$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: EeL4ryKv7m0shmw+eD3zetTSJKoHnR6+jxzIi9hNmQ8= Subject key identifier: AA:AD:DC:02:F0:95:A7:8D:8B:E1:53:68:12:98:88:A5:13:2E:A7:A8 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 79073C974F1D6F0A371648FCB3612C834229C51A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 016E Signing time: Tue 12 May 2026 20:00:43 +0000 Manifest this update: Tue 12 May 2026 19:55:43 +0000 Manifest next update: Wed 13 May 2026 23:37:43 +0000 Files and hashes: 1: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 2: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 3: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 4: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 5: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 6: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 7: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 8: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 9: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 10: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 11: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 12: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 13: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 14: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 15: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 16: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 17: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 18: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: jD6OUwXoT5jR4x2NdyWob2QcjHxzmp6w2etk7X6JG/M=) 19: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:07:3c:97:4f:1d:6f:0a:37:16:48:fc:b3:61:2c:83:42:29:c5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: May 12 19:55:43 2026 GMT Not After : May 13 23:37:43 2026 GMT Subject: CN=AAADDC02F095A78D8BE15368129888A5132EA7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:4d:f4:aa:13:d6:5c:5b:6f:d5:d6:d9:fc: 32:3b:ea:4c:a8:06:f7:b4:cb:c6:92:6b:e1:de:30: d5:f2:57:b9:c5:76:9a:6e:df:02:62:19:b9:3c:5d: a9:a0:98:f3:fa:6c:4e:90:0a:7b:0f:02:33:62:f0: a5:ee:1c:17:da:19:af:43:1b:2e:2e:9f:5d:76:13: 72:95:06:d7:bf:89:4f:d8:e5:02:eb:a2:3a:c9:3b: 02:13:b4:17:d9:15:38:70:aa:c9:2a:0f:68:c4:55: 97:91:24:b0:36:25:c1:e7:20:b6:d4:93:df:10:65: 5f:dc:ab:9b:6d:75:95:99:34:df:b7:c7:1e:49:06: 68:e2:d5:dd:c8:f0:ca:e8:3a:6d:9f:fa:31:d4:93: a7:a9:89:f1:6c:53:02:47:a2:60:5f:2d:ba:f0:57: 76:63:41:e0:f8:98:65:c6:1b:1a:30:be:ce:d2:0d: ff:69:a2:79:20:56:06:34:b3:df:7d:8d:8c:50:24: 4d:71:ed:76:eb:bf:0b:80:e7:17:3c:ff:b3:ad:1e: 78:69:33:28:e7:1a:9e:51:d1:9a:57:76:a9:58:42: 88:5e:ef:64:78:4b:34:80:0d:dd:7c:67:b7:be:bc: af:29:70:ba:ad:90:08:0e:ec:b3:2e:e9:17:6d:50: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:DC:02:F0:95:A7:8D:8B:E1:53:68:12:98:88:A5:13:2E:A7:A8 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:06:4c:ae:43:37:24:6c:07:96:81:76:0b:ed:6a:98:5a:fe: 0d:b0:25:ec:4e:00:a9:a0:8a:26:67:b3:6f:9f:c5:24:2e:98: 6a:53:ed:cf:f4:3b:3a:43:2a:9b:64:ce:b5:79:d1:b8:51:68: 30:16:67:bb:6b:ff:99:f5:50:b1:ad:a1:7f:61:06:0e:a7:2a: d3:a9:40:7f:88:5a:0c:ba:d8:db:45:7f:78:96:63:c4:2b:82: 40:fa:e9:d3:61:f0:0f:03:ed:37:8f:09:4c:cf:4e:74:14:f3: 34:5b:a4:8d:f0:18:e9:f4:d9:1f:8b:5a:eb:70:78:7b:4a:fc: 96:24:92:a3:b8:3c:ee:71:c3:06:cc:49:d6:c4:75:ca:54:54: 5a:2e:fc:b0:ef:1b:61:db:09:3e:73:d8:7b:ca:f6:78:f5:3b: f9:5c:2e:19:85:59:45:67:8f:2b:ff:43:70:eb:c5:f7:8a:6c: dd:eb:22:91:a9:e3:e9:a6:74:3b:b1:7b:fa:6c:df:b9:0b:e1: 19:a6:41:24:8e:9c:b1:a5:0a:e4:9a:80:81:bf:12:87:34:8c: 71:9c:58:34:27:b3:fc:c1:b9:97:2b:4f:b1:d7:26:a9:58:e7: 07:1f:43:48:5c:c4:9e:2e:32:38:1c:71:ad:06:a5:24:70:76: 12:14:86:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeQc8l08dbwo3Fkj8s2Esg0IpxRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA1MTIxOTU1NDNaFw0yNjA1MTMyMzM3NDNaMDMxMTAvBgNV BAMTKEFBQUREQzAyRjA5NUE3OEQ4QkUxNTM2ODEyOTg4OEE1MTMyRUE3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3U30qhPWXFtv1dbZ/DI76kyo Bve0y8aSa+HeMNXyV7nFdppu3wJiGbk8XamgmPP6bE6QCnsPAjNi8KXuHBfaGa9D Gy4un112E3KVBte/iU/Y5QLrojrJOwITtBfZFThwqskqD2jEVZeRJLA2JcHnILbU k98QZV/cq5ttdZWZNN+3xx5JBmji1d3I8MroOm2f+jHUk6epifFsUwJHomBfLbrw V3ZjQeD4mGXGGxowvs7SDf9ponkgVgY0s999jYxQJE1x7XbrvwuA5xc8/7OtHnhp MyjnGp5R0ZpXdqlYQohe72R4SzSADd18Z7e+vK8pcLqtkAgO7LMu6RdtUC/BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqq3cAvCVp42L4VNoEpiIpRMup6gwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQZMrkM3JGwH loF2C+1qmFr+DbAl7E4AqaCKJmezb5/FJC6YalPtz/Q7OkMqm2TOtXnRuFFoMBZn u2v/mfVQsa2hf2EGDqcq06lAf4haDLrY20V/eJZjxCuCQPrp02HwDwPtN48JTM9O dBTzNFukjfAY6fTZH4ta63B4e0r8liSSo7g87nHDBsxJ1sR1ylRUWi78sO8bYdsJ PnPYe8r2ePU7+VwuGYVZRWePK/9DcOvF94ps3esikanj6aZ0O7F7+mzfuQvhGaZB JI6csaUK5JqAgb8ShzSMcZxYNCez/MG5lytPsdcmqVjnBx9DSFzEni4yOBxxrQal JHB2EhSGVw== -----END CERTIFICATE-----Generated at Wed May 13 09:13:04 2026 by rpki-client