$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: AzfegYPaurXNg7fqxbnoOIeJ1cDbFkdSQb4KwdDXitY= Subject key identifier: F8:8E:66:E8:F6:48:73:3B:22:83:95:63:0E:7F:C7:7D:5F:BD:02:4F Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 12F845ED164BD05D0C0991006B8AFCF1194089CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 01CF Signing time: Fri 24 Jul 2026 10:41:01 +0000 Manifest this update: Fri 24 Jul 2026 10:36:00 +0000 Manifest next update: Sat 25 Jul 2026 11:25:00 +0000 Files and hashes: 1: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 2: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 3: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: lWa9kMdTBEzO1LXEx5EzDTWDEboeirhocBWGCYeu9rw=) 4: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 5: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 6: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 7: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 8: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 9: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 10: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 11: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 12: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 13: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 14: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 15: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 16: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 17: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 18: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 19: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f8:45:ed:16:4b:d0:5d:0c:09:91:00:6b:8a:fc:f1:19:40:89:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jul 24 10:36:00 2026 GMT Not After : Jul 25 11:25:00 2026 GMT Subject: CN=F88E66E8F648733B228395630E7FC77D5FBD024F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:58:96:0f:93:4b:f8:8d:3f:b6:8a:7c:2e: 74:f0:84:87:81:bf:5a:50:89:e4:e2:25:53:d2:46: af:b3:3b:37:98:36:c6:d1:44:99:3c:24:dd:95:ab: 90:c4:42:a5:f1:5b:32:7e:e8:a4:8e:96:11:26:4e: 82:c1:da:38:2c:3f:29:c7:f0:df:26:da:76:78:ac: 47:cd:1e:6c:c3:0e:d4:73:82:77:0b:fa:a7:62:94: af:c8:c8:33:ac:9f:09:b3:2f:77:7d:d2:90:7d:e8: ca:3a:2c:8f:17:74:7e:37:6e:81:ee:b2:97:42:1d: 77:2e:2a:8c:e2:1d:00:1e:f1:25:89:35:db:b8:45: e9:ed:6f:38:39:36:cd:c8:09:00:8a:67:3c:1e:a0: 43:ae:c4:42:cd:08:eb:37:58:37:4f:1e:ed:6b:7c: 79:ae:b8:1a:3c:37:65:2b:1a:26:f2:ef:64:5d:9a: 65:cb:5e:ea:b6:31:5e:9f:75:de:a9:c6:9f:5b:bf: fd:c0:78:57:8b:93:5f:24:7d:9b:51:30:1c:73:95: b5:ae:0a:19:08:0f:c6:44:38:c2:6c:85:67:87:fb: ca:e5:02:0b:c0:26:3e:a9:fa:2a:48:6f:5c:d2:41: d3:3e:c9:75:97:4e:12:61:c2:63:1e:22:3b:fb:ff: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8E:66:E8:F6:48:73:3B:22:83:95:63:0E:7F:C7:7D:5F:BD:02:4F X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:06:5f:24:17:99:f4:85:7c:cd:f0:89:51:a4:bf:1b:43:35: 69:61:0e:c1:91:e5:52:e0:70:dd:d7:96:dc:73:01:61:05:8e: 07:ca:ba:d3:62:9b:be:33:08:28:cf:78:4f:e3:46:21:da:33: be:32:41:27:01:b6:0d:14:6a:3c:a1:d7:78:fa:a0:7d:a3:b1: 33:41:33:eb:79:53:40:6c:7c:db:19:81:71:b0:a3:68:26:42: d8:9c:d4:0d:72:29:40:db:19:ae:47:e0:7d:d1:5c:b8:69:6b: db:6f:0e:d2:88:ce:c4:35:86:e0:02:8f:70:d7:f0:aa:9a:2d: b6:31:26:52:7f:7b:4b:d6:1a:e1:d0:ec:13:f2:07:c8:64:69: 9d:61:cf:84:e9:ec:3b:20:97:cd:f8:99:e2:58:76:e4:36:e6: 76:27:2f:bd:c8:84:df:b4:ca:97:80:8a:54:ea:a2:30:07:fd: 34:81:a6:55:37:08:cc:47:2f:42:be:8a:16:72:42:09:e2:dd: 87:d0:15:17:95:f2:3c:e8:f1:24:99:e8:e6:12:50:a8:09:4e: 20:1a:02:d0:52:7a:24:a8:95:6a:53:45:68:c5:23:20:df:9c: 28:22:78:82:b4:ac:57:da:d2:53:5f:49:75:ba:db:01:53:cd: c6:17:64:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEvhF7RZL0F0MCZEAa4r88RlAicswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA3MjQxMDM2MDBaFw0yNjA3MjUxMTI1MDBaMDMxMTAvBgNV BAMTKEY4OEU2NkU4RjY0ODczM0IyMjgzOTU2MzBFN0ZDNzdENUZCRDAyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13FiWD5NL+I0/top8LnTwhIeB v1pQieTiJVPSRq+zOzeYNsbRRJk8JN2Vq5DEQqXxWzJ+6KSOlhEmToLB2jgsPynH 8N8m2nZ4rEfNHmzDDtRzgncL+qdilK/IyDOsnwmzL3d90pB96Mo6LI8XdH43boHu spdCHXcuKoziHQAe8SWJNdu4Rentbzg5Ns3ICQCKZzweoEOuxELNCOs3WDdPHu1r fHmuuBo8N2UrGiby72RdmmXLXuq2MV6fdd6pxp9bv/3AeFeLk18kfZtRMBxzlbWu ChkID8ZEOMJshWeH+8rlAgvAJj6p+ipIb1zSQdM+yXWXThJhwmMeIjv7/zB9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+I5m6PZIczsig5VjDn/HfV+9Ak8wHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAZfJBeZ9IV8 zfCJUaS/G0M1aWEOwZHlUuBw3deW3HMBYQWOB8q602KbvjMIKM94T+NGIdozvjJB JwG2DRRqPKHXePqgfaOxM0Ez63lTQGx82xmBcbCjaCZC2JzUDXIpQNsZrkfgfdFc uGlr228O0ojOxDWG4AKPcNfwqpottjEmUn97S9Ya4dDsE/IHyGRpnWHPhOnsOyCX zfiZ4lh25DbmdicvvciE37TKl4CKVOqiMAf9NIGmVTcIzEcvQr6KFnJCCeLdh9AV F5XyPOjxJJno5hJQqAlOIBoC0FJ6JKiValNFaMUjIN+cKCJ4grSsV9rSU19Jdbrb AVPNxhdkig== -----END CERTIFICATE-----Generated at Fri Jul 24 16:20:09 2026 by rpki-client