$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: ZVjIjF7vPD5hyckJKglYz+tri2XdaLn5X+j8zh3uY50= Subject key identifier: 28:33:99:4F:90:A4:36:37:00:7D:66:6E:2F:F9:A5:4D:D5:B1:F6:EA Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 0C8BDC065AE75BEE1BD17ADC5C5887FEB1B4F7A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: 0172 Signing time: Sun 11 Oct 2026 20:46:03 +0000 Manifest this update: Sun 11 Oct 2026 20:41:03 +0000 Manifest next update: Wed 14 Oct 2026 21:34:03 +0000 Files and hashes: 1: AS56046.roa (hash: hJ5hwDbWAFZkoac+eVhYLOXEqc2G0m6IEhRi/theClw=) 2: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 3: AS56042.roa (hash: UKjsFxWD9jWzWhIKzWlCLqB67Q9B9HRs0lVDSAwC6go=) 4: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) 5: AS56041.roa (hash: j3MydZIwFzbA7pEJNS2KQQkkIo227SN882DriyfZV7M=) 6: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 7: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 8: AS9808.roa (hash: uaSOliprAgA0IkX51riHsBtorjZpqQETV5vrIgSFdVQ=) 9: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: uREIqsw/8tWPKrdPXif9b3rWq8jXkMxUtzUBoOSK/Vc=) 10: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 21:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8b:dc:06:5a:e7:5b:ee:1b:d1:7a:dc:5c:58:87:fe:b1:b4:f7:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Oct 11 20:41:03 2026 GMT Not After : Oct 14 21:34:03 2026 GMT Subject: CN=2833994F90A43637007D666E2FF9A54DD5B1F6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:3d:09:c2:1c:ef:e2:d9:e8:6c:2a:4c:7c: 00:1e:d6:a9:3d:7b:df:a3:25:3a:38:de:24:36:a7: 25:67:a3:78:4d:20:f4:c6:01:1d:d3:94:9d:fa:c3: 0f:81:d4:f4:f8:1f:a6:9c:99:54:e3:b3:98:89:23: 56:b2:7b:54:fa:b3:f4:04:52:51:60:6b:a9:c2:73: a7:f5:73:bb:cf:ca:ca:73:94:1f:a3:47:ea:02:f6: 57:51:d2:c9:22:ba:7b:b8:1a:7e:86:62:5a:81:6d: fa:19:c7:e6:60:6f:ea:08:40:73:20:43:07:94:4f: fc:1e:0e:6f:63:fb:53:3e:c9:d2:77:85:07:62:22: 28:b4:52:75:2f:d7:6c:de:1b:bd:da:26:6e:49:22: 42:f1:55:9d:87:ee:ad:a3:d9:5e:1e:39:06:38:92: 2d:82:55:38:b7:a9:c2:94:57:58:08:80:d9:1d:9e: 07:78:f6:91:d7:e6:bb:45:3d:11:ba:f1:15:3a:00: 8b:2b:61:aa:50:0e:73:25:28:d8:33:15:1c:c9:f6: cd:95:71:9e:54:77:ea:68:a6:8a:c3:1e:ff:7f:47: 26:1c:ee:bc:be:fb:4d:24:ec:db:ca:11:82:6a:9a: e1:05:95:5a:67:60:45:1d:04:12:38:dc:6d:19:cd: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:99:4F:90:A4:36:37:00:7D:66:6E:2F:F9:A5:4D:D5:B1:F6:EA X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2f:c6:b1:4a:1d:e9:37:c0:75:06:2f:e5:85:3e:ec:f1:5f: f3:01:11:d4:1b:b3:a7:8c:20:de:51:9c:a4:c2:54:52:cf:92: dd:e5:46:cc:52:16:b5:eb:d8:af:95:23:83:ce:1e:67:e7:59: 3f:ba:1c:35:a7:63:2d:29:ac:92:27:48:29:ab:d2:2b:28:7b: a1:8c:78:b1:f3:11:86:63:01:76:2d:c6:47:61:87:98:65:09: ae:ae:77:ba:b2:c3:9c:e3:1c:4f:68:cf:9e:10:41:a4:e7:58: e6:06:11:7c:c3:8f:7c:93:2c:72:e6:d4:b8:1d:ab:40:e5:ac: cd:0e:9a:52:45:b6:97:03:7a:89:96:9d:00:c4:68:de:93:8a: af:1c:54:43:3e:71:05:0a:24:f9:cf:91:43:e0:73:a0:c9:77: ea:74:2f:c9:ab:e7:a1:66:20:18:1b:33:1f:9f:20:61:ab:3f: 43:f2:8e:bf:b1:f1:fd:ed:6f:31:5e:23:d7:f4:64:26:29:b0: 49:ca:f8:7d:54:93:72:8e:c3:f1:d4:70:6e:58:8d:74:be:09: 77:c0:51:58:86:0b:d7:85:5e:dc:42:b2:27:aa:24:15:59:f7: 6d:a1:1d:23:6f:e9:d6:19:22:d3:57:8b:18:dd:05:bb:6a:8b: 9d:62:04:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDIvcBlrnW+4b0XrcXFiH/rG096kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjEwMTEyMDQxMDNaFw0yNjEwMTQyMTM0MDNaMDMxMTAvBgNV BAMTKDI4MzM5OTRGOTBBNDM2MzcwMDdENjY2RTJGRjlBNTRERDVCMUY2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35T0Jwhzv4tnobCpMfAAe1qk9 e9+jJTo43iQ2pyVno3hNIPTGAR3TlJ36ww+B1PT4H6acmVTjs5iJI1aye1T6s/QE UlFga6nCc6f1c7vPyspzlB+jR+oC9ldR0skiunu4Gn6GYlqBbfoZx+Zgb+oIQHMg QweUT/weDm9j+1M+ydJ3hQdiIii0UnUv12zeG73aJm5JIkLxVZ2H7q2j2V4eOQY4 ki2CVTi3qcKUV1gIgNkdngd49pHX5rtFPRG68RU6AIsrYapQDnMlKNgzFRzJ9s2V cZ5Ud+poporDHv9/RyYc7ry++00k7NvKEYJqmuEFlVpnYEUdBBI43G0ZzW8xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKDOZT5CkNjcAfWZuL/mlTdWx9uowHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty/GsUod6TfA dQYv5YU+7PFf8wER1Buzp4wg3lGcpMJUUs+S3eVGzFIWtevYr5Ujg84eZ+dZP7oc NadjLSmskidIKavSKyh7oYx4sfMRhmMBdi3GR2GHmGUJrq53urLDnOMcT2jPnhBB pOdY5gYRfMOPfJMscubUuB2rQOWszQ6aUkW2lwN6iZadAMRo3pOKrxxUQz5xBQok +c+RQ+BzoMl36nQvyavnoWYgGBszH58gYas/Q/KOv7Hx/e1vMV4j1/RkJimwScr4 fVSTco7D8dRwbliNdL4Jd8BRWIYL14Ve3EKyJ6okFVn3baEdI2/p1hki01eLGN0F u2qLnWIEOA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:48:32 2026 by rpki-client