$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: T73GnDBoGP0X/X2ILz8Z5Pr/BuCXORMNL3bdfWHrU+8= Subject key identifier: 42:8C:E7:11:BA:6D:45:0C:44:DC:73:A4:34:0C:0E:33:54:88:3B:37 Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 30E3BABA206AFD0221216339B2D63DFF1C8CDEE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 0D Signing time: Thu 11 Jun 2026 19:24:17 +0000 Manifest this update: Thu 11 Jun 2026 19:19:17 +0000 Manifest next update: Fri 12 Jun 2026 20:33:17 +0000 Files and hashes: 1: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: I8Uuw6fV21ODwgeORCkiR3V2GzpAqYHudhcwaJdHEoA=) 2: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) 3: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 4: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 5: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 6: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 7: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 8: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 9: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e3:ba:ba:20:6a:fd:02:21:21:63:39:b2:d6:3d:ff:1c:8c:de:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jun 11 19:19:17 2026 GMT Not After : Jun 12 20:33:17 2026 GMT Subject: CN=428CE711BA6D450C44DC73A4340C0E3354883B37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:fa:71:a7:d3:fb:b5:e7:0f:8d:cd:0f:d5: c2:96:1c:fb:93:08:04:0f:be:16:97:af:3a:75:e5: 1b:2e:74:24:8a:01:45:61:34:06:44:40:22:20:89: cb:de:71:44:2a:c5:6b:c8:fa:39:1a:a9:3f:a4:c1: 8c:7a:85:1e:ac:5e:15:33:13:ad:fe:f6:2f:59:67: b6:fb:3f:01:d8:40:4f:ee:f1:cb:88:9c:5b:f9:3b: 56:cb:ae:e4:04:9a:9f:aa:33:e9:38:63:ee:a6:76: 57:a8:8c:51:59:ee:c3:e3:75:77:0d:06:33:29:38: 13:46:d2:18:37:c9:8b:0f:fb:3e:eb:1e:ab:5b:60: 41:71:f7:43:da:f1:29:77:20:b6:fc:14:87:0d:31: c2:07:98:97:e9:ec:22:3d:e6:07:98:e2:39:1f:69: 9d:2e:0f:31:74:d6:75:1d:fa:96:4f:a9:96:32:41: 22:9a:4c:d3:2b:ca:b6:a5:47:75:95:c1:41:a4:08: 7b:65:26:ec:28:7d:3c:8f:4b:fe:6b:f1:c7:28:d0: b2:c0:c3:3e:15:43:3c:85:ab:f6:f2:28:12:85:9f: 97:c9:57:6d:eb:c1:dd:55:e8:a5:6f:24:c7:cf:28: c4:98:ad:ac:e3:e4:b0:1b:d0:62:eb:c4:af:18:9b: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:E7:11:BA:6D:45:0C:44:DC:73:A4:34:0C:0E:33:54:88:3B:37 X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d0:dc:af:bc:bb:bc:84:a2:db:fe:3b:2b:5d:34:76:95:6f: 8f:2f:4b:77:d0:bf:55:d8:06:34:9b:e5:c3:3c:df:83:a4:bf: da:f6:a4:6c:4a:9b:81:7f:43:8d:e3:60:92:f0:6c:d1:8c:c1: 36:58:9f:34:9f:06:56:d7:41:4b:85:2b:22:e1:db:ff:65:85: f2:e5:fb:37:c4:fd:19:1d:f1:11:0f:6c:96:bd:bc:a4:0d:13: 2b:ea:11:3c:1b:e1:1a:ab:5b:e8:b0:c5:9b:3f:6e:8d:cb:cf: d3:58:51:45:b5:17:b8:55:b0:38:1b:e4:1e:88:6f:80:df:43: b9:78:2a:81:ac:f4:b2:6a:b3:d6:50:dd:53:4c:c8:14:64:77: d6:22:4d:80:9f:f2:9c:dd:ea:37:ac:6b:fd:ff:c3:fd:df:54: 83:9e:a9:d2:fe:9f:3e:86:a7:7f:2b:5c:6b:7a:22:2e:2b:b2: 6d:66:08:11:3a:c3:45:77:db:f0:cf:2f:2d:38:35:6e:d8:b4: 0e:8e:ad:c8:13:95:ed:61:4c:bb:83:72:9d:ca:93:98:84:14: 85:57:6d:00:68:87:13:c1:59:94:09:0e:82:e3:d7:3a:95:1a: 31:20:11:01:38:72:f9:f0:fa:e4:6b:a2:f4:ef:99:2d:9b:72: 87:64:b9:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMOO6uiBq/QIhIWM5stY9/xyM3ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA2MTExOTE5MTdaFw0yNjA2MTIyMDMzMTdaMDMxMTAvBgNV BAMTKDQyOENFNzExQkE2RDQ1MEM0NERDNzNBNDM0MEMwRTMzNTQ4ODNCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz/pxp9P7tecPjc0P1cKWHPuT CAQPvhaXrzp15RsudCSKAUVhNAZEQCIgicvecUQqxWvI+jkaqT+kwYx6hR6sXhUz E63+9i9ZZ7b7PwHYQE/u8cuInFv5O1bLruQEmp+qM+k4Y+6mdleojFFZ7sPjdXcN BjMpOBNG0hg3yYsP+z7rHqtbYEFx90Pa8Sl3ILb8FIcNMcIHmJfp7CI95geY4jkf aZ0uDzF01nUd+pZPqZYyQSKaTNMryralR3WVwUGkCHtlJuwofTyPS/5r8cco0LLA wz4VQzyFq/byKBKFn5fJV23rwd1V6KVvJMfPKMSYrazj5LAb0GLrxK8Ym//fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQoznEbptRQxE3HOkNAwOM1SIOzcwHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9Dcr7y7vISi 2/47K100dpVvjy9Ld9C/VdgGNJvlwzzfg6S/2vakbEqbgX9DjeNgkvBs0YzBNlif NJ8GVtdBS4UrIuHb/2WF8uX7N8T9GR3xEQ9slr28pA0TK+oRPBvhGqtb6LDFmz9u jcvP01hRRbUXuFWwOBvkHohvgN9DuXgqgaz0smqz1lDdU0zIFGR31iJNgJ/ynN3q N6xr/f/D/d9Ug56p0v6fPoanfytca3oiLiuybWYIETrDRXfb8M8vLTg1bti0Do6t yBOV7WFMu4NyncqTmIQUhVdtAGiHE8FZlAkOguPXOpUaMSARAThy+fD65Gui9O+Z LZtyh2S5qg== -----END CERTIFICATE-----Generated at Fri Jun 12 03:33:28 2026 by rpki-client