$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: eRAQR4UtT8QvseJnZ/YPLBuG0sSa4J1wvLNoY8kQKzk= Subject key identifier: 8F:6A:34:11:06:8A:3F:8A:0E:12:F4:57:58:CD:B3:90:47:B0:8F:36 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 41E44E153D0988854A3774D338C5A487A1D9F7CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 3C Signing time: Fri 29 May 2026 14:42:58 +0000 Manifest this update: Fri 29 May 2026 14:37:58 +0000 Manifest next update: Sat 30 May 2026 18:03:58 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: 0u/cQr8hglHRBynAT3aLNWLHZ/yrcjOQZ5LWvOsHT8I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e4:4e:15:3d:09:88:85:4a:37:74:d3:38:c5:a4:87:a1:d9:f7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: May 29 14:37:58 2026 GMT Not After : May 30 18:03:58 2026 GMT Subject: CN=8F6A3411068A3F8A0E12F45758CDB39047B08F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:1b:f5:cb:d0:51:54:5e:ec:08:1a:70:33: 48:23:76:c7:50:8e:6e:43:ae:33:8b:68:1c:8a:02: f1:64:0b:5f:15:46:a0:67:60:cf:07:52:03:30:d8: ce:70:c5:76:ef:be:7f:a5:87:27:77:74:3e:f1:5b: 17:27:72:32:f9:79:de:20:3c:ae:4a:9d:b8:b2:c0: 67:58:65:dd:51:4f:37:d1:a2:48:54:ef:6f:71:11: 49:da:79:18:20:12:5d:8d:1c:e8:a0:69:1b:ed:fc: 3a:97:e4:0d:85:8d:ea:f9:28:c4:2f:73:1b:75:ed: 4e:66:34:e4:03:d9:09:4d:30:08:04:28:47:89:5a: 1a:4c:24:3c:ae:82:6c:59:a4:69:dc:08:6f:40:84: 25:03:0b:cc:33:e6:c0:e7:4d:2d:17:e8:d7:94:89: b7:bb:88:49:83:6d:1c:46:78:83:36:f7:7a:f2:2e: ff:7f:16:de:02:42:f8:f8:5a:c2:a2:3a:06:f0:81: 76:59:29:aa:aa:24:0f:34:08:a9:55:93:3d:1d:b3: 8e:1d:be:4e:ef:47:71:73:68:26:18:c3:35:5c:26: ee:4e:ab:f3:35:1c:f4:18:20:c9:0c:27:9a:22:32: 93:dc:5f:ff:e5:34:6f:92:25:c9:be:64:e7:f3:a2: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:34:11:06:8A:3F:8A:0E:12:F4:57:58:CD:B3:90:47:B0:8F:36 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a5:94:37:1f:dc:92:66:46:4f:ff:db:24:f3:a3:dd:83:fc: 36:12:b6:c8:3b:a1:a8:5d:4a:a7:2b:f7:80:5a:7c:6c:87:db: da:05:6e:55:64:96:08:81:2e:d9:44:1d:92:4b:30:8a:7f:95: 27:7f:ab:ea:c9:32:a2:15:b1:fd:00:f2:96:cf:6e:65:6c:05: d9:7b:2f:66:3e:2a:ca:0d:86:93:0b:28:08:61:75:7d:ca:a9: 80:a6:53:97:ec:80:47:3e:65:34:bf:e5:13:e8:a0:79:84:1f: 27:8c:d3:7c:73:46:6b:5e:d9:3a:49:c7:8f:0c:f4:87:22:02: 33:95:85:3b:43:58:c1:b3:fa:af:d3:10:5f:b0:ce:25:c2:1c: 66:72:60:fd:65:5f:36:03:e3:10:ec:17:25:10:17:c2:31:a6: 2e:eb:a8:17:58:b1:90:1d:79:43:1f:c3:27:97:29:a8:f5:00: 41:57:53:fc:73:8a:08:58:d5:f5:00:8d:36:3f:3b:f2:34:35: ee:c6:06:a7:ff:27:ff:1b:21:62:55:7c:8f:fe:bc:ea:30:69: 2e:eb:1c:f1:22:95:97:8a:f3:65:a8:3b:ac:d7:2e:93:1d:60: bb:78:1c:b5:22:0b:4a:67:00:8a:33:ca:7d:ba:85:69:51:91: 7c:5c:01:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQeROFT0JiIVKN3TTOMWkh6HZ98swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA1MjkxNDM3NThaFw0yNjA1MzAxODAzNThaMDMxMTAvBgNV BAMTKDhGNkEzNDExMDY4QTNGOEEwRTEyRjQ1NzU4Q0RCMzkwNDdCMDhGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahRv1y9BRVF7sCBpwM0gjdsdQ jm5DrjOLaByKAvFkC18VRqBnYM8HUgMw2M5wxXbvvn+lhyd3dD7xWxcncjL5ed4g PK5KnbiywGdYZd1RTzfRokhU729xEUnaeRggEl2NHOigaRvt/DqX5A2Fjer5KMQv cxt17U5mNOQD2QlNMAgEKEeJWhpMJDyugmxZpGncCG9AhCUDC8wz5sDnTS0X6NeU ibe7iEmDbRxGeIM293ryLv9/Ft4CQvj4WsKiOgbwgXZZKaqqJA80CKlVkz0ds44d vk7vR3FzaCYYwzVcJu5Oq/M1HPQYIMkMJ5oiMpPcX//lNG+SJcm+ZOfzohkvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj2o0EQaKP4oOEvRXWM2zkEewjzYwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaWUNx/ckmZG T//bJPOj3YP8NhK2yDuhqF1Kpyv3gFp8bIfb2gVuVWSWCIEu2UQdkkswin+VJ3+r 6skyohWx/QDyls9uZWwF2XsvZj4qyg2GkwsoCGF1fcqpgKZTl+yARz5lNL/lE+ig eYQfJ4zTfHNGa17ZOknHjwz0hyICM5WFO0NYwbP6r9MQX7DOJcIcZnJg/WVfNgPj EOwXJRAXwjGmLuuoF1ixkB15Qx/DJ5cpqPUAQVdT/HOKCFjV9QCNNj878jQ17sYG p/8n/xshYlV8j/686jBpLusc8SKVl4rzZag7rNcukx1gu3gctSILSmcAijPKfbqF aVGRfFwBng== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client