$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft File: 3EEEE97335393C19F4043C9CE5E7352198F585B8.mft (raw, json) Hash identifier: KAskYTytUzATepr4yDldBERuCqb2ASEYAnFnWBaNqMk= Subject key identifier: 57:93:C2:70:4D:F4:12:E7:5F:DB:D3:DE:B6:DC:4A:84:A1:26:39:91 Authority key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 Certificate issuer: /CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Certificate serial: 6DCF86F991BB5CB66A5271A1B6567855F2DE5B17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft Manifest number: 1C Signing time: Tue 14 Jul 2026 06:50:38 +0000 Manifest this update: Tue 14 Jul 2026 06:45:38 +0000 Manifest next update: Wed 15 Jul 2026 07:58:38 +0000 Files and hashes: 1: 3EEEE97335393C19F4043C9CE5E7352198F585B8.crl (hash: 9aOXyiYXcUobxB5vOXmKEsyM3i14d7YUc/2Y2efeTig=) 2: 3231302e37362e33322e302f31392d3139203d3e2034383337.roa (hash: v5qZkA184lUeQZJHDQwhK9Q2fbhNxvuiIjmXjqZSX+Y=) 3: 3231302e37362e34382e302f32302d3230203d3e2034383337.roa (hash: 4JklFnUiQ9RVk24i9PELwuHpnqaXPe2enthJw8gDFEs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cf:86:f9:91:bb:5c:b6:6a:52:71:a1:b6:56:78:55:f2:de:5b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Validity Not Before: Jul 14 06:45:38 2026 GMT Not After : Jul 15 07:58:38 2026 GMT Subject: CN=5793C2704DF412E75FDBD3DEB6DC4A84A1263991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:46:7d:f0:46:27:1f:b6:a3:e6:2c:18:e4: e4:f1:ce:2a:7a:15:d3:25:22:18:6c:a1:b0:52:b8: 18:4a:a0:ae:0d:fd:65:39:13:67:64:ea:48:46:32: f9:35:9a:25:9f:64:e7:37:16:eb:3d:7e:e6:89:52: 7f:7d:2b:4c:97:c7:93:95:d9:bb:e4:ec:93:6e:eb: fb:8e:0a:af:f4:e1:29:92:a1:95:41:a7:71:ff:74: a5:f4:83:0e:a2:5a:f0:b8:c0:31:3b:fd:62:cc:80: fe:7a:e6:41:47:81:97:d4:64:61:c3:35:03:c7:f4: c2:ef:fa:11:aa:79:f4:1d:75:77:7b:11:4d:62:d9: 3b:bf:a4:f5:92:f2:aa:6e:50:d7:f1:20:b5:15:fb: 99:80:74:bb:5d:fb:df:89:0b:e6:cb:eb:6a:20:c4: 17:d1:02:17:17:31:2b:07:6c:a3:88:74:f1:51:53: 91:2e:77:01:9b:f6:f8:29:8e:99:71:d0:06:2b:ec: f1:5e:53:62:f2:dd:27:4f:72:f2:a2:c5:63:bf:d5: 82:e7:a9:d9:7e:3c:49:b9:ff:ee:fb:ff:1f:42:80: 35:e5:3d:dd:af:ee:1a:6d:23:a5:f4:6b:c7:4a:5a: 28:82:04:01:61:c5:93:bd:17:d1:b2:e4:70:42:42: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:93:C2:70:4D:F4:12:E7:5F:DB:D3:DE:B6:DC:4A:84:A1:26:39:91 X509v3 Authority Key Identifier: keyid:3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b6:dd:e5:ae:fb:dd:e2:85:3f:78:57:2e:35:a4:e4:ee:99: 72:95:22:a8:ce:a7:f6:12:f2:6b:3f:3c:9d:fa:ff:85:72:64: 7a:04:0f:f7:71:8b:db:62:5f:fb:e5:28:a8:eb:04:d4:fb:bb: bd:ad:bf:50:e0:57:1a:e9:ea:49:8f:e7:76:0f:a3:41:de:f7: 8b:8f:ac:8f:07:6e:a7:10:c4:6c:b3:a1:2e:92:3f:3f:98:a4: 0b:31:15:a0:95:ae:6f:c4:28:8b:79:c4:22:e3:c5:ee:f4:2f: fd:08:50:d1:82:2d:cc:2f:a9:e4:cc:8b:12:c4:d2:e3:0d:aa: 07:d9:c7:6b:d0:4a:78:dc:d1:09:49:91:61:e6:87:5e:a4:31: 58:c3:81:01:1b:10:31:87:ac:4a:a0:f1:b7:78:33:f3:6b:dd: 75:01:a8:6e:46:e8:53:4e:83:7a:27:48:9b:f6:ca:17:e1:f0: 20:a9:83:21:5f:ab:12:0e:81:43:36:71:6e:c1:3d:27:f0:4f: 1e:03:80:68:19:d1:b9:2e:21:d4:5b:15:f3:20:d9:dd:b9:5a: 8d:34:8f:bd:6c:67:f5:04:8e:9c:f6:27:4b:4b:5e:c8:ab:2d: e8:3c:ce:e9:49:5a:71:cf:fb:ec:75:23:8b:d5:16:9b:7b:bf: 81:50:ed:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbc+G+ZG7XLZqUnGhtlZ4VfLeWxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5 OEY1ODVCODAeFw0yNjA3MTQwNjQ1MzhaFw0yNjA3MTUwNzU4MzhaMDMxMTAvBgNV BAMTKDU3OTNDMjcwNERGNDEyRTc1RkRCRDNERUI2REM0QTg0QTEyNjM5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSkZ98EYnH7aj5iwY5OTxzip6 FdMlIhhsobBSuBhKoK4N/WU5E2dk6khGMvk1miWfZOc3Fus9fuaJUn99K0yXx5OV 2bvk7JNu6/uOCq/04SmSoZVBp3H/dKX0gw6iWvC4wDE7/WLMgP565kFHgZfUZGHD NQPH9MLv+hGqefQddXd7EU1i2Tu/pPWS8qpuUNfxILUV+5mAdLtd+9+JC+bL62og xBfRAhcXMSsHbKOIdPFRU5EudwGb9vgpjplx0AYr7PFeU2Ly3SdPcvKixWO/1YLn qdl+PEm5/+77/x9CgDXlPd2v7hptI6X0a8dKWiiCBAFhxZO9F9Gy5HBCQm5lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV5PCcE30Eudf29PettxKhKEmOZEwHwYDVR0j BBgwFoAUPu7pczU5PBn0BDyc5ec1IZj1hbgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjQwNjEyMzExNTExODYyNy8wLzNFRUVFOTczMzUzOTNDMTlGNDA0M0M5Q0U1RTcz NTIxOThGNTg1QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5OEY1ODVCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI0MDYxMjMxMTUxMTg2MjcvMC8zRUVFRTk3MzM1Mzkz QzE5RjQwNDNDOUNFNUU3MzUyMTk4RjU4NUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbbd5a773eKF P3hXLjWk5O6ZcpUiqM6n9hLyaz88nfr/hXJkegQP93GL22Jf++UoqOsE1Pu7va2/ UOBXGunqSY/ndg+jQd73i4+sjwdupxDEbLOhLpI/P5ikCzEVoJWub8Qoi3nEIuPF 7vQv/QhQ0YItzC+p5MyLEsTS4w2qB9nHa9BKeNzRCUmRYeaHXqQxWMOBARsQMYes SqDxt3gz82vddQGobkboU06DeidIm/bKF+HwIKmDIV+rEg6BQzZxbsE9J/BPHgOA aBnRuS4h1FsV8yDZ3blajTSPvWxn9QSOnPYnS0teyKst6DzO6Ulacc/77HUji9UW m3u/gVDtvQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:57 2026 by rpki-client