$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: SefRhtTWvIaLP5+2IBRm32SnGhH5JyHEsRugHf/CSYw= Subject key identifier: 07:D7:0B:26:76:C9:42:04:88:A6:A2:13:5E:B7:47:3A:AE:00:70:77 Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 21103A8E1278E7901255571BF0DFAC80B3EC618E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: C4 Signing time: Fri 24 Jul 2026 08:10:42 +0000 Manifest this update: Fri 24 Jul 2026 08:05:42 +0000 Manifest next update: Sat 25 Jul 2026 08:19:42 +0000 Files and hashes: 1: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 2: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 3: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 4: AS56046.roa (hash: L/+OzcU657ZvVAFbSvWJkNX+NbH+6lJJlQ9WFvgPUaw=) 5: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) 6: AS9808.roa (hash: WhejpRktrBp4DhuCjSqxXKBeqsCvxI/AeCBWlA0jPh0=) 7: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 8: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: 0Sd41c5M4ryX/kXUljbJ8tC+/kA7KxU9zGUIA68s4jY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:10:3a:8e:12:78:e7:90:12:55:57:1b:f0:df:ac:80:b3:ec:61:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Jul 24 08:05:42 2026 GMT Not After : Jul 25 08:19:42 2026 GMT Subject: CN=07D70B2676C9420488A6A2135EB7473AAE007077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:94:3b:aa:58:5a:60:fe:8d:83:3f:75:ca: 5c:80:91:3a:20:05:ee:83:92:03:96:61:eb:dd:ad: 53:8e:5a:df:cd:4b:b2:36:13:ca:6e:b5:46:9f:b5: 05:2a:0b:6d:c5:f6:29:93:e5:35:da:7e:e4:fe:ef: bb:8f:27:41:49:7b:7f:40:78:d8:b1:1b:3e:6a:7f: 98:38:7e:7c:e9:b7:13:b9:c2:83:6e:95:eb:2e:f5: cb:b5:27:44:47:45:29:18:4a:55:19:cc:78:ab:cb: 83:66:b2:30:41:08:1f:5b:5e:f2:84:5f:43:77:10: fa:39:3b:4e:4e:fe:f2:0f:87:68:31:b8:d3:4f:6a: 33:ef:01:65:89:ea:bf:b9:9b:90:2d:81:61:3d:19: 31:72:2e:15:49:e3:5c:81:bf:2b:9d:27:a3:6c:29: 6c:8b:b6:ba:e5:c8:9d:4e:e5:bb:e9:72:f8:ae:62: 1b:40:a5:c4:47:d8:4d:43:87:44:da:3c:48:36:86: a3:69:6b:27:55:d9:ee:8a:d5:0c:02:82:72:d7:c9: c6:1b:77:2a:e5:fa:86:04:60:33:48:1a:a1:2d:31: 80:6c:07:eb:1c:71:90:16:0c:5c:00:a2:68:d7:f0: 7e:d6:bd:a9:25:74:71:9b:b9:7c:23:ad:25:ec:f2: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D7:0B:26:76:C9:42:04:88:A6:A2:13:5E:B7:47:3A:AE:00:70:77 X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:18:a6:6e:19:13:0d:68:8c:cd:fb:0e:1e:0a:10:8a:7e:83: f8:3c:f0:74:88:35:ee:f1:11:27:b1:08:c8:f1:84:7b:f0:41: e4:77:87:13:4e:b2:cb:d6:f6:3a:fa:42:b5:6e:ad:f2:7b:e7: 62:90:02:b4:03:c7:5e:94:af:b4:d0:eb:6e:b8:9f:01:e0:b5: 03:71:12:a0:f4:57:26:5a:48:44:b6:e5:07:17:34:c5:a4:0c: e5:40:51:40:eb:4b:44:d3:65:4f:91:cf:12:de:27:89:81:17: 19:46:cb:f2:50:c3:19:ff:5d:15:e1:97:40:02:08:4e:2a:34: 7b:60:57:20:9d:fe:79:80:9f:c3:b6:94:1b:92:cb:f1:51:b8: 18:48:07:97:61:3e:f9:0a:69:7d:ec:9f:69:b8:8c:19:8f:7b: 97:f7:28:a2:6e:a4:b4:65:b9:55:f8:b0:c1:e7:2f:ed:31:cd: a1:f7:21:7e:df:4e:3e:46:d3:b0:83:9d:ca:3f:ec:51:f9:44: cf:fd:dc:0b:cd:3c:2e:78:30:e2:3a:b9:34:e8:e7:93:85:d0: 1f:10:a8:2c:89:0e:e8:f1:b5:4d:97:22:a5:77:58:26:2c:70: 1e:40:a7:c4:c3:79:b4:e7:ef:52:0a:88:a0:f5:b0:51:70:d4: 82:c2:25:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIRA6jhJ455ASVVcb8N+sgLPsYY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA3MjQwODA1NDJaFw0yNjA3MjUwODE5NDJaMDMxMTAvBgNV BAMTKDA3RDcwQjI2NzZDOTQyMDQ4OEE2QTIxMzVFQjc0NzNBQUUwMDcwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh5Q7qlhaYP6Ngz91ylyAkTog Be6DkgOWYevdrVOOWt/NS7I2E8putUaftQUqC23F9imT5TXafuT+77uPJ0FJe39A eNixGz5qf5g4fnzptxO5woNulesu9cu1J0RHRSkYSlUZzHiry4NmsjBBCB9bXvKE X0N3EPo5O05O/vIPh2gxuNNPajPvAWWJ6r+5m5AtgWE9GTFyLhVJ41yBvyudJ6Ns KWyLtrrlyJ1O5bvpcviuYhtApcRH2E1Dh0TaPEg2hqNpaydV2e6K1QwCgnLXycYb dyrl+oYEYDNIGqEtMYBsB+sccZAWDFwAomjX8H7WvakldHGbuXwjrSXs8pZVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB9cLJnbJQgSIpqITXrdHOq4AcHcwHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhimbhkTDWiM zfsOHgoQin6D+DzwdIg17vERJ7EIyPGEe/BB5HeHE06yy9b2OvpCtW6t8nvnYpAC tAPHXpSvtNDrbrifAeC1A3ESoPRXJlpIRLblBxc0xaQM5UBRQOtLRNNlT5HPEt4n iYEXGUbL8lDDGf9dFeGXQAIITio0e2BXIJ3+eYCfw7aUG5LL8VG4GEgHl2E++Qpp feyfabiMGY97l/coom6ktGW5Vfiwwecv7THNofchft9OPkbTsIOdyj/sUflEz/3c C808Lngw4jq5NOjnk4XQHxCoLIkO6PG1TZcipXdYJixwHkCnxMN5tOfvUgqIoPWw UXDUgsIlxA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:47 2026 by rpki-client