$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: 5loUeXezAMjYwI401CmFUHm7/txSjIHdBQK6RtlNy5Q= Subject key identifier: B0:F2:90:74:31:10:3B:D0:BD:E8:5C:DD:01:7B:D4:06:CC:33:8A:32 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 2D74CEA89EDF20A02742271958B2C37C0ADF7111 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 020B Signing time: Sat 26 Sep 2026 16:44:04 +0000 Manifest this update: Sat 26 Sep 2026 16:39:04 +0000 Manifest next update: Tue 29 Sep 2026 17:25:04 +0000 Files and hashes: 1: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 2: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 3: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 4: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 5: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: Wfg5DPYuvXfu/SWC001mJrBLygJJSMJRPDJ/hZYTeKw=) 6: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 7: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 8: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 9: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 10: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 11: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 12: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 13: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 14: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 15: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 16: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 17: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 18: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 19: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:ce:a8:9e:df:20:a0:27:42:27:19:58:b2:c3:7c:0a:df:71:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Sep 26 16:39:04 2026 GMT Not After : Sep 29 17:25:04 2026 GMT Subject: CN=B0F2907431103BD0BDE85CDD017BD406CC338A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:f7:05:a7:51:2b:51:cf:c2:82:36:37:f0: b2:2e:78:7b:96:9b:99:33:de:db:41:9b:f0:89:f8: 7d:db:ca:e9:bb:9b:ff:07:4f:be:5c:1a:3d:41:7b: 50:78:38:4f:c4:d0:6e:6f:10:6a:02:d7:57:b6:08: c7:a8:d4:49:61:d1:a2:a1:ad:28:03:ef:39:ff:e1: 8d:92:4c:fb:32:8a:a4:6e:ba:f4:3f:d9:3d:1d:1a: 0f:58:ec:59:9f:ab:fc:08:51:b1:d5:64:b4:bb:e9: b2:52:61:a6:4e:f0:e6:00:0b:6d:c6:c2:55:59:bb: 91:7a:58:1e:d1:ab:f2:ff:77:60:a3:a2:dc:84:be: 25:1f:b2:2d:22:f5:e0:35:5c:fb:c3:fb:fd:44:4b: f8:80:37:27:65:9a:2f:ff:65:70:1d:96:9d:3e:aa: 1c:63:1e:f5:ef:01:85:42:f2:a6:48:50:93:a0:12: 18:05:a8:10:56:f7:8e:90:fa:93:23:45:81:b8:3e: 83:17:9b:5f:f4:ce:3a:ce:63:15:c8:7b:fe:fa:86: 18:ae:88:84:aa:5c:cf:ad:cb:f4:f8:b0:b4:2e:28: 1e:fa:95:f1:b3:6c:39:2a:5f:d7:0f:e4:76:25:b1: 8a:23:a6:2c:a2:5d:3a:a8:b2:6a:e6:7f:9e:f2:c2: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F2:90:74:31:10:3B:D0:BD:E8:5C:DD:01:7B:D4:06:CC:33:8A:32 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:31:34:51:a4:c2:7e:c9:97:93:b4:cc:90:45:0d:01:25:a2: 25:dd:66:12:8c:3b:17:49:72:85:8c:03:2f:16:48:99:b1:cf: f8:da:0e:ce:d2:05:24:89:4d:f6:0f:02:0b:a5:b0:5f:2e:85: ef:c4:60:1d:1b:48:26:d7:0c:d4:7f:f6:15:d0:47:3a:91:86: 1f:29:03:d1:bf:0b:63:98:c8:c6:4d:82:ff:2e:6d:cb:3e:05: a6:e3:89:5e:01:dd:89:35:14:fd:70:52:79:13:85:8d:ef:c1: 18:2b:a3:3e:f7:15:42:25:01:74:a2:82:ad:45:d3:b3:6b:0f: 68:78:27:0e:5b:fe:ee:ed:97:75:28:ab:04:82:33:68:aa:fa: 1d:c9:5d:91:fa:1e:1c:3f:0b:17:49:03:08:da:64:e8:d3:2c: e8:74:41:b9:ab:dc:d7:43:f2:e2:ec:01:75:86:2d:7d:61:96: a4:c1:c4:06:80:92:af:7c:35:03:89:96:73:3a:37:ce:42:a6: be:18:d9:d9:d1:ea:bb:9a:59:48:6a:7c:07:f9:1b:5c:b0:f6: 98:e1:5a:b4:5f:47:ff:25:30:55:84:25:00:4a:63:f2:3f:fc: 00:a6:81:8b:e7:f8:de:bb:dc:3a:0f:c3:cc:ed:4a:38:55:73: 83:a0:ed:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULXTOqJ7fIKAnQicZWLLDfArfcREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA5MjYxNjM5MDRaFw0yNjA5MjkxNzI1MDRaMDMxMTAvBgNV BAMTKEIwRjI5MDc0MzExMDNCRDBCREU4NUNERDAxN0JENDA2Q0MzMzhBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8vcFp1ErUc/CgjY38LIueHuW m5kz3ttBm/CJ+H3byum7m/8HT75cGj1Be1B4OE/E0G5vEGoC11e2CMeo1Elh0aKh rSgD7zn/4Y2STPsyiqRuuvQ/2T0dGg9Y7Fmfq/wIUbHVZLS76bJSYaZO8OYAC23G wlVZu5F6WB7Rq/L/d2CjotyEviUfsi0i9eA1XPvD+/1ES/iANydlmi//ZXAdlp0+ qhxjHvXvAYVC8qZIUJOgEhgFqBBW946Q+pMjRYG4PoMXm1/0zjrOYxXIe/76hhiu iISqXM+ty/T4sLQuKB76lfGzbDkqX9cP5HYlsYojpiyiXTqosmrmf57ywv1FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsPKQdDEQO9C96FzdAXvUBswzijIwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTE0UaTCfsmX k7TMkEUNASWiJd1mEow7F0lyhYwDLxZImbHP+NoOztIFJIlN9g8CC6WwXy6F78Rg HRtIJtcM1H/2FdBHOpGGHykD0b8LY5jIxk2C/y5tyz4FpuOJXgHdiTUU/XBSeROF je/BGCujPvcVQiUBdKKCrUXTs2sPaHgnDlv+7u2XdSirBIIzaKr6HcldkfoeHD8L F0kDCNpk6NMs6HRBuavc10Py4uwBdYYtfWGWpMHEBoCSr3w1A4mWczo3zkKmvhjZ 2dHqu5pZSGp8B/kbXLD2mOFatF9H/yUwVYQlAEpj8j/8AKaBi+f43rvcOg/DzO1K OFVzg6DtXQ== -----END CERTIFICATE-----Generated at Sun Sep 27 10:48:38 2026 by rpki-client