$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: NoW6f9y/wVQmDBokKpvzaSnHkHo3wE7U/dkBeljUslQ= Subject key identifier: 3D:DF:2C:FC:06:D7:05:E7:99:3E:18:29:6B:1F:27:68:E6:91:CE:04 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 33C116468674945A297DA560585399BF8A6BA370 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 72 Signing time: Mon 13 Apr 2026 08:29:17 +0000 Manifest this update: Mon 13 Apr 2026 08:24:17 +0000 Manifest next update: Tue 14 Apr 2026 10:41:17 +0000 Files and hashes: 1: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 3: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: 8b9mVafuXR+LmaGm/SUUw4VUSH8RdrioSt0zKgsf2jU=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 5: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:16:46:86:74:94:5a:29:7d:a5:60:58:53:99:bf:8a:6b:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Apr 13 08:24:17 2026 GMT Not After : Apr 14 10:41:17 2026 GMT Subject: CN=3DDF2CFC06D705E7993E18296B1F2768E691CE04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:e6:b8:58:0a:6a:bc:db:27:3b:9a:dc:50: af:dd:a0:00:56:8c:41:2e:2e:22:78:b5:da:04:c2: 3c:31:ec:08:35:38:67:74:b1:52:42:f5:42:1a:f9: c5:ea:f1:e0:9a:7f:2e:67:84:06:51:2f:b1:bf:44: 9d:e0:de:bc:ca:48:b1:7d:f3:82:93:4e:ec:ff:b9: a3:69:50:fd:d7:fe:fa:5a:1b:5e:7c:7d:a7:48:b9: 1e:f8:a5:47:b1:c3:b8:27:ed:72:a2:1f:17:a0:d8: 45:8c:33:e2:4d:4e:68:26:8c:5a:13:d4:84:b4:42: 0d:be:05:ae:7d:6b:6e:1d:0d:5a:5e:a6:e2:37:11: 02:71:bc:36:cd:e9:3c:34:0a:c1:c9:34:4c:15:c9: 27:9e:c9:28:78:e7:ea:f1:99:d2:5f:8c:4f:84:2e: 79:57:7f:db:3f:81:66:bc:72:08:0f:34:bd:72:12: 57:43:3b:6f:a7:c4:68:17:aa:94:5c:bb:91:85:a5: d1:b2:13:8d:8a:51:67:8d:6e:77:63:d5:8c:b9:58: d5:32:b6:7e:f6:d1:26:be:14:65:10:d4:55:0e:af: 88:18:34:d1:89:4a:c7:8e:55:25:0a:fe:1d:85:43: 08:49:82:a2:c2:43:3b:bc:e9:bc:fc:b2:88:2f:49: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:2C:FC:06:D7:05:E7:99:3E:18:29:6B:1F:27:68:E6:91:CE:04 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:42:50:21:4e:86:45:4e:ca:b2:33:1d:85:dd:f5:60:a6:b9: cf:61:80:58:05:0b:fa:ec:db:37:f7:35:21:2d:68:ef:af:b3: 49:4f:6b:ae:cd:e9:2d:37:55:a1:b6:c7:a8:e7:fe:19:77:d5: 01:53:01:d0:20:3b:74:70:e5:8f:89:96:de:f6:2e:59:65:e4: cd:81:d6:7e:2a:17:60:05:96:77:51:dc:98:1f:0f:22:57:af: d9:82:eb:f2:c6:34:8e:0c:1e:41:ff:8b:d2:6c:d9:04:98:24: 89:33:fd:7d:5c:7d:72:49:be:4c:2b:fc:06:30:2b:e2:ff:57: 86:29:5c:48:47:ab:19:91:f8:0f:0d:86:af:14:2c:ca:06:01: 97:f4:0b:4b:70:9a:2c:94:c5:dd:c2:94:64:79:92:ae:b8:90: 1a:13:53:2c:28:b6:d7:ec:dc:df:67:5b:18:4c:13:d1:0a:a4: 8e:be:e4:b1:f4:9f:6c:0e:6b:85:a2:a8:0a:7f:c5:f8:bd:f6: e7:b2:e0:b7:56:f0:be:b3:da:30:2c:85:4c:7c:0b:d0:c4:95: cb:45:ce:60:fc:a9:32:1b:55:6e:9d:e8:4a:df:55:d5:69:81: 87:39:07:80:cd:02:a8:11:d4:b9:cc:14:00:46:aa:16:93:d6: 02:ec:cc:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM8EWRoZ0lFopfaVgWFOZv4pro3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA0MTMwODI0MTdaFw0yNjA0MTQxMDQxMTdaMDMxMTAvBgNV BAMTKDNEREYyQ0ZDMDZENzA1RTc5OTNFMTgyOTZCMUYyNzY4RTY5MUNFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNea4WApqvNsnO5rcUK/doABW jEEuLiJ4tdoEwjwx7Ag1OGd0sVJC9UIa+cXq8eCafy5nhAZRL7G/RJ3g3rzKSLF9 84KTTuz/uaNpUP3X/vpaG158fadIuR74pUexw7gn7XKiHxeg2EWMM+JNTmgmjFoT 1IS0Qg2+Ba59a24dDVpepuI3EQJxvDbN6Tw0CsHJNEwVySeeySh45+rxmdJfjE+E LnlXf9s/gWa8cggPNL1yEldDO2+nxGgXqpRcu5GFpdGyE42KUWeNbndj1Yy5WNUy tn720Sa+FGUQ1FUOr4gYNNGJSseOVSUK/h2FQwhJgqLCQzu86bz8sogvSeTZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPd8s/AbXBeeZPhgpax8naOaRzgQwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkJQIU6GRU7K sjMdhd31YKa5z2GAWAUL+uzbN/c1IS1o76+zSU9rrs3pLTdVobbHqOf+GXfVAVMB 0CA7dHDlj4mW3vYuWWXkzYHWfioXYAWWd1HcmB8PIlev2YLr8sY0jgweQf+L0mzZ BJgkiTP9fVx9ckm+TCv8BjAr4v9XhilcSEerGZH4Dw2GrxQsygYBl/QLS3CaLJTF 3cKUZHmSrriQGhNTLCi21+zc32dbGEwT0Qqkjr7ksfSfbA5rhaKoCn/F+L3257Lg t1bwvrPaMCyFTHwL0MSVy0XOYPypMhtVbp3oSt9V1WmBhzkHgM0CqBHUucwUAEaq FpPWAuzMkw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client