$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: goouv1uBoGdaI9Ee31W4ot6IytgQml4Su/0gooMi4Bw= Subject key identifier: 7E:48:C7:BA:2B:12:7C:CB:2F:D3:F9:BC:C2:48:51:D0:3D:66:C5:6D Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 340789E0AFEB9B816AE9AA738D151A7ADA21D736 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 17:13:28 +0000 Manifest this update: Thu 26 Mar 2026 17:08:28 +0000 Manifest next update: Fri 27 Mar 2026 19:34:28 +0000 Files and hashes: 1: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: eD+fd7QtszGLk58noLu1QQgQR/+1sC8IprC2Y+MZYu8=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:07:89:e0:af:eb:9b:81:6a:e9:aa:73:8d:15:1a:7a:da:21:d7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Mar 26 17:08:28 2026 GMT Not After : Mar 27 19:34:28 2026 GMT Subject: CN=7E48C7BA2B127CCB2FD3F9BCC24851D03D66C56D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:52:9f:f9:2c:4a:e7:60:97:8a:e2:74:05: 3a:f4:f9:28:bb:ce:b7:78:e4:3f:c2:ed:bc:1d:44: 80:dc:eb:13:56:95:3b:70:36:c4:c8:20:56:35:4a: d8:a1:b9:31:fd:f9:2d:0f:d5:c0:1d:4d:af:93:00: 04:4f:fd:a6:08:47:1a:e8:03:76:16:cd:29:d8:8a: 61:67:6f:ee:3c:5b:2e:dc:19:52:8f:9c:50:e3:fc: fa:a7:7a:a1:b3:98:e5:a4:03:7f:f4:48:fa:63:49: 19:c1:c1:dc:b5:6e:2b:d4:eb:b7:38:91:01:e7:98: a2:8c:dd:1f:c5:0d:13:14:f3:2a:62:ce:3c:d7:f5: e7:99:fb:1c:bc:e1:47:b6:1e:5e:e0:91:b0:b6:e2: 27:9f:21:b0:f2:0e:7b:4d:bd:2c:8b:9f:44:27:11: 96:94:0a:5f:82:71:cd:86:92:f4:d4:6a:54:c7:4a: c6:1d:e2:a9:4b:c0:b5:2c:79:bb:73:64:2d:4c:b8: 25:bd:65:75:4a:9e:3b:da:2e:08:2c:ff:be:cd:92: 4a:f5:a2:fc:5e:48:3a:b5:02:70:42:0a:e1:0a:ad: 3d:34:35:e8:82:45:9c:c4:29:1e:7f:2d:82:03:e1: e3:1a:64:dd:38:23:c9:de:88:f4:a3:3f:54:ff:5e: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:C7:BA:2B:12:7C:CB:2F:D3:F9:BC:C2:48:51:D0:3D:66:C5:6D X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:43:7c:2d:c0:0e:06:4b:af:e1:32:53:c1:a7:3b:1f:a7: 5a:37:e0:e3:6b:1c:ac:4b:66:30:ab:d5:94:24:51:d5:98:39: 7c:bf:23:b7:94:0b:1d:a5:b2:64:3a:73:d0:e7:4e:30:6c:25: 8b:3e:3a:8d:da:5e:3c:e1:c4:83:e2:15:d1:be:d6:7b:40:4a: 68:13:ef:d9:3b:af:21:51:38:8b:9b:a2:b6:63:ad:cc:b4:dc: 3b:e0:37:3a:a6:f2:1f:8e:b7:17:ff:90:14:26:fd:9c:33:d6: ef:cb:03:b1:06:cf:8d:fb:76:14:4f:21:4e:28:ae:d4:f0:91: bc:5c:23:22:fe:50:cc:c8:e3:be:37:40:fa:67:18:ad:79:7e: 9b:fd:74:7e:49:4f:e4:f6:37:6a:3f:b9:9b:9e:f0:aa:22:7f: 15:9d:eb:47:59:f8:f7:29:bf:e9:19:ea:cb:31:3e:c1:05:63: 01:c2:19:54:78:68:e4:b7:62:d9:fb:44:51:50:2a:c8:8b:9f: d7:2d:f8:73:c5:a6:70:cb:b4:f1:ab:1b:a7:e7:59:f6:52:ae: 9d:46:24:e7:14:ae:5b:66:64:d9:f9:a6:73:ab:26:69:68:9d: ae:72:b8:30:cc:fa:51:56:e9:da:43:1c:3a:be:42:32:01:db: 23:19:12:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNAeJ4K/rm4Fq6apzjRUaetoh1zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAzMjYxNzA4MjhaFw0yNjAzMjcxOTM0MjhaMDMxMTAvBgNV BAMTKDdFNDhDN0JBMkIxMjdDQ0IyRkQzRjlCQ0MyNDg1MUQwM0Q2NkM1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdVKf+SxK52CXiuJ0BTr0+Si7 zrd45D/C7bwdRIDc6xNWlTtwNsTIIFY1StihuTH9+S0P1cAdTa+TAARP/aYIRxro A3YWzSnYimFnb+48Wy7cGVKPnFDj/PqneqGzmOWkA3/0SPpjSRnBwdy1bivU67c4 kQHnmKKM3R/FDRMU8ypizjzX9eeZ+xy84Ue2Hl7gkbC24iefIbDyDntNvSyLn0Qn EZaUCl+Ccc2GkvTUalTHSsYd4qlLwLUsebtzZC1MuCW9ZXVKnjvaLggs/77Nkkr1 ovxeSDq1AnBCCuEKrT00NeiCRZzEKR5/LYID4eMaZN04I8neiPSjP1T/Xi6TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfkjHuisSfMsv0/m8wkhR0D1mxW0wHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqulDfC3ADgZL r+EyU8GnOx+nWjfg42scrEtmMKvVlCRR1Zg5fL8jt5QLHaWyZDpz0OdOMGwliz46 jdpePOHEg+IV0b7We0BKaBPv2TuvIVE4i5uitmOtzLTcO+A3OqbyH463F/+QFCb9 nDPW78sDsQbPjft2FE8hTiiu1PCRvFwjIv5QzMjjvjdA+mcYrXl+m/10fklP5PY3 aj+5m57wqiJ/FZ3rR1n49ym/6RnqyzE+wQVjAcIZVHho5Ldi2ftEUVAqyIuf1y34 c8WmcMu08asbp+dZ9lKunUYk5xSuW2Zk2fmmc6smaWidrnK4MMz6UVbp2kMcOr5C MgHbIxkSzQ== -----END CERTIFICATE-----Generated at Fri Mar 27 05:00:06 2026 by rpki-client