$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: qv+i4qgIcPASVfkpWwzK5OGsfO0u+9nHE8tshJDp7yc= Subject key identifier: 9F:46:99:3D:0E:8C:2B:E5:09:F1:09:EE:1E:F8:0E:01:B7:BA:69:FB Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 5884527545F3B081DD035B4BE0F641891434B156 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: 21 Signing time: Wed 13 May 2026 08:47:18 +0000 Manifest this update: Wed 13 May 2026 08:42:18 +0000 Manifest next update: Thu 14 May 2026 11:40:18 +0000 Files and hashes: 1: AS9808.roa (hash: v2tZ5aRYmWIzu+YFY0ecPPc9l5uwNOpJunCjfdxgW5E=) 2: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 3: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: 0Ou3486qXj4/ltOLAy2e4WQUijXSqkCghrVjPWsqLg0=) 4: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 5: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 6: AS56046.roa (hash: gGXiluqmxluxPzb4gLlKASim9X/C6SeCXXwOSP8/BV8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:84:52:75:45:f3:b0:81:dd:03:5b:4b:e0:f6:41:89:14:34:b1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: May 13 08:42:18 2026 GMT Not After : May 14 11:40:18 2026 GMT Subject: CN=9F46993D0E8C2BE509F109EE1EF80E01B7BA69FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:0e:7b:9d:e7:40:04:a3:0d:9a:52:d4:df: 1a:78:66:60:1c:f3:9d:ca:16:77:de:a0:44:b7:9f: d1:43:a6:13:d4:43:98:4d:31:c2:c2:db:af:cb:68: 99:3b:69:0a:7f:cd:33:73:e6:2c:e9:6b:2c:52:f6: 92:2b:bf:1d:2c:6c:a9:6f:e9:73:c5:05:39:7c:ca: a1:8d:17:08:5a:0e:b8:30:f7:e4:32:6c:b6:43:2a: 41:09:1f:1f:e4:bd:ec:a4:be:40:70:6c:16:c7:51: 8f:a8:79:c7:68:0d:17:df:39:23:a4:69:3c:d5:7d: f6:c8:78:87:fb:1e:0e:cf:37:68:e1:cf:10:87:c5: c2:d8:0b:b8:09:7b:9d:34:a2:e4:fc:72:7a:f6:f3: 1a:6a:f4:e6:59:c1:5c:04:f2:c6:47:00:ee:49:9c: 78:8e:ae:27:b6:5e:27:38:2a:19:23:c1:75:fc:34: e5:71:44:f4:4f:3a:96:c6:b6:24:9a:15:f6:4f:3d: c3:ee:c5:b6:04:9a:ab:28:cb:2b:c0:3e:4a:aa:7a: 0c:d6:16:0c:da:d8:c7:e9:40:a5:14:a6:94:7e:cd: 3b:7e:6b:b0:6c:e3:6c:6c:1a:ff:68:65:d5:e2:88: 83:99:b3:30:21:a8:65:ce:22:02:9c:2c:2a:22:2e: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:99:3D:0E:8C:2B:E5:09:F1:09:EE:1E:F8:0E:01:B7:BA:69:FB X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:90:6c:2f:bd:38:57:38:6d:95:4e:dc:6b:7f:44:35:c2: d0:25:23:e4:4d:07:76:0c:55:50:ec:67:ab:dd:f4:12:e4:c3: 23:73:a6:58:cc:0a:c4:f9:a8:5f:77:f0:28:88:e6:db:6c:4a: b1:09:3b:6f:17:ca:60:0c:49:5e:0b:c6:cb:20:3c:ce:83:c7: f6:f1:8d:96:79:51:e0:c7:bb:92:d0:9d:66:1e:2b:91:a1:ca: 63:da:c6:29:42:c5:99:ea:79:bf:d2:5b:4b:59:74:09:29:13: 61:79:91:27:51:7d:0c:22:3d:7b:c2:4c:04:9e:3d:e9:50:89: 7d:c4:32:18:ec:bf:ea:56:4c:47:47:62:8c:c7:ce:c2:9c:ca: 40:7f:5f:26:b0:35:6f:2e:d3:fc:d2:e7:ce:fa:87:19:1d:be: ac:73:2a:cf:8d:a8:f7:76:5f:bd:7b:11:8e:a6:33:24:12:58: c4:26:19:d7:94:12:ba:43:5a:fc:33:b2:eb:f7:48:65:0e:35: e3:7f:be:91:ad:a1:73:0a:97:62:4a:a1:c0:5d:b7:60:78:f4: 1a:66:6b:d6:8b:58:32:0c:09:4b:19:c0:1e:01:cd:ed:20:62: 67:2c:e4:a6:94:a8:3d:a6:e1:37:f9:d0:2c:8a:b4:36:5d:36: ba:ec:cd:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWIRSdUXzsIHdA1tL4PZBiRQ0sVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA1MTMwODQyMThaFw0yNjA1MTQxMTQwMThaMDMxMTAvBgNV BAMTKDlGNDY5OTNEMEU4QzJCRTUwOUYxMDlFRTFFRjgwRTAxQjdCQTY5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3Q57nedABKMNmlLU3xp4ZmAc 853KFnfeoES3n9FDphPUQ5hNMcLC26/LaJk7aQp/zTNz5izpayxS9pIrvx0sbKlv 6XPFBTl8yqGNFwhaDrgw9+QybLZDKkEJHx/kveykvkBwbBbHUY+oecdoDRffOSOk aTzVffbIeIf7Hg7PN2jhzxCHxcLYC7gJe500ouT8cnr28xpq9OZZwVwE8sZHAO5J nHiOrie2Xic4KhkjwXX8NOVxRPRPOpbGtiSaFfZPPcPuxbYEmqsoyyvAPkqqegzW Fgza2MfpQKUUppR+zTt+a7Bs42xsGv9oZdXiiIOZszAhqGXOIgKcLCoiLmlNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn0aZPQ6MK+UJ8QnuHvgOAbe6afswHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknWQbC+9OFc4 bZVO3Gt/RDXC0CUj5E0HdgxVUOxnq930EuTDI3OmWMwKxPmoX3fwKIjm22xKsQk7 bxfKYAxJXgvGyyA8zoPH9vGNlnlR4Me7ktCdZh4rkaHKY9rGKULFmep5v9JbS1l0 CSkTYXmRJ1F9DCI9e8JMBJ496VCJfcQyGOy/6lZMR0dijMfOwpzKQH9fJrA1by7T /NLnzvqHGR2+rHMqz42o93ZfvXsRjqYzJBJYxCYZ15QSukNa/DOy6/dIZQ4143++ ka2hcwqXYkqhwF23YHj0GmZr1otYMgwJSxnAHgHN7SBiZyzkppSoPabhN/nQLIq0 Nl02uuzNAA== -----END CERTIFICATE-----Generated at Wed May 13 14:09:25 2026 by rpki-client