$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: NP5jL8f3OUiQsSEmj7QFIrg8BkVfaWtFJuNvxHZQr4Q= Subject key identifier: 97:75:BA:61:F3:F5:82:29:6A:C6:E4:82:8A:CF:75:72:6C:06:EC:29 Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 539195BE2AD83DA5D6E56ACAF2FA8EB40C23C29C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 8E Signing time: Sun 25 Oct 2026 13:02:35 +0000 Manifest this update: Sun 25 Oct 2026 12:57:35 +0000 Manifest next update: Wed 28 Oct 2026 19:45:35 +0000 Files and hashes: 1: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 2: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 3: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 4: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 5: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 6: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: PD214n4R3/QNmgbGjHqHstrYZFXIirHc9XTUpWW3r/I=) 7: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 8: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 9: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 19:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:91:95:be:2a:d8:3d:a5:d6:e5:6a:ca:f2:fa:8e:b4:0c:23:c2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Oct 25 12:57:35 2026 GMT Not After : Oct 28 19:45:35 2026 GMT Subject: CN=9775BA61F3F582296AC6E4828ACF75726C06EC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:a9:f0:f7:e7:3a:64:e0:cc:11:f8:0f:8d: f4:ca:9e:47:38:4e:2d:52:e9:40:69:28:42:66:2e: 2d:45:e6:5d:2e:63:b1:59:c1:6a:09:f8:fc:4a:55: b6:9d:47:5c:19:39:07:46:2d:5e:4b:f6:73:86:2b: ba:15:6e:bc:4b:10:4c:cf:24:01:36:cf:b1:f1:84: 70:84:9c:3c:a8:0b:cb:4e:2d:0c:d5:91:a0:2a:e5: 08:48:71:64:f8:11:d0:23:b0:87:06:0f:4e:d9:1b: 76:e8:06:87:2b:7b:3f:e8:db:9c:b6:17:b2:90:cf: 1c:d4:91:6d:b3:c6:d0:4c:18:8e:e3:22:49:04:b0: 68:cc:df:ec:96:4e:2d:c0:d2:e7:a1:0f:9c:44:53: 38:4b:06:04:9a:d1:5f:be:9f:57:2b:55:4a:2b:c4: 3e:cb:2e:5e:4a:7e:7f:40:b0:47:61:ee:93:55:81: d6:a3:90:60:f7:0b:66:4f:c6:31:e1:24:a3:d9:10: 4d:98:27:b5:fe:de:1f:30:ee:72:46:4d:0a:46:1b: 5d:50:45:0e:45:67:03:db:7e:d8:eb:77:f0:0a:5b: 20:78:ff:09:0f:cb:f0:b1:aa:69:cf:0c:3a:83:35: 14:b0:3f:33:0a:47:2b:e0:fd:c3:14:c4:40:6d:ff: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:75:BA:61:F3:F5:82:29:6A:C6:E4:82:8A:CF:75:72:6C:06:EC:29 X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fb:62:43:5b:ef:c2:ff:4f:83:fe:43:00:9e:76:55:7c:1d: ad:b0:20:3e:9b:05:63:d4:e3:91:d7:48:87:f8:bb:d2:f7:82: 30:08:18:41:0f:0a:87:88:50:51:2c:b4:9f:d9:2d:9e:df:23: 0a:c2:68:fe:cb:a8:08:cb:32:af:0e:85:b7:26:24:65:65:f8: eb:69:a1:c2:0a:ea:b5:fd:e8:d4:e9:5d:ec:45:ec:17:35:30: d3:8d:23:84:0f:ab:d3:a8:c4:5a:6e:60:3f:da:b5:7e:ef:54: 58:4d:d2:4a:af:18:98:f9:cc:20:eb:c0:97:c9:53:9d:cc:9f: b6:27:d5:e0:53:d1:28:72:e1:6f:8c:79:62:b1:c3:29:81:c0: e6:8a:7f:ee:e9:3f:24:37:a7:2f:39:b8:49:7d:33:8b:4a:52: 2a:a3:ec:47:fb:7c:19:f4:93:9d:01:18:51:67:3f:30:14:43: 70:d0:85:2d:b3:5f:2e:d1:7f:de:12:5e:fe:ec:bc:9f:61:44: 8f:7a:5e:17:21:ef:30:03:ca:fc:b6:70:1f:de:54:ce:00:66: 81:41:e5:54:34:36:7d:04:d1:d2:b8:e1:1a:8c:9d:77:46:42: 0b:48:5f:0d:17:4c:aa:f9:6b:5e:c2:64:31:2b:e7:c2:72:9d: d4:8b:c9:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU5GVvirYPaXW5WrK8vqOtAwjwpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjEwMjUxMjU3MzVaFw0yNjEwMjgxOTQ1MzVaMDMxMTAvBgNV BAMTKDk3NzVCQTYxRjNGNTgyMjk2QUM2RTQ4MjhBQ0Y3NTcyNkMwNkVDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1R6nw9+c6ZODMEfgPjfTKnkc4 Ti1S6UBpKEJmLi1F5l0uY7FZwWoJ+PxKVbadR1wZOQdGLV5L9nOGK7oVbrxLEEzP JAE2z7HxhHCEnDyoC8tOLQzVkaAq5QhIcWT4EdAjsIcGD07ZG3boBocrez/o25y2 F7KQzxzUkW2zxtBMGI7jIkkEsGjM3+yWTi3A0uehD5xEUzhLBgSa0V++n1crVUor xD7LLl5Kfn9AsEdh7pNVgdajkGD3C2ZPxjHhJKPZEE2YJ7X+3h8w7nJGTQpGG11Q RQ5FZwPbftjrd/AKWyB4/wkPy/CxqmnPDDqDNRSwPzMKRyvg/cMUxEBt/+RjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl3W6YfP1gilqxuSCis91cmwG7CkwHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePtiQ1vvwv9P g/5DAJ52VXwdrbAgPpsFY9TjkddIh/i70veCMAgYQQ8Kh4hQUSy0n9ktnt8jCsJo /suoCMsyrw6FtyYkZWX462mhwgrqtf3o1Old7EXsFzUw040jhA+r06jEWm5gP9q1 fu9UWE3SSq8YmPnMIOvAl8lTncyftifV4FPRKHLhb4x5YrHDKYHA5op/7uk/JDen Lzm4SX0zi0pSKqPsR/t8GfSTnQEYUWc/MBRDcNCFLbNfLtF/3hJe/uy8n2FEj3pe FyHvMAPK/LZwH95UzgBmgUHlVDQ2fQTR0rjhGoydd0ZCC0hfDRdMqvlrXsJkMSvn wnKd1IvJ1A== -----END CERTIFICATE-----Generated at Tue Oct 27 17:43:41 2026 by rpki-client