$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json) Hash identifier: rf5ZDSi54omtgpymdjKZOrteJWbe59tt1P4dTOcNbj0= Subject key identifier: 00:E0:9F:9D:AE:06:CC:27:FE:A2:62:85:49:2A:B3:27:45:14:89:3A Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 64F01E5BF1B247A887CAD99CCD744BAD036023F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft Manifest number: A5 Signing time: Tue 12 May 2026 18:55:41 +0000 Manifest this update: Tue 12 May 2026 18:50:41 +0000 Manifest next update: Wed 13 May 2026 21:29:41 +0000 Files and hashes: 1: 34352e3235302e3138302e302f32332d3233203d3e2034383136.roa (hash: h33Ywf61tukA2QkrBnvDjXYDOBhCWihy9GsVOA4UzB4=) 2: 3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa (hash: R/rCDfiWFqlqcod2NVjhGm5lLmuyaFu/pyXuhb2N/OU=) 3: 3130332e3234392e3139322e302f32322d3232203d3e20313436373732.roa (hash: 8mPsT5oJQF3AQL5nN4rKEPJ/o9mbd8uFLbuw1ua6Ufs=) 4: 3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa (hash: BRl4mQ6cdOwfk/Kx+aDhlCnxDNICpywBM8raPfvbf6o=) 5: 3130332e3231392e3130302e302f32342d3234203d3e20313436373732.roa (hash: 219OtlcRCl/vPh6STNR1SQotbaKdym/A4i7C6d7LCR4=) 6: 34352e3235312e332e302f32342d3234203d3e203137383136.roa (hash: uSuFlHn4k3bVuC52zHUSyzhTBc5Fm6FctXux3T7DbQ4=) 7: 3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa (hash: a2fwyzRSRqL4WwFa/yyzGlykbolRD7Y3AfnVVrYXKX4=) 8: 323430353a38303a31333a3a2f34382d3438203d3e20313436373732.roa (hash: Gxt4Ykxs/NSO3oYxAyGpx1JRUm/GbqTBMNiXb0ZzAy0=) 9: 3130332e3231392e38362e302f32332d3233203d3e20313436373732.roa (hash: Yfoz9xxwKjmqfnw2q9PyUtn0eB7o9iKc8OYzqt5CXtk=) 10: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: m+gMN2PauQmss7Bu0Fb4hsBGMXfFg7NGQ7uyFC/pii0=) 11: 3130332e3231392e38362e302f32342d3234203d3e203137383136.roa (hash: MsotgNCbJVnwcF6GNHfJFvug+8qFy3u27Fwx0K4RaYs=) 12: 3130332e3231392e38372e302f32342d3234203d3e203137383136.roa (hash: AkcodKSLOJnqmykPjfYRdG32yI0Bg0CB2+vqj+ECd+o=) 13: 34352e3234382e3131312e302f32342d3234203d3e203137383136.roa (hash: ttRx26kC00IoCX1/dzaef5ghHPQ/v6BLKOJI3sa9q2U=) 14: 3130332e3231392e3130322e302f32332d3233203d3e20313436373732.roa (hash: upd/xRwcRMOyUggBsC8+yLpqU4saiLo05+rOh4II0kI=) 15: 34352e3234382e3130382e302f32342d3234203d3e20313436373732.roa (hash: W1l5mudPYcSen+JGIjiH5OvFJniliEIgw6W/cZ0DGIg=) 16: 34352e3235312e322e302f32342d3234203d3e20313436373732.roa (hash: 7jPxW0WvnmO/t63ZVu1I7F5VltpTwDKuxT58tOU7Syw=) 17: 3130332e3231392e38352e302f32342d3234203d3e203137383136.roa (hash: jRq5VBloVwPh4dKWaqfMlW8C2DOGJE+e3Rmxbqfjc8U=) 18: 34352e3235312e332e302f32342d3234203d3e20313436373732.roa (hash: 84MNUAfErXO1nrT6PFyovWHzQ0LJbZ44LYC9o9hGmRE=) 19: 34352e3234382e3131312e302f32342d3234203d3e20313436373732.roa (hash: VbxRPo9naVUIyurSkLBtg7k/srQp6uo7BW4532v3aR8=) 20: 3130332e3231392e3130302e302f32332d3233203d3e2034383136.roa (hash: IEEAMJ/et3yDLp0gz+24xRYvSyjwCAZnVUXAZLMMWZo=) 21: 34352e3235312e322e302f32332d3233203d3e20313436373732.roa (hash: HITweSejw9LPAAPT/Jl4d6YLdDhw11XAHiVYd5sZLX4=) 22: 34352e3235302e3138342e302f32322d3232203d3e2034383136.roa (hash: RI+idagZL3rCO8K59vR3lwVwbOqjyorKRH3k++Z9FWE=) 23: 3130332e3231392e38352e302f32342d3234203d3e20313436373732.roa (hash: bfPR+n8MVZYvIWDo9z+iW70WBR828zNBS45aog4V7kE=) 24: 3130332e3136312e3235342e302f32332d3233203d3e20313436373732.roa (hash: ey8SNdqgz102zC4nsGIO+c2poo9UqPVjBV8E8DOwA8c=) 25: 3130332e3136312e3235342e302f32342d3234203d3e20313436373732.roa (hash: fj/sfPPmAd9753TITYEO7kcwQ/mY2SreemFgpWZQiKQ=) 26: 3130332e3231362e3235322e302f32332d3233203d3e20313436373732.roa (hash: 85cogqW3cgBvb1qEBXnDojaIEGBNKaYMbROIlE3CxvI=) 27: 34352e3235312e322e302f32342d3234203d3e203137383136.roa (hash: xQaZ3HVuIKpAcOlBiyMNnx2dM6eLd2p2ALqBAqxjTnM=) 28: 3130332e3231362e3235322e302f32342d3234203d3e2034383136.roa (hash: aO+DkS0zTHdPvPxlggzUbAE4Lu26a9KguQs3DYxkPts=) 29: 34352e3235312e322e302f32332d3233203d3e203137383136.roa (hash: Rx5OuBmdni1w5P8Xxxw5Y5JHc1feX0tCf3IRIhgjjW0=) 30: 3130332e3139312e3234322e302f32332d3233203d3e2034383136.roa (hash: 3MO4WAS/mIlJMIrVI+85+WeNsWtQva36XIGPGXTaHbI=) 31: 34352e3235302e3138302e302f32332d3233203d3e203137363233.roa (hash: z5CNtqggfpBwQHvrd01NKsHY76dW1RQ+2zq6ZLkT6L8=) 32: 34352e3234382e3131302e302f32332d3233203d3e203137383136.roa (hash: rr5JAs6HDOFXBtLZkLqPblk/EY74JbxpAS7e2jKACc8=) 33: 34352e3235302e3138302e302f32332d3233203d3e20313436373732.roa (hash: +b2dhVOVKDtioYPTzWNdeYIhHzc/eT7XuKHHyYYXG4c=) 34: 3231312e3136312e3130392e302f32342d3234203d3e20313436373732.roa (hash: RaWNNSXVR8tps2og/Ak+iaDGQJ/KY1pty8OUWmINtkg=) 35: 34352e3234382e3130392e302f32342d3234203d3e20313436373732.roa (hash: l83eIj5SYIwVCavpwqb2q7eJdR1MR1SvO0kRlN7ALug=) 36: 3130332e3231392e3130302e302f32332d3233203d3e20313436373732.roa (hash: P3K3OIbCzI0XzMLF0uwvrqMz53i07+O7+VjfXgy9X9k=) 37: 3130332e3231392e38362e302f32332d3233203d3e203137383136.roa (hash: DBr6cLEVJ7XwREP4pQQSd50m/dudrJ8YOhAiFdwuqI4=) 38: 34352e3234382e3131302e302f32332d3233203d3e20313436373732.roa (hash: NE6ljU5KjnghW4pvGF9PHCS/poej81XQVr8BeMhZs4k=) 39: 323430353a38303a313a3a2f34382d3438203d3e20313436373732.roa (hash: vlXgtjBVbJFOq7vuvdpiEzr6ie8jb0e5+nOu4Vmglas=) 40: 3231312e3136312e3131302e302f32342d3234203d3e20313436373732.roa (hash: iVAXKRVA2OAi2gvS05dFXtSfuZgHOruHMQhgHWIEYzE=) 41: 34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (hash: CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=) 42: 3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa (hash: gOtBt5dxmbqpIh35k3uBcEVYq2I9ADjt7aYmNTPxKwo=) 43: 3130332e3234392e3139322e302f32322d3232203d3e2032393134.roa (hash: 6Dd6bY/19hb8Fb1XB6oGcDAKn2zllhJNly+dgxbJ3ks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:1e:5b:f1:b2:47:a8:87:ca:d9:9c:cd:74:4b:ad:03:60:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: May 12 18:50:41 2026 GMT Not After : May 13 21:29:41 2026 GMT Subject: CN=00E09F9DAE06CC27FEA26285492AB3274514893A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:5e:3e:01:57:45:5e:38:9a:96:9a:dc:e2: 87:1b:0f:59:e0:cd:7b:17:bc:9f:98:23:09:db:45: 5c:5b:73:94:02:4d:59:85:40:28:64:f5:d5:1c:b0: 7b:86:fb:f6:1b:2f:9f:15:ca:a4:90:b4:26:b9:2a: 7c:a9:03:3c:b6:21:eb:11:a7:c2:22:28:38:d6:4b: 65:88:8c:cc:39:e8:73:fe:2c:7d:b6:74:12:cd:d3: 22:17:d7:7a:d3:94:00:40:35:6c:e9:9e:df:51:69: 9a:2a:66:08:04:de:1b:d7:f4:62:05:83:db:3a:1e: 47:11:df:87:c5:65:bd:c4:cf:a0:7b:fd:08:5a:d2: 6e:15:e0:87:da:cf:ec:79:54:85:b0:c4:e9:54:5b: 20:26:5b:e4:a6:5a:37:2d:2f:85:6f:f8:64:ed:5c: 34:b0:1f:ea:3f:64:f5:3f:2e:44:40:fd:31:a1:98: 78:1d:a5:a2:1d:2d:4d:16:9b:10:8c:e4:23:a9:53: 3b:3f:a3:e4:ef:1a:06:87:42:26:75:65:77:1b:32: b5:5a:de:c7:0f:8c:6e:66:22:b4:b1:92:4b:70:9a: d5:9d:07:74:56:94:24:1f:04:87:87:43:99:06:9d: e2:89:d4:c1:38:ec:fa:26:31:a2:c5:2d:85:a0:79: ab:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E0:9F:9D:AE:06:CC:27:FE:A2:62:85:49:2A:B3:27:45:14:89:3A X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:26:7e:1b:b2:36:a8:df:da:f7:2b:50:c2:75:f9:70:89:04: 3a:cf:f8:98:ac:53:52:16:3d:21:57:1f:b0:4d:9f:3f:a9:10: 74:4e:69:e1:53:ec:c6:9a:f4:66:40:2e:6b:ab:d9:36:ae:af: 7b:4c:74:a0:b5:c2:78:e3:73:d8:5f:01:50:70:43:e9:ec:99: a4:ca:e8:95:95:94:6b:96:af:b5:c5:8a:a5:db:43:1e:8e:d4: f3:b0:44:f7:10:23:5b:20:63:5d:02:0c:39:6c:b2:88:5b:de: b6:f3:0a:49:cf:ba:7a:1c:00:9a:82:3b:68:a6:7b:6c:93:a9: 17:20:30:b8:49:d7:04:eb:c3:03:cc:4b:46:f7:85:eb:7a:11: 25:9c:a1:07:38:b7:c0:d9:94:b0:74:ff:29:5a:c9:96:f8:15: a5:ed:66:dc:73:da:b3:4b:da:21:33:0e:00:56:45:d8:6e:7a: 07:28:cc:d7:74:5d:46:c4:c3:f8:be:c6:18:46:05:5d:d1:ae: 80:b3:c7:71:f2:16:48:8a:80:f3:ad:06:77:a9:67:25:79:af: 7a:b1:1c:86:f3:b6:43:8b:60:f9:d6:15:ef:9f:0b:2a:f7:52: dd:40:06:64:63:f8:d1:67:ef:ec:96:9a:64:d6:03:86:3c:64: 75:d4:81:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZPAeW/GyR6iHytmczXRLrQNgI/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA1MTIxODUwNDFaFw0yNjA1MTMyMTI5NDFaMDMxMTAvBgNV BAMTKDAwRTA5RjlEQUUwNkNDMjdGRUEyNjI4NTQ5MkFCMzI3NDUxNDg5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0A14+AVdFXjialprc4ocbD1ng zXsXvJ+YIwnbRVxbc5QCTVmFQChk9dUcsHuG+/YbL58VyqSQtCa5KnypAzy2IesR p8IiKDjWS2WIjMw56HP+LH22dBLN0yIX13rTlABANWzpnt9RaZoqZggE3hvX9GIF g9s6HkcR34fFZb3Ez6B7/Qha0m4V4Ifaz+x5VIWwxOlUWyAmW+SmWjctL4Vv+GTt XDSwH+o/ZPU/LkRA/TGhmHgdpaIdLU0WmxCM5COpUzs/o+TvGgaHQiZ1ZXcbMrVa 3scPjG5mIrSxkktwmtWdB3RWlCQfBIeHQ5kGneKJ1ME47PomMaLFLYWgeat5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAOCfna4GzCf+omKFSSqzJ0UUiTowHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCZ+G7I2qN/a 9ytQwnX5cIkEOs/4mKxTUhY9IVcfsE2fP6kQdE5p4VPsxpr0ZkAua6vZNq6ve0x0 oLXCeONz2F8BUHBD6eyZpMrolZWUa5avtcWKpdtDHo7U87BE9xAjWyBjXQIMOWyy iFvetvMKSc+6ehwAmoI7aKZ7bJOpFyAwuEnXBOvDA8xLRveF63oRJZyhBzi3wNmU sHT/KVrJlvgVpe1m3HPas0vaITMOAFZF2G56ByjM13RdRsTD+L7GGEYFXdGugLPH cfIWSIqA860Gd6lnJXmverEchvO2Q4tg+dYV758LKvdS3UAGZGP40Wfv7JaaZNYD hjxkddSBDw== -----END CERTIFICATE-----Generated at Wed May 13 13:21:33 2026 by rpki-client