$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: vTtOi/9o5v32ZaezdL97iw9JokcqsnIAfkkmDE+tv8A= Subject key identifier: FD:9B:D5:83:E9:CF:09:97:B5:F2:2F:DE:12:E7:08:FC:94:46:AF:11 Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 4A8AE794E052963915721D02207B6B9F1868B608 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 17:13:28 +0000 Manifest this update: Thu 26 Mar 2026 17:08:28 +0000 Manifest next update: Fri 27 Mar 2026 20:16:28 +0000 Files and hashes: 1: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 2: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 3: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 4: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: CLil9wU4eDexz9dffdtkH9YkEJ0bGG4xV0tFaO3qYTY=) 5: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 6: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 7: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) 8: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 9: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 10: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 11: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:8a:e7:94:e0:52:96:39:15:72:1d:02:20:7b:6b:9f:18:68:b6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Mar 26 17:08:28 2026 GMT Not After : Mar 27 20:16:28 2026 GMT Subject: CN=FD9BD583E9CF0997B5F22FDE12E708FC9446AF11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:ca:b2:30:f0:a4:42:cc:cd:ce:86:d5:8d: 19:52:e3:bf:9c:25:e8:7d:d1:fd:b5:82:8b:02:0c: 66:b5:ea:b2:cc:71:db:6d:49:29:d4:3c:e5:79:3b: d5:6c:80:de:7e:c7:4a:e0:f6:b3:72:07:09:27:cf: 30:f6:1d:fc:2f:c2:90:54:40:b2:c4:82:1f:19:8d: bf:c7:f1:d8:2d:8b:65:a2:b1:2a:5f:01:00:f7:55: 75:96:4f:96:b2:9d:c8:e5:81:d3:f5:b2:a1:bf:da: 57:48:c3:af:c1:ef:dc:5c:5e:07:6c:e8:35:03:a3: f5:fb:7f:4c:82:0a:bd:cf:c5:4d:5f:a7:7a:89:a5: dd:bf:02:83:d6:5d:4d:2f:b5:36:ea:99:97:d7:53: 01:1b:aa:eb:23:1c:3b:9d:2c:fa:89:61:19:23:4c: ab:30:ad:80:f2:b8:ad:97:68:d2:9e:0b:94:a5:b7: 2f:11:ee:df:8d:4b:f4:5f:83:d9:92:3c:a6:4c:68: be:8f:e7:7f:8b:b1:1f:8d:aa:fd:33:7e:8c:1c:b2: c8:0e:cb:61:50:26:78:51:16:bd:36:72:92:91:0e: 96:b0:15:d0:61:97:0b:1f:1a:eb:f2:18:c6:10:f0: 17:02:89:1d:6e:79:59:2c:8d:9d:15:f7:ed:f0:c5: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9B:D5:83:E9:CF:09:97:B5:F2:2F:DE:12:E7:08:FC:94:46:AF:11 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:52:f4:fc:e5:e6:75:b9:10:98:b7:2e:c6:7b:89:9c:30:a2: e8:d8:5a:86:9c:1a:2d:9b:5c:5b:9d:59:d4:27:b1:c7:97:e0: 22:9b:07:4a:8c:e9:c7:00:b0:c6:ce:11:96:86:2a:9e:81:ba: 0e:ac:97:de:19:a9:f3:84:16:f2:b8:8f:58:ee:ab:32:55:7d: 0a:1b:fe:4b:cb:25:58:eb:cf:d5:55:7d:d6:e5:1e:a8:1a:5a: 9c:a0:f8:b6:f5:df:7b:61:9b:ac:32:12:ef:ca:00:82:1b:9c: d8:f1:c6:ba:a6:27:36:3c:d9:1f:d2:61:7d:9d:ac:d9:74:5e: b3:53:ee:2e:cc:e0:ca:a5:d8:d6:df:ba:a2:8c:79:a4:34:b8: b8:7a:f1:5b:bb:7e:11:57:45:9f:79:5e:f4:91:61:63:35:d9: 12:dd:af:2c:df:48:a0:f2:ea:5c:2f:96:07:d6:97:fa:9d:7e: 26:9e:62:7c:5d:cd:d9:97:d1:f7:62:e8:cb:34:a3:bd:77:c4: ec:ee:28:a6:62:2c:42:ba:8c:29:fb:4c:77:f2:15:c2:b8:c3: e8:c5:0d:8c:cf:26:25:6c:22:42:6c:83:c0:39:10:4f:20:68: 8e:3d:43:7d:22:27:ba:3a:83:70:5f:b6:f1:91:11:96:96:3c: e3:cb:08:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSornlOBSljkVch0CIHtrnxhotggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjAzMjYxNzA4MjhaFw0yNjAzMjcyMDE2MjhaMDMxMTAvBgNV BAMTKEZEOUJENTgzRTlDRjA5OTdCNUYyMkZERTEyRTcwOEZDOTQ0NkFGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5sqyMPCkQszNzobVjRlS47+c Jeh90f21gosCDGa16rLMcdttSSnUPOV5O9VsgN5+x0rg9rNyBwknzzD2HfwvwpBU QLLEgh8Zjb/H8dgti2WisSpfAQD3VXWWT5ayncjlgdP1sqG/2ldIw6/B79xcXgds 6DUDo/X7f0yCCr3PxU1fp3qJpd2/AoPWXU0vtTbqmZfXUwEbqusjHDudLPqJYRkj TKswrYDyuK2XaNKeC5Slty8R7t+NS/Rfg9mSPKZMaL6P53+LsR+Nqv0zfowcssgO y2FQJnhRFr02cpKRDpawFdBhlwsfGuvyGMYQ8BcCiR1ueVksjZ0V9+3wxZYLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/ZvVg+nPCZe18i/eEucI/JRGrxEwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVL0/OXmdbkQ mLcuxnuJnDCi6NhahpwaLZtcW51Z1Cexx5fgIpsHSozpxwCwxs4RloYqnoG6DqyX 3hmp84QW8riPWO6rMlV9Chv+S8slWOvP1VV91uUeqBpanKD4tvXfe2GbrDIS78oA ghuc2PHGuqYnNjzZH9JhfZ2s2XRes1PuLszgyqXY1t+6oox5pDS4uHrxW7t+EVdF n3le9JFhYzXZEt2vLN9IoPLqXC+WB9aX+p1+Jp5ifF3N2ZfR92LoyzSjvXfE7O4o pmIsQrqMKftMd/IVwrjD6MUNjM8mJWwiQmyDwDkQTyBojj1DfSInujqDcF+28ZER lpY848sINw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:34 2026 by rpki-client