$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json) Hash identifier: hVjZ+CWAKG8AfFSFsCCDKqXyD6OZEupwFUQkH47kodA= Subject key identifier: A6:3E:D5:C7:7A:5B:29:33:3F:F5:67:39:C6:92:40:9D:CB:B6:B5:0F Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Certificate serial: 3195DA2A021351DEBC5ABDEA718DACE8745E7E4C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft Manifest number: 1C Signing time: Fri 29 May 2026 15:12:59 +0000 Manifest this update: Fri 29 May 2026 15:07:59 +0000 Manifest next update: Sat 30 May 2026 15:57:59 +0000 Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: fDo4/j8XgqE2w6M7b1FyWf+1gUJW+m0gtTrzkj9wVnw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:95:da:2a:02:13:51:de:bc:5a:bd:ea:71:8d:ac:e8:74:5e:7e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Validity Not Before: May 29 15:07:59 2026 GMT Not After : May 30 15:57:59 2026 GMT Subject: CN=A63ED5C77A5B29333FF56739C692409DCBB6B50F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:b2:cf:b2:6e:e2:2d:86:dd:d1:68:aa:56: b9:43:e4:94:00:e8:d4:fa:20:d5:6b:4f:97:87:63: 22:81:57:7a:61:06:98:bd:0d:db:9d:9d:03:7e:0d: 97:c6:ff:56:f6:e9:8b:d7:cf:5c:be:66:aa:dd:85: d9:fb:f0:b0:a9:72:42:f8:b9:26:0d:f7:5a:68:5a: 31:be:5c:f0:6a:9a:4c:36:92:11:7d:76:46:ca:b4: 25:45:e2:0b:40:75:ce:08:ea:25:5b:cd:f7:d8:2d: cc:be:52:64:b3:b8:10:e9:4b:de:4c:16:fe:40:59: a7:54:a1:46:9b:dd:e8:3b:69:8b:ce:37:53:5f:e3: 17:da:5e:d4:d0:47:c6:6c:3c:7c:4f:73:9f:e1:31: 50:eb:cb:cb:05:65:94:f4:41:0e:0f:82:2a:58:00: 5e:bf:4f:18:c0:a5:d3:1d:c9:27:45:8f:c1:74:9c: 2f:7b:35:3b:2b:68:03:04:a9:40:af:97:72:3d:ab: fd:41:0d:6c:d9:d2:c7:c5:41:81:78:3f:a3:49:fc: fc:be:5e:0f:e4:88:c7:7a:a1:46:8a:48:06:83:e9: b3:7d:e8:64:e5:59:98:70:5c:90:df:05:3c:6a:fd: 8b:63:ca:d2:1b:98:55:bd:d5:4e:c6:59:8a:b4:46: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:D5:C7:7A:5B:29:33:3F:F5:67:39:C6:92:40:9D:CB:B6:B5:0F X509v3 Authority Key Identifier: keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:b1:04:9c:11:ab:c4:e1:fd:f0:0b:fa:ea:1b:ab:df:a5: 06:3b:2f:a8:f7:80:28:8e:0c:bd:70:c9:1d:65:6f:d3:d5:88: 7c:49:ae:af:34:72:33:6a:5d:58:87:0d:81:bf:b4:14:ac:dd: 9c:2d:4b:28:00:44:38:2b:a0:21:03:a3:c3:ce:a0:e0:29:31: d9:95:ae:d2:93:a0:23:27:f5:c4:8c:d0:1e:db:8f:fe:40:a6: b7:46:90:0a:7e:58:18:b2:b1:04:b9:3d:3f:22:48:1f:d8:55: 05:fd:8d:40:29:c2:18:9d:4f:0d:04:98:33:10:77:14:06:ea: 0a:ca:78:5e:a7:24:7b:7d:74:bc:a4:fd:eb:61:35:af:d6:e6: 1c:35:c7:e2:1f:58:78:e9:49:b6:05:03:97:45:3c:67:74:02: 98:66:32:5f:54:29:d9:00:c9:24:58:0c:37:4c:f4:43:0e:75: e3:4a:e5:99:ac:51:48:2b:df:b6:1c:bb:b6:25:ac:b5:d0:d8: 8e:36:f4:41:bf:c7:dd:72:1c:be:31:2f:ad:1e:ab:16:cc:2b: 26:75:a4:84:bd:ee:68:b9:1d:63:63:f3:f0:62:bc:60:e5:93: 09:7d:a5:db:47:7a:7b:78:b4:87:ba:f7:e0:20:34:99:90:cb: 42:ec:1a:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMZXaKgITUd68Wr3qcY2s6HRefkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkw MTQ0NEZFNzAeFw0yNjA1MjkxNTA3NTlaFw0yNjA1MzAxNTU3NTlaMDMxMTAvBgNV BAMTKEE2M0VENUM3N0E1QjI5MzMzRkY1NjczOUM2OTI0MDlEQ0JCNkI1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWrLPsm7iLYbd0WiqVrlD5JQA 6NT6INVrT5eHYyKBV3phBpi9DdudnQN+DZfG/1b26YvXz1y+Zqrdhdn78LCpckL4 uSYN91poWjG+XPBqmkw2khF9dkbKtCVF4gtAdc4I6iVbzffYLcy+UmSzuBDpS95M Fv5AWadUoUab3eg7aYvON1Nf4xfaXtTQR8ZsPHxPc5/hMVDry8sFZZT0QQ4PgipY AF6/TxjApdMdySdFj8F0nC97NTsraAMEqUCvl3I9q/1BDWzZ0sfFQYF4P6NJ/Py+ Xg/kiMd6oUaKSAaD6bN96GTlWZhwXJDfBTxq/YtjytIbmFW91U7GWYq0RiT5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpj7Vx3pbKTM/9Wc5xpJAncu2tQ8wHwYDVR0j BBgwFoAUPwrtApdoKXDOoSV7GYXbWQFET+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQyMDM1NjUxODE1MDE1OS8wLzNGMEFFRDAyOTc2ODI5NzBDRUExMjU3QjE5ODVE QjU5MDE0NDRGRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0MjAzNTY1MTgxNTAxNTkvMC8zRjBBRUQwMjk3Njgy OTcwQ0VBMTI1N0IxOTg1REI1OTAxNDQ0RkU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5yxBJwRq8Th /fAL+uobq9+lBjsvqPeAKI4MvXDJHWVv09WIfEmurzRyM2pdWIcNgb+0FKzdnC1L KABEOCugIQOjw86g4Ckx2ZWu0pOgIyf1xIzQHtuP/kCmt0aQCn5YGLKxBLk9PyJI H9hVBf2NQCnCGJ1PDQSYMxB3FAbqCsp4Xqcke310vKT962E1r9bmHDXH4h9YeOlJ tgUDl0U8Z3QCmGYyX1Qp2QDJJFgMN0z0Qw5140rlmaxRSCvfthy7tiWstdDYjjb0 Qb/H3XIcvjEvrR6rFswrJnWkhL3uaLkdY2Pz8GK8YOWTCX2l20d6e3i0h7r34CA0 mZDLQuwa8w== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client