$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: 1ll/GeGNHX1ggCQM9KSQnc8uqGz6hkIyOacv9Idy7eQ= Subject key identifier: 15:11:08:0C:9C:2C:83:BB:A8:98:14:69:50:AE:6A:47:F9:D4:7E:7F Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 2759FFE2F8F497E2AF598B41C27E1C67F9D67334 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 49 Signing time: Mon 27 Jul 2026 03:33:16 +0000 Manifest this update: Mon 27 Jul 2026 03:28:16 +0000 Manifest next update: Tue 28 Jul 2026 04:38:16 +0000 Files and hashes: 1: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 2: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 3: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 4: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: OzZyEf6u4ogYfIzxylJKFOKUkfVnKor1q6qRrble8JA=) 5: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) 6: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 7: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 8: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 9: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:59:ff:e2:f8:f4:97:e2:af:59:8b:41:c2:7e:1c:67:f9:d6:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jul 27 03:28:16 2026 GMT Not After : Jul 28 04:38:16 2026 GMT Subject: CN=1511080C9C2C83BBA898146950AE6A47F9D47E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:80:5d:7f:6d:ef:c2:d0:fe:01:83:68:ca:03: 9e:16:9d:23:70:ca:c6:29:12:5a:c6:18:56:0a:d7: 73:04:b0:68:f5:d5:cb:c0:5b:dc:14:66:27:11:7a: 05:87:dc:79:6f:8c:e6:28:f9:b8:86:0b:74:d6:08: 6e:d5:dd:22:39:72:e9:a2:ef:0c:a1:c1:92:f3:a3: fb:5a:36:f0:fd:0c:be:9a:33:6a:22:20:67:8b:cd: 71:82:aa:19:4c:9d:e6:cd:07:63:21:6f:57:b7:4b: c5:bd:93:b5:da:d1:0f:01:c4:2a:97:96:9f:9d:1f: 59:81:99:55:00:e6:b9:e3:49:49:3f:73:82:29:ee: 9d:76:a5:ea:1e:2e:e6:75:e4:2b:f1:07:04:41:42: ff:ae:f3:ca:47:68:6e:b5:c4:4d:77:99:19:58:62: 20:42:53:ef:b2:51:45:d6:57:b5:c6:fc:e4:24:a9: 7f:1b:ed:ac:24:58:cb:be:95:97:17:fd:b2:9a:cb: f1:08:be:99:2a:a8:20:30:dc:60:c0:31:f6:ec:78: a7:75:51:18:ed:90:ea:75:08:f5:6b:de:db:d4:ef: af:f2:68:f3:24:4e:77:dc:89:89:69:58:af:f3:6d: 4f:c9:9c:aa:06:f8:e9:52:d9:c4:87:63:92:e3:39: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:11:08:0C:9C:2C:83:BB:A8:98:14:69:50:AE:6A:47:F9:D4:7E:7F X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:48:6b:63:bb:7b:a0:d3:8e:39:04:83:46:c3:05:84:1c: 70:b6:e7:8d:bc:41:2e:cd:e1:ef:e0:d6:a9:66:28:81:4a:b6: 59:18:fb:8c:32:92:f5:56:05:55:02:f5:a8:76:a2:2a:92:85: b3:6d:b0:b2:e6:3d:74:02:27:00:de:a9:25:0c:0c:a7:b6:c9: fc:43:27:4a:64:e5:4e:61:5c:43:e2:75:6a:47:0a:4d:ec:6f: 61:f0:9e:ae:61:2c:64:78:d5:e1:d9:0d:cf:fb:c4:ec:1c:88: 38:16:09:eb:2e:d7:27:df:cf:20:df:c2:09:e6:d3:2e:b3:17: 89:51:1a:94:c5:2e:14:b7:b4:90:da:c8:db:07:4d:9b:7d:8a: 31:0e:3d:ed:d4:6e:0c:41:52:9e:3b:c8:59:be:70:7e:94:c7: c6:65:44:dc:90:f0:2c:09:44:47:bc:5f:88:dc:97:9d:9a:9f: 18:f2:a8:ae:14:93:db:c7:c9:f9:5a:a2:7a:08:45:31:ae:48: 76:15:c2:e3:a1:e2:ce:63:60:40:f2:ee:3f:18:22:8d:39:b9: ba:10:a3:c2:61:b3:80:12:cb:49:93:e8:f4:39:a6:92:08:f8: 19:16:fb:8b:22:8a:c3:90:eb:7f:3c:5d:da:10:cb:6e:6a:4c: 6a:43:30:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ1n/4vj0l+KvWYtBwn4cZ/nWczQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA3MjcwMzI4MTZaFw0yNjA3MjgwNDM4MTZaMDMxMTAvBgNV BAMTKDE1MTEwODBDOUMyQzgzQkJBODk4MTQ2OTUwQUU2QTQ3RjlENDdFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDygF1/be/C0P4Bg2jKA54WnSNw ysYpElrGGFYK13MEsGj11cvAW9wUZicRegWH3HlvjOYo+biGC3TWCG7V3SI5cumi 7wyhwZLzo/taNvD9DL6aM2oiIGeLzXGCqhlMnebNB2Mhb1e3S8W9k7Xa0Q8BxCqX lp+dH1mBmVUA5rnjSUk/c4Ip7p12peoeLuZ15CvxBwRBQv+u88pHaG61xE13mRlY YiBCU++yUUXWV7XG/OQkqX8b7awkWMu+lZcX/bKay/EIvpkqqCAw3GDAMfbseKd1 URjtkOp1CPVr3tvU76/yaPMkTnfciYlpWK/zbU/JnKoG+OlS2cSHY5LjOUD3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFREIDJwsg7uomBRpUK5qR/nUfn8wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeVIa2O7e6DT jjkEg0bDBYQccLbnjbxBLs3h7+DWqWYogUq2WRj7jDKS9VYFVQL1qHaiKpKFs22w suY9dAInAN6pJQwMp7bJ/EMnSmTlTmFcQ+J1akcKTexvYfCermEsZHjV4dkNz/vE 7ByIOBYJ6y7XJ9/PIN/CCebTLrMXiVEalMUuFLe0kNrI2wdNm32KMQ497dRuDEFS njvIWb5wfpTHxmVE3JDwLAlER7xfiNyXnZqfGPKorhST28fJ+VqieghFMa5IdhXC 46HizmNgQPLuPxgijTm5uhCjwmGzgBLLSZPo9Dmmkgj4GRb7iyKKw5Drfzxd2hDL bmpMakMwMg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:14:54 2026 by rpki-client