$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: Ub+HYdCNuUmNhb/hYuaUe3vaFWAWvnQW330dk5ZYpRA= Subject key identifier: 1A:BA:58:E7:54:FB:4D:41:10:A7:3C:56:9B:F2:C2:B4:8F:D0:EB:B9 Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 417C75955F1E57655935F2F776CB649345BB018E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: 9A Signing time: Fri 28 Aug 2026 06:47:36 +0000 Manifest this update: Fri 28 Aug 2026 06:42:36 +0000 Manifest next update: Mon 31 Aug 2026 15:31:36 +0000 Files and hashes: 1: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=) 2: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) 3: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: bAuf67H94de79ewcEOr/pQnWDPnWsWrmOpCtClOvRvo=) 4: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=) 5: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7c:75:95:5f:1e:57:65:59:35:f2:f7:76:cb:64:93:45:bb:01:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: Aug 28 06:42:36 2026 GMT Not After : Aug 31 15:31:36 2026 GMT Subject: CN=1ABA58E754FB4D4110A73C569BF2C2B48FD0EBB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:5f:58:ff:2f:08:6c:ee:00:7f:77:5d:a9: 51:58:bd:67:7f:8b:cc:c6:8a:b8:0c:64:11:6a:60: f5:73:60:b5:18:ae:aa:c1:e2:a8:38:c3:17:d9:9a: 4c:7a:cc:50:03:6f:55:ce:e2:88:01:f0:59:4b:31: 0f:94:b9:1e:e0:ef:13:0f:ba:0a:e2:27:eb:e0:b1: 82:a9:24:24:d1:df:ca:28:cc:5f:3c:fe:ea:d5:4f: 26:ab:69:21:2d:cc:f8:61:90:fd:ba:83:64:db:b7: 1f:a4:fb:82:13:83:22:eb:87:49:f4:e8:d0:73:91: 34:07:cd:a8:9f:d2:c9:05:2e:69:ac:6f:db:48:b8: d2:ef:85:74:39:c8:d0:5d:ca:24:c4:e6:46:a8:f3: 9a:57:12:d1:ec:35:fd:63:2f:92:2c:2b:4f:de:9b: 42:8d:91:3c:c1:09:58:ca:52:61:f0:06:5a:e7:7f: c3:00:2a:20:8d:b5:ed:07:b8:b8:c8:80:04:9a:c3: c0:92:0d:9c:c3:19:06:35:ea:c3:75:0e:4e:9e:59: 95:30:97:78:80:ed:23:a0:5a:f6:cd:2f:dc:66:71: d9:73:55:82:77:34:f2:51:b7:05:cd:8c:b4:95:46: 8a:93:d2:01:cf:54:b1:dd:4b:d9:2b:52:4d:be:88: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:58:E7:54:FB:4D:41:10:A7:3C:56:9B:F2:C2:B4:8F:D0:EB:B9 X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:14:59:fd:6b:fa:2c:cc:45:c7:2c:16:5f:3a:57:0c:bc:c7: 99:99:84:c5:d9:73:9c:c6:5a:59:41:3f:58:4b:8e:84:7e:b4: 56:12:fa:5f:3e:6b:ec:6d:f5:1f:5e:fd:e1:a3:fa:b5:c2:b8: 4d:aa:bc:50:63:b5:4f:9c:1b:e7:64:a9:2a:00:84:f4:69:50: 07:66:79:62:84:30:d3:01:ad:28:7c:e4:81:00:a5:ac:56:1d: 6e:34:9a:fa:a2:ad:6c:72:0d:3b:fb:68:e6:79:ca:1e:76:b9: 04:77:54:31:83:fb:ef:f5:95:69:f5:f2:bb:59:96:da:0a:f1: 3a:2e:cf:fd:b6:7e:85:6f:60:f3:e7:2e:51:99:c9:f2:4a:af: 12:43:e9:e0:3c:fa:04:72:d6:09:93:98:63:b7:da:fa:14:3c: 56:e4:e0:ab:0d:24:10:89:c7:6d:e6:b2:ee:84:4f:11:9f:14: d0:eb:67:64:a2:1e:a7:48:62:aa:ab:9c:f7:5d:52:c1:5a:93: d7:1f:e5:1b:6c:ef:1b:df:2d:7c:ae:b7:8c:ed:ca:01:9f:8a: 72:e2:25:9e:6a:52:90:0c:f7:dc:d3:1e:c6:20:9a:76:95:ba: 04:51:b8:7f:a7:e4:3b:d0:bf:55:e2:9c:1c:71:56:92:d1:06: c2:41:fe:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQXx1lV8eV2VZNfL3dstkk0W7AY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjA4MjgwNjQyMzZaFw0yNjA4MzExNTMxMzZaMDMxMTAvBgNV BAMTKDFBQkE1OEU3NTRGQjRENDExMEE3M0M1NjlCRjJDMkI0OEZEMEVCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ul9Y/y8IbO4Af3ddqVFYvWd/ i8zGirgMZBFqYPVzYLUYrqrB4qg4wxfZmkx6zFADb1XO4ogB8FlLMQ+UuR7g7xMP ugriJ+vgsYKpJCTR38oozF88/urVTyaraSEtzPhhkP26g2Tbtx+k+4ITgyLrh0n0 6NBzkTQHzaif0skFLmmsb9tIuNLvhXQ5yNBdyiTE5kao85pXEtHsNf1jL5IsK0/e m0KNkTzBCVjKUmHwBlrnf8MAKiCNte0HuLjIgASaw8CSDZzDGQY16sN1Dk6eWZUw l3iA7SOgWvbNL9xmcdlzVYJ3NPJRtwXNjLSVRoqT0gHPVLHdS9krUk2+iFL5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGrpY51T7TUEQpzxWm/LCtI/Q67kwHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzhRZ/Wv6LMxF xywWXzpXDLzHmZmExdlznMZaWUE/WEuOhH60VhL6Xz5r7G31H1794aP6tcK4Taq8 UGO1T5wb52SpKgCE9GlQB2Z5YoQw0wGtKHzkgQClrFYdbjSa+qKtbHINO/to5nnK Hna5BHdUMYP77/WVafXyu1mW2grxOi7P/bZ+hW9g8+cuUZnJ8kqvEkPp4Dz6BHLW CZOYY7fa+hQ8VuTgqw0kEInHbeay7oRPEZ8U0OtnZKIep0hiqquc911SwVqT1x/l G2zvG98tfK63jO3KAZ+KcuIlnmpSkAz33NMexiCadpW6BFG4f6fkO9C/VeKcHHFW ktEGwkH+iQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:25 2026 by rpki-client