$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: mjELscMlCnPCcuQCNpqAhV49u9dcmJK1iCCiCfgZI5o= Subject key identifier: FD:AC:3F:24:26:73:1E:61:16:65:56:53:BD:6C:43:EC:12:E0:57:11 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 369026092299E7EA8ACFC690C96099E14090EF1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 013D Signing time: Sat 10 Oct 2026 01:54:04 +0000 Manifest this update: Sat 10 Oct 2026 01:49:04 +0000 Manifest next update: Tue 13 Oct 2026 11:47:04 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 2: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 3: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: gAc44PVqVCLAHGiUivw0PMud2kYx/GHlzfc9iTtwAYE=) 4: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 5: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:90:26:09:22:99:e7:ea:8a:cf:c6:90:c9:60:99:e1:40:90:ef:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Oct 10 01:49:04 2026 GMT Not After : Oct 13 11:47:04 2026 GMT Subject: CN=FDAC3F2426731E6116655653BD6C43EC12E05711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:c9:4c:08:54:f7:4a:87:8b:b2:41:d4:52: 35:f9:b7:62:fd:06:aa:2c:0f:d4:26:8f:d4:d2:68: 37:95:33:d1:bf:62:78:c0:79:62:b8:5c:86:81:eb: 3a:e3:5d:27:72:bb:50:9d:a3:7f:bd:0e:63:b2:07: 11:5e:32:b0:58:01:5f:3f:65:8a:3c:76:5a:48:a6: ea:5a:0f:20:14:08:2e:cf:c8:76:ca:09:d8:ae:af: 4e:4f:09:15:e1:cb:c4:64:ef:42:46:1e:2d:a3:05: c9:6e:40:a2:a3:c6:82:9c:a3:20:bd:c4:f4:1d:1b: 04:8c:f9:3c:de:30:b1:59:19:43:36:da:bf:da:f2: ee:66:66:21:f9:95:ca:a7:6e:5d:83:a9:b4:7e:42: 49:c7:79:94:74:76:84:90:9a:11:18:16:9f:71:ff: 58:9a:bb:bd:28:64:3c:36:78:f5:03:e4:18:77:d2: db:f9:8b:37:da:96:2d:85:78:63:f4:b6:cf:c3:a0: b5:ee:4e:3f:c7:f7:41:40:8b:ab:5e:3a:9a:2e:ff: 14:b5:96:00:f5:de:9f:ce:38:c0:f4:18:62:f9:53: 2d:fe:83:2e:5b:be:44:da:f4:8b:7c:53:25:4f:d9: b0:f5:cd:54:f4:45:c0:65:e0:02:3b:d4:16:7f:45: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AC:3F:24:26:73:1E:61:16:65:56:53:BD:6C:43:EC:12:E0:57:11 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bf:19:f1:e5:76:0d:97:b1:92:d2:2e:b0:c1:f3:c6:ea:f5: 61:d1:0f:4a:21:54:fa:17:7e:6d:f4:80:d4:ca:d4:75:b0:9d: f3:4b:e2:ba:e0:dd:2b:33:5a:51:e7:d4:5b:db:18:76:6b:d4: f2:58:9b:24:0d:38:7b:0e:1e:82:f7:01:28:db:23:41:57:4c: b5:60:12:8b:6f:0e:dc:80:fa:be:31:98:2b:dc:45:af:fe:c2: 38:a9:b3:d4:11:fe:dc:a4:8c:b8:53:18:47:6b:4c:93:f6:d9: 2a:8c:a7:de:95:16:38:f1:e3:1e:c4:aa:e0:cb:db:60:f9:af: 63:80:88:03:16:1e:89:11:f3:8b:d1:cf:c4:4e:c8:a1:04:47: f1:9e:fd:d0:15:de:e8:9e:b7:ea:15:a3:71:7c:b5:7e:35:ba: 3b:4a:a2:a6:d9:ea:6a:f9:fe:c4:08:6d:b4:20:e8:7b:c8:40: 42:6c:36:cc:bd:5e:a6:6c:c5:05:8a:37:88:6c:4b:07:8b:55: 10:25:24:e6:db:7d:34:5b:2b:ff:06:9a:e9:c0:33:6e:c8:50: de:ed:95:a8:2a:f9:65:c6:77:0f:57:14:01:7c:24:a8:26:18: f5:ad:60:48:10:63:64:e4:28:38:49:06:6d:74:ac:17:7d:b3: 62:77:24:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNpAmCSKZ5+qKz8aQyWCZ4UCQ7xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjEwMTAwMTQ5MDRaFw0yNjEwMTMxMTQ3MDRaMDMxMTAvBgNV BAMTKEZEQUMzRjI0MjY3MzFFNjExNjY1NTY1M0JENkM0M0VDMTJFMDU3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzclMCFT3SoeLskHUUjX5t2L9 BqosD9Qmj9TSaDeVM9G/YnjAeWK4XIaB6zrjXSdyu1Cdo3+9DmOyBxFeMrBYAV8/ ZYo8dlpIpupaDyAUCC7PyHbKCdiur05PCRXhy8Rk70JGHi2jBcluQKKjxoKcoyC9 xPQdGwSM+TzeMLFZGUM22r/a8u5mZiH5lcqnbl2DqbR+QknHeZR0doSQmhEYFp9x /1iau70oZDw2ePUD5Bh30tv5izfali2FeGP0ts/DoLXuTj/H90FAi6teOpou/xS1 lgD13p/OOMD0GGL5Uy3+gy5bvkTa9It8UyVP2bD1zVT0RcBl4AI71BZ/Rch9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/aw/JCZzHmEWZVZTvWxD7BLgVxEwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb8Z8eV2DZex ktIusMHzxur1YdEPSiFU+hd+bfSA1MrUdbCd80viuuDdKzNaUefUW9sYdmvU8lib JA04ew4egvcBKNsjQVdMtWASi28O3ID6vjGYK9xFr/7COKmz1BH+3KSMuFMYR2tM k/bZKoyn3pUWOPHjHsSq4MvbYPmvY4CIAxYeiRHzi9HPxE7IoQRH8Z790BXe6J63 6hWjcXy1fjW6O0qiptnqavn+xAhttCDoe8hAQmw2zL1epmzFBYo3iGxLB4tVECUk 5tt9NFsr/waa6cAzbshQ3u2VqCr5ZcZ3D1cUAXwkqCYY9a1gSBBjZOQoOEkGbXSs F32zYncksw== -----END CERTIFICATE-----Generated at Sat Oct 10 21:39:11 2026 by rpki-client