$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: 8JhdFXhOgPSHl45iAr8B0SLxIf5M60BhoP3eqzYsfuY= Subject key identifier: 49:E1:7D:12:86:88:39:6A:94:B4:99:8B:84:C4:AA:89:26:23:31:23 Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 5F3D15A3391F707B9B302CEBD8E7BC37521983EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: 98 Signing time: Wed 13 May 2026 07:26:02 +0000 Manifest this update: Wed 13 May 2026 07:21:02 +0000 Manifest next update: Thu 14 May 2026 10:42:02 +0000 Files and hashes: 1: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 2: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 3: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: +vd1k+hbi1rKQImB5/MhsHauBxIKz2lg6Rb9S+ahlcM=) 4: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 5: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 6: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 7: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) 8: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 9: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 10: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 11: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3d:15:a3:39:1f:70:7b:9b:30:2c:eb:d8:e7:bc:37:52:19:83:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: May 13 07:21:02 2026 GMT Not After : May 14 10:42:02 2026 GMT Subject: CN=49E17D128688396A94B4998B84C4AA8926233123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:0d:8c:0a:b7:cd:ec:8f:bb:0d:d8:80:3f: 7d:1a:31:c4:5c:ae:0e:a1:b7:e3:6a:39:7b:65:97: 27:65:b7:83:29:0f:49:cd:76:f2:92:a4:80:f2:94: 0c:ae:75:12:44:9b:2d:41:48:ca:3d:02:c8:1c:04: aa:b9:dc:27:f4:44:9c:f8:ba:59:fc:80:cc:8d:34: d9:d4:40:85:15:dc:ea:03:3a:3e:ca:7a:f4:8f:21: 5c:7d:32:52:6d:68:bc:fa:d0:dc:b3:e6:17:c5:7b: 66:3b:bf:3e:e8:b9:07:18:db:ac:a0:eb:9e:b0:36: 77:16:81:20:57:c0:ff:4c:29:4b:a4:65:b0:98:5d: df:a3:74:77:be:b6:44:2c:26:88:2b:00:79:d3:14: 92:6b:0b:d2:eb:cf:6b:7f:44:c0:d8:44:31:48:c1: 20:3d:29:4d:63:14:93:12:51:6e:b4:8b:53:2f:57: eb:33:f4:12:57:f0:f8:b6:45:1f:16:88:63:00:b0: e1:4a:fa:85:ff:62:ac:b6:f0:41:5b:56:fe:2d:b9: b2:02:48:64:41:b1:11:7d:1a:3d:9a:b5:cc:0d:f3: 2b:44:e5:8a:be:a6:4c:c8:87:c5:81:75:96:dd:5c: 30:9d:b0:38:f3:7e:d1:bf:ac:88:b5:51:9c:9e:e4: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:7D:12:86:88:39:6A:94:B4:99:8B:84:C4:AA:89:26:23:31:23 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:43:43:0a:7a:be:70:07:47:6a:2b:db:b7:dd:51:6c:e6:98: c0:ba:d0:2d:b0:96:7c:40:1a:3f:1c:c4:85:72:60:c6:a2:bb: 37:7b:e5:e6:eb:37:4d:b5:f5:70:0d:c4:ca:33:66:42:ed:31: 39:e5:0f:46:57:2c:00:59:8c:ec:b8:1e:ef:cb:fb:50:01:21: a3:44:26:f7:32:79:6f:c2:c5:08:b9:8f:f8:9c:8f:e6:c9:a1: 40:ff:21:a9:00:8b:de:8a:75:32:a9:6a:af:00:54:34:1b:0c: a2:54:28:97:f5:6d:3f:28:58:20:83:e0:1a:8c:d7:a8:10:1b: 1c:b4:b5:bf:65:e5:d0:08:f0:6e:33:50:1e:4f:45:54:e6:4d: 34:9f:4a:40:67:4a:86:2a:1f:19:26:1f:72:a9:27:14:f3:04: ee:62:01:92:98:a1:97:f5:1b:af:77:fb:9f:f3:a1:29:98:1d: 76:46:31:04:96:0c:d7:7b:48:ce:b5:ac:af:e1:5c:e3:8f:30: 8f:84:58:08:af:7c:e8:9d:21:49:1b:67:72:1b:cd:08:be:2c: 43:47:e6:95:ae:f3:e5:73:c6:ff:24:2e:38:16:00:60:50:ec: f2:20:c7:3b:87:fa:a2:07:6b:b3:32:eb:7c:7c:b4:4d:43:25: bc:47:53:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXz0VozkfcHubMCzr2Oe8N1IZg+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjA1MTMwNzIxMDJaFw0yNjA1MTQxMDQyMDJaMDMxMTAvBgNV BAMTKDQ5RTE3RDEyODY4ODM5NkE5NEI0OTk4Qjg0QzRBQTg5MjYyMzMxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25w2MCrfN7I+7DdiAP30aMcRc rg6ht+NqOXtllydlt4MpD0nNdvKSpIDylAyudRJEmy1BSMo9AsgcBKq53Cf0RJz4 uln8gMyNNNnUQIUV3OoDOj7KevSPIVx9MlJtaLz60Nyz5hfFe2Y7vz7ouQcY26yg 656wNncWgSBXwP9MKUukZbCYXd+jdHe+tkQsJogrAHnTFJJrC9Lrz2t/RMDYRDFI wSA9KU1jFJMSUW60i1MvV+sz9BJX8Pi2RR8WiGMAsOFK+oX/Yqy28EFbVv4tubIC SGRBsRF9Gj2atcwN8ytE5Yq+pkzIh8WBdZbdXDCdsDjzftG/rIi1UZye5F+tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSeF9EoaIOWqUtJmLhMSqiSYjMSMwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkNDCnq+cAdH aivbt91RbOaYwLrQLbCWfEAaPxzEhXJgxqK7N3vl5us3TbX1cA3EyjNmQu0xOeUP RlcsAFmM7Lge78v7UAEho0Qm9zJ5b8LFCLmP+JyP5smhQP8hqQCL3op1MqlqrwBU NBsMolQol/VtPyhYIIPgGozXqBAbHLS1v2Xl0AjwbjNQHk9FVOZNNJ9KQGdKhiof GSYfcqknFPME7mIBkpihl/Ubr3f7n/OhKZgddkYxBJYM13tIzrWsr+Fc448wj4RY CK986J0hSRtnchvNCL4sQ0fmla7z5XPG/yQuOBYAYFDs8iDHO4f6ogdrszLrfHy0 TUMlvEdT9g== -----END CERTIFICATE-----Generated at Wed May 13 14:38:37 2026 by rpki-client