqSSyFaYsdLW5why4OzKQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA1MjkxNDQ3NThaFw0yNjA1MzAxNjMwNThaMDMxMTAvBgNV BAMTKDExQTkxMTZCRUFCQTkxNDlENTYxNzY2RjRGODhBRjAxNkI1NEMwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrayoDiei1egP9hFza9GYIZqnv qvZ7xbAr9MhREHXm8ci1d/uAn05QTZGWfsAYujDezk86ychYRo8axxQCcBCUlYv0 i583JvDxUVZswm8SJcEojlgkXtKL8wrgda/reEeyubUy8fRMlUqqtro7R9V5sxuP SlHeA9wM5rKiSaGd6T74B2pK72fiJaHbC8VV6qRXJhuMAuBscez4pRBJvUduAJln z5MyYBm5wTKAAwp7YssbY/uZX0WLIy2lVDlmtiGJ/n/2YBIYpeur4BSoYnXTU2II 8TpMDqWDI5rVA5cea+MNwyxsVQE6t2zARSSB22o0ko/5lj+vrh3pQgVKYhdHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEakRa+q6kUnVYXZvT4ivAWtUwHUwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDVGBqkGYlcC c/lIH03Ve5mxMF10x6YtsuEiegbo6jMRnRSBCie6vQJ8Z3Yz1rd7H6FZu0vNEJLK c5KbDIzajmoNftIHXJmQ0LCMpXVCLkGWT2vKDFwkIT8/Dquou1YObUjcTH6cIQ/z BSDMnQgVIRstvxHfKDxY9OEHX1oBceAqLbJVyYn5gCdvgvcgNYOO/9ZZePz3xau4 0FI7TR7jgi9YwUOq0xT3e1P+bAXR9EFRgVGYX3ptYkLtdulNIz5rtGq0ayy7Ca5/ SJp07pP2UstwJ57TcqaJhuo+Z+i5d7LRRxk92aOydvbYBCQ8Nvw24iVjBsjoSpyo 3HvlFpkoNQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client