$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: tkimVuvjlzY2D+cwt7TVukv415XDPNIiUsSPtVx3gZA= Subject key identifier: 7E:5F:D1:97:15:67:9C:D0:5F:EA:7C:7C:8F:C3:B8:57:4F:34:B6:27 Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 3A324E8B17BA3C08C83EE9D1262C04D2D64FE80D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 03:23:29 +0000 Manifest this update: Wed 14 Oct 2026 03:18:29 +0000 Manifest next update: Sat 17 Oct 2026 07:57:29 +0000 Files and hashes: 1: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 2: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 3: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) 4: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: NK7fQ/ctiAuxgHnQELAh2LnK0tKv/gRm7kWRUZLruH4=) 5: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 6: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 7: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 8: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 9: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 10: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 11: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 07:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:4e:8b:17:ba:3c:08:c8:3e:e9:d1:26:2c:04:d2:d6:4f:e8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Oct 14 03:18:29 2026 GMT Not After : Oct 17 07:57:29 2026 GMT Subject: CN=7E5FD19715679CD05FEA7C7C8FC3B8574F34B627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:85:e0:3f:f9:b3:89:82:8f:6d:5a:d3:4f: 6b:60:cb:1a:55:b8:1b:9e:d4:1d:04:09:5c:21:1c: c4:5a:ab:06:46:be:66:d2:f7:b6:64:df:8a:0d:6f: 83:56:4e:39:db:82:e2:72:80:02:36:c6:f5:05:21: 32:50:f4:33:b0:18:b9:98:5f:09:f5:f6:ee:3d:75: c1:4b:6f:ca:4d:bb:50:8a:20:db:19:ad:71:32:e4: e8:9d:4f:f8:f3:4e:a5:d7:2d:35:36:3c:7f:5b:e9: 41:49:ff:e8:64:86:ae:cf:47:6c:1e:4a:64:cc:e1: a6:e8:fe:43:d2:8f:65:64:de:61:e8:42:a7:44:32: d3:4c:27:02:5a:e0:01:bd:76:92:eb:19:84:65:b9: ca:4f:e3:05:6f:b9:1b:08:11:ab:ba:25:9d:2f:62: 41:69:b9:a4:92:88:6b:25:77:4c:b8:fd:a2:10:14: 68:bc:43:6b:48:d7:eb:1c:93:b2:c9:89:b6:dd:1c: 07:51:2f:b8:cf:df:7c:34:bc:e2:ec:30:70:2e:55: 12:0c:58:00:cc:ce:d4:09:7d:38:00:32:98:a7:67: e2:f1:04:86:72:76:85:48:cd:1b:7e:19:56:95:ea: 0f:35:8c:32:db:11:6d:ef:6a:9a:42:ed:71:25:60: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:D1:97:15:67:9C:D0:5F:EA:7C:7C:8F:C3:B8:57:4F:34:B6:27 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fa:3d:a6:36:34:55:ba:77:b2:3b:21:75:44:f7:93:e4:e2: fe:dc:03:a4:4c:d2:fd:0e:57:be:5d:35:2c:eb:af:b1:f8:ab: f9:b8:be:b8:6c:da:d2:6b:c5:f8:05:cc:d0:29:92:5c:6b:a6: e2:86:2f:7c:67:b6:ab:93:76:db:1f:d2:8a:82:c0:7b:6e:17: d9:29:c9:5d:92:6e:7a:c7:78:5b:76:3d:31:6a:da:91:b8:25: 98:26:75:45:c1:2f:49:2b:43:25:fa:59:32:e6:95:72:2a:a3: 91:22:b0:af:65:60:a0:b9:2c:e8:3c:e5:d1:56:62:09:ba:d9: 91:96:7c:e5:1a:39:af:ec:55:74:72:e4:79:a1:7c:89:46:dc: eb:0c:76:30:a1:94:33:13:2d:3d:49:ed:6b:15:54:c3:ca:f9: 1e:96:f9:88:8e:a0:8d:cc:ec:48:a4:f5:1f:21:a8:78:cb:e0: f0:b1:49:8a:78:62:0e:3b:69:0d:6e:35:64:bb:f7:f5:8a:aa: 73:dc:16:52:c3:a4:4a:a1:61:78:b2:fb:66:69:ad:9d:97:96: 27:36:98:d7:4e:32:1b:b2:8c:54:98:1c:f7:9c:06:a0:38:81: 3c:a5:63:16:4d:d8:57:c4:5d:2f:04:5a:d2:e5:dc:46:76:c5: 74:e4:a1:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOjJOixe6PAjIPunRJiwE0tZP6A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjEwMTQwMzE4MjlaFw0yNjEwMTcwNzU3MjlaMDMxMTAvBgNV BAMTKDdFNUZEMTk3MTU2NzlDRDA1RkVBN0M3QzhGQzNCODU3NEYzNEI2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQYXgP/mziYKPbVrTT2tgyxpV uBue1B0ECVwhHMRaqwZGvmbS97Zk34oNb4NWTjnbguJygAI2xvUFITJQ9DOwGLmY Xwn19u49dcFLb8pNu1CKINsZrXEy5OidT/jzTqXXLTU2PH9b6UFJ/+hkhq7PR2we SmTM4abo/kPSj2Vk3mHoQqdEMtNMJwJa4AG9dpLrGYRlucpP4wVvuRsIEau6JZ0v YkFpuaSSiGsld0y4/aIQFGi8Q2tI1+sck7LJibbdHAdRL7jP33w0vOLsMHAuVRIM WADMztQJfTgAMpinZ+LxBIZydoVIzRt+GVaV6g81jDLbEW3vappC7XElYOcHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfl/RlxVnnNBf6nx8j8O4V080ticwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/o9pjY0Vbp3 sjshdUT3k+Ti/twDpEzS/Q5Xvl01LOuvsfir+bi+uGza0mvF+AXM0CmSXGum4oYv fGe2q5N22x/SioLAe24X2SnJXZJuesd4W3Y9MWrakbglmCZ1RcEvSStDJfpZMuaV ciqjkSKwr2VgoLks6Dzl0VZiCbrZkZZ85Ro5r+xVdHLkeaF8iUbc6wx2MKGUMxMt PUntaxVUw8r5Hpb5iI6gjczsSKT1HyGoeMvg8LFJinhiDjtpDW41ZLv39Yqqc9wW UsOkSqFheLL7ZmmtnZeWJzaY104yG7KMVJgc95wGoDiBPKVjFk3YV8RdLwRa0uXc RnbFdOShfA== -----END CERTIFICATE-----Generated at Wed Oct 14 17:13:59 2026 by rpki-client