$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: rR1K/Ckc9eQjwUK55XHe0Nme5sDDU9MlnAAo6TYKBnI= Subject key identifier: 86:7D:BE:D8:49:A0:BD:5F:98:28:06:15:43:DA:2F:F1:C6:1E:25:87 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 6FCD5AE7B2AAE7D34C586EBEDBD47ABF49339BD8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 79 Signing time: Tue 14 Jul 2026 11:56:12 +0000 Manifest this update: Tue 14 Jul 2026 11:51:12 +0000 Manifest next update: Wed 15 Jul 2026 14:12:12 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: cJ1Qdlk6RPQKtyQUug84u7CeAEmoICyE4y1gHbvpjss=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cd:5a:e7:b2:aa:e7:d3:4c:58:6e:be:db:d4:7a:bf:49:33:9b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Jul 14 11:51:12 2026 GMT Not After : Jul 15 14:12:12 2026 GMT Subject: CN=867DBED849A0BD5F9828061543DA2FF1C61E2587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:1b:89:2a:94:4a:39:49:b9:79:0b:6d:d5: 34:e9:a6:19:b9:4c:ac:d2:62:df:79:fd:8b:b2:19: 85:75:47:6d:ae:46:44:a9:9d:83:a9:06:6c:78:f9: f6:de:48:ea:bc:fa:6d:be:df:a4:1e:2e:ff:0b:9e: 68:62:98:7b:49:c5:7a:d8:83:89:eb:47:e0:b6:d8: 1d:bb:1d:6e:5b:c6:c2:26:9c:22:af:92:0c:ab:e8: 7b:8f:5a:4f:67:8e:27:4d:35:e1:79:ca:5f:f1:c5: 9c:3e:b0:2c:cc:f1:4c:61:33:df:0d:7a:d8:e4:1f: 4c:fa:b4:2b:08:c8:00:44:95:ed:68:84:40:c8:9d: 70:6d:5e:a1:bc:df:44:b9:e4:96:08:e9:e4:bf:6b: 4f:41:2b:3b:31:34:c8:da:9d:3a:d4:cb:d6:43:06: 90:3f:46:3b:85:42:f8:ef:fc:51:5d:d7:b0:53:44: 87:a2:6c:67:34:3f:03:7f:a6:7e:47:44:0d:e5:d2: 88:7b:51:c8:c9:3b:4f:85:e3:95:09:7a:89:67:cb: e3:87:f0:31:26:6c:c5:f8:fd:42:8a:7c:7d:3e:60: b5:77:d4:6b:7d:6d:77:3a:36:24:f8:4e:84:e7:86: af:16:5c:f0:0f:0a:20:44:3a:e9:69:cc:d1:c0:98: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7D:BE:D8:49:A0:BD:5F:98:28:06:15:43:DA:2F:F1:C6:1E:25:87 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:7b:03:28:92:58:90:5c:48:a7:15:1b:2c:32:5f:19:0e: 1f:6d:1b:3d:4e:e7:e0:db:03:5e:08:2b:54:ad:d3:97:17:7a: a3:80:e1:97:b4:92:7a:06:9c:69:77:89:04:7a:86:ef:63:9b: 9d:7d:b5:24:71:48:17:24:53:b1:5d:66:08:a0:e1:c2:65:ab: 67:f8:27:96:08:cf:77:81:17:70:7a:20:a9:c6:9e:e1:37:97: 2a:4e:8a:de:db:be:bf:a2:bf:d6:fb:0d:81:bd:38:e8:c1:53: 17:3d:b6:7f:f9:9a:5b:cf:ed:49:75:b1:4e:24:2e:09:ec:ad: 8f:74:59:24:27:91:06:c0:02:97:1f:51:78:9c:e9:90:50:e0: 76:17:47:71:fe:bf:6c:80:5b:a8:01:36:70:fd:0e:ec:87:10: 44:92:8d:63:1c:82:6c:d0:4d:34:15:4c:c1:dc:c5:18:f8:6e: be:30:40:2d:32:9b:65:58:98:82:5f:63:f1:36:28:da:87:b0: 5d:1d:d2:ac:27:d7:03:a9:5e:3b:0d:7c:cc:a7:fc:20:02:42: ac:e5:06:fe:1e:92:8e:19:a1:b3:13:95:01:39:e9:01:a0:85: a3:8b:21:a0:2c:78:ba:2e:30:d5:0a:97:da:af:f5:03:b8:00: 33:83:ea:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb81a57Kq59NMWG6+29R6v0kzm9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA3MTQxMTUxMTJaFw0yNjA3MTUxNDEyMTJaMDMxMTAvBgNV BAMTKDg2N0RCRUQ4NDlBMEJENUY5ODI4MDYxNTQzREEyRkYxQzYxRTI1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxRuJKpRKOUm5eQtt1TTpphm5 TKzSYt95/YuyGYV1R22uRkSpnYOpBmx4+fbeSOq8+m2+36QeLv8LnmhimHtJxXrY g4nrR+C22B27HW5bxsImnCKvkgyr6HuPWk9njidNNeF5yl/xxZw+sCzM8UxhM98N etjkH0z6tCsIyABEle1ohEDInXBtXqG830S55JYI6eS/a09BKzsxNMjanTrUy9ZD BpA/RjuFQvjv/FFd17BTRIeibGc0PwN/pn5HRA3l0oh7UcjJO0+F45UJeolny+OH 8DEmbMX4/UKKfH0+YLV31Gt9bXc6NiT4ToTnhq8WXPAPCiBEOulpzNHAmHnXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhn2+2EmgvV+YKAYVQ9ov8cYeJYcwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRl7AyiSWJBc SKcVGywyXxkOH20bPU7n4NsDXggrVK3Tlxd6o4Dhl7SSegacaXeJBHqG72ObnX21 JHFIFyRTsV1mCKDhwmWrZ/gnlgjPd4EXcHogqcae4TeXKk6K3tu+v6K/1vsNgb04 6MFTFz22f/maW8/tSXWxTiQuCeytj3RZJCeRBsAClx9ReJzpkFDgdhdHcf6/bIBb qAE2cP0O7IcQRJKNYxyCbNBNNBVMwdzFGPhuvjBALTKbZViYgl9j8TYo2oewXR3S rCfXA6leOw18zKf8IAJCrOUG/h6SjhmhsxOVATnpAaCFo4shoCx4ui4w1QqX2q/1 A7gAM4PqAQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:34 2026 by rpki-client