$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: 7o5+0XeEsH/WzqAEDDNwZ+3pjS3hm1WjRk+R7Khw2YY= Subject key identifier: DC:0A:CF:DF:CD:07:54:5D:A0:B1:77:96:FF:4C:10:74:BD:43:53:A6 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 6B93477E7E55B07B9607B55E5BC234E7644336AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: CA Signing time: Tue 13 Oct 2026 12:38:01 +0000 Manifest this update: Tue 13 Oct 2026 12:33:01 +0000 Manifest next update: Fri 16 Oct 2026 17:24:01 +0000 Files and hashes: 1: 323430343a653863303a3a2f33322d3332203d3e20313339303930.roa (hash: 5oz//eZO/26udoPVEo7M+cH2yOaR6/BK884dNaQEd/4=) 2: 3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (hash: vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=) 3: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: bY6cIP4U10UXXBIJzNBIWYidRyBCBW3gRbb06aWSUo0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:93:47:7e:7e:55:b0:7b:96:07:b5:5e:5b:c2:34:e7:64:43:36:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Oct 13 12:33:01 2026 GMT Not After : Oct 16 17:24:01 2026 GMT Subject: CN=DC0ACFDFCD07545DA0B17796FF4C1074BD4353A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:28:8b:2f:4f:e1:ab:26:26:5c:8a:50:e1:be: 79:a6:bb:f1:20:5c:ab:87:29:94:e4:63:f4:d1:21: df:ad:e3:14:c0:28:66:54:19:ce:2b:b6:7f:74:24: da:64:09:9f:82:05:50:cb:e3:2d:56:a3:75:92:e0: 36:13:36:26:af:fb:d0:40:ee:a9:b5:de:de:da:62: 4a:22:db:2d:60:0d:2f:66:e3:f1:eb:0f:69:c0:95: e9:a5:4f:49:bd:7e:a9:7f:87:61:16:fa:5d:c9:1f: 0b:7b:ce:7d:86:f4:2f:d0:6d:49:66:50:4b:f5:f0: 80:a1:2a:2e:b7:d6:f7:3a:1f:fe:e0:7e:5b:91:17: 5f:4e:94:f8:49:a7:9e:e6:e6:fa:1f:ed:1c:4f:8f: f5:f7:de:e5:28:ac:0c:17:d3:73:86:a3:25:b8:1f: 5c:df:21:6c:f4:e8:72:2e:2b:6b:7d:f2:02:33:70: 76:bc:0a:00:23:d6:fe:a6:d3:da:1c:53:e9:59:c9: 6d:3b:a5:5b:fa:a5:98:e1:e4:a9:1a:1a:46:21:34: 40:70:54:41:44:e1:28:68:8c:01:f0:b0:9b:ff:29: 66:a1:2f:5c:03:94:fa:60:cb:43:3e:e3:99:ab:e7: c1:67:2f:07:02:7d:c7:c8:32:ba:ff:6b:eb:86:68: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0A:CF:DF:CD:07:54:5D:A0:B1:77:96:FF:4C:10:74:BD:43:53:A6 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2a:70:f9:5d:4c:c0:93:98:55:32:ee:21:01:05:e3:fc:d7: a6:b0:84:0f:3d:1d:ed:0e:29:da:cf:89:b4:48:51:94:73:90: 43:02:3d:f3:2e:9a:78:7a:9b:09:aa:18:a1:6e:ed:f5:95:19: da:97:de:13:97:de:1e:f5:73:08:b5:10:88:02:14:f2:fc:ff: 3d:76:10:d8:db:d9:c9:ca:65:56:6d:97:f8:06:21:44:e6:ee: c1:25:d0:eb:79:12:57:67:96:5c:ec:50:96:06:c8:94:56:a9: aa:f9:75:07:06:c3:1b:11:cb:77:ef:cf:bd:7f:8a:97:fd:2a: 83:71:f8:89:0a:33:cb:f5:b0:47:41:08:6f:4c:87:6e:62:45: e8:28:2f:0d:23:79:3a:2c:11:10:a2:57:ad:72:37:7a:b0:3c: a7:63:f7:5f:c5:f2:08:27:af:80:99:22:e0:3a:00:cd:6f:dc: a6:ac:41:36:c4:4d:58:59:4a:b5:b3:6f:c2:c4:50:70:39:a4: be:28:a3:e5:0f:a0:31:68:af:44:6c:63:f9:d4:f0:37:e0:47: 07:4b:aa:cf:62:da:97:73:0f:0a:bd:e7:ae:3f:4e:96:36:88: 1d:4b:a6:b4:51:86:71:ee:c8:c2:3b:ec:15:5b:04:2e:f3:1e: 74:5d:37:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa5NHfn5VsHuWB7VeW8I052RDNq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjEwMTMxMjMzMDFaFw0yNjEwMTYxNzI0MDFaMDMxMTAvBgNV BAMTKERDMEFDRkRGQ0QwNzU0NURBMEIxNzc5NkZGNEMxMDc0QkQ0MzUzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHKIsvT+GrJiZcilDhvnmmu/Eg XKuHKZTkY/TRId+t4xTAKGZUGc4rtn90JNpkCZ+CBVDL4y1Wo3WS4DYTNiav+9BA 7qm13t7aYkoi2y1gDS9m4/HrD2nAlemlT0m9fql/h2EW+l3JHwt7zn2G9C/QbUlm UEv18IChKi631vc6H/7gfluRF19OlPhJp57m5vof7RxPj/X33uUorAwX03OGoyW4 H1zfIWz06HIuK2t98gIzcHa8CgAj1v6m09ocU+lZyW07pVv6pZjh5KkaGkYhNEBw VEFE4ShojAHwsJv/KWahL1wDlPpgy0M+45mr58FnLwcCfcfIMrr/a+uGaDyzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3ArP380HVF2gsXeW/0wQdL1DU6YwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSpw+V1MwJOY VTLuIQEF4/zXprCEDz0d7Q4p2s+JtEhRlHOQQwI98y6aeHqbCaoYoW7t9ZUZ2pfe E5feHvVzCLUQiAIU8vz/PXYQ2NvZycplVm2X+AYhRObuwSXQ63kSV2eWXOxQlgbI lFapqvl1BwbDGxHLd+/PvX+Kl/0qg3H4iQozy/WwR0EIb0yHbmJF6CgvDSN5OiwR EKJXrXI3erA8p2P3X8XyCCevgJki4DoAzW/cpqxBNsRNWFlKtbNvwsRQcDmkviij 5Q+gMWivRGxj+dTwN+BHB0uqz2Lal3MPCr3nrj9OljaIHUumtFGGce7IwjvsFVsE LvMedF03ug== -----END CERTIFICATE-----Generated at Tue Oct 13 22:48:59 2026 by rpki-client