$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: V3n8c+9wZzYxxwgRzFQN/AeTBZ15Ohj6Y303S711iAA= Subject key identifier: A8:94:5E:49:DA:90:F7:B0:CE:24:42:E9:A1:8B:2F:62:5F:32:FF:0C Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 1C139F6BA3D2FA886FE28D7086351460C7097316 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: 21 Signing time: Fri 29 May 2026 04:07:32 +0000 Manifest this update: Fri 29 May 2026 04:02:32 +0000 Manifest next update: Sat 30 May 2026 06:13:32 +0000 Files and hashes: 1: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=) 2: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: QdGC19CIK8D58I93dCZDs4sukJbS/tXBfH7ybnAGuTU=) 3: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) 4: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=) 5: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:13:9f:6b:a3:d2:fa:88:6f:e2:8d:70:86:35:14:60:c7:09:73:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: May 29 04:02:32 2026 GMT Not After : May 30 06:13:32 2026 GMT Subject: CN=A8945E49DA90F7B0CE2442E9A18B2F625F32FF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:c2:4f:b8:df:eb:e2:55:b9:07:57:9f:23: fc:ec:87:ec:75:7c:e2:e7:43:ac:a2:40:00:3b:de: 40:66:b1:38:19:35:11:df:91:e2:16:b6:32:a2:ed: c0:c4:ed:da:66:f6:e8:cd:9d:05:ed:4a:a1:27:32: a8:fe:12:2f:7b:76:4d:28:72:6b:c2:9b:85:37:2d: 95:bb:d8:d6:c6:80:e3:05:f1:e6:68:3c:32:17:54: aa:7d:eb:47:d5:d7:c0:3a:08:f4:06:2c:7a:f9:89: d7:09:c0:3c:c5:d2:80:40:b1:9e:68:de:45:20:2e: ff:95:c8:30:3f:0d:88:b2:70:3a:17:d2:5e:40:41: f5:91:18:cd:c2:bb:68:50:f7:17:0d:3e:6f:92:a1: 20:33:83:63:c0:3e:5f:b7:ef:2c:4a:4e:06:35:bc: ea:c7:cb:13:33:d1:2f:fe:62:81:25:cc:cc:fa:c4: fb:97:84:bd:36:4c:5e:fd:7f:1b:89:f3:a5:93:ca: fe:87:2e:ab:24:d3:17:5b:d3:b6:83:b6:b9:d3:0d: f6:09:be:dd:ca:22:9e:d4:24:37:d9:a1:43:b1:6a: 3a:20:19:a0:03:05:4c:02:c3:80:bc:e8:1c:af:b8: 4d:d5:31:b3:a7:75:5b:f4:1d:8c:a2:8d:00:9e:88: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:5E:49:DA:90:F7:B0:CE:24:42:E9:A1:8B:2F:62:5F:32:FF:0C X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:91:7f:6d:ab:78:9b:21:ec:76:59:ed:cb:0f:3e:e4:62:05: 41:a6:fd:86:ea:1a:b4:85:a5:08:56:6c:5a:46:61:76:b8:b3: 2c:b9:c2:16:35:b6:84:3a:04:2f:b5:c5:97:e9:56:a9:aa:96: ac:1a:e3:aa:4d:aa:1e:8a:85:2a:ce:6a:ea:3a:05:24:a9:67: 3d:84:0e:0b:2d:39:0a:f7:6f:9a:e5:20:d6:07:de:d2:6f:e9: 19:cf:91:0c:c0:da:81:f7:6d:ba:c8:d5:fc:c8:34:6e:71:76: 9b:eb:b9:68:17:f1:e6:d2:be:60:73:58:74:24:e3:7b:65:f1: c0:17:cd:84:f1:2d:4a:f2:d5:e7:e6:11:d4:6d:3a:96:2c:da: 77:ed:60:2c:71:7d:1c:33:cc:17:da:41:c0:8d:3a:c3:8c:2b: cc:4a:10:3e:ee:c9:88:ed:28:8a:69:7a:c0:d4:72:db:84:97: e2:a7:14:9c:2f:b1:c5:dd:1a:9b:f1:ff:ee:41:12:79:c3:09: 02:1b:ad:1c:30:cc:c4:0b:47:ad:ea:63:dd:fc:ec:46:82:34: b8:da:e3:a4:e9:c2:b4:71:72:8f:d0:34:48:eb:c8:16:6f:7b: 92:72:49:6f:89:ec:d5:93:63:8c:b5:10:56:6f:c7:12:8a:69: 8a:0b:5d:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHBOfa6PS+ohv4o1whjUUYMcJcxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjA1MjkwNDAyMzJaFw0yNjA1MzAwNjEzMzJaMDMxMTAvBgNV BAMTKEE4OTQ1RTQ5REE5MEY3QjBDRTI0NDJFOUExOEIyRjYyNUYzMkZGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvksJPuN/r4lW5B1efI/zsh+x1 fOLnQ6yiQAA73kBmsTgZNRHfkeIWtjKi7cDE7dpm9ujNnQXtSqEnMqj+Ei97dk0o cmvCm4U3LZW72NbGgOMF8eZoPDIXVKp960fV18A6CPQGLHr5idcJwDzF0oBAsZ5o 3kUgLv+VyDA/DYiycDoX0l5AQfWRGM3Cu2hQ9xcNPm+SoSAzg2PAPl+37yxKTgY1 vOrHyxMz0S/+YoElzMz6xPuXhL02TF79fxuJ86WTyv6HLqsk0xdb07aDtrnTDfYJ vt3KIp7UJDfZoUOxajogGaADBUwCw4C86ByvuE3VMbOndVv0HYyijQCeiIqlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqJReSdqQ97DOJELpoYsvYl8y/wwwHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJF/bat4myHs dlntyw8+5GIFQab9huoatIWlCFZsWkZhdrizLLnCFjW2hDoEL7XFl+lWqaqWrBrj qk2qHoqFKs5q6joFJKlnPYQOCy05CvdvmuUg1gfe0m/pGc+RDMDagfdtusjV/Mg0 bnF2m+u5aBfx5tK+YHNYdCTje2XxwBfNhPEtSvLV5+YR1G06lizad+1gLHF9HDPM F9pBwI06w4wrzEoQPu7JiO0oiml6wNRy24SX4qcUnC+xxd0am/H/7kESecMJAhut HDDMxAtHrepj3fzsRoI0uNrjpOnCtHFyj9A0SOvIFm97knJJb4ns1ZNjjLUQVm/H EoppigtdGg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:46 2026 by rpki-client