$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: iOpXZuufrnj5k8YRXdXw2S4aJr8CFJ541X5clBHlsYo= Subject key identifier: 77:60:D7:9A:F5:5C:56:52:E6:8F:2E:DB:34:83:58:E3:B9:84:19:FC Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 18A18A275BE6879B5A2949A6404F7630B932BE7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 27 Signing time: Wed 13 May 2026 17:56:06 +0000 Manifest this update: Wed 13 May 2026 17:51:06 +0000 Manifest next update: Thu 14 May 2026 21:00:06 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: gOTuWgExmEpPusTSJ0w5eX2etAeHrFfBoJL9yuGMUOs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a1:8a:27:5b:e6:87:9b:5a:29:49:a6:40:4f:76:30:b9:32:be:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: May 13 17:51:06 2026 GMT Not After : May 14 21:00:06 2026 GMT Subject: CN=7760D79AF55C5652E68F2EDB348358E3B98419FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:a0:b7:fc:13:66:42:27:c8:61:4d:a9:b5: e3:ef:77:3c:38:e3:7a:5b:6e:98:73:53:12:c9:26: de:87:91:65:44:a1:6d:46:ad:66:dd:76:8e:0d:f6: 45:0c:44:e2:b7:75:08:ba:0d:e3:27:c3:14:83:78: e6:65:0f:f1:2f:ee:a9:9d:ac:11:ab:ee:a4:c8:95: f5:63:2a:56:b3:6b:72:c5:98:1d:13:09:6f:4e:a0: 23:6b:69:e7:93:ec:1e:07:cb:ad:7f:c5:f5:96:f2: dc:96:1a:52:69:23:49:eb:0f:65:41:56:b8:6e:13: 48:82:ed:d7:e3:35:bb:43:0e:99:50:14:bb:f3:48: 87:6a:57:fd:b9:0e:73:30:4d:d2:73:97:f0:8c:67: 97:da:58:ad:28:dc:00:b1:97:58:60:b3:93:b2:87: 9e:bd:a7:d4:0f:e5:ef:2b:1d:7a:dc:3a:87:63:dc: 5b:c4:72:24:e2:7e:4b:f8:0a:84:96:bc:74:fa:55: cf:8a:9f:4e:5f:d2:a2:07:45:49:91:6f:6a:21:36: 84:c6:3e:61:b2:32:54:8d:36:22:09:43:7f:b0:93: 68:77:95:1a:e4:53:68:85:8b:0a:cf:6b:39:b6:c4: 02:5e:9b:9a:f1:6e:09:32:3a:85:e8:b5:d6:a1:c2: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:60:D7:9A:F5:5C:56:52:E6:8F:2E:DB:34:83:58:E3:B9:84:19:FC X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:48:0b:05:f4:65:36:11:0b:26:3f:49:33:1f:ba:ee:e1:89: 6a:a9:04:fb:c2:19:89:a9:3a:0d:ff:d3:b5:fe:c1:c4:dc:d7: 6d:f8:98:c0:91:df:1c:5d:91:4a:4a:94:26:ae:b1:53:2f:d5: 3a:6b:a8:c3:d2:51:38:ae:a7:88:c6:3e:ad:f0:91:d8:28:16: 0e:ef:02:1d:57:e0:ae:e0:07:70:5c:2e:82:1f:cf:4e:c7:60: 2d:bf:cf:85:c2:87:c6:f0:c4:ee:4b:79:39:75:af:e7:54:05: 1f:95:b2:cc:1f:6a:05:8c:1a:64:39:df:e5:f2:01:de:f2:22: a0:24:01:61:21:4e:39:d1:f4:1d:e1:85:16:85:31:64:45:6f: 48:7d:eb:ec:70:8a:17:ec:af:77:d4:b0:97:54:12:d3:26:35: 30:8c:4b:18:56:0d:28:45:3a:6e:73:8b:ce:90:40:ec:6a:e5: 8b:2c:65:ab:7f:6f:0f:69:39:15:ab:23:91:75:74:5a:41:b0: fe:58:62:eb:7a:fa:06:89:33:3e:91:60:da:a8:a7:d8:df:53: a0:31:a3:b3:ff:c0:24:01:74:10:ff:6c:29:2c:c3:4e:f7:1e: 13:be:8b:7a:af:4b:22:03:5f:4f:c0:f3:a3:0f:32:b2:b3:de: cc:1c:24:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGKGKJ1vmh5taKUmmQE92MLkyvnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA1MTMxNzUxMDZaFw0yNjA1MTQyMTAwMDZaMDMxMTAvBgNV BAMTKDc3NjBENzlBRjU1QzU2NTJFNjhGMkVEQjM0ODM1OEUzQjk4NDE5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUqqC3/BNmQifIYU2ptePvdzw4 43pbbphzUxLJJt6HkWVEoW1GrWbddo4N9kUMROK3dQi6DeMnwxSDeOZlD/Ev7qmd rBGr7qTIlfVjKlaza3LFmB0TCW9OoCNraeeT7B4Hy61/xfWW8tyWGlJpI0nrD2VB VrhuE0iC7dfjNbtDDplQFLvzSIdqV/25DnMwTdJzl/CMZ5faWK0o3ACxl1hgs5Oy h569p9QP5e8rHXrcOodj3FvEciTifkv4CoSWvHT6Vc+Kn05f0qIHRUmRb2ohNoTG PmGyMlSNNiIJQ3+wk2h3lRrkU2iFiwrPazm2xAJem5rxbgkyOoXotdahwuIXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd2DXmvVcVlLmjy7bNINY47mEGfwwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakgLBfRlNhEL Jj9JMx+67uGJaqkE+8IZiak6Df/Ttf7BxNzXbfiYwJHfHF2RSkqUJq6xUy/VOmuo w9JROK6niMY+rfCR2CgWDu8CHVfgruAHcFwugh/PTsdgLb/PhcKHxvDE7kt5OXWv 51QFH5WyzB9qBYwaZDnf5fIB3vIioCQBYSFOOdH0HeGFFoUxZEVvSH3r7HCKF+yv d9Swl1QS0yY1MIxLGFYNKEU6bnOLzpBA7Grliyxlq39vD2k5FasjkXV0WkGw/lhi 63r6BokzPpFg2qin2N9ToDGjs//AJAF0EP9sKSzDTvceE76Leq9LIgNfT8Dzow8y srPezBwklg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:06 2026 by rpki-client