$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: Q6Nmc+SkUUv8XE1yMmppSW/HR0Kr8BKeLxcI3IN26jQ= Subject key identifier: 92:3F:CF:92:16:39:D3:BC:62:FF:27:32:40:93:D1:3A:FE:65:A2:AC Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 0B16431B3A0DB039D349F23E1D8DD79547B2F18F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: AE Signing time: Tue 13 Oct 2026 11:42:57 +0000 Manifest this update: Tue 13 Oct 2026 11:37:57 +0000 Manifest next update: Fri 16 Oct 2026 18:06:57 +0000 Files and hashes: 1: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=) 2: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) 3: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: OZdUvAa2I3uBWJziaSS3zHMJnRIRUqDnmcv1ziBGlSQ=) 4: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) 5: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:16:43:1b:3a:0d:b0:39:d3:49:f2:3e:1d:8d:d7:95:47:b2:f1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: Oct 13 11:37:57 2026 GMT Not After : Oct 16 18:06:57 2026 GMT Subject: CN=923FCF921639D3BC62FF27324093D13AFE65A2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:ee:ae:f1:2e:e8:21:3a:61:1d:90:f4:53: b3:c6:d2:58:15:a2:75:c2:80:72:82:e8:4e:25:7b: 6f:e2:46:57:40:fa:8d:f4:d1:f5:a3:f5:bf:38:95: a4:a4:15:4b:6f:75:0f:43:a4:98:e5:23:08:54:f5: bc:35:dd:a7:83:5d:93:d6:2d:42:82:ef:17:f6:b2: db:31:4e:f3:4a:a2:38:e5:ce:3d:27:34:48:09:cc: a9:3f:30:9f:d9:9c:d4:08:e8:7d:42:3a:cb:64:ce: 6d:72:38:7c:4e:be:a4:a7:81:28:6e:a5:56:9b:f6: c4:41:3a:fb:cb:f2:37:04:9c:01:f9:4c:fd:1e:49: d7:62:cd:de:6c:12:37:be:03:a6:1b:71:4f:fa:39: 7c:42:c5:a0:b9:38:47:1c:55:1c:47:5b:f4:97:d3: ac:ee:3e:b8:d5:8d:31:84:ee:5b:be:0a:4b:b0:d2: 3d:ae:e7:2f:27:5b:81:08:97:29:9a:7e:04:2b:0a: 84:da:f9:94:07:5f:b1:bb:d2:50:d2:39:41:2b:ff: 62:5b:62:7d:ed:5f:a5:8f:5b:14:92:20:1b:10:cc: 4a:a0:2a:d3:fd:6b:3a:84:11:1f:f6:65:62:58:c6: 29:4d:24:94:63:38:29:34:2c:a4:3a:6f:dd:eb:34: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:CF:92:16:39:D3:BC:62:FF:27:32:40:93:D1:3A:FE:65:A2:AC X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a1:df:bf:2d:9d:8b:1f:4e:f5:ad:b6:89:e5:eb:39:9f:1e: 4a:84:bb:20:fc:1d:d8:d1:bb:dc:ed:2e:3b:42:9a:5c:64:52: 97:ad:71:7f:cd:f1:77:86:e0:2f:f7:bf:73:4a:59:d7:71:ab: f8:94:db:6a:92:97:3c:4c:73:21:ee:7e:a8:f3:2a:19:62:13: 6f:f6:cb:fa:2e:bb:71:07:b0:0e:f6:44:74:0e:a0:be:ac:bf: a0:36:6e:09:38:95:2e:9c:b8:f4:b6:63:9f:a5:63:52:6e:6b: 73:16:31:e7:c3:0e:c9:d4:c3:16:8e:32:20:d7:9c:4b:7f:89: 08:b9:80:df:55:24:71:32:8d:4b:34:83:2a:0d:d1:f8:37:17: b4:3e:9c:89:c9:21:d8:61:50:e3:1a:58:3f:fa:c5:24:1f:54: e7:0c:84:9b:e5:96:6a:c9:e8:9a:ed:5a:b5:bc:b0:8d:34:47: d3:b9:b3:89:5a:4c:c2:68:d4:3d:58:2a:55:14:f2:e3:94:13: 53:95:3a:ee:98:19:64:0e:48:24:7c:16:05:2c:cb:5c:c8:aa: 66:3f:49:77:8b:d1:ba:7d:4c:3c:ca:26:37:46:2c:b0:9c:48: c3:3d:ac:fe:bd:1c:56:59:69:2a:ac:41:99:54:72:41:49:8a: 5d:e4:ea:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCxZDGzoNsDnTSfI+HY3XlUey8Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjEwMTMxMTM3NTdaFw0yNjEwMTYxODA2NTdaMDMxMTAvBgNV BAMTKDkyM0ZDRjkyMTYzOUQzQkM2MkZGMjczMjQwOTNEMTNBRkU2NUEyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Wu6u8S7oITphHZD0U7PG0lgV onXCgHKC6E4le2/iRldA+o300fWj9b84laSkFUtvdQ9DpJjlIwhU9bw13aeDXZPW LUKC7xf2stsxTvNKojjlzj0nNEgJzKk/MJ/ZnNQI6H1COstkzm1yOHxOvqSngShu pVab9sRBOvvL8jcEnAH5TP0eSddizd5sEje+A6YbcU/6OXxCxaC5OEccVRxHW/SX 06zuPrjVjTGE7lu+Ckuw0j2u5y8nW4EIlymafgQrCoTa+ZQHX7G70lDSOUEr/2Jb Yn3tX6WPWxSSIBsQzEqgKtP9azqEER/2ZWJYxilNJJRjOCk0LKQ6b93rNFaHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkj/PkhY507xi/ycyQJPROv5loqwwHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqHfvy2dix9O 9a22ieXrOZ8eSoS7IPwd2NG73O0uO0KaXGRSl61xf83xd4bgL/e/c0pZ13Gr+JTb apKXPExzIe5+qPMqGWITb/bL+i67cQewDvZEdA6gvqy/oDZuCTiVLpy49LZjn6Vj Um5rcxYx58MOydTDFo4yINecS3+JCLmA31UkcTKNSzSDKg3R+DcXtD6cickh2GFQ 4xpYP/rFJB9U5wyEm+WWasnomu1atbywjTRH07mziVpMwmjUPVgqVRTy45QTU5U6 7pgZZA5IJHwWBSzLXMiqZj9Jd4vRun1MPMomN0YssJxIwz2s/r0cVllpKqxBmVRy QUmKXeTqIw== -----END CERTIFICATE-----Generated at Tue Oct 13 18:46:04 2026 by rpki-client