$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft File: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft (raw, json) Hash identifier: DBzX2P6cSTOur1ao8R0Qa3Pl2+d0XRSx6uZQ8w48f4k= Subject key identifier: 8D:88:2D:26:6A:9B:1C:DD:69:4F:41:E6:46:D0:43:93:EF:EE:34:C3 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 435D1C58B88470664066F0D586804184213ADCCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft Manifest number: 9D Signing time: Wed 22 Apr 2026 02:44:01 +0000 Manifest this update: Wed 22 Apr 2026 02:39:01 +0000 Manifest next update: Thu 23 Apr 2026 06:19:01 +0000 Files and hashes: 1: 34322e39362e3132382e302f31372d3234203d3e203337393633.roa (hash: ++8O7Yy9r71Z40KkFC5fn2klXbDye9Wq9PHfdLP5VqQ=) 2: 3131302e37352e3136302e302f31392d3234203d3e203337393633.roa (hash: AX13UDzWLylbr13Btw7BngjcEx5xvvCKa+6nkDSrP2k=) 3: 34322e3135362e3132382e302f31372d3234203d3e203337393633.roa (hash: wFLO0MCdWnRxMl53uxpXs6etlFwFBKtF0IxlZGWOhzE=) 4: 3131352e32382e302e302f31352d3234203d3e203337393633.roa (hash: XnPKl+/JEplwm/WK08Thtb7z0ksM1JvmzW9Ppeb6mYM=) 5: 3131382e3137382e302e302f31362d3234203d3e203337393633.roa (hash: +O2TXpzep3vj9ZiXgpzn1odmEEygFr+fK3zS8m3HD2Q=) 6: 323430373a626330303a3a2f33322d3438203d3e203337393633.roa (hash: +haY8UqkEWYU9s9FGkdagnnD2aOzR+OUWWpUy84haQI=) 7: 3131322e3132352e302e302f31362d3234203d3e203337393633.roa (hash: aVwCtUf4CHRKNiIbNF2n4nOJkda7r3fi/o0daicqHfo=) 8: 34322e3132302e302e302f31352d3234203d3e203337393633.roa (hash: XXn7dZqY253iCMJnbdN08/MFfnd99iY+5H22pfKR8EE=) 9: 3131322e3132362e302e302f31352d3135203d3e203337393633.roa (hash: FdOZEfGKClBYoXB7pc6OA0OyxtCs3v7jL0QmWrkPMgg=) 10: 3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa (hash: NvYcvgpbx6I9/r422RHq98K59aloqU/WXru2lzELV3o=) 11: 3132332e35362e302e302f31352d3234203d3e203337393633.roa (hash: G4wfVtoubfJaFDIDeGXFZRkYA5B45naBkWWgLxWDVac=) 12: 3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa (hash: iyBkW1fLx32WzjJy8ihcbOC8GoVMn0HY64Rilhb95zY=) 13: 3130312e33372e302e302f31362d3234203d3e203337393633.roa (hash: yoDJaCa80Du317eps7/Dbh/7gEyBEOco8kvM39u+Ygk=) 14: 3131322e3132342e302e302f31362d3234203d3e203337393633.roa (hash: Mk/05zpZqtgnYq/+gGO7xCjBwe9RIZVxgBhE9qeWpDc=) 15: 323430383a343031363a3a2f33322d3332203d3e203234343239.roa (hash: JY6EyEHObFN70WtIyyCcgFcMUMI20Yh+7uSNKIo60Bg=) 16: 3131362e36322e302e302f31362d3234203d3e203337393633.roa (hash: JL4sfXHpEsaOzs3NoDK1xoTbKkD+6oEUVCwWmCfTuJ8=) 17: 3131322e37342e302e302f31362d3234203d3e203337393633.roa (hash: G3zmSVUd68hJoAuRfhCoY9LP5i9XMd7UlDxZdZGEgDc=) 18: 3131322e3132342e302e302f31342d3134203d3e203337393633.roa (hash: RlIzuqtLZFY/AyZ+gI2Uy7dDwcT3KJRDY+Kan/fqhVU=) 19: 3130312e3230302e302e302f31352d3234203d3e203337393633.roa (hash: zn/9l4qN57XLrwIEN7kb5sfk9KGOUZN72QrDd+bpvRE=) 20: 33392e3130342e302e302f31342d3234203d3e203337393633.roa (hash: NethCq3bBN2hZMvUerhl8DazE7biNiHeRO+YD1XBV3k=) 21: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl (hash: okfKcX+9GfHylWSsWS5KHUgf3TmcqHRbtRWjANi+CJE=) 22: 3131342e3231352e302e302f31362d3234203d3e203337393633.roa (hash: asRVDvkw9n5PwBBtla9aZDKA3N+T6k8ahpr54j5ukgA=) 23: 323430353a653030303a3a2f33322d3438203d3e203337393633.roa (hash: LLk+wL4dYmNtV+Ttmv8QW35kUZaNPcs2hOl7TcDkV+Y=) 24: 3131382e3139302e302e302f31362d3234203d3e203337393633.roa (hash: xQW9ojol45re4iNCAQGqC8ODlHa5bqX39lPKMWNMbPQ=) 25: 3131322e3132362e302e302f31362d3234203d3e203337393633.roa (hash: azRrezG+l+poPSWi8QrlWFGHsPHHzef6/dDX2yt64dc=) 26: 3131322e3132372e302e302f31362d3234203d3e203337393633.roa (hash: goE3v337E72XTpSyZ1GGzQZcIkJqpGaZayoHHRYCyyI=) 27: 36302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: qwwF5A0JJ6nFBOZg5wYlWgUNuVpu2phH0DDJZkpZgXM=) 28: 3130312e3133322e302e302f31352d3234203d3e203337393633.roa (hash: PgEayyjblxwmQtn5/ykMvfP/SGAD+IM6RqvWkL7jT/M=) 29: 3130362e31342e302e302f31352d3234203d3e203337393633.roa (hash: X9B3G/0KPD2nenQ2JO1Gt14x3vOlzC4plr3DaVVr8hY=) 30: 3131302e37362e33322e302f32302d3234203d3e203337393633.roa (hash: GEmJCg1FWBS4Zq8EQZHgl+GeCc9jHAdD/syjPDLZqcQ=) 31: 3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa (hash: d85GdIxTHF9Rw1pywiDP/VQLaUyACze09vZCzp1zdMw=) 32: 3132302e32342e302e302f31342d3234203d3e203337393633.roa (hash: JTo7Z0/h3QhoSCqjDWuPGZuPAJPMgo9fPkO3OFeblz0=) 33: 35392e3131302e302e302f31362d3234203d3e203337393633.roa (hash: /UuE+qfWK+I0fiLLJ5G1+T6+v+m5NU4fGU9YLuU8L2Q=) 34: 3131322e3132342e302e302f31352d3135203d3e203337393633.roa (hash: HrxzZSXdX7+SXiAtVFXWEaXNTmRFpOf1krlUUQGaq4Y=) 35: 3132302e35352e302e302f31362d3234203d3e203337393633.roa (hash: H+y/VzVbADmTJObePIg1uBs+BFcu4tKAHAOJgFR0ga8=) 36: 3138322e39322e302e302f31362d3234203d3e203337393633.roa (hash: OdF/UP9CvtI3ZgrFewffgy2Px7nIf73GB0Xi10doB34=) 37: 3131382e33312e302e302f31362d3234203d3e203337393633.roa (hash: oC00bR8DARTBt7yKWgZk4xdyJtfYgmgpq+qER1i9T2Y=) 38: 3132312e38392e302e302f31362d3234203d3e203337393633.roa (hash: aRmlBdC/MnO13qZTP+OkxSC+OOrQhcoCciBB6RX77hE=) 39: 3131342e35352e302e302f31362d3234203d3e203337393633.roa (hash: g8wkK1g2kNElzyj6dk/ukUFxRPxia6hbos25iyD1Eaw=) 40: 3132302e37362e302e302f31342d3234203d3e203337393633.roa (hash: Rh9B7yk0RWee/ttvw6MySqtyh6i0ION+3cEYdZQ5oGo=) 41: 3132312e3139362e302e302f31342d3234203d3e203337393633.roa (hash: VIK42kLl40M62M4NFFaGI0sCW//wqVXcQjLHAswJ7Cs=) 42: 323430363a323838303a3a2f33322d3438203d3e203337393633.roa (hash: rWCQVTBmLmXUSKc3bxnDItzi3nNjAIwB9tZw96f2FAA=) 43: 3131392e32332e302e302f31362d3234203d3e203337393633.roa (hash: cx1sOfb5xW2/Xf15D2rpaL/lETIhxiEt9i8EJhKrg6E=) 44: 3132312e34302e302e302f31342d3234203d3e203337393633.roa (hash: F+45dQDYE5GxI3QnVJJ+0Y/Yhf0LCMHLUg32Sa/qhCI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 04:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:1c:58:b8:84:70:66:40:66:f0:d5:86:80:41:84:21:3a:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 22 02:39:01 2026 GMT Not After : Apr 23 06:19:01 2026 GMT Subject: CN=8D882D266A9B1CDD694F41E646D04393EFEE34C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:4d:0b:16:b4:cc:64:8c:72:08:b6:4c:93: d5:4b:bf:b0:4c:f8:ae:f8:53:25:c7:d7:8e:03:26: 2c:46:c3:44:60:43:83:1e:2b:e3:28:9e:04:7b:05: 85:68:e2:dc:cd:b1:47:84:e6:b2:7d:83:16:2b:0e: a5:84:f4:09:c7:d4:56:74:7b:b4:bc:60:5b:54:84: 35:19:2e:40:a6:f1:5f:64:06:52:5b:d5:5d:e6:bb: 5e:50:fb:70:db:6f:19:b4:c1:de:70:24:fe:7c:13: 06:56:5e:ef:52:b4:ad:6f:f1:d6:a1:1d:4b:a3:f4: 50:95:99:d8:84:30:2f:11:86:f3:7c:41:35:0b:a4: 62:a2:28:2f:0e:7a:6c:a1:31:3f:12:7b:cb:18:fd: ad:d2:d6:5c:06:1a:d0:75:77:97:3d:4d:4a:25:0e: c6:c9:de:51:41:b4:90:25:4b:85:5e:bc:a5:8b:18: 0f:1c:b4:b8:12:d2:9d:ff:be:4f:0a:39:28:44:d7: 6a:2f:f8:5d:bd:01:4d:40:dd:ed:f7:7a:27:36:c1: 3c:a3:df:c9:27:f8:a2:51:d1:fa:68:5c:35:fa:a3: 90:dc:49:9d:af:c2:f7:87:64:44:c1:db:84:71:0e: f8:5c:0c:99:c0:ef:93:50:23:c4:44:50:47:a3:4d: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:88:2D:26:6A:9B:1C:DD:69:4F:41:E6:46:D0:43:93:EF:EE:34:C3 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a0:9d:68:29:9d:7c:2b:04:d3:58:a4:ba:e9:0f:fd:da:d7: d0:53:87:e9:3e:3b:09:c5:2e:9a:c3:72:e2:a4:85:69:e1:33: 29:90:40:34:8e:1d:f0:d0:20:c4:ac:8d:f4:67:7e:4d:58:62: ca:c2:e6:86:ce:ff:62:42:e7:6f:8c:3b:c6:21:bf:0b:5d:2d: 44:7b:ad:57:93:09:f2:fb:c0:51:04:d6:9c:19:c5:7d:e1:0d: 63:73:f9:f1:60:12:7c:13:b3:3c:2a:d0:02:4c:70:a8:54:ea: b8:aa:4d:cf:d1:6e:c9:16:93:ae:f5:9a:b0:b7:e3:a7:00:46: 71:e2:1e:28:61:a8:e3:08:05:81:d8:bd:79:1c:ec:5c:dc:74: 76:88:57:f1:6d:c8:55:79:31:6f:c2:ac:7e:79:d3:24:85:ac: 5a:b6:78:e3:ff:9e:aa:5c:0a:80:cf:b7:88:46:c2:7b:94:40: d1:cb:20:9f:93:ec:52:c6:e1:f5:7e:76:33:d9:29:21:eb:34: 16:d8:75:92:eb:49:d2:a9:4f:8a:4b:2f:86:75:6b:42:a3:4c: 4c:5c:9f:c0:f3:bc:c0:dc:78:d2:b3:3c:eb:80:6e:7e:70:6a: a1:2c:30:ae:60:ea:b2:e8:de:ed:bd:d4:1f:10:93:58:5e:d0: 15:14:10:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ10cWLiEcGZAZvDVhoBBhCE63M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjIwMjM5MDFaFw0yNjA0MjMwNjE5MDFaMDMxMTAvBgNV BAMTKDhEODgyRDI2NkE5QjFDREQ2OTRGNDFFNjQ2RDA0MzkzRUZFRTM0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+00LFrTMZIxyCLZMk9VLv7BM +K74UyXH144DJixGw0RgQ4MeK+MongR7BYVo4tzNsUeE5rJ9gxYrDqWE9AnH1FZ0 e7S8YFtUhDUZLkCm8V9kBlJb1V3mu15Q+3Dbbxm0wd5wJP58EwZWXu9StK1v8dah HUuj9FCVmdiEMC8RhvN8QTULpGKiKC8OemyhMT8Se8sY/a3S1lwGGtB1d5c9TUol DsbJ3lFBtJAlS4VevKWLGA8ctLgS0p3/vk8KOShE12ov+F29AU1A3e33eic2wTyj 38kn+KJR0fpoXDX6o5DcSZ2vwveHZETB24RxDvhcDJnA75NQI8REUEejTcCfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjYgtJmqbHN1pT0HmRtBDk+/uNMMwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC9CM0NBRkI1OUYxMEIw M0FEMjEwNkU4MjE1REJCOTAzRjE1N0QwQzhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6CdaCmdfCsE 01ikuukP/drX0FOH6T47CcUumsNy4qSFaeEzKZBANI4d8NAgxKyN9Gd+TVhiysLm hs7/YkLnb4w7xiG/C10tRHutV5MJ8vvAUQTWnBnFfeENY3P58WASfBOzPCrQAkxw qFTquKpNz9FuyRaTrvWasLfjpwBGceIeKGGo4wgFgdi9eRzsXNx0dohX8W3IVXkx b8KsfnnTJIWsWrZ44/+eqlwKgM+3iEbCe5RA0csgn5PsUsbh9X52M9kpIes0Fth1 kutJ0qlPiksvhnVrQqNMTFyfwPO8wNx40rM864BufnBqoSwwrmDqsuje7b3UHxCT WF7QFRQQ1w== -----END CERTIFICATE-----Generated at Wed Apr 22 05:26:31 2026 by rpki-client