$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: 9VRdriic5pmOAVAuWid6bjHbH0crRNwVHQ9bmLeZ390= Subject key identifier: 00:23:2D:8F:E5:58:70:0B:39:A3:D7:C0:3B:7F:B9:1F:9D:9D:85:98 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 6BF222FE23E1BE0C2416B012258635A98D77EBA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 01CE Signing time: Thu 23 Jul 2026 17:49:15 +0000 Manifest this update: Thu 23 Jul 2026 17:44:15 +0000 Manifest next update: Fri 24 Jul 2026 18:39:15 +0000 Files and hashes: 1: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 2: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 3: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 4: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 5: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 6: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 7: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 8: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 9: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 10: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 11: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 12: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 13: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 14: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 15: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 16: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: xHbUO4Ux8xaAI7ncCXDxSrPGGHmCDPyRVsJzcWoeXMw=) 17: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 18: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 19: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f2:22:fe:23:e1:be:0c:24:16:b0:12:25:86:35:a9:8d:77:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jul 23 17:44:15 2026 GMT Not After : Jul 24 18:39:15 2026 GMT Subject: CN=00232D8FE558700B39A3D7C03B7FB91F9D9D8598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:e9:a6:ab:a9:7e:13:e0:b8:9c:6f:75:78: e5:63:51:2a:95:01:bb:1c:b2:b6:5a:4c:61:3b:8a: a2:49:1f:88:89:b4:8e:61:a2:b3:83:f5:68:6f:f4: ba:25:34:bb:94:fb:3e:8f:22:4b:df:8a:84:de:96: 58:c4:7c:08:d0:c2:98:68:92:0d:b6:76:94:9b:fb: b0:8a:8b:3e:97:57:37:98:31:24:e1:bf:79:22:cd: cb:4e:a9:d3:5a:06:0c:77:d4:e3:5b:90:13:4f:3d: 50:8b:bf:4d:23:e7:82:f5:88:a1:53:f3:46:9d:2c: 8c:42:27:df:f6:c4:b7:e5:81:c0:db:70:5b:28:a8: 16:36:61:7d:16:e1:c5:ec:6d:b6:f9:9b:28:49:d9: 1f:e2:4f:9b:f5:64:28:16:c5:30:2b:1c:cc:33:46: 1f:58:cf:9c:d7:81:ec:5f:89:9e:49:dc:99:77:5b: 0f:4f:5d:be:06:ca:f4:9b:b1:5d:30:d9:89:45:74: 58:6c:7a:eb:a3:ad:71:20:48:9e:9e:83:ad:13:07: ec:8b:e0:73:e7:8c:45:be:42:fe:c1:73:3d:13:fb: 93:6c:fe:be:85:cc:fa:02:b3:7c:22:a7:b6:1a:eb: 15:4b:91:c9:90:7f:d3:00:b5:c0:ed:ca:24:07:59: 4d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:23:2D:8F:E5:58:70:0B:39:A3:D7:C0:3B:7F:B9:1F:9D:9D:85:98 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f4:4e:84:6d:2e:5f:80:6f:67:4e:31:be:bf:8c:5b:b1:92: 18:57:9e:54:b8:ed:a8:9c:fa:b2:61:cb:e1:8c:0e:26:25:6d: 98:e5:7c:d4:48:45:6e:03:2e:e0:51:b3:b0:66:4d:e6:66:63: e6:96:93:3c:6b:56:ba:71:29:7f:a4:b2:72:a7:44:48:1d:d1: b8:de:4c:7d:ec:b7:c4:3a:5e:f6:3d:af:39:28:fc:65:2f:71: 5b:1b:b2:f2:d0:ca:88:78:79:7c:cd:63:07:ed:0c:14:f0:31: bc:66:86:32:67:01:92:5f:a3:3d:56:13:13:b5:10:81:4e:6a: 70:9b:04:88:ce:b1:1d:c8:37:62:31:73:ae:0e:94:2c:01:e1: 00:9a:da:9e:41:c7:07:5f:d1:ac:0f:32:9c:df:84:91:f5:d3: 47:ff:e2:29:07:69:e7:84:bb:d7:1c:6f:fa:95:14:4e:9d:3c: 21:ca:b2:10:9a:77:27:4e:64:ef:26:36:4d:e8:d5:4e:95:55: 30:09:10:38:a8:08:9e:2a:08:2d:59:c0:30:ca:15:a8:14:4b: 5d:89:5e:f6:31:e7:35:f0:29:cb:34:a8:b1:24:00:b1:b6:af: d3:c4:62:c0:3a:b2:8a:76:1d:96:f3:a3:53:73:29:ea:af:e9: 34:d9:38:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa/Ii/iPhvgwkFrASJYY1qY1366AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA3MjMxNzQ0MTVaFw0yNjA3MjQxODM5MTVaMDMxMTAvBgNV BAMTKDAwMjMyRDhGRTU1ODcwMEIzOUEzRDdDMDNCN0ZCOTFGOUQ5RDg1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLOmmq6l+E+C4nG91eOVjUSqV AbscsrZaTGE7iqJJH4iJtI5horOD9Whv9LolNLuU+z6PIkvfioTelljEfAjQwpho kg22dpSb+7CKiz6XVzeYMSThv3kizctOqdNaBgx31ONbkBNPPVCLv00j54L1iKFT 80adLIxCJ9/2xLflgcDbcFsoqBY2YX0W4cXsbbb5myhJ2R/iT5v1ZCgWxTArHMwz Rh9Yz5zXgexfiZ5J3Jl3Ww9PXb4GyvSbsV0w2YlFdFhseuujrXEgSJ6eg60TB+yL 4HPnjEW+Qv7Bcz0T+5Ns/r6FzPoCs3wip7Ya6xVLkcmQf9MAtcDtyiQHWU2PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUACMtj+VYcAs5o9fAO3+5H52dhZgwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvROhG0uX4Bv Z04xvr+MW7GSGFeeVLjtqJz6smHL4YwOJiVtmOV81EhFbgMu4FGzsGZN5mZj5paT PGtWunEpf6SycqdESB3RuN5Mfey3xDpe9j2vOSj8ZS9xWxuy8tDKiHh5fM1jB+0M FPAxvGaGMmcBkl+jPVYTE7UQgU5qcJsEiM6xHcg3YjFzrg6ULAHhAJrankHHB1/R rA8ynN+EkfXTR//iKQdp54S71xxv+pUUTp08IcqyEJp3J05k7yY2TejVTpVVMAkQ OKgInioILVnAMMoVqBRLXYle9jHnNfApyzSosSQAsbav08RiwDqyinYdlvOjU3Mp 6q/pNNk4GQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:02:01 2026 by rpki-client