$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json) Hash identifier: 83Kp2mn2+7V8S3wU0FfxZkdeKjWLtSCBZNxjC9pwZYQ= Subject key identifier: A7:A2:EA:17:31:6B:39:B6:5F:29:D5:4A:67:59:8E:70:5D:DE:E4:F9 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 07AF73CC07E4337363B6F95C2B73CCCABBE9D32F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft Manifest number: B3 Signing time: Wed 14 Oct 2026 03:58:30 +0000 Manifest this update: Wed 14 Oct 2026 03:53:30 +0000 Manifest next update: Sat 17 Oct 2026 10:11:30 +0000 Files and hashes: 1: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=) 2: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=) 3: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=) 4: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=) 5: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=) 6: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=) 7: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=) 8: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=) 9: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=) 10: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=) 11: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: 1Fl6zrZXylSDhcxKhOQ5xdbVA/EN4GEP05tuMSI138s=) 12: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=) 13: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=) 14: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=) 15: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=) 16: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=) 17: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=) 18: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=) 19: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=) 20: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:af:73:cc:07:e4:33:73:63:b6:f9:5c:2b:73:cc:ca:bb:e9:d3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Oct 14 03:53:30 2026 GMT Not After : Oct 17 10:11:30 2026 GMT Subject: CN=A7A2EA17316B39B65F29D54A67598E705DDEE4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:77:4c:7d:22:ae:f7:c7:f2:4c:44:d7:52: 17:b7:51:36:72:e0:cf:a0:77:7d:a1:7f:9b:3a:80: 95:d3:bf:63:9e:17:cc:af:b9:d9:c6:4a:58:05:49: eb:82:9c:75:49:7a:cc:71:2a:39:93:fc:bf:66:d6: a7:ac:c3:96:fc:bf:dd:05:d9:d2:5b:9d:70:ee:38: e1:af:a5:e1:10:76:90:26:4b:76:27:5a:aa:57:9f: c7:7f:19:40:d1:a0:28:23:a2:1b:25:ea:c2:39:cf: e7:69:81:4e:9d:62:87:21:81:61:b8:d9:0f:00:68: cd:63:6f:7e:d3:5b:0a:b5:4f:14:bc:2b:54:c4:60: f4:2a:ef:ef:26:f7:0c:c7:6e:b4:e7:f3:b9:90:23: de:c1:9e:f2:77:42:15:d2:ca:ee:4d:8b:5c:f5:5c: b3:41:e9:e0:08:59:0e:f0:5a:81:50:82:59:1c:56: b9:f1:9a:12:de:c9:c2:db:b0:08:f1:b7:4d:6d:6c: fb:ce:75:38:fe:fc:cf:df:15:73:df:e8:83:55:ad: d3:9b:e0:55:8e:26:f8:e5:f1:65:8f:3b:91:a4:cc: 14:a7:80:be:2f:fb:d8:0b:7d:3f:11:94:92:4a:a3: 54:9f:8b:90:bc:1c:b5:e1:d7:a8:82:35:eb:0d:c6: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:EA:17:31:6B:39:B6:5F:29:D5:4A:67:59:8E:70:5D:DE:E4:F9 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:31:ee:23:48:62:f8:3b:6f:93:02:d5:37:e4:88:57:83:85: 48:86:fb:da:b1:db:73:de:bd:77:28:bc:07:9f:e9:63:3d:36: 06:22:11:d5:e6:80:c9:5c:80:35:07:2a:95:eb:19:d1:1c:9e: 44:fc:5e:b0:65:34:9b:e2:83:0c:91:a5:b9:9e:9c:99:00:b0: a8:11:cb:63:2e:c2:6b:42:07:5f:9a:2e:94:f0:3c:d0:d1:14: 68:4a:2e:7d:11:1d:44:7f:ce:8a:78:3f:db:00:1e:77:23:9e: ca:9a:4e:8a:4e:dd:b6:56:76:f9:2e:a0:04:c0:ab:75:48:32: 25:79:ee:0d:e7:fc:8f:ef:47:4e:29:60:08:13:94:69:37:d1: ae:89:7f:53:8e:60:43:99:49:09:db:0a:2a:49:ba:ed:23:89: 30:9f:eb:b2:84:ea:e1:fa:ca:72:51:4c:58:6c:5c:9c:3e:41: 15:37:15:a9:16:81:20:99:58:af:20:44:98:05:66:26:9f:a8: 38:57:57:b6:22:a4:d9:ce:76:49:24:d8:9b:07:2d:4d:eb:0b: a8:37:fe:f3:32:58:05:d4:32:b3:12:28:0e:66:9a:70:a9:60: 2f:7c:02:51:0d:4c:26:30:d4:92:cf:01:a2:f4:6b:f5:a9:a6: e3:4e:94:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB69zzAfkM3NjtvlcK3PMyrvp0y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjEwMTQwMzUzMzBaFw0yNjEwMTcxMDExMzBaMDMxMTAvBgNV BAMTKEE3QTJFQTE3MzE2QjM5QjY1RjI5RDU0QTY3NTk4RTcwNURERUU0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44XdMfSKu98fyTETXUhe3UTZy 4M+gd32hf5s6gJXTv2OeF8yvudnGSlgFSeuCnHVJesxxKjmT/L9m1qesw5b8v90F 2dJbnXDuOOGvpeEQdpAmS3YnWqpXn8d/GUDRoCgjohsl6sI5z+dpgU6dYochgWG4 2Q8AaM1jb37TWwq1TxS8K1TEYPQq7+8m9wzHbrTn87mQI97BnvJ3QhXSyu5Ni1z1 XLNB6eAIWQ7wWoFQglkcVrnxmhLeycLbsAjxt01tbPvOdTj+/M/fFXPf6INVrdOb 4FWOJvjl8WWPO5GkzBSngL4v+9gLfT8RlJJKo1Sfi5C8HLXh16iCNesNxnGXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp6LqFzFrObZfKdVKZ1mOcF3e5PkwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTHuI0hi+Dtv kwLVN+SIV4OFSIb72rHbc969dyi8B5/pYz02BiIR1eaAyVyANQcqlesZ0RyeRPxe sGU0m+KDDJGluZ6cmQCwqBHLYy7Ca0IHX5oulPA80NEUaEoufREdRH/Oing/2wAe dyOeyppOik7dtlZ2+S6gBMCrdUgyJXnuDef8j+9HTilgCBOUaTfRrol/U45gQ5lJ CdsKKkm67SOJMJ/rsoTq4frKclFMWGxcnD5BFTcVqRaBIJlYryBEmAVmJp+oOFdX tiKk2c52SSTYmwctTesLqDf+8zJYBdQysxIoDmaacKlgL3wCUQ1MJjDUks8BovRr 9amm406U0w== -----END CERTIFICATE-----Generated at Wed Oct 14 13:11:19 2026 by rpki-client