$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: 4neqMEJl7ftlfVnfoF9lt0ebHvtdQbwIOzNgn1t2ymA= Subject key identifier: 50:76:D6:AC:08:77:99:61:FA:22:F7:AA:09:1E:02:D4:07:20:B8:76 Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 03E927FB720488278C1028D99CF95D5E70CE5D8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: 5A Signing time: Thu 21 May 2026 02:07:50 +0000 Manifest this update: Thu 21 May 2026 02:02:50 +0000 Manifest next update: Fri 22 May 2026 03:01:50 +0000 Files and hashes: 1: AS56046.roa (hash: EwUAfvLA/3RztiPw6b94+6HIwEkjz9XNffqwR+mdUcQ=) 2: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) 3: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 4: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 5: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: 6KJo5L73etc8nkUWlOk3KoASc/la7xLdZaHOelKXCWU=) 6: AS9808.roa (hash: OUt81gt7ACLIxgJfw406qsYnUD3S1aV/Tbt8Na9CVCs=) 7: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 8: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 03:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e9:27:fb:72:04:88:27:8c:10:28:d9:9c:f9:5d:5e:70:ce:5d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: May 21 02:02:50 2026 GMT Not After : May 22 03:01:50 2026 GMT Subject: CN=5076D6AC08779961FA22F7AA091E02D40720B876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:a1:f5:37:e4:25:21:f2:42:cc:f8:a1:9e: 13:22:cf:5f:b3:61:b2:dc:10:5e:ed:3f:a4:db:75: ae:78:41:e1:b8:fa:5e:5c:1e:f9:06:2b:8b:3b:e9: 69:d2:7e:41:ea:1f:fd:48:69:fd:3d:22:1a:3a:26: f8:8c:ed:15:33:7f:82:29:82:72:43:5d:b1:96:fb: 69:34:d7:43:20:89:e7:e8:0c:f8:34:20:9a:1c:8e: f1:cd:4f:73:d2:6c:2c:e6:d2:f8:55:d9:c1:02:fe: 85:9b:1e:4b:75:8b:9d:ea:ac:8d:85:cd:f4:39:25: c9:59:53:2d:7a:ca:da:81:7d:30:5d:77:15:bf:72: 1e:75:47:f7:f5:78:8f:1b:bd:88:fa:b7:dd:77:ed: fb:ce:8e:7e:13:6f:fa:66:6a:1f:cd:63:d9:b5:be: fe:20:fe:cf:87:ac:76:da:dd:3e:f6:3c:11:36:6b: 93:7c:bb:a3:87:f9:d1:2f:6e:57:80:04:bb:05:af: c5:f2:11:bf:8d:4c:bb:43:ed:c0:20:71:3e:d9:6d: 14:99:78:16:7f:4a:1d:f4:5e:88:33:f9:b2:fd:af: 8f:75:e4:09:6d:fc:08:a6:a0:d0:89:ae:8f:fc:84: b2:57:7b:f1:69:e7:c2:d2:9e:87:87:fb:b7:a8:93: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:D6:AC:08:77:99:61:FA:22:F7:AA:09:1E:02:D4:07:20:B8:76 X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:78:ad:30:b4:98:28:f5:9f:af:e2:09:4b:a3:57:d7:44:56: 56:18:03:0c:8e:b3:cf:96:9d:00:53:53:ca:00:95:bd:b7:d6: ff:6d:62:e2:8f:10:90:09:1b:20:f1:b7:13:8b:68:ab:b8:c9: 3f:6c:6c:d4:9a:57:65:3a:82:0f:17:ad:66:55:df:eb:4a:0f: 76:2d:d0:ba:54:b7:60:ec:aa:3b:16:87:6d:06:70:cd:4e:81: c1:80:75:44:b1:58:4c:d2:96:f4:71:b8:61:c9:b1:87:8c:4c: 16:d7:76:30:89:0c:95:5a:2c:87:16:b7:e5:ed:d2:4e:44:21: 12:6b:7d:ba:f7:3e:8f:a7:d9:4b:ae:c6:65:8b:f7:3b:31:02: e1:0a:3b:21:e1:46:11:3f:39:cb:df:e3:f0:5b:58:d1:a1:f3: 90:d2:28:a8:72:d7:0f:49:91:67:80:dc:5e:f3:a0:03:61:8a: dc:35:40:42:b9:53:7d:63:5b:00:77:2f:85:a4:7a:14:05:d0: 12:d7:41:bb:0c:5a:30:13:a8:cd:d4:ea:68:5f:5a:36:9c:bb: 9a:b0:22:91:77:a1:c9:e3:7f:b8:c6:f2:0d:67:e4:4d:92:7e: 4e:3c:96:5c:e5:1d:e2:8d:4a:24:78:d3:6a:27:f7:1e:93:05: b1:3f:f8:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA+kn+3IEiCeMECjZnPldXnDOXYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA1MjEwMjAyNTBaFw0yNjA1MjIwMzAxNTBaMDMxMTAvBgNV BAMTKDUwNzZENkFDMDg3Nzk5NjFGQTIyRjdBQTA5MUUwMkQ0MDcyMEI4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYKH1N+QlIfJCzPihnhMiz1+z YbLcEF7tP6Tbda54QeG4+l5cHvkGK4s76WnSfkHqH/1Iaf09Iho6JviM7RUzf4Ip gnJDXbGW+2k010MgiefoDPg0IJocjvHNT3PSbCzm0vhV2cEC/oWbHkt1i53qrI2F zfQ5JclZUy16ytqBfTBddxW/ch51R/f1eI8bvYj6t9137fvOjn4Tb/pmah/NY9m1 vv4g/s+HrHba3T72PBE2a5N8u6OH+dEvbleABLsFr8XyEb+NTLtD7cAgcT7ZbRSZ eBZ/Sh30Xogz+bL9r4915Alt/AimoNCJro/8hLJXe/Fp58LSnoeH+7eok6u/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUHbWrAh3mWH6IveqCR4C1AcguHYwHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3itMLSYKPWf r+IJS6NX10RWVhgDDI6zz5adAFNTygCVvbfW/21i4o8QkAkbIPG3E4toq7jJP2xs 1JpXZTqCDxetZlXf60oPdi3QulS3YOyqOxaHbQZwzU6BwYB1RLFYTNKW9HG4Ycmx h4xMFtd2MIkMlVoshxa35e3STkQhEmt9uvc+j6fZS67GZYv3OzEC4Qo7IeFGET85 y9/j8FtY0aHzkNIoqHLXD0mRZ4DcXvOgA2GK3DVAQrlTfWNbAHcvhaR6FAXQEtdB uwxaMBOozdTqaF9aNpy7mrAikXehyeN/uMbyDWfkTZJ+TjyWXOUd4o1KJHjTaif3 HpMFsT/4uA== -----END CERTIFICATE-----Generated at Thu May 21 13:20:16 2026 by rpki-client