$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: ChTF0hGKhCPckZ+6wc+O9jGsU43it9ZdN9jYI3KkupE= Subject key identifier: A7:58:2F:DA:57:32:48:0F:BA:19:F2:8A:26:A5:85:57:4D:7B:A5:52 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 51676D7310693C29D5A4F547978EC8205E5191CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: ED Signing time: Tue 14 Jul 2026 08:55:54 +0000 Manifest this update: Tue 14 Jul 2026 08:50:54 +0000 Manifest next update: Wed 15 Jul 2026 10:39:54 +0000 Files and hashes: 1: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 2: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 3: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: jdoMZfIN15Ubh/rhoCMt7H8imLbcMHwunder0NGpFbA=) 4: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 5: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:67:6d:73:10:69:3c:29:d5:a4:f5:47:97:8e:c8:20:5e:51:91:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jul 14 08:50:54 2026 GMT Not After : Jul 15 10:39:54 2026 GMT Subject: CN=A7582FDA5732480FBA19F28A26A585574D7BA552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:44:ee:33:68:1b:dd:c5:8a:32:be:d8:bd: 33:e7:a3:3e:87:78:b6:6b:88:d1:4d:04:3a:2b:26: 63:c6:c6:54:9d:8e:ee:d2:07:d9:ef:79:2c:6f:e1: 0d:4c:8b:17:f6:8d:ec:42:85:98:48:4f:9d:ac:bd: f8:b0:70:1b:98:95:db:6d:49:d5:f4:2c:5d:5b:86: b2:be:eb:69:07:47:ef:79:c9:d1:63:8d:77:49:c7: 66:fe:0d:2d:60:97:eb:15:9f:af:35:99:53:56:5b: a1:1d:f1:0c:cc:93:af:50:3b:0c:65:38:04:01:8d: 8c:65:51:96:5c:18:b5:b9:90:bd:90:b2:a4:06:0f: 52:31:8e:06:12:1e:4d:fd:eb:d7:16:35:49:01:1c: 11:ef:c1:3c:7e:46:f2:cc:0d:62:3c:a5:f7:7c:6f: 5e:66:3e:c1:c8:f5:56:74:69:46:d1:5a:4b:87:22: 5d:6a:32:c7:0a:ce:15:4a:51:58:fe:17:1d:99:65: e5:ce:bd:12:81:71:2f:52:9d:a6:29:0d:4b:e7:b9: d2:7c:d1:67:01:8b:4b:69:99:d8:ef:63:cb:12:53: 6b:59:ac:73:9f:6a:82:b0:59:02:b7:22:1b:4b:2e: 16:82:c7:71:68:05:49:20:85:33:c3:fb:a1:11:87: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:58:2F:DA:57:32:48:0F:BA:19:F2:8A:26:A5:85:57:4D:7B:A5:52 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d5:e1:c7:19:b1:ac:58:b5:02:c6:3c:f5:6f:91:e4:32:4d: 2f:c7:6f:76:4b:b6:df:ca:bf:0b:ad:cd:da:3a:8f:1a:8f:dc: 88:bd:87:65:6b:98:23:9f:3a:fe:f4:eb:fd:36:ec:fe:80:d3: fe:0e:ef:e8:0c:43:b4:20:03:63:db:06:c8:e6:58:45:7a:24: 8f:9b:63:0b:86:1b:df:c1:fe:f0:07:b2:17:26:a8:86:fb:3f: 5f:de:0f:60:b5:0f:30:36:88:59:a5:4c:7c:61:d1:d6:0e:00: fb:1a:1e:e9:87:2d:f1:e6:90:5c:85:87:1e:9b:5d:bf:f8:73: 20:38:c0:57:c9:81:05:c1:49:92:6a:8a:7e:c3:b8:c8:18:dc: b4:4f:b4:3b:ae:65:74:bb:ea:a1:e1:08:5e:e3:75:07:30:79: 61:80:07:6d:d9:4c:3c:52:85:a6:eb:f5:be:7f:13:2f:ea:6e: 11:9a:e8:dc:0d:fe:10:17:15:47:6c:27:93:3f:63:eb:0e:af: 0d:5b:20:5e:12:28:e5:9f:f4:00:45:10:73:0b:f5:94:13:f5: 23:29:c8:4c:dd:f5:3d:60:14:5d:f6:80:52:88:6d:25:28:93: 4e:5f:49:7f:3a:50:66:cb:9c:a2:0b:0f:d9:61:5c:03:70:1c: 9a:4e:d1:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUWdtcxBpPCnVpPVHl47IIF5RkcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA3MTQwODUwNTRaFw0yNjA3MTUxMDM5NTRaMDMxMTAvBgNV BAMTKEE3NTgyRkRBNTczMjQ4MEZCQTE5RjI4QTI2QTU4NTU3NEQ3QkE1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC780TuM2gb3cWKMr7YvTPnoz6H eLZriNFNBDorJmPGxlSdju7SB9nveSxv4Q1Mixf2jexChZhIT52svfiwcBuYldtt SdX0LF1bhrK+62kHR+95ydFjjXdJx2b+DS1gl+sVn681mVNWW6Ed8QzMk69QOwxl OAQBjYxlUZZcGLW5kL2QsqQGD1IxjgYSHk3969cWNUkBHBHvwTx+RvLMDWI8pfd8 b15mPsHI9VZ0aUbRWkuHIl1qMscKzhVKUVj+Fx2ZZeXOvRKBcS9SnaYpDUvnudJ8 0WcBi0tpmdjvY8sSU2tZrHOfaoKwWQK3IhtLLhaCx3FoBUkghTPD+6ERh+vnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp1gv2lcySA+6GfKKJqWFV017pVIwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNXhxxmxrFi1 AsY89W+R5DJNL8dvdku238q/C63N2jqPGo/ciL2HZWuYI586/vTr/Tbs/oDT/g7v 6AxDtCADY9sGyOZYRXokj5tjC4Yb38H+8AeyFyaohvs/X94PYLUPMDaIWaVMfGHR 1g4A+xoe6Yct8eaQXIWHHptdv/hzIDjAV8mBBcFJkmqKfsO4yBjctE+0O65ldLvq oeEIXuN1BzB5YYAHbdlMPFKFpuv1vn8TL+puEZro3A3+EBcVR2wnkz9j6w6vDVsg XhIo5Z/0AEUQcwv1lBP1IynITN31PWAUXfaAUohtJSiTTl9JfzpQZsucogsP2WFc A3Acmk7RrA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:18 2026 by rpki-client