$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: xX8O+BRixN8EUzKceg/bvT4D1QcSJNHfAKs8qLwkd14= Subject key identifier: 7E:D7:AF:71:CE:13:84:11:17:E7:8B:B2:6E:F1:5D:8D:FA:52:51:4C Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 3E2B07BBC52AA64F2EB8953FBBB75661B7B8C2E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 9E Signing time: Fri 23 Oct 2026 20:35:38 +0000 Manifest this update: Fri 23 Oct 2026 20:30:38 +0000 Manifest next update: Mon 26 Oct 2026 23:28:38 +0000 Files and hashes: 1: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: MMD6RiPs7MW1Ki76r3409CXhk8CeIOPooxqkj2SxYHY=) 2: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 14:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2b:07:bb:c5:2a:a6:4f:2e:b8:95:3f:bb:b7:56:61:b7:b8:c2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Oct 23 20:30:38 2026 GMT Not After : Oct 26 23:28:38 2026 GMT Subject: CN=7ED7AF71CE13841117E78BB26EF15D8DFA52514C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:43:ad:12:7e:69:b6:5a:c2:0f:8f:4b:66: a8:c8:55:09:04:24:91:bb:3e:87:2d:70:7f:00:ca: 32:7f:a3:36:dd:09:58:70:aa:de:70:0b:5f:d9:81: 08:5a:58:99:16:20:e1:0a:f8:e1:6a:b9:44:55:03: 26:79:41:82:d2:a6:99:05:80:c8:e0:e4:04:54:4a: 4a:f4:30:48:ca:05:b6:3e:6d:1c:ab:73:73:3c:30: 72:7c:a3:e1:84:65:36:76:31:13:98:97:52:d8:22: 48:50:eb:76:3a:70:87:af:d4:b2:e7:72:e1:0d:38: ef:9c:d1:37:af:bf:45:81:c9:ac:af:af:9d:ff:b7: a7:f0:27:d2:1a:21:23:cb:da:8f:04:56:26:e3:a7: 10:33:36:61:03:9f:97:a3:43:8e:a0:20:7d:20:f5: 71:18:ef:87:0d:28:57:e1:7a:2a:78:2a:e8:c7:f5: cb:27:f7:65:2b:f0:b5:9e:6d:2a:be:99:56:87:a7: d7:17:c4:28:fe:11:3b:22:81:2f:d5:e5:7a:a2:fd: 99:85:2c:53:ef:c7:df:d2:96:8d:1d:53:fd:01:45: f1:25:0a:f1:13:19:a9:92:00:32:d6:bf:3a:68:e9: 09:51:96:5d:73:e0:90:ff:d4:8e:a0:e8:6b:8c:f8: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D7:AF:71:CE:13:84:11:17:E7:8B:B2:6E:F1:5D:8D:FA:52:51:4C X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:49:33:2d:4a:f9:56:17:3f:f5:a4:43:68:41:7d:be:33: 4a:a6:bc:79:b9:2f:9d:95:6c:06:5f:58:2d:f5:ed:c7:54:64: c3:68:f9:cb:6c:5c:d5:e5:b3:1d:e3:cf:6b:ae:5d:1e:f0:69: 2f:81:4d:c5:c2:05:f7:5c:61:58:b6:b6:18:cd:94:3d:36:96: 41:0c:09:46:f9:0e:87:ca:1a:29:09:36:09:f2:ec:f1:60:db: 48:8a:4a:03:be:26:78:58:c3:db:5b:7a:65:2a:44:dd:4b:c2: e2:f0:d7:10:c3:05:2f:b9:df:f3:76:b6:14:f2:d0:ac:9b:e1: 06:e5:41:14:f5:fd:eb:67:7b:1f:d9:b1:52:dd:21:6c:0b:e3: 7a:77:05:12:1a:9c:70:92:c5:c3:12:77:41:85:ec:97:78:a7: 2a:62:4a:d5:4c:fe:b5:62:d7:6a:12:e6:5f:84:db:34:c5:a8: 96:2c:e5:2a:ef:34:85:26:ee:ee:b9:49:60:4e:3e:8a:e9:d5: ba:71:d6:cb:d1:25:7b:a9:e1:d3:a0:23:20:82:42:ba:6b:87: 26:ee:7d:d6:76:ab:fc:bf:7d:3f:3c:32:6a:75:23:3c:e8:96: 91:96:94:d0:53:52:df:3d:ac:05:c4:a2:e2:aa:40:68:a9:7c: d4:75:27:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPisHu8Uqpk8uuJU/u7dWYbe4wuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjEwMjMyMDMwMzhaFw0yNjEwMjYyMzI4MzhaMDMxMTAvBgNV BAMTKDdFRDdBRjcxQ0UxMzg0MTExN0U3OEJCMjZFRjE1RDhERkE1MjUxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHEOtEn5ptlrCD49LZqjIVQkE JJG7PoctcH8AyjJ/ozbdCVhwqt5wC1/ZgQhaWJkWIOEK+OFquURVAyZ5QYLSppkF gMjg5ARUSkr0MEjKBbY+bRyrc3M8MHJ8o+GEZTZ2MROYl1LYIkhQ63Y6cIev1LLn cuENOO+c0Tevv0WByayvr53/t6fwJ9IaISPL2o8EVibjpxAzNmEDn5ejQ46gIH0g 9XEY74cNKFfheip4KujH9csn92Ur8LWebSq+mVaHp9cXxCj+ETsigS/V5Xqi/ZmF LFPvx9/Slo0dU/0BRfElCvETGamSADLWvzpo6QlRll1z4JD/1I6g6GuM+J29AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUftevcc4ThBEX54uybvFdjfpSUUwwHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILFJMy1K+VYX P/WkQ2hBfb4zSqa8ebkvnZVsBl9YLfXtx1Rkw2j5y2xc1eWzHePPa65dHvBpL4FN xcIF91xhWLa2GM2UPTaWQQwJRvkOh8oaKQk2CfLs8WDbSIpKA74meFjD21t6ZSpE 3UvC4vDXEMMFL7nf83a2FPLQrJvhBuVBFPX962d7H9mxUt0hbAvjencFEhqccJLF wxJ3QYXsl3inKmJK1Uz+tWLXahLmX4TbNMWolizlKu80hSbu7rlJYE4+iunVunHW y9Ele6nh06AjIIJCumuHJu591nar/L99PzwyanUjPOiWkZaU0FNS3z2sBcSi4qpA aKl81HUnqQ== -----END CERTIFICATE-----Generated at Sun Oct 25 14:44:26 2026 by rpki-client