$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: vkL4WpV3DrMTqo4NqhLi5oLroMYUOvTLIN6y6bOq10U= Subject key identifier: C0:6A:DC:BD:34:2B:42:62:8B:BD:6C:D3:00:5F:40:91:AB:1F:B5:21 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 346BABDD8712845E5FF6FED8CCE9955B713B6FFC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 87 Signing time: Fri 24 Jul 2026 07:05:35 +0000 Manifest this update: Fri 24 Jul 2026 07:00:35 +0000 Manifest next update: Sat 25 Jul 2026 08:02:35 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: yn7JflKZosUft3VUw1P4kWAHjjRqFxAu9xuXhZz47ek=) 2: 323430343a653863303a3a2f33322d3332203d3e20313339303930.roa (hash: 5oz//eZO/26udoPVEo7M+cH2yOaR6/BK884dNaQEd/4=) 3: 3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (hash: vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6b:ab:dd:87:12:84:5e:5f:f6:fe:d8:cc:e9:95:5b:71:3b:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Jul 24 07:00:35 2026 GMT Not After : Jul 25 08:02:35 2026 GMT Subject: CN=C06ADCBD342B42628BBD6CD3005F4091AB1FB521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:95:ba:67:c7:22:98:74:f0:cf:b9:ed:49: c3:5d:85:e4:38:27:31:03:f5:5f:2f:c8:bc:66:d3: c9:cd:66:8e:f2:3c:4e:64:60:9e:be:2d:00:1e:9e: e0:a5:86:ff:fd:e7:be:d9:ce:64:9f:ba:8d:33:76: 27:87:54:7d:e8:0e:06:cb:77:03:80:9b:b9:27:ac: 29:18:80:d8:0b:a4:e5:cc:43:04:b4:6d:00:6c:c2: fd:27:df:a5:ea:86:ef:0d:b5:16:c4:1b:08:f2:a2: aa:40:96:88:ef:9f:ac:4a:e0:7f:5a:32:2d:4f:ee: 43:49:99:28:35:7b:27:3a:93:61:1b:a4:79:86:9b: a0:a3:e2:21:2a:5b:cf:05:48:ed:89:f9:74:5f:88: b2:e6:c9:57:ea:22:93:6c:17:93:e8:ce:49:42:50: 38:05:bb:1b:22:c7:51:bb:3d:4e:20:c0:6f:8d:54: 00:6e:24:0d:fc:17:84:99:b8:4c:fe:bb:f0:8f:cf: 48:6f:91:fa:9b:d2:55:99:db:4f:b4:aa:6f:e6:a5: d0:0e:db:56:14:9f:f6:8d:ee:fa:11:b4:9a:8b:f9: 91:a9:84:f7:72:47:cc:fb:64:0d:f7:81:d7:c0:cb: ad:e2:ef:69:2b:e7:31:6d:15:a7:82:b8:9b:79:ac: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6A:DC:BD:34:2B:42:62:8B:BD:6C:D3:00:5F:40:91:AB:1F:B5:21 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:48:4e:eb:d8:a6:2e:b7:3f:4e:de:86:94:e3:51:3b:13:81: ad:e8:35:14:75:b7:6b:6a:57:b7:92:62:61:7a:34:55:cb:03: c6:d0:59:a4:b0:fc:b4:d1:c0:28:fc:bc:6a:07:43:5e:0b:d1: ac:18:13:04:53:a0:2a:ce:8e:3b:7a:07:6f:05:bd:13:ea:4c: 94:a2:d6:3e:28:6f:7d:1d:7d:56:dd:36:3e:7d:bd:46:b1:d7: 07:cc:36:53:08:8f:b0:63:7e:b4:6f:7d:3f:db:6b:37:b3:d8: da:d9:63:a5:b8:a3:24:86:9b:58:93:dc:c3:46:4f:0a:06:85: fc:9f:7d:6a:c2:5e:a8:5f:7e:d5:31:cb:1a:10:91:16:c0:4b: 8e:62:b0:07:f7:cc:1b:35:b9:a4:67:76:79:52:6a:6f:4a:9e: 28:5d:f8:1c:71:26:9e:0a:26:f2:05:aa:07:b3:24:1e:85:4c: f0:22:f9:22:b6:2c:b1:51:bf:0e:b3:b1:91:3d:7e:e8:46:15: 8f:5e:71:8f:b3:f3:e9:7e:7c:20:dc:da:db:1c:a1:ed:6a:fc: c8:7a:4b:9a:1b:4b:9f:c5:84:18:59:9f:c5:50:b8:b0:86:4d: 93:1b:9e:61:c3:2e:6b:62:5a:fd:22:6a:46:f6:10:10:ab:59: a2:aa:f7:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNGur3YcShF5f9v7YzOmVW3E7b/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA3MjQwNzAwMzVaFw0yNjA3MjUwODAyMzVaMDMxMTAvBgNV BAMTKEMwNkFEQ0JEMzQyQjQyNjI4QkJENkNEMzAwNUY0MDkxQUIxRkI1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC65W6Z8cimHTwz7ntScNdheQ4 JzED9V8vyLxm08nNZo7yPE5kYJ6+LQAenuClhv/9577ZzmSfuo0zdieHVH3oDgbL dwOAm7knrCkYgNgLpOXMQwS0bQBswv0n36Xqhu8NtRbEGwjyoqpAlojvn6xK4H9a Mi1P7kNJmSg1eyc6k2EbpHmGm6Cj4iEqW88FSO2J+XRfiLLmyVfqIpNsF5PozklC UDgFuxsix1G7PU4gwG+NVABuJA38F4SZuEz+u/CPz0hvkfqb0lWZ20+0qm/mpdAO 21YUn/aN7voRtJqL+ZGphPdyR8z7ZA33gdfAy63i72kr5zFtFaeCuJt5rJtlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwGrcvTQrQmKLvWzTAF9AkasftSEwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0hO69imLrc/ Tt6GlONROxOBreg1FHW3a2pXt5JiYXo0VcsDxtBZpLD8tNHAKPy8agdDXgvRrBgT BFOgKs6OO3oHbwW9E+pMlKLWPihvfR19Vt02Pn29RrHXB8w2UwiPsGN+tG99P9tr N7PY2tljpbijJIabWJPcw0ZPCgaF/J99asJeqF9+1THLGhCRFsBLjmKwB/fMGzW5 pGd2eVJqb0qeKF34HHEmngom8gWqB7MkHoVM8CL5IrYssVG/DrOxkT1+6EYVj15x j7Pz6X58INza2xyh7Wr8yHpLmhtLn8WEGFmfxVC4sIZNkxueYcMua2Ja/SJqRvYQ EKtZoqr39w== -----END CERTIFICATE-----Generated at Fri Jul 24 08:27:00 2026 by rpki-client