$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json) Hash identifier: goZnRuBLCWYHzdbG+Lch+reyiWnGk3qgcJ8k09FRAPY= Subject key identifier: 09:09:E7:4E:1B:92:AC:CB:3E:CE:69:2E:66:B6:65:B0:6B:04:A8:9D Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 0285CCC3BB1D74F2CD9837988EE0535703536614 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft Manifest number: 15 Signing time: Fri 29 May 2026 02:52:28 +0000 Manifest this update: Fri 29 May 2026 02:47:28 +0000 Manifest next update: Sat 30 May 2026 06:16:28 +0000 Files and hashes: 1: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: xVkxfLEiXIlFdtXaV/brx5ylaW+TtAKPAf+hNX0huNo=) 2: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=) 3: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:85:cc:c3:bb:1d:74:f2:cd:98:37:98:8e:e0:53:57:03:53:66:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: May 29 02:47:28 2026 GMT Not After : May 30 06:16:28 2026 GMT Subject: CN=0909E74E1B92ACCB3ECE692E66B665B06B04A89D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:b2:21:97:7c:93:e0:dc:46:71:2e:41:31: 80:57:c5:49:8b:8a:8b:bc:37:2d:3b:5e:47:10:e8: fa:1c:58:27:87:f4:32:35:46:a4:43:da:75:71:0e: d4:ed:e4:a2:b4:1b:c2:40:73:82:b4:c0:37:90:c2: 6a:27:b4:f9:3d:06:57:92:22:2c:4f:2c:85:5a:c1: e0:99:d0:7e:9f:28:4d:97:a8:bd:b4:35:00:83:91: 07:7c:7d:69:9e:e0:4c:ca:3e:d4:8f:b0:b0:da:14: ef:1e:0d:34:66:0e:d1:94:8b:e8:69:95:7a:91:6b: 5a:78:b0:b5:71:e2:1d:0b:b5:a8:f2:d8:d7:3f:e0: 58:0a:0a:c2:21:41:43:1d:7e:0f:55:03:ba:b2:26: 05:8f:7d:7d:99:42:97:b4:d4:99:05:7e:28:43:3b: 27:90:fd:2b:91:33:2e:7a:16:86:4d:16:bc:e2:2a: 31:14:98:e9:8f:90:d4:5e:0b:b6:8c:fe:4e:77:c2: 66:00:3e:d6:fd:e8:90:2e:45:a2:42:0d:37:75:25: 4c:32:1d:2b:d4:09:bd:ff:85:eb:d8:e0:f8:e3:ed: 2b:d0:3b:23:6f:e8:43:42:28:35:02:05:10:84:35: b7:3c:23:f4:2e:5a:6e:ac:65:cc:f5:0c:6f:a5:b7: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:09:E7:4E:1B:92:AC:CB:3E:CE:69:2E:66:B6:65:B0:6B:04:A8:9D X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:d6:e9:2c:80:d9:3d:22:b8:85:5b:6b:63:4d:78:bc:ec: 67:e7:86:06:09:d3:84:c3:48:2c:e3:69:b4:6b:60:66:d5:9d: 64:2e:c2:0c:5a:bc:70:e6:1f:c9:2b:18:c4:df:32:8b:05:61: 24:53:de:4a:95:ec:e0:cd:c5:fb:e6:d0:d9:9d:de:0e:50:2f: 5c:4b:58:0a:68:36:65:37:ff:f1:72:3b:3b:70:11:d1:5d:71: 3c:ca:5f:b0:90:df:e1:93:16:90:bb:a8:d7:f1:ed:98:b2:a1: 5a:9e:91:0c:37:27:5a:20:23:00:d1:b3:4b:f4:f9:29:14:fc: 17:98:b5:0d:76:2c:7f:64:b7:a8:b8:c2:4a:86:bf:0b:06:13: 2c:37:7c:1a:b8:9d:14:c1:e2:3b:27:fe:9a:98:87:fe:5f:67: c8:08:f0:ec:05:ba:14:e1:7a:2b:df:b0:20:cf:cb:d2:f0:1e: da:7c:a3:03:c6:88:95:0f:26:b2:86:49:91:70:5a:92:0b:85: 08:a9:66:3a:e7:61:90:6f:21:41:8a:de:eb:93:e6:64:b0:15: cd:cb:99:14:71:f2:68:ad:f7:d4:82:9b:9c:d2:93:a8:16:1b: 86:fa:a4:b5:69:e1:bd:33:56:6b:3a:95:68:e9:10:8d:1d:20: 8a:9e:3c:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAoXMw7sddPLNmDeYjuBTVwNTZhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA1MjkwMjQ3MjhaFw0yNjA1MzAwNjE2MjhaMDMxMTAvBgNV BAMTKDA5MDlFNzRFMUI5MkFDQ0IzRUNFNjkyRTY2QjY2NUIwNkIwNEE4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8p7Ihl3yT4NxGcS5BMYBXxUmL iou8Ny07XkcQ6PocWCeH9DI1RqRD2nVxDtTt5KK0G8JAc4K0wDeQwmontPk9BleS IixPLIVaweCZ0H6fKE2XqL20NQCDkQd8fWme4EzKPtSPsLDaFO8eDTRmDtGUi+hp lXqRa1p4sLVx4h0Ltajy2Nc/4FgKCsIhQUMdfg9VA7qyJgWPfX2ZQpe01JkFfihD OyeQ/SuRMy56FoZNFrziKjEUmOmPkNReC7aM/k53wmYAPtb96JAuRaJCDTd1JUwy HSvUCb3/hevY4Pjj7SvQOyNv6ENCKDUCBRCENbc8I/QuWm6sZcz1DG+ltyxXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCQnnThuSrMs+zmkuZrZlsGsEqJ0wHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfbW6SyA2T0i uIVba2NNeLzsZ+eGBgnThMNILONptGtgZtWdZC7CDFq8cOYfySsYxN8yiwVhJFPe SpXs4M3F++bQ2Z3eDlAvXEtYCmg2ZTf/8XI7O3AR0V1xPMpfsJDf4ZMWkLuo1/Ht mLKhWp6RDDcnWiAjANGzS/T5KRT8F5i1DXYsf2S3qLjCSoa/CwYTLDd8GridFMHi Oyf+mpiH/l9nyAjw7AW6FOF6K9+wIM/L0vAe2nyjA8aIlQ8msoZJkXBakguFCKlm OudhkG8hQYre65PmZLAVzcuZFHHyaK331IKbnNKTqBYbhvqktWnhvTNWazqVaOkQ jR0gip48xA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:53 2026 by rpki-client