$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: GNn7MF9b6h0j/ntddSTkZqO1E7gl2VSgbSjqKxOEF3Y= Subject key identifier: A2:D8:75:68:1B:3A:F0:D9:28:02:C4:C2:6C:18:73:B3:7C:A7:FE:D1 Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 35DE9AC79E133A54E7B63028CE402A50C71A2A2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 0D Signing time: Fri 29 May 2026 18:08:04 +0000 Manifest this update: Fri 29 May 2026 18:03:04 +0000 Manifest next update: Sat 30 May 2026 20:25:04 +0000 Files and hashes: 1: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: Egk4YZJjBWKoizlnLwSoYUKSwPcEys86U/2i35fYTmw=) 2: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:de:9a:c7:9e:13:3a:54:e7:b6:30:28:ce:40:2a:50:c7:1a:2a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: May 29 18:03:04 2026 GMT Not After : May 30 20:25:04 2026 GMT Subject: CN=A2D875681B3AF0D92802C4C26C1873B37CA7FED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:d3:79:78:55:84:24:2b:9a:63:6e:4a:61: e6:53:70:85:f7:c5:86:42:5a:e4:9e:76:24:df:f9: 7f:59:59:a6:1e:a7:01:3b:5b:dd:9c:23:84:6f:52: 6b:6c:11:cb:55:05:43:04:b2:aa:c6:22:a7:1e:fd: 97:75:2e:cb:17:f6:12:06:b1:8f:1c:c2:e2:fc:54: b0:f4:01:09:2c:c0:7f:05:d8:64:06:92:cf:86:8c: 07:29:29:49:d7:3e:2e:e2:13:57:21:06:08:7c:de: cb:7a:19:bc:3e:2b:55:34:67:7d:a1:16:1c:f6:1e: f7:89:b4:4a:f0:05:c9:ec:89:33:69:06:c2:7b:fc: f2:c0:3f:3d:cd:33:4c:08:12:df:25:59:89:f2:96: c8:da:de:4d:97:5f:35:2e:60:81:a5:5e:d8:02:f8: 18:84:97:c4:ef:e6:1a:e6:50:eb:b3:c9:68:7d:b6: 80:0f:9f:c2:a1:c4:88:37:af:a5:98:ee:2e:c3:48: 93:7e:a0:d7:83:d1:e2:0a:c8:36:69:53:d6:1f:06: 5d:a8:36:34:29:c1:b4:55:00:1b:ae:6a:c1:9e:41: 98:55:e4:53:0b:82:ac:b6:aa:3c:63:3f:24:97:14: 50:20:9f:f4:1d:39:3a:7e:09:89:93:f9:de:85:6e: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D8:75:68:1B:3A:F0:D9:28:02:C4:C2:6C:18:73:B3:7C:A7:FE:D1 X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:69:9a:59:d4:73:c1:47:d5:67:86:d2:46:d9:cb:ad:4a:d8: 00:14:63:e3:dd:dc:6c:73:6a:db:09:66:dd:80:93:1c:b1:e6: 72:8d:10:3c:ba:b5:57:b5:e3:12:93:4c:eb:05:4f:60:d4:ce: 19:df:40:ea:a2:e5:11:db:86:a1:fb:17:aa:0a:de:dd:fe:68: a0:ae:68:55:59:df:ec:10:0b:4e:99:14:58:17:98:93:f5:15: 21:18:ab:83:7b:2d:b9:bf:47:40:a2:ba:45:46:b2:ba:20:6a: c3:cf:7d:15:20:c9:ad:b8:51:aa:0c:fe:16:46:3f:43:2a:82: 2d:0d:b8:b6:22:39:e0:ca:c6:61:5d:e5:5c:cd:7c:87:46:35: 1b:7d:43:8a:8c:87:05:0c:4e:44:e8:46:bf:dc:91:e8:30:e3: 2d:7a:9c:71:20:34:f6:b7:24:83:f8:83:1f:f4:10:0f:f7:84: 9b:f3:38:ab:8a:80:81:67:42:cc:56:d7:d5:b0:84:f6:37:28: 7d:58:ab:ab:fc:e8:b4:d6:94:0e:1a:52:08:7e:3b:88:89:74: 44:0b:c3:72:a6:d9:34:b1:88:e1:a0:2f:f1:38:3e:3f:86:e2: 2f:a7:ba:bd:6f:d8:da:9b:47:36:06:ae:23:e6:4b:c9:7a:8d: 41:09:a1:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNd6ax54TOlTntjAozkAqUMcaKi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjA1MjkxODAzMDRaFw0yNjA1MzAyMDI1MDRaMDMxMTAvBgNV BAMTKEEyRDg3NTY4MUIzQUYwRDkyODAyQzRDMjZDMTg3M0IzN0NBN0ZFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJftN5eFWEJCuaY25KYeZTcIX3 xYZCWuSediTf+X9ZWaYepwE7W92cI4RvUmtsEctVBUMEsqrGIqce/Zd1LssX9hIG sY8cwuL8VLD0AQkswH8F2GQGks+GjAcpKUnXPi7iE1chBgh83st6Gbw+K1U0Z32h Fhz2HveJtErwBcnsiTNpBsJ7/PLAPz3NM0wIEt8lWYnylsja3k2XXzUuYIGlXtgC +BiEl8Tv5hrmUOuzyWh9toAPn8KhxIg3r6WY7i7DSJN+oNeD0eIKyDZpU9YfBl2o NjQpwbRVABuuasGeQZhV5FMLgqy2qjxjPySXFFAgn/QdOTp+CYmT+d6FbicfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoth1aBs68NkoAsTCbBhzs3yn/tEwHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2maWdRzwUfV Z4bSRtnLrUrYABRj493cbHNq2wlm3YCTHLHmco0QPLq1V7XjEpNM6wVPYNTOGd9A 6qLlEduGofsXqgre3f5ooK5oVVnf7BALTpkUWBeYk/UVIRirg3stub9HQKK6RUay uiBqw899FSDJrbhRqgz+FkY/QyqCLQ24tiI54MrGYV3lXM18h0Y1G31DioyHBQxO ROhGv9yR6DDjLXqccSA09rckg/iDH/QQD/eEm/M4q4qAgWdCzFbX1bCE9jcofVir q/zotNaUDhpSCH47iIl0RAvDcqbZNLGI4aAv8Tg+P4biL6e6vW/Y2ptHNgauI+ZL yXqNQQmhxA== -----END CERTIFICATE-----Generated at Sat May 30 01:57:19 2026 by rpki-client