$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: 7J9W/yC8ixFcMACj8TPucPkP09WMsqxGCNP+gL+H+8M= Subject key identifier: C9:A8:BF:E1:27:AD:1A:F2:5E:1B:16:26:5F:CC:DB:C0:66:B7:5F:8F Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 613DB96947B03B8D0F863C9F1B9C98E350A347EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: 013B Signing time: Fri 09 Oct 2026 13:13:23 +0000 Manifest this update: Fri 09 Oct 2026 13:08:23 +0000 Manifest next update: Mon 12 Oct 2026 15:16:23 +0000 Files and hashes: 1: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 2: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 3: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: uYKs8JfSDY29j5Q+4HC/XmmDHbftXrjGbaEh2VIJI80=) 4: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 5: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 6: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 7: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 8: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 9: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 10: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) 11: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 15:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3d:b9:69:47:b0:3b:8d:0f:86:3c:9f:1b:9c:98:e3:50:a3:47:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Oct 9 13:08:23 2026 GMT Not After : Oct 12 15:16:23 2026 GMT Subject: CN=C9A8BFE127AD1AF25E1B16265FCCDBC066B75F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:ef:f4:cd:5b:5d:b7:cd:17:a5:67:1a:20: 51:22:e3:8f:6e:ba:0f:4d:0b:02:14:d4:67:f1:df: cf:88:ec:ef:29:cd:de:7a:d2:36:48:74:59:e5:e2: 9f:9e:9e:39:49:b9:7f:16:ad:56:6c:47:8a:a7:5f: 25:62:32:23:e1:72:05:53:e8:51:21:75:43:1b:60: a0:4d:87:42:24:b4:76:81:c5:3a:e1:fd:d5:32:68: a2:06:95:74:29:9a:de:69:e4:d2:49:50:a2:2a:90: 81:90:a9:0e:25:7b:0b:2c:99:5d:33:02:46:fd:d4: fa:4a:62:ae:3f:c3:05:83:60:48:9a:06:72:a6:bf: 42:a6:a2:21:17:ca:8e:9d:d9:23:1c:89:6a:17:ec: 6c:a1:7c:a9:31:b9:44:29:a4:df:3d:3a:88:10:14: 4e:7c:56:ad:c2:e9:d9:7c:9c:7b:89:47:11:7d:4a: 48:ea:a3:7d:b7:4c:4b:b5:3d:0d:af:49:76:f1:44: 0c:3b:e4:db:cb:34:06:d7:90:a5:b9:d7:c3:a9:75: a5:89:42:61:04:92:91:10:46:1e:a7:d6:ce:50:7b: 5f:5a:4a:8c:ad:ff:41:07:89:bb:91:b1:98:14:62: 13:d0:5a:72:6b:75:34:4a:04:79:52:3b:96:0c:0a: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A8:BF:E1:27:AD:1A:F2:5E:1B:16:26:5F:CC:DB:C0:66:B7:5F:8F X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:85:1a:f2:dc:87:82:61:fb:91:bd:87:4d:11:17:47:b5:b0: 43:b5:58:07:cf:a8:29:17:22:43:1e:1a:2d:99:c8:de:2e:f9: d2:8b:ec:b2:e5:d0:58:8c:b4:76:7c:5e:92:9a:ca:2b:cd:e4: a3:59:e3:2a:09:30:28:fa:28:9b:48:3e:13:51:0f:cb:12:ba: ee:c4:62:b5:72:c3:9d:18:79:be:2a:80:71:89:54:63:e4:66: d9:02:16:6c:d7:d4:47:14:ce:d5:0d:2c:0b:2a:df:c7:5e:83: 95:fd:fd:2a:98:98:88:a2:a1:07:61:77:c7:3f:bc:18:05:0e: c1:05:5f:e8:64:b8:98:61:dc:23:d7:7c:37:a8:96:12:6e:67: e8:cf:b9:dc:4d:a3:54:ca:ee:19:19:26:a6:5e:9d:90:c8:c3: ec:79:e0:98:29:26:52:42:7d:56:05:dd:77:95:e9:29:23:c2: 10:d1:c1:6c:34:e1:d1:62:1f:f2:81:16:87:22:68:a8:53:e0: e8:bf:07:6d:d9:66:f7:15:3c:1c:d1:1d:db:6f:5b:06:5f:44: 37:e8:68:09:c9:9b:27:f3:66:d4:c9:eb:ae:c2:7f:00:d4:f5: 39:7e:27:a6:9c:52:47:a1:3c:cc:8f:02:77:9b:e8:27:91:17: 12:f8:2b:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYT25aUewO40PhjyfG5yY41CjR+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjEwMDkxMzA4MjNaFw0yNjEwMTIxNTE2MjNaMDMxMTAvBgNV BAMTKEM5QThCRkUxMjdBRDFBRjI1RTFCMTYyNjVGQ0NEQkMwNjZCNzVGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpte/0zVtdt80XpWcaIFEi449u ug9NCwIU1Gfx38+I7O8pzd560jZIdFnl4p+enjlJuX8WrVZsR4qnXyViMiPhcgVT 6FEhdUMbYKBNh0IktHaBxTrh/dUyaKIGlXQpmt5p5NJJUKIqkIGQqQ4lewssmV0z Akb91PpKYq4/wwWDYEiaBnKmv0KmoiEXyo6d2SMciWoX7GyhfKkxuUQppN89OogQ FE58Vq3C6dl8nHuJRxF9Skjqo323TEu1PQ2vSXbxRAw75NvLNAbXkKW518OpdaWJ QmEEkpEQRh6n1s5Qe19aSoyt/0EHibuRsZgUYhPQWnJrdTRKBHlSO5YMCoyVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyai/4SetGvJeGxYmX8zbwGa3X48wHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIUa8tyHgmH7 kb2HTREXR7WwQ7VYB8+oKRciQx4aLZnI3i750ovssuXQWIy0dnxekprKK83ko1nj KgkwKPoom0g+E1EPyxK67sRitXLDnRh5viqAcYlUY+Rm2QIWbNfURxTO1Q0sCyrf x16Dlf39KpiYiKKhB2F3xz+8GAUOwQVf6GS4mGHcI9d8N6iWEm5n6M+53E2jVMru GRkmpl6dkMjD7HngmCkmUkJ9VgXdd5XpKSPCENHBbDTh0WIf8oEWhyJoqFPg6L8H bdlm9xU8HNEd229bBl9EN+hoCcmbJ/Nm1MnrrsJ/ANT1OX4nppxSR6E8zI8Cd5vo J5EXEvgr2g== -----END CERTIFICATE-----Generated at Sun Oct 11 13:48:55 2026 by rpki-client