$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: gXpmPcpelKRVfwjW7EVG2/pq8E5MFJ1jhdlT5Xk95bo= Subject key identifier: 02:91:32:E0:3E:3D:F8:D3:CE:79:2C:9D:7D:3D:3A:65:53:74:CB:EE Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 2BD071667B8FD8ED043FAB868EF455E7F2B6EA70 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: 0A Signing time: Tue 12 May 2026 20:35:45 +0000 Manifest this update: Tue 12 May 2026 20:30:45 +0000 Manifest next update: Wed 13 May 2026 20:55:45 +0000 Files and hashes: 1: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) 2: 3131352e33312e36342e302f32322d3232203d3e203538353431.roa (hash: 09WuQ09lWRUKOZWiZwL14VPTUc9+Moiy9vuG05gPLRo=) 3: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: ejmLzxEgF473N6r7IXZgUdN2AK5FLmr8Stqq4cN1cXA=) 4: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d0:71:66:7b:8f:d8:ed:04:3f:ab:86:8e:f4:55:e7:f2:b6:ea:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: May 12 20:30:45 2026 GMT Not After : May 13 20:55:45 2026 GMT Subject: CN=029132E03E3DF8D3CE792C9D7D3D3A655374CBEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:6d:d9:b1:18:cb:74:67:1d:e9:c6:d3:e4: 8c:e9:e6:1a:3f:46:92:ff:a4:19:86:4e:16:e4:7a: 31:b2:9b:88:66:60:b1:5f:3e:19:af:ad:cf:5d:ac: 80:00:f6:d5:0c:91:6a:a6:20:17:aa:c9:c0:96:8b: 45:d6:30:0a:58:13:c5:17:9f:b2:55:f2:17:b9:a6: 0a:36:8a:00:37:ec:52:a1:d5:b0:50:50:82:52:d7: 89:01:41:76:7d:a4:41:6d:05:41:ed:b0:c8:95:32: 0b:cd:d6:47:19:ef:cc:1c:0e:b0:e5:34:84:e9:eb: 02:f4:53:cd:eb:2e:05:79:1a:f1:6c:e2:e1:59:db: 68:b2:f8:01:98:08:84:92:6a:c2:4c:70:74:26:bf: 3f:9b:6b:66:e8:32:b9:0a:6f:d5:56:50:9c:4c:6c: 03:06:cd:76:2a:0b:8e:d7:65:c6:bc:f6:3c:86:17: 3f:da:7a:83:05:24:15:0d:9d:83:f4:de:ad:ed:31: 1e:63:a9:cf:b8:97:43:66:96:5a:1c:7a:fa:4b:2c: 13:61:b7:65:7e:36:71:6e:f5:1b:07:49:f0:f9:10: b1:e9:e8:c5:c0:29:e6:99:b4:3b:db:18:3f:1d:f2: 34:41:a3:df:29:7e:f5:67:58:08:82:a7:13:bf:83: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:91:32:E0:3E:3D:F8:D3:CE:79:2C:9D:7D:3D:3A:65:53:74:CB:EE X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:7b:a5:0e:1f:eb:83:f0:e1:fd:51:7f:20:35:14:ee:de:98: b9:ba:13:6f:0c:aa:20:7e:52:e9:f1:06:cf:d2:24:90:81:a2: 19:5f:d6:24:3e:96:1d:59:b8:09:20:7c:d1:0f:06:c4:97:31: 52:6d:c9:3d:6f:47:a1:9b:54:5d:92:3c:d4:d5:97:51:a3:4f: 29:1d:53:ca:92:ce:20:3c:24:70:9b:d8:73:87:8c:fd:81:fd: 8d:90:48:6c:fd:67:8b:35:81:65:80:fb:b4:ad:2c:48:f5:51: 65:da:79:1e:4d:30:2e:46:b0:4e:16:f7:bc:dc:cb:a3:f1:a5: 3b:dd:0d:24:fe:21:1a:03:11:02:1e:9f:eb:e1:d9:7b:59:04: 5a:6a:a1:b1:99:f8:a4:78:33:43:20:63:da:b4:bd:f3:5c:ed: e2:06:36:e0:5f:43:2d:fc:72:d3:2a:75:cb:75:31:66:12:b1: 75:5d:e5:6b:2e:43:53:52:11:cb:8e:61:00:88:ad:ed:64:93: fa:a3:00:a4:39:33:6a:37:cb:72:4c:b0:57:b0:b1:8d:b3:65: 96:3e:d9:e3:3d:51:fb:d5:f8:2d:cd:1a:ee:c5:9c:2b:c4:39: f4:52:39:92:20:e2:02:a5:41:06:23:d5:06:d5:e0:dc:59:3b: 6d:2a:60:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK9BxZnuP2O0EP6uGjvRV5/K26nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjA1MTIyMDMwNDVaFw0yNjA1MTMyMDU1NDVaMDMxMTAvBgNV BAMTKDAyOTEzMkUwM0UzREY4RDNDRTc5MkM5RDdEM0QzQTY1NTM3NENCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6C23ZsRjLdGcd6cbT5Izp5ho/ RpL/pBmGThbkejGym4hmYLFfPhmvrc9drIAA9tUMkWqmIBeqycCWi0XWMApYE8UX n7JV8he5pgo2igA37FKh1bBQUIJS14kBQXZ9pEFtBUHtsMiVMgvN1kcZ78wcDrDl NITp6wL0U83rLgV5GvFs4uFZ22iy+AGYCISSasJMcHQmvz+ba2boMrkKb9VWUJxM bAMGzXYqC47XZca89jyGFz/aeoMFJBUNnYP03q3tMR5jqc+4l0NmllocevpLLBNh t2V+NnFu9RsHSfD5ELHp6MXAKeaZtDvbGD8d8jRBo98pfvVnWAiCpxO/g3aZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUApEy4D49+NPOeSydfT06ZVN0y+4wHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3XulDh/rg/Dh /VF/IDUU7t6YuboTbwyqIH5S6fEGz9IkkIGiGV/WJD6WHVm4CSB80Q8GxJcxUm3J PW9HoZtUXZI81NWXUaNPKR1TypLOIDwkcJvYc4eM/YH9jZBIbP1nizWBZYD7tK0s SPVRZdp5Hk0wLkawThb3vNzLo/GlO90NJP4hGgMRAh6f6+HZe1kEWmqhsZn4pHgz QyBj2rS981zt4gY24F9DLfxy0yp1y3UxZhKxdV3lay5DU1IRy45hAIit7WST+qMA pDkzajfLckywV7CxjbNllj7Z4z1R+9X4Lc0a7sWcK8Q59FI5kiDiAqVBBiPVBtXg 3Fk7bSpg9Q== -----END CERTIFICATE-----Generated at Wed May 13 12:25:39 2026 by rpki-client