$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: 7NFaXcEnbXAz/R4vuPJc2RnvQFQ4s7OKUXIyh4bmLcM= Subject key identifier: 95:E7:13:24:CF:80:C4:E7:F3:19:1B:E6:C1:D5:3D:11:BB:D4:CC:40 Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 52D776561CC94FCA7BBF40B56284D598AFFFFF56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: A6 Signing time: Fri 25 Sep 2026 05:12:27 +0000 Manifest this update: Fri 25 Sep 2026 05:07:27 +0000 Manifest next update: Mon 28 Sep 2026 12:49:27 +0000 Files and hashes: 1: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: jpF3VfEmQvYkfJgwJujarlwgbP2jLBKD53XEgCceDbU=) 2: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) 3: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=) 4: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=) 5: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:76:56:1c:c9:4f:ca:7b:bf:40:b5:62:84:d5:98:af:ff:ff:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: Sep 25 05:07:27 2026 GMT Not After : Sep 28 12:49:27 2026 GMT Subject: CN=95E71324CF80C4E7F3191BE6C1D53D11BBD4CC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:d7:8d:4c:c9:65:8c:13:2b:57:51:5b:88: ff:a6:04:7c:bd:46:c3:13:af:f8:4f:3b:17:9a:20: f4:3c:4b:c6:f9:22:1e:9c:7d:bb:ad:80:63:6a:b9: ed:a7:68:11:d5:8f:42:4e:0a:a2:f2:f4:7a:4d:26: 46:c7:b9:92:69:df:90:5c:59:2b:55:f4:29:f6:99: 8b:40:d9:3f:e6:43:51:c4:27:b6:d5:a3:0d:5e:94: 06:d2:80:d3:34:02:13:e3:26:bc:ed:5e:f1:7f:64: bb:5a:5e:bd:e7:a2:5e:af:47:47:6c:64:f9:7a:80: 3a:e9:4a:cc:93:e3:d2:c4:e8:39:69:93:c0:26:2e: d4:ec:79:92:2d:33:fb:ac:4a:81:e6:a5:41:52:f6: f0:d4:25:4f:af:36:99:24:44:e5:df:1f:88:29:20: 90:96:96:a5:a3:17:67:20:0b:0e:56:a1:da:dc:6a: 54:dd:53:c2:65:83:70:f2:e6:3c:2d:56:5d:89:91: 88:69:0f:2b:87:9f:e8:a2:e0:42:40:10:2e:7f:57: fb:69:28:7b:21:f1:1d:59:3e:8b:e0:25:72:87:cf: 0b:ea:87:7d:6a:aa:72:67:4d:5e:13:a6:67:16:81: b3:39:9f:0d:f0:40:0d:5e:20:12:38:a7:6c:24:c2: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:13:24:CF:80:C4:E7:F3:19:1B:E6:C1:D5:3D:11:BB:D4:CC:40 X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2b:ce:91:d8:d4:3c:1e:7f:27:7f:1a:c0:c9:2b:1b:74:52: 9f:5d:7a:39:03:34:0d:fc:e3:09:f3:2a:fa:ba:6e:a2:31:ad: 0d:da:9a:7a:e7:3f:27:ef:44:c9:c0:53:d0:15:9c:48:d2:8a: 9d:52:da:a7:19:e1:55:7d:0d:08:14:06:65:c1:cb:ad:8a:f1: c5:eb:df:79:35:0f:ec:4b:26:73:87:d1:ae:85:92:db:49:75: 1e:89:bf:3f:09:1a:71:c9:0a:14:86:ad:61:f4:72:f1:61:6d: 0c:f0:23:e4:ee:a4:e4:40:60:76:90:e4:7b:97:a4:6b:e3:e3: bf:fa:b2:e5:3d:0c:5d:ce:04:e2:82:5a:44:ac:eb:5b:11:13: 3b:56:4c:0a:1a:88:c5:7b:ee:3a:b1:47:be:b0:a2:91:88:fa: 0a:ae:0e:c2:11:15:0e:21:97:34:e2:a3:7f:65:c1:d6:e6:02: 62:0c:3f:79:a7:18:83:29:4b:3a:6d:c6:35:70:f5:6a:b7:c7: 1b:72:50:80:3f:ee:9d:72:d8:36:3a:26:1f:4c:f9:f5:c6:d8: 16:cb:c4:da:8a:47:1a:ae:2d:98:b4:98:71:ac:6d:9c:98:a3: 39:6e:3b:bd:cf:76:ff:1b:d9:3d:59:5c:ce:cb:4a:b9:61:21: 88:5e:14:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUtd2VhzJT8p7v0C1YoTVmK///1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjA5MjUwNTA3MjdaFw0yNjA5MjgxMjQ5MjdaMDMxMTAvBgNV BAMTKDk1RTcxMzI0Q0Y4MEM0RTdGMzE5MUJFNkMxRDUzRDExQkJENENDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWteNTMlljBMrV1FbiP+mBHy9 RsMTr/hPOxeaIPQ8S8b5Ih6cfbutgGNque2naBHVj0JOCqLy9HpNJkbHuZJp35Bc WStV9Cn2mYtA2T/mQ1HEJ7bVow1elAbSgNM0AhPjJrztXvF/ZLtaXr3nol6vR0ds ZPl6gDrpSsyT49LE6Dlpk8AmLtTseZItM/usSoHmpUFS9vDUJU+vNpkkROXfH4gp IJCWlqWjF2cgCw5WodrcalTdU8Jlg3Dy5jwtVl2JkYhpDyuHn+ii4EJAEC5/V/tp KHsh8R1ZPovgJXKHzwvqh31qqnJnTV4TpmcWgbM5nw3wQA1eIBI4p2wkwhptAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlecTJM+AxOfzGRvmwdU9EbvUzEAwHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABivOkdjUPB5/ J38awMkrG3RSn116OQM0DfzjCfMq+rpuojGtDdqaeuc/J+9EycBT0BWcSNKKnVLa pxnhVX0NCBQGZcHLrYrxxevfeTUP7Esmc4fRroWS20l1Hom/PwkacckKFIatYfRy 8WFtDPAj5O6k5EBgdpDke5eka+Pjv/qy5T0MXc4E4oJaRKzrWxETO1ZMChqIxXvu OrFHvrCikYj6Cq4OwhEVDiGXNOKjf2XB1uYCYgw/eacYgylLOm3GNXD1arfHG3JQ gD/unXLYNjomH0z59cbYFsvE2opHGq4tmLSYcaxtnJijOW47vc92/xvZPVlczstK uWEhiF4Ukw== -----END CERTIFICATE-----Generated at Sat Sep 26 12:34:32 2026 by rpki-client