$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: N6jB78+g8kSt7k7VPPfXQAgHXOv9lMkueoGk60V1Z/U= Subject key identifier: EE:7D:8A:1E:CD:F0:28:E5:ED:7D:6E:7F:75:D2:F8:75:60:38:3B:36 Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 55252F0ADDCC7D461AB1B80910EA98F85E7AF5ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 8F Signing time: Tue 27 Oct 2026 19:50:03 +0000 Manifest this update: Tue 27 Oct 2026 19:45:03 +0000 Manifest next update: Sat 31 Oct 2026 01:41:03 +0000 Files and hashes: 1: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) 2: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 3: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 4: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 5: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 6: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: XE5pRq2cnO/T/g6s8+oq0DApSp3Kblo0NERnPlxUxc8=) 7: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 8: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 9: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:25:2f:0a:dd:cc:7d:46:1a:b1:b8:09:10:ea:98:f8:5e:7a:f5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Oct 27 19:45:03 2026 GMT Not After : Oct 31 01:41:03 2026 GMT Subject: CN=EE7D8A1ECDF028E5ED7D6E7F75D2F87560383B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8f:b4:0c:85:02:b9:9f:2a:73:7d:c6:86:21: 15:83:90:c4:6b:0c:d6:ef:83:94:0b:06:56:9e:54: 04:40:dd:af:4b:fa:92:e3:dd:fd:8c:c0:78:c6:a1: 3c:91:e9:5b:77:26:f5:0f:a9:0f:af:20:4e:c8:f2: ba:e3:72:9d:30:16:3f:49:8f:a5:e1:c3:7a:f0:c9: 97:8b:40:9a:02:e4:13:7a:d5:27:e8:e2:10:23:3f: f3:d0:aa:40:7c:17:fb:d8:09:47:29:fa:5d:fe:33: 6d:7b:ef:01:30:85:22:6c:41:e2:5e:e3:0b:82:95: 2a:12:fd:e9:5e:3a:ed:05:2f:08:66:e1:5b:f7:c3: 5d:83:36:9c:13:e8:97:9f:aa:41:d1:c7:61:c8:4f: 58:ae:eb:49:bc:a2:2d:bf:2d:1e:e0:91:ea:23:72: 6a:fc:be:0a:8d:4f:2e:7d:16:e6:e4:4f:5d:2b:38: 66:21:19:94:a7:90:b5:d7:d3:3d:1f:2b:7e:78:72: 3b:34:60:1b:44:3b:20:85:d4:05:67:75:3a:16:29: 1e:88:79:04:1c:20:44:45:c2:1b:00:78:43:76:da: 2c:56:93:e7:22:c3:bd:f9:eb:fa:a5:73:e4:b8:f3: f6:f2:13:75:75:59:82:87:98:03:cd:4d:2d:d6:c3: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7D:8A:1E:CD:F0:28:E5:ED:7D:6E:7F:75:D2:F8:75:60:38:3B:36 X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:07:27:e1:a8:9b:8c:24:54:79:ce:65:f3:84:7c:36:c9:14: d4:58:1d:3f:a0:6a:7e:34:30:2d:81:a5:6d:60:2f:9f:2c:c4: 65:3d:b1:d5:1a:66:3c:30:9e:0a:6c:30:33:56:5b:48:e7:00: a9:a7:f3:58:75:81:cc:3b:25:8d:6c:7c:0d:d6:22:7b:4a:f3: dc:17:52:aa:98:c6:50:99:38:3e:50:f2:a2:10:a5:d6:88:2d: 83:e7:38:ae:5b:33:98:cd:e1:a2:6d:b7:de:33:d7:4d:8b:0a: 50:6f:03:d4:db:4f:48:d3:db:7c:ae:4b:9f:47:17:4f:3a:5e: 11:ae:c4:43:3c:27:a2:0d:e8:46:3b:ca:9e:cf:7d:10:aa:c2: 74:8c:35:4d:47:ac:9f:11:7b:b3:55:de:12:f0:b3:39:8e:a5: 7b:0d:53:15:24:58:8a:ff:ac:30:03:56:4a:13:dc:37:18:7d: 1c:f9:1b:a4:34:06:1b:49:9c:ad:7a:4b:a3:24:01:a9:bc:b8: 21:79:11:92:8e:4f:ab:a4:13:4e:e8:ee:db:da:6e:74:08:f6: 45:ff:3a:c1:7e:1e:f2:aa:de:26:a2:f0:3c:3b:d3:53:df:d4: d9:11:e5:ec:03:94:b1:03:6a:0a:77:a2:2e:0b:63:6a:37:a3: 93:88:d0:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVSUvCt3MfUYasbgJEOqY+F569e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjEwMjcxOTQ1MDNaFw0yNjEwMzEwMTQxMDNaMDMxMTAvBgNV BAMTKEVFN0Q4QTFFQ0RGMDI4RTVFRDdENkU3Rjc1RDJGODc1NjAzODNCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZj7QMhQK5nypzfcaGIRWDkMRr DNbvg5QLBlaeVARA3a9L+pLj3f2MwHjGoTyR6Vt3JvUPqQ+vIE7I8rrjcp0wFj9J j6Xhw3rwyZeLQJoC5BN61Sfo4hAjP/PQqkB8F/vYCUcp+l3+M2177wEwhSJsQeJe 4wuClSoS/eleOu0FLwhm4Vv3w12DNpwT6JefqkHRx2HIT1iu60m8oi2/LR7gkeoj cmr8vgqNTy59FubkT10rOGYhGZSnkLXX0z0fK354cjs0YBtEOyCF1AVndToWKR6I eQQcIERFwhsAeEN22ixWk+ciw7356/qlc+S48/byE3V1WYKHmAPNTS3Ww6zJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7n2KHs3wKOXtfW5/ddL4dWA4OzYwHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgcn4aibjCRU ec5l84R8NskU1FgdP6BqfjQwLYGlbWAvnyzEZT2x1RpmPDCeCmwwM1ZbSOcAqafz WHWBzDsljWx8DdYie0rz3BdSqpjGUJk4PlDyohCl1ogtg+c4rlszmM3hom233jPX TYsKUG8D1NtPSNPbfK5Ln0cXTzpeEa7EQzwnog3oRjvKns99EKrCdIw1TUesnxF7 s1XeEvCzOY6lew1TFSRYiv+sMANWShPcNxh9HPkbpDQGG0mcrXpLoyQBqby4IXkR ko5Pq6QTTuju29pudAj2Rf86wX4e8qreJqLwPDvTU9/U2RHl7AOUsQNqCneiLgtj ajejk4jQVw== -----END CERTIFICATE-----Generated at Wed Oct 28 05:24:08 2026 by rpki-client