$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: rzWGKvRaQ4iTdN9yDr2bqtxfK+2tL9i9gH6RwYIHTxU= Subject key identifier: 3E:80:6F:86:22:EF:03:5E:E4:EC:0C:EB:29:32:A5:90:11:4D:52:06 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 6F88270B474675D503D575833C6B3106DBD5F026 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: FA Signing time: Fri 24 Jul 2026 00:14:54 +0000 Manifest this update: Fri 24 Jul 2026 00:09:54 +0000 Manifest next update: Sat 25 Jul 2026 03:29:54 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 2: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: hw7NYaZD5s/pFYkB3xH364i3jokjGEzjJSXjO93BtF0=) 3: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 5: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:88:27:0b:47:46:75:d5:03:d5:75:83:3c:6b:31:06:db:d5:f0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jul 24 00:09:54 2026 GMT Not After : Jul 25 03:29:54 2026 GMT Subject: CN=3E806F8622EF035EE4EC0CEB2932A590114D5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:6c:ec:b1:af:31:26:37:e1:6c:0c:a2:92: 03:b1:88:2c:9f:15:fe:ee:ac:74:d3:65:34:5e:83: 4b:6b:d2:ca:30:64:99:da:dc:db:06:93:04:7d:10: 89:41:ba:8b:46:ac:40:72:6f:9a:3a:1d:57:19:78: 88:c1:d2:e6:5f:e7:93:a1:4a:af:c1:f4:c8:0a:28: 6a:bb:47:74:1d:3d:a7:97:51:67:76:39:5a:4a:ed: 8a:1e:64:7e:6d:19:cb:51:00:3a:30:dd:3b:5d:5c: 30:d1:5d:f4:80:39:7c:a2:9f:fc:78:56:ef:2b:0c: 69:c8:92:b8:19:a1:d0:c4:82:9e:7b:d8:35:9e:54: c5:58:13:a6:2a:75:97:74:1c:38:e6:fa:a4:c0:0e: d6:76:21:25:90:c7:c7:64:c6:6f:1d:a8:9b:09:7c: 87:22:4d:8d:8d:a0:90:73:01:12:77:6f:2d:e7:9f: 4d:4a:4f:98:88:9b:13:3a:98:0a:5e:02:95:5f:e1: ec:5f:b6:b5:70:ed:0b:b7:e8:a0:2a:19:93:a0:7e: a2:0f:ed:7f:d2:01:e4:96:6d:de:14:0a:19:ba:ae: 0c:60:cc:51:e6:b4:16:54:e4:b1:e4:0f:b2:75:f3: 22:56:41:0a:a0:1e:4a:20:88:1c:56:74:31:55:0f: 05:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:6F:86:22:EF:03:5E:E4:EC:0C:EB:29:32:A5:90:11:4D:52:06 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3e:33:66:1f:5d:7d:94:8c:0e:b6:3f:ae:41:4a:dd:74:1e: 6f:ad:52:64:bb:d5:b5:5d:31:5f:9c:40:2e:30:c1:10:75:9c: a8:5a:18:d4:85:06:de:e6:1e:7c:20:f6:72:73:59:cc:50:1d: 9a:56:52:9c:00:f9:71:3e:cb:94:0e:69:b9:87:c2:57:29:23: 24:cd:9f:cb:07:60:9a:36:2f:e9:a4:70:15:71:52:5a:23:5f: e3:9a:b5:7d:04:8c:15:bb:2f:89:b8:cf:44:38:03:16:a4:df: 2a:3b:08:08:82:1f:89:e3:c0:6d:6d:f1:58:ec:ea:75:0a:ee: 3e:27:76:53:5e:99:85:a2:38:07:57:70:a6:65:ac:de:6f:6e: e7:b3:66:65:c2:e8:28:0d:cc:38:d2:2b:88:48:bf:20:9b:45: 46:21:72:a1:e6:70:d6:79:a2:3d:1a:90:09:e9:6a:d1:a9:46: e2:9f:2e:a6:1f:9d:dc:3b:a2:85:14:af:d9:e3:38:30:f2:8e: 53:37:ec:1c:cc:64:d9:30:09:c4:f1:1e:4e:a4:8e:ae:62:47: 5d:50:fd:6b:15:06:13:87:b7:c7:06:95:bf:11:46:c0:f8:b7: 1e:27:1e:53:bc:67:46:aa:60:81:89:b9:4c:4c:99:65:55:8d: 26:45:fc:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb4gnC0dGddUD1XWDPGsxBtvV8CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA3MjQwMDA5NTRaFw0yNjA3MjUwMzI5NTRaMDMxMTAvBgNV BAMTKDNFODA2Rjg2MjJFRjAzNUVFNEVDMENFQjI5MzJBNTkwMTE0RDUyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpQmzssa8xJjfhbAyikgOxiCyf Ff7urHTTZTReg0tr0sowZJna3NsGkwR9EIlBuotGrEByb5o6HVcZeIjB0uZf55Oh Sq/B9MgKKGq7R3QdPaeXUWd2OVpK7YoeZH5tGctRADow3TtdXDDRXfSAOXyin/x4 Vu8rDGnIkrgZodDEgp572DWeVMVYE6YqdZd0HDjm+qTADtZ2ISWQx8dkxm8dqJsJ fIciTY2NoJBzARJ3by3nn01KT5iImxM6mApeApVf4exftrVw7Qu36KAqGZOgfqIP 7X/SAeSWbd4UChm6rgxgzFHmtBZU5LHkD7J18yJWQQqgHkogiBxWdDFVDwXnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPoBvhiLvA17k7AzrKTKlkBFNUgYwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfz4zZh9dfZSM DrY/rkFK3XQeb61SZLvVtV0xX5xALjDBEHWcqFoY1IUG3uYefCD2cnNZzFAdmlZS nAD5cT7LlA5puYfCVykjJM2fywdgmjYv6aRwFXFSWiNf45q1fQSMFbsvibjPRDgD FqTfKjsICIIfiePAbW3xWOzqdQruPid2U16ZhaI4B1dwpmWs3m9u57NmZcLoKA3M ONIriEi/IJtFRiFyoeZw1nmiPRqQCelq0alG4p8uph+d3DuihRSv2eM4MPKOUzfs HMxk2TAJxPEeTqSOrmJHXVD9axUGE4e3xwaVvxFGwPi3HiceU7xnRqpggYm5TEyZ ZVWNJkX8iQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:57:44 2026 by rpki-client