$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: KYCWhJD4cAbTv0itofMavmV5c6/mIpCM2sAo80Q9Hm0= Subject key identifier: 77:2F:B1:11:29:2C:D7:98:B4:5D:26:A7:F8:FF:74:25:46:B1:10:BD Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 57C23644BBB41E7525500757376899B5D5995528 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 7A Signing time: Thu 10 Sep 2026 14:36:44 +0000 Manifest this update: Thu 10 Sep 2026 14:31:44 +0000 Manifest next update: Sun 13 Sep 2026 17:20:44 +0000 Files and hashes: 1: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: HWnWpdoa95+lpOiS56bav/gcc73CJPDAhHtAOOi9O3Q=) 2: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 3: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 4: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 5: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 6: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 7: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 8: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 9: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c2:36:44:bb:b4:1e:75:25:50:07:57:37:68:99:b5:d5:99:55:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Sep 10 14:31:44 2026 GMT Not After : Sep 13 17:20:44 2026 GMT Subject: CN=772FB111292CD798B45D26A7F8FF742546B110BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:2c:cc:b3:96:64:37:97:dc:c2:5f:a5:c1: 17:e5:3e:5a:39:94:73:b1:da:a1:56:36:f3:81:d7: 56:d2:8f:28:f3:70:18:d7:af:ae:61:70:bc:70:88: 76:40:a4:bb:52:2b:a8:ee:32:76:08:90:bf:d3:f1: 27:ad:92:ec:67:73:0c:44:45:e1:d1:64:52:e3:76: 31:e6:83:b2:2c:47:15:31:f2:dc:24:00:23:87:2e: ea:71:87:70:79:73:34:35:cf:60:97:9f:a7:d6:bd: 53:54:e9:9c:22:0a:f4:92:89:b2:ce:b2:c4:68:05: 0b:68:9a:57:04:31:0e:e1:f7:35:8a:f4:d4:07:7e: 4f:f4:90:a0:1c:43:75:b2:a4:e4:ae:9c:41:16:c4: 4e:4d:1a:7c:1a:06:84:a5:3f:93:cb:d7:aa:a6:ae: 4c:15:09:a9:97:17:f2:5c:db:94:28:f3:49:37:16: d3:78:1f:ab:b3:22:73:da:24:4e:ab:0a:93:64:4b: e3:1d:ae:9c:78:d5:5a:46:3b:fa:df:c6:f5:b9:9b: 75:ed:2f:dc:0e:a9:f7:9b:c3:30:79:95:74:c4:3e: 3f:45:d1:5d:01:3d:ec:2f:55:f8:ab:dc:d5:82:2c: cc:67:5c:98:a9:ee:38:8b:59:ef:8c:1a:14:92:3d: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:B1:11:29:2C:D7:98:B4:5D:26:A7:F8:FF:74:25:46:B1:10:BD X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:11:56:c6:71:d4:f3:c0:12:b1:b4:66:f7:b4:98:d5:fe: 91:61:11:4c:d3:f5:4b:0b:d3:42:9e:bc:30:28:a0:15:9f:c6: 6c:60:f7:c7:55:0f:f1:dc:be:ba:27:cf:94:6a:58:f1:41:6f: 5a:d3:9a:28:aa:bc:5c:42:04:38:e6:2f:09:99:43:8d:30:cd: c5:4a:12:48:15:ab:4b:03:bb:78:f2:fa:8a:72:ac:af:11:06: 2c:37:ee:4a:b2:98:d7:84:e1:73:e7:44:01:25:43:5d:1c:6a: c6:99:19:39:07:a8:8f:58:10:b1:17:d5:fe:bd:8b:44:2f:dc: dc:8b:00:bf:04:d7:22:78:e6:57:f1:b1:2a:f5:24:b7:12:f1: 29:ec:a4:fb:99:62:ea:b6:b0:e7:f3:0d:f6:e8:e7:09:36:57: ba:3a:17:96:32:31:f2:69:67:ae:7d:5a:8d:9f:be:81:e9:14: 37:85:36:94:f3:61:bc:f8:9f:df:20:17:87:09:40:38:b0:e0: 19:bf:26:d6:a8:df:2d:91:a8:6b:39:ba:7b:17:62:32:82:36: 2e:30:d9:37:35:16:4a:e2:57:c1:24:9e:07:93:ff:d5:38:d5: a5:81:8c:a6:fa:eb:e3:0d:81:99:df:cc:91:94:41:1b:02:bf: e7:d5:a1:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV8I2RLu0HnUlUAdXN2iZtdWZVSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA5MTAxNDMxNDRaFw0yNjA5MTMxNzIwNDRaMDMxMTAvBgNV BAMTKDc3MkZCMTExMjkyQ0Q3OThCNDVEMjZBN0Y4RkY3NDI1NDZCMTEwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTCzMs5ZkN5fcwl+lwRflPlo5 lHOx2qFWNvOB11bSjyjzcBjXr65hcLxwiHZApLtSK6juMnYIkL/T8SetkuxncwxE ReHRZFLjdjHmg7IsRxUx8twkACOHLupxh3B5czQ1z2CXn6fWvVNU6ZwiCvSSibLO ssRoBQtomlcEMQ7h9zWK9NQHfk/0kKAcQ3WypOSunEEWxE5NGnwaBoSlP5PL16qm rkwVCamXF/Jc25Qo80k3FtN4H6uzInPaJE6rCpNkS+Mdrpx41VpGO/rfxvW5m3Xt L9wOqfebwzB5lXTEPj9F0V0BPewvVfir3NWCLMxnXJip7jiLWe+MGhSSPb7pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdy+xESks15i0XSan+P90JUaxEL0wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOoRVsZx1PPA ErG0Zve0mNX+kWERTNP1SwvTQp68MCigFZ/GbGD3x1UP8dy+uifPlGpY8UFvWtOa KKq8XEIEOOYvCZlDjTDNxUoSSBWrSwO7ePL6inKsrxEGLDfuSrKY14Thc+dEASVD XRxqxpkZOQeoj1gQsRfV/r2LRC/c3IsAvwTXInjmV/GxKvUktxLxKeyk+5li6raw 5/MN9ujnCTZXujoXljIx8mlnrn1ajZ++gekUN4U2lPNhvPif3yAXhwlAOLDgGb8m 1qjfLZGoazm6exdiMoI2LjDZNzUWSuJXwSSeB5P/1TjVpYGMpvrr4w2Bmd/MkZRB GwK/59WhAQ== -----END CERTIFICATE-----Generated at Thu Sep 10 20:34:17 2026 by rpki-client