$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: amAuEBBucYJk64jriLO/Il7jgZhcGE147iNVP+y/gQ4= Subject key identifier: 73:89:8C:07:F5:69:F2:5A:B5:01:7C:C6:46:CE:11:15:70:BD:C0:1A Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 52DDD29B9E54DE63D8669DF766B1F8FE1046A053 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: C3 Signing time: Thu 23 Jul 2026 13:43:47 +0000 Manifest this update: Thu 23 Jul 2026 13:38:47 +0000 Manifest next update: Fri 24 Jul 2026 16:05:47 +0000 Files and hashes: 1: AS9808.roa (hash: WhejpRktrBp4DhuCjSqxXKBeqsCvxI/AeCBWlA0jPh0=) 2: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 3: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 4: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 5: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 6: AS56046.roa (hash: L/+OzcU657ZvVAFbSvWJkNX+NbH+6lJJlQ9WFvgPUaw=) 7: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: UtrUJAVguRpkwQStHzuYmjKkGhvLilBfTsK37vESCGE=) 8: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dd:d2:9b:9e:54:de:63:d8:66:9d:f7:66:b1:f8:fe:10:46:a0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Jul 23 13:38:47 2026 GMT Not After : Jul 24 16:05:47 2026 GMT Subject: CN=73898C07F569F25AB5017CC646CE111570BDC01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:dd:b4:a4:d3:89:13:d4:fa:27:22:55:17: d5:d9:e4:ec:18:1c:e5:af:d0:d9:cf:05:c8:4f:b1: ad:5b:43:f1:82:2c:f6:05:93:0b:13:9e:44:e6:41: f4:62:5b:47:da:85:c3:5a:41:33:4d:b7:fb:d4:ed: 47:dc:78:77:9a:20:7d:f2:c5:d4:4e:36:51:74:83: c2:8d:c1:73:35:df:c5:f9:70:2b:3e:9c:e3:74:9f: 2d:68:35:a9:9f:67:8b:22:f1:6f:71:fe:9d:96:5c: da:02:e5:41:0a:e4:d7:ab:c8:ad:3b:52:4c:01:d1: 60:09:5c:6b:fb:53:65:34:f6:3d:f7:6e:bd:f7:e5: 5e:77:21:48:a3:d4:90:a2:a9:96:2b:fb:de:f5:b1: 86:d8:c2:fd:74:20:e6:c5:77:50:01:5b:1e:47:5d: 89:22:f4:8f:2d:95:ed:9f:3f:62:84:1b:57:36:9e: bd:fd:34:a9:c0:d3:cb:6b:cb:16:50:45:90:e0:19: 46:04:05:74:11:92:d0:dc:3c:6b:d9:d9:3f:bf:53: 04:d4:b8:f8:82:d3:63:27:e2:c5:b6:63:f9:b1:5d: 4a:31:2d:e0:4b:63:ce:63:5d:f7:bc:c9:87:f8:56: 9f:ea:f2:ab:3c:ae:fb:94:c8:6a:3a:ce:59:c0:2b: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:89:8C:07:F5:69:F2:5A:B5:01:7C:C6:46:CE:11:15:70:BD:C0:1A X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:11:22:6d:8a:0d:a8:58:48:ad:d7:60:06:9f:1e:0a:f2:58: bb:51:b4:a4:ef:aa:ea:dc:9a:a8:4f:2a:b9:24:05:95:47:c9: c5:0c:56:6b:2a:f9:f6:e9:24:03:8d:c2:f3:a5:4d:e7:11:9a: f8:91:f1:b5:4f:d0:1f:05:28:54:48:aa:f8:1a:d4:92:67:20: 58:fb:4d:fb:5a:ab:2c:85:0d:b6:b1:17:c8:4d:b3:ab:46:e4: 31:ed:7c:7d:15:a5:b9:2d:05:ed:00:e9:d5:d2:90:90:05:bd: ca:c5:6f:8e:da:e1:df:b5:67:52:e5:68:30:8a:83:f4:91:d4: 85:e4:40:1f:ed:12:d6:78:6a:67:a7:92:79:1f:fa:5c:7a:56: b5:5b:be:6b:10:89:a5:82:06:82:1b:ba:08:ff:3e:c5:b5:83: f4:22:cf:22:2b:5f:fa:e6:5e:09:3e:0f:a2:68:27:85:6b:b7: 02:15:89:f6:6f:55:7f:49:a5:95:9d:31:96:a2:05:67:14:d8: d0:5f:2d:f6:3f:8a:8b:21:8f:23:ba:81:e8:cc:cc:02:ac:0f: e4:cf:d3:d1:a9:2f:18:9b:f5:fb:32:1c:ec:62:3b:57:76:7c: 1a:78:68:85:5e:11:5b:a0:92:24:31:84:95:6a:a7:94:fd:92: 35:97:12:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUt3Sm55U3mPYZp33ZrH4/hBGoFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA3MjMxMzM4NDdaFw0yNjA3MjQxNjA1NDdaMDMxMTAvBgNV BAMTKDczODk4QzA3RjU2OUYyNUFCNTAxN0NDNjQ2Q0UxMTE1NzBCREMwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRd20pNOJE9T6JyJVF9XZ5OwY HOWv0NnPBchPsa1bQ/GCLPYFkwsTnkTmQfRiW0fahcNaQTNNt/vU7UfceHeaIH3y xdRONlF0g8KNwXM138X5cCs+nON0ny1oNamfZ4si8W9x/p2WXNoC5UEK5NeryK07 UkwB0WAJXGv7U2U09j33br335V53IUij1JCiqZYr+971sYbYwv10IObFd1ABWx5H XYki9I8tle2fP2KEG1c2nr39NKnA08tryxZQRZDgGUYEBXQRktDcPGvZ2T+/UwTU uPiC02Mn4sW2Y/mxXUoxLeBLY85jXfe8yYf4Vp/q8qs8rvuUyGo6zlnAK7N/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc4mMB/Vp8lq1AXzGRs4RFXC9wBowHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxEibYoNqFhI rddgBp8eCvJYu1G0pO+q6tyaqE8quSQFlUfJxQxWayr59ukkA43C86VN5xGa+JHx tU/QHwUoVEiq+BrUkmcgWPtN+1qrLIUNtrEXyE2zq0bkMe18fRWluS0F7QDp1dKQ kAW9ysVvjtrh37VnUuVoMIqD9JHUheRAH+0S1nhqZ6eSeR/6XHpWtVu+axCJpYIG ghu6CP8+xbWD9CLPIitf+uZeCT4PomgnhWu3AhWJ9m9Vf0mllZ0xlqIFZxTY0F8t 9j+KiyGPI7qB6MzMAqwP5M/T0akvGJv1+zIc7GI7V3Z8GnhohV4RW6CSJDGElWqn lP2SNZcSSg== -----END CERTIFICATE-----Generated at Fri Jul 24 08:58:44 2026 by rpki-client