$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: GJs+zuqCDx3XuLYk4ANBo4V80YujlHfZ/6e5nRN34WE= Subject key identifier: C5:09:DD:26:40:39:DB:6A:3D:B5:ED:A8:20:AC:5E:5C:F2:3C:F6:48 Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 41F0A834C4588AE38ED051D71960B0EE437F0815 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: F8 Signing time: Thu 23 Jul 2026 21:44:38 +0000 Manifest this update: Thu 23 Jul 2026 21:39:38 +0000 Manifest next update: Sat 25 Jul 2026 01:28:38 +0000 Files and hashes: 1: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 2: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 3: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 4: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 5: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 6: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 7: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 8: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 9: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 10: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) 11: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: mtN3uGw+9epCCCBogzF5zjZy83tkVRCf+W7udWI5Ul4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f0:a8:34:c4:58:8a:e3:8e:d0:51:d7:19:60:b0:ee:43:7f:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jul 23 21:39:38 2026 GMT Not After : Jul 25 01:28:38 2026 GMT Subject: CN=C509DD264039DB6A3DB5EDA820AC5E5CF23CF648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:45:9a:44:85:51:c1:cd:58:6f:ac:af:bb: 59:66:61:54:76:37:5f:e1:dc:40:c2:06:1a:be:86: c7:12:e0:11:ac:7d:23:e9:bd:34:84:d5:09:67:5c: be:7f:06:c4:e8:97:15:45:4a:1f:60:dc:49:83:50: 53:c2:5e:83:0c:33:27:5c:65:fc:8e:40:b0:10:fe: f7:5b:da:2f:d2:6e:5b:ca:fd:e6:ec:6f:58:fd:fa: 3e:7a:db:6a:a8:fa:18:c2:a5:9d:69:2c:dc:ee:9f: 47:c8:e6:e0:89:f2:55:a0:ee:80:a0:7e:48:86:b9: 08:72:d4:cf:67:d6:1c:11:dd:a3:45:20:43:b4:08: c9:6e:49:21:ad:c9:72:b0:be:60:dc:d5:5a:ef:b6: 0a:a6:2e:33:cb:c9:33:93:c6:77:c1:a2:ae:48:ce: e1:55:b8:bc:fb:8d:2a:b1:e7:91:1a:3f:c9:57:a4: 8a:a6:db:80:d0:d0:01:dd:c1:c1:92:b4:25:6d:51: 76:96:90:b4:2e:e4:a6:19:06:5f:81:ff:f2:18:c8: de:7d:fb:38:55:e6:85:8d:b2:cc:8b:50:82:71:84: 8f:87:29:18:22:b2:de:74:d3:ec:d0:a5:2e:ff:ac: 0e:df:2e:fe:e1:13:3e:31:d5:dc:20:2b:f0:97:d3: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:DD:26:40:39:DB:6A:3D:B5:ED:A8:20:AC:5E:5C:F2:3C:F6:48 X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ed:cc:73:63:de:60:21:5c:f9:2c:55:9f:6b:60:13:6a:1f: 94:3c:86:d2:ef:bb:2c:b2:f0:9c:95:2f:62:4c:10:5d:94:61: 47:77:78:90:bb:2f:48:de:d8:b9:1f:07:a7:2d:6b:35:77:9b: ee:cd:89:5b:a9:63:c2:c7:c2:cf:46:aa:81:5b:8c:b7:10:eb: e2:c9:d1:9b:fb:2a:29:d1:7e:97:7a:8a:f9:39:c6:de:46:30: 24:1e:99:ee:1f:47:e3:0e:e8:84:71:08:de:35:2e:a5:a6:2e: e5:e1:f2:bf:a3:d2:8c:44:f6:60:99:42:b4:cb:9f:78:b7:59: cb:8c:de:8e:27:f3:60:d3:6b:5e:b7:90:fa:4c:16:d4:dc:d6: 6f:50:76:49:34:51:d9:ab:29:3b:b9:57:b4:3a:90:4b:81:35: fd:ba:47:49:23:5b:95:f9:17:de:d8:b6:79:cc:f6:a6:dd:43: 17:af:26:f0:bd:9b:ad:59:2f:83:07:2e:43:32:d2:45:83:5f: 55:50:2e:cb:d4:41:65:68:9e:5c:b8:7d:a9:a8:6b:b9:fa:ce: 1d:bb:e3:93:f5:bf:d5:4c:18:8a:28:27:eb:14:39:f3:43:d5: 5a:aa:92:87:60:b1:d0:09:b4:47:ca:10:45:e6:9f:bc:e7:bf: 81:d5:ce:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQfCoNMRYiuOO0FHXGWCw7kN/CBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjA3MjMyMTM5MzhaFw0yNjA3MjUwMTI4MzhaMDMxMTAvBgNV BAMTKEM1MDlERDI2NDAzOURCNkEzREI1RURBODIwQUM1RTVDRjIzQ0Y2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AEWaRIVRwc1Yb6yvu1lmYVR2 N1/h3EDCBhq+hscS4BGsfSPpvTSE1QlnXL5/BsTolxVFSh9g3EmDUFPCXoMMMydc ZfyOQLAQ/vdb2i/SblvK/ebsb1j9+j5622qo+hjCpZ1pLNzun0fI5uCJ8lWg7oCg fkiGuQhy1M9n1hwR3aNFIEO0CMluSSGtyXKwvmDc1VrvtgqmLjPLyTOTxnfBoq5I zuFVuLz7jSqx55EaP8lXpIqm24DQ0AHdwcGStCVtUXaWkLQu5KYZBl+B//IYyN59 +zhV5oWNssyLUIJxhI+HKRgist500+zQpS7/rA7fLv7hEz4x1dwgK/CX02MrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxQndJkA522o9te2oIKxeXPI89kgwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu3Mc2PeYCFc +SxVn2tgE2oflDyG0u+7LLLwnJUvYkwQXZRhR3d4kLsvSN7YuR8Hpy1rNXeb7s2J W6ljwsfCz0aqgVuMtxDr4snRm/sqKdF+l3qK+TnG3kYwJB6Z7h9H4w7ohHEI3jUu paYu5eHyv6PSjET2YJlCtMufeLdZy4zejifzYNNrXreQ+kwW1NzWb1B2STRR2asp O7lXtDqQS4E1/bpHSSNblfkX3ti2ecz2pt1DF68m8L2brVkvgwcuQzLSRYNfVVAu y9RBZWieXLh9qahrufrOHbvjk/W/1UwYiign6xQ580PVWqqSh2Cx0Am0R8oQReaf vOe/gdXO5A== -----END CERTIFICATE-----Generated at Fri Jul 24 14:33:36 2026 by rpki-client