$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: ynLPnHyojjX1GHyAG9/orwXlBb9AoBU3Iz8bctgKFeY= Subject key identifier: 37:1C:DF:14:3E:A6:1E:1B:85:D7:4D:C0:CA:60:16:DF:3A:94:0E:21 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 08944E603CD72AADFD577CE5953E125B80FFC8AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: C9 Signing time: Sun 11 Oct 2026 04:35:13 +0000 Manifest this update: Sun 11 Oct 2026 04:30:13 +0000 Manifest next update: Wed 14 Oct 2026 12:33:13 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: chCqwZpo9wGk1ae4Lk5izKQ/mLoTbK0gUeYQfQ0cQNE=) 2: 323430343a653863303a3a2f33322d3332203d3e20313339303930.roa (hash: 5oz//eZO/26udoPVEo7M+cH2yOaR6/BK884dNaQEd/4=) 3: 3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (hash: vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 12:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:94:4e:60:3c:d7:2a:ad:fd:57:7c:e5:95:3e:12:5b:80:ff:c8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Oct 11 04:30:13 2026 GMT Not After : Oct 14 12:33:13 2026 GMT Subject: CN=371CDF143EA61E1B85D74DC0CA6016DF3A940E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:2c:a8:6d:1e:e6:83:5c:e4:1f:2a:fd:99: 1f:ef:3b:45:93:56:d6:cb:ef:72:08:fc:de:47:be: 6e:d9:1d:bc:b5:1a:c5:14:75:3e:5a:67:40:17:06: bb:8f:6f:0f:89:64:d9:70:28:3e:fa:6a:af:8f:90: 47:46:58:60:ec:49:fd:e9:66:28:df:6b:d3:25:cc: 7c:fa:b4:50:0c:a2:54:4a:e6:02:a2:6f:26:ac:67: d8:bb:1e:27:83:0c:2e:9e:fb:fd:79:f8:1e:98:24: 3d:83:9a:9f:01:f0:af:eb:3f:14:a6:e5:8f:72:61: 0d:4d:46:49:4d:14:f8:64:44:73:c4:af:2f:14:24: 0e:18:a0:0c:d5:29:ef:c7:92:99:db:37:5d:6e:79: 7d:15:4c:79:a4:a2:6e:46:40:7f:4b:32:b8:17:e1: 77:c8:7a:cb:73:83:03:29:c3:ec:57:8e:f2:9d:47: b5:84:a0:04:0e:d7:ec:a1:ad:0c:a6:45:a1:c5:02: d1:d8:55:ac:d2:45:e2:bb:fd:9e:89:cd:99:c9:d6: 35:99:86:ae:61:aa:56:6d:0f:81:32:45:cb:9e:1b: 09:6c:ba:90:78:ad:22:f0:65:4f:37:5c:fc:f8:1f: 73:11:3f:9d:7f:ad:5e:16:42:03:93:a8:81:92:1a: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1C:DF:14:3E:A6:1E:1B:85:D7:4D:C0:CA:60:16:DF:3A:94:0E:21 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:12:77:cc:31:67:90:ff:39:1a:6c:11:b7:09:b3:8b:08:58: c5:53:24:75:97:d5:2a:50:c9:04:d0:cd:8b:5f:8c:86:af:84: 27:1a:7a:01:80:49:92:6f:c5:ab:37:6e:ff:52:40:4f:08:c3: c8:a1:90:9c:da:b3:18:a2:ad:c3:68:ae:5e:d5:4d:dc:05:da: 8d:64:f2:28:47:eb:7d:97:ba:93:65:19:cb:cc:90:8c:8a:0a: 5f:a5:58:05:3d:7a:15:b3:a0:f5:b9:f5:b7:3b:32:4b:31:0d: d0:14:33:c1:ef:28:87:d2:4a:67:46:68:e2:06:be:d8:a1:5b: 64:50:10:c1:fe:03:13:c8:c5:04:d5:18:16:52:2b:e0:28:9a: df:e6:9b:6a:d4:3c:63:b6:d8:ca:93:e1:3d:8f:c4:65:39:45: 4d:90:36:85:9f:b7:bf:f5:4e:63:21:53:39:42:7d:4e:b8:ae: 3c:f1:41:97:73:b9:d1:ac:03:3f:1b:93:27:5c:22:c4:dd:84: d0:b1:1c:e9:85:b1:73:96:61:0b:81:9e:54:b4:6c:d2:d3:17: e7:e5:18:8b:ee:a0:4d:91:fd:ba:71:56:c9:4a:8d:37:9f:ce: 29:25:3e:4d:9f:1f:cc:ff:58:96:6b:76:59:61:d9:5d:75:36: 6d:c6:17:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCJROYDzXKq39V3zllT4SW4D/yK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjEwMTEwNDMwMTNaFw0yNjEwMTQxMjMzMTNaMDMxMTAvBgNV BAMTKDM3MUNERjE0M0VBNjFFMUI4NUQ3NERDMENBNjAxNkRGM0E5NDBFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaiyobR7mg1zkHyr9mR/vO0WT VtbL73II/N5Hvm7ZHby1GsUUdT5aZ0AXBruPbw+JZNlwKD76aq+PkEdGWGDsSf3p Zijfa9MlzHz6tFAMolRK5gKibyasZ9i7HieDDC6e+/15+B6YJD2Dmp8B8K/rPxSm 5Y9yYQ1NRklNFPhkRHPEry8UJA4YoAzVKe/HkpnbN11ueX0VTHmkom5GQH9LMrgX 4XfIestzgwMpw+xXjvKdR7WEoAQO1+yhrQymRaHFAtHYVazSReK7/Z6JzZnJ1jWZ hq5hqlZtD4EyRcueGwlsupB4rSLwZU83XPz4H3MRP51/rV4WQgOTqIGSGpMDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNxzfFD6mHhuF103AymAW3zqUDiEwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRJ3zDFnkP85 GmwRtwmziwhYxVMkdZfVKlDJBNDNi1+Mhq+EJxp6AYBJkm/Fqzdu/1JATwjDyKGQ nNqzGKKtw2iuXtVN3AXajWTyKEfrfZe6k2UZy8yQjIoKX6VYBT16FbOg9bn1tzsy SzEN0BQzwe8oh9JKZ0Zo4ga+2KFbZFAQwf4DE8jFBNUYFlIr4Cia3+abatQ8Y7bY ypPhPY/EZTlFTZA2hZ+3v/VOYyFTOUJ9TriuPPFBl3O50awDPxuTJ1wixN2E0LEc 6YWxc5ZhC4GeVLRs0tMX5+UYi+6gTZH9unFWyUqNN5/OKSU+TZ8fzP9Ylmt2WWHZ XXU2bcYX9g== -----END CERTIFICATE-----Generated at Mon Oct 12 08:44:32 2026 by rpki-client