$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: a7vT+UXpO9hYhwA9YXnty5czbczRo26pz9l0xA3WYyo= Subject key identifier: 61:2A:D4:D9:09:EA:16:34:F4:39:C4:0C:0E:1C:B3:8A:0A:60:E2:57 Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 4ECA4FEAB6C41AD4272099B92D03D436B78D0B53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 85 Signing time: Fri 28 Aug 2026 06:48:20 +0000 Manifest this update: Fri 28 Aug 2026 06:43:20 +0000 Manifest next update: Mon 31 Aug 2026 14:27:20 +0000 Files and hashes: 1: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) 2: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: Pvh45Bvy+v5qU+/BgYfwfdoQbzNK435hBaSf2m3c9Sc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ca:4f:ea:b6:c4:1a:d4:27:20:99:b9:2d:03:d4:36:b7:8d:0b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Aug 28 06:43:20 2026 GMT Not After : Aug 31 14:27:20 2026 GMT Subject: CN=612AD4D909EA1634F439C40C0E1CB38A0A60E257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:07:59:01:14:43:e0:63:08:cb:07:67:3e: f1:f3:1c:85:32:32:75:3d:3d:18:97:f0:72:f6:fd: 11:25:32:29:04:3f:63:c8:c6:65:79:49:b6:af:15: 31:85:8c:30:39:cb:06:bc:14:03:35:9b:40:fe:66: 55:e3:2d:14:7b:51:ab:df:d1:38:74:2d:a6:96:80: 40:d4:f3:03:3e:30:d2:ae:1c:e4:b4:0a:8b:d1:42: 82:84:0a:84:3e:ab:54:75:36:d2:a4:ab:00:4b:12: 82:4a:8f:26:0e:10:1d:93:f2:1d:d5:2e:59:fa:fe: 9a:4f:1a:da:f9:d7:20:62:9d:96:70:9a:3d:c8:32: bd:21:d0:20:94:7d:ac:1d:17:97:ce:93:58:00:a2: c7:79:44:8c:d2:83:c7:72:27:56:ba:e7:cf:47:fa: a2:1b:d3:1d:cd:9c:9e:09:68:47:29:ae:82:5c:1a: 92:dc:b5:d3:b2:1a:fc:22:a2:00:ce:3a:45:42:2c: ec:84:56:ea:07:09:ae:c6:b6:f4:80:fb:e6:46:c1: 92:8e:89:da:87:ea:4c:30:93:c1:40:8d:0d:6f:74: d9:d5:b7:4b:cc:b2:3d:04:75:84:bc:2f:7f:73:b7: bb:f8:0b:d1:19:7d:e3:e9:db:3a:3b:7f:9b:79:19: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:D4:D9:09:EA:16:34:F4:39:C4:0C:0E:1C:B3:8A:0A:60:E2:57 X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e6:3a:be:71:23:b8:70:e3:f5:cb:c4:62:76:12:f3:8a:5d: 02:4d:b8:30:28:c4:fc:67:65:f9:97:a5:28:07:8a:53:9a:25: 94:16:48:12:18:1c:fa:d4:6b:f4:6d:2f:90:34:17:43:a2:d8: a1:1d:af:ef:aa:24:81:c1:96:58:cd:e1:9e:88:a5:5f:2a:28: 7b:d1:72:65:06:14:85:6c:37:86:fb:96:7a:85:05:b2:7b:b7: dd:94:74:10:d2:7c:e9:3b:af:8d:9b:23:62:86:15:1a:7d:a0: d1:35:92:4a:98:ae:22:68:25:b5:03:22:38:a6:d0:1f:af:e2: df:1c:1e:c1:a3:f8:f0:89:10:de:80:7c:74:2f:81:4d:62:00: e9:bf:be:86:5e:33:d0:75:33:23:ec:33:8b:04:52:0f:5f:42: 63:a5:14:70:fa:fd:16:04:b3:e1:69:ba:7b:2f:77:30:df:ff: e9:73:d9:a0:aa:67:d4:c8:00:f0:ae:16:5a:a8:fe:9e:ee:74: c3:ba:9e:e6:88:28:84:06:ec:37:c8:59:fd:0d:17:62:bc:33: 04:d9:fb:90:53:12:02:67:04:bb:c5:44:0d:70:5d:64:97:3a: 8b:21:5c:3e:d0:ca:bd:39:e2:61:6f:4c:bf:d2:9d:e0:6c:07: bf:e6:b7:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTspP6rbEGtQnIJm5LQPUNreNC1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjA4MjgwNjQzMjBaFw0yNjA4MzExNDI3MjBaMDMxMTAvBgNV BAMTKDYxMkFENEQ5MDlFQTE2MzRGNDM5QzQwQzBFMUNCMzhBMEE2MEUyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCQdZARRD4GMIywdnPvHzHIUy MnU9PRiX8HL2/RElMikEP2PIxmV5SbavFTGFjDA5ywa8FAM1m0D+ZlXjLRR7Uavf 0Th0LaaWgEDU8wM+MNKuHOS0CovRQoKECoQ+q1R1NtKkqwBLEoJKjyYOEB2T8h3V Lln6/ppPGtr51yBinZZwmj3IMr0h0CCUfawdF5fOk1gAosd5RIzSg8dyJ1a6589H +qIb0x3NnJ4JaEcproJcGpLctdOyGvwiogDOOkVCLOyEVuoHCa7GtvSA++ZGwZKO idqH6kwwk8FAjQ1vdNnVt0vMsj0EdYS8L39zt7v4C9EZfePp2zo7f5t5GblxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYSrU2QnqFjT0OcQMDhyzigpg4lcwHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeY6vnEjuHDj 9cvEYnYS84pdAk24MCjE/Gdl+ZelKAeKU5ollBZIEhgc+tRr9G0vkDQXQ6LYoR2v 76okgcGWWM3hnoilXyooe9FyZQYUhWw3hvuWeoUFsnu33ZR0ENJ86TuvjZsjYoYV Gn2g0TWSSpiuImgltQMiOKbQH6/i3xwewaP48IkQ3oB8dC+BTWIA6b++hl4z0HUz I+wziwRSD19CY6UUcPr9FgSz4Wm6ey93MN//6XPZoKpn1MgA8K4WWqj+nu50w7qe 5ogohAbsN8hZ/Q0XYrwzBNn7kFMSAmcEu8VEDXBdZJc6iyFcPtDKvTniYW9Mv9Kd 4GwHv+a36g== -----END CERTIFICATE-----Generated at Sat Aug 29 07:42:14 2026 by rpki-client