$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: 4bHNJthJFYqD8hHiuJGqlmpNGKK3fSwIk3V2BWUY4rE= Subject key identifier: 3A:74:EE:ED:7D:B2:22:11:72:47:C9:9B:99:02:FC:07:EB:49:C7:A2 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 3CAC63162EA73B670EF23E17C4A45605A2FF556A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: CF Signing time: Tue 13 Oct 2026 15:43:09 +0000 Manifest this update: Tue 13 Oct 2026 15:38:09 +0000 Manifest next update: Sat 17 Oct 2026 01:50:09 +0000 Files and hashes: 1: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) 2: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=) 3: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: svFZ6ALMojLIMUJMoTR8tC8elL/MJ6OEewgxAYylnIw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 01:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ac:63:16:2e:a7:3b:67:0e:f2:3e:17:c4:a4:56:05:a2:ff:55:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Oct 13 15:38:09 2026 GMT Not After : Oct 17 01:50:09 2026 GMT Subject: CN=3A74EEED7DB222117247C99B9902FC07EB49C7A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:24:f1:f9:ad:f0:44:e2:b9:99:e5:81:7e: 27:e6:f7:09:51:3b:88:db:2b:ff:3d:22:e2:e5:0f: e8:b0:4a:14:79:92:1d:6d:d1:cc:14:03:fe:39:dc: 89:f5:d5:b6:49:29:43:c6:71:8b:21:c1:3c:b7:d7: 89:d6:69:f0:f1:28:f7:ce:5e:aa:90:ed:5f:da:2b: f1:0e:5a:dc:55:d3:b6:46:22:31:77:06:1d:d9:87: eb:0e:9c:0e:7d:13:2e:c7:e4:0f:87:0c:d6:09:9b: c3:6b:92:fb:3f:43:a2:7f:a7:b1:5f:34:a8:65:f0: 1f:4d:a0:92:3a:73:01:d2:c7:79:ae:70:c5:24:29: b7:51:7c:0f:fc:77:90:58:76:15:df:b8:ec:44:6a: b1:3f:9f:76:b6:70:b2:c4:2d:b1:6c:73:16:f8:ad: eb:b2:8d:99:7f:3b:04:5c:0d:a1:b0:45:d0:10:bc: 28:2c:c6:15:98:e8:b8:5c:9e:30:ef:af:92:32:f7: b5:44:00:4a:f4:02:fa:26:85:c3:35:8b:af:80:fc: 0e:83:4f:e9:51:36:50:02:81:53:54:29:8a:b4:44: 0a:af:fb:e3:60:62:8a:e1:8f:11:f5:5c:d4:ac:cc: b3:3e:ba:33:13:f6:45:c9:4c:f1:57:cb:2b:7d:94: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:74:EE:ED:7D:B2:22:11:72:47:C9:9B:99:02:FC:07:EB:49:C7:A2 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:53:a9:ed:f6:b0:f2:f0:44:c2:db:38:4a:4a:29:02:9d: ac:b5:72:f0:cc:2e:50:05:0e:21:fd:6b:7a:96:bc:eb:f0:59: 3c:b6:94:90:3f:d4:58:b3:2b:cd:5b:a1:3c:f6:f2:e3:16:a0: ca:42:95:15:25:6a:fd:af:14:ed:51:f2:ec:e9:da:72:9e:d3: e2:84:57:ff:95:53:e5:f6:9d:08:06:e5:ef:71:6e:6b:c3:7f: cb:1c:30:71:b3:23:2a:ca:fc:a0:01:65:bd:0d:1d:c1:5e:4d: 1d:70:81:6b:0e:c6:04:b0:5e:e8:b4:10:b9:cb:d2:b9:7c:f8: a1:a8:4c:10:c5:8b:c6:ac:e1:c2:6b:6d:80:87:4c:ef:49:aa: 80:55:18:f2:55:b9:86:cc:fa:58:56:9a:12:a1:95:ce:ce:cc: 23:79:83:8f:df:ea:72:28:d7:65:a3:93:ba:f6:04:da:e7:e3: e5:19:fb:f7:63:45:8a:13:c9:c9:e3:36:42:c9:0f:a8:36:d0: 59:9c:cb:d4:02:d6:73:ce:b0:e1:b1:7f:48:f1:9d:e3:ef:d7: 81:c5:65:47:3d:d1:17:58:ba:16:cd:d0:16:ea:53:ef:8c:b4: ac:e9:b9:3d:7f:44:1a:0a:a2:c5:db:32:0e:6d:49:39:c8:ef: af:b0:46:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPKxjFi6nO2cO8j4XxKRWBaL/VWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjEwMTMxNTM4MDlaFw0yNjEwMTcwMTUwMDlaMDMxMTAvBgNV BAMTKDNBNzRFRUVEN0RCMjIyMTE3MjQ3Qzk5Qjk5MDJGQzA3RUI0OUM3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75STx+a3wROK5meWBfifm9wlR O4jbK/89IuLlD+iwShR5kh1t0cwUA/453In11bZJKUPGcYshwTy314nWafDxKPfO XqqQ7V/aK/EOWtxV07ZGIjF3Bh3Zh+sOnA59Ey7H5A+HDNYJm8Nrkvs/Q6J/p7Ff NKhl8B9NoJI6cwHSx3mucMUkKbdRfA/8d5BYdhXfuOxEarE/n3a2cLLELbFscxb4 reuyjZl/OwRcDaGwRdAQvCgsxhWY6LhcnjDvr5Iy97VEAEr0AvomhcM1i6+A/A6D T+lRNlACgVNUKYq0RAqv++NgYorhjxH1XNSszLM+ujMT9kXJTPFXyyt9lMAdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOnTu7X2yIhFyR8mbmQL8B+tJx6IwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC1Tqe32sPLw RMLbOEpKKQKdrLVy8MwuUAUOIf1repa86/BZPLaUkD/UWLMrzVuhPPby4xagykKV FSVq/a8U7VHy7Onacp7T4oRX/5VT5fadCAbl73Fua8N/yxwwcbMjKsr8oAFlvQ0d wV5NHXCBaw7GBLBe6LQQucvSuXz4oahMEMWLxqzhwmttgIdM70mqgFUY8lW5hsz6 WFaaEqGVzs7MI3mDj9/qcijXZaOTuvYE2ufj5Rn792NFihPJyeM2QskPqDbQWZzL 1ALWc86w4bF/SPGd4+/XgcVlRz3RF1i6Fs3QFupT74y0rOm5PX9EGgqixdsyDm1J Ocjvr7BGiA== -----END CERTIFICATE-----Generated at Wed Oct 14 13:08:24 2026 by rpki-client