$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: ms2hfRUFdGB5NuWViMLcHgNQPu94lRzwh48T7wgCGEU= Subject key identifier: C6:3A:3B:6C:E9:20:9E:CB:C1:66:BB:92:A8:0A:1B:1D:00:2C:62:C3 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 223CC02C0F7826BCF0FA210D6C9561CE905B4D26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 9A Signing time: Wed 13 May 2026 03:00:54 +0000 Manifest this update: Wed 13 May 2026 02:55:54 +0000 Manifest next update: Thu 14 May 2026 03:42:54 +0000 Files and hashes: 1: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: N1hi5AlCVl7KUV4KLffa9B3tPtF1TXKdN+RBAAD+n+4=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 3: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 4: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 5: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3c:c0:2c:0f:78:26:bc:f0:fa:21:0d:6c:95:61:ce:90:5b:4d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: May 13 02:55:54 2026 GMT Not After : May 14 03:42:54 2026 GMT Subject: CN=C63A3B6CE9209ECBC166BB92A80A1B1D002C62C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:0a:93:aa:5b:ab:f4:3f:7c:d7:17:91:cf: c0:05:5a:90:e2:59:af:61:91:82:fb:03:c4:33:fd: dd:51:b5:9b:e3:80:07:68:ce:88:b3:7c:df:04:67: cc:2f:8f:04:ce:17:6a:a3:68:01:03:34:17:5a:0e: 61:68:d1:25:5c:97:42:0d:17:8c:f8:26:30:58:34: 6c:28:d9:40:33:05:9a:ea:e5:91:03:5c:db:b3:cb: f2:0a:e3:37:3b:b8:7b:a3:7a:67:b5:93:eb:93:6d: e2:9b:1b:7d:61:59:01:74:07:86:1f:70:b7:69:de: 08:20:2d:b4:c5:14:38:51:b6:bd:43:cb:db:d1:a5: 5d:7c:7f:8b:fa:e4:5f:f9:c6:5b:6e:0f:a3:15:0a: 39:cf:8e:7f:e8:6a:df:21:5a:86:1e:1a:01:44:3e: 9b:20:2a:a7:2a:4c:46:31:f0:10:7e:eb:43:c0:52: a4:58:0a:20:d5:83:6e:d7:6c:5d:97:e7:e4:bb:b6: 15:ed:e9:7f:be:56:0e:1f:ed:bb:ad:4e:5c:b1:57: 8c:81:bd:96:07:58:e8:09:0f:a4:1d:d8:75:d3:78: 30:5f:0f:26:6b:96:cc:8f:33:5d:f3:54:f5:0b:05: c8:a8:26:ee:0a:ca:d7:ba:1d:cd:b8:2c:4a:5a:79: 7b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3A:3B:6C:E9:20:9E:CB:C1:66:BB:92:A8:0A:1B:1D:00:2C:62:C3 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1a:44:bd:c1:bb:27:76:46:c0:7a:bf:c3:58:f0:23:b7:0d: fa:f5:fd:ee:7d:01:13:20:bf:75:90:b5:8e:eb:cf:d0:8e:d1: c3:14:87:c4:3f:8b:de:00:b3:fe:5e:6d:0c:5a:3b:86:7b:bc: e7:34:e1:c2:ea:3e:2b:a9:2a:3e:ed:28:4d:76:94:5f:00:3b: d1:5d:69:24:6e:38:24:dd:99:d7:77:0f:c5:b9:de:e3:2f:f5: 1e:b7:18:13:34:36:20:16:45:13:4f:b5:d9:36:17:62:d8:ea: ac:b9:3e:2e:de:d4:2b:ff:56:0e:1a:15:e0:2b:a7:70:a4:71: f4:8e:aa:93:21:4a:aa:e5:e6:a7:ca:ee:06:c9:4b:3c:98:b1: b1:3b:20:33:5a:61:11:01:e6:07:80:fb:40:33:60:37:2b:0b: ef:4c:fa:64:64:8c:80:5d:12:46:d0:42:fd:71:d3:17:ef:ba: 41:41:a5:e9:7f:97:b9:05:0e:aa:1b:e2:0a:78:3e:26:86:27: cc:c1:24:97:6d:b6:1a:26:29:df:86:ae:23:7c:f8:c9:70:7f: 38:0a:91:f7:79:a2:a4:18:f5:c5:47:f4:9d:dc:cb:29:32:0c: 0e:86:4a:46:65:fa:dd:2d:39:d6:1a:71:fa:f6:cb:d7:ae:33: dc:c9:9c:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIjzALA94Jrzw+iENbJVhzpBbTSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA1MTMwMjU1NTRaFw0yNjA1MTQwMzQyNTRaMDMxMTAvBgNV BAMTKEM2M0EzQjZDRTkyMDlFQ0JDMTY2QkI5MkE4MEExQjFEMDAyQzYyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWrgqTqlur9D981xeRz8AFWpDi Wa9hkYL7A8Qz/d1RtZvjgAdozoizfN8EZ8wvjwTOF2qjaAEDNBdaDmFo0SVcl0IN F4z4JjBYNGwo2UAzBZrq5ZEDXNuzy/IK4zc7uHujeme1k+uTbeKbG31hWQF0B4Yf cLdp3gggLbTFFDhRtr1Dy9vRpV18f4v65F/5xltuD6MVCjnPjn/oat8hWoYeGgFE PpsgKqcqTEYx8BB+60PAUqRYCiDVg27XbF2X5+S7thXt6X++Vg4f7butTlyxV4yB vZYHWOgJD6Qd2HXTeDBfDyZrlsyPM13zVPULBcioJu4Kyte6Hc24LEpaeXv/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxjo7bOkgnsvBZruSqAobHQAsYsMwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhpEvcG7J3ZG wHq/w1jwI7cN+vX97n0BEyC/dZC1juvP0I7RwxSHxD+L3gCz/l5tDFo7hnu85zTh wuo+K6kqPu0oTXaUXwA70V1pJG44JN2Z13cPxbne4y/1HrcYEzQ2IBZFE0+12TYX YtjqrLk+Lt7UK/9WDhoV4CuncKRx9I6qkyFKquXmp8ruBslLPJixsTsgM1phEQHm B4D7QDNgNysL70z6ZGSMgF0SRtBC/XHTF++6QUGl6X+XuQUOqhviCng+JoYnzMEk l222GiYp34auI3z4yXB/OAqR93mipBj1xUf0ndzLKTIMDoZKRmX63S051hpx+vbL 164z3Mmcaw== -----END CERTIFICATE-----Generated at Wed May 13 16:12:54 2026 by rpki-client