$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json) Hash identifier: QWe3Crqb5VtMZoVxGpChZ2QF4x2TzjOO66CRaNSKCWg= Subject key identifier: 2B:90:5E:55:78:F6:C2:29:B1:51:C8:63:A7:BD:52:04:E9:11:47:48 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 2CF2310DC2B12BA46B3F4861A0E9A4F44300EBF5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:14:54 +0000 Manifest this update: Fri 24 Jul 2026 00:09:54 +0000 Manifest next update: Sat 25 Jul 2026 04:01:54 +0000 Files and hashes: 1: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=) 2: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=) 3: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=) 4: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=) 5: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=) 6: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=) 7: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=) 8: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=) 9: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=) 10: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=) 11: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=) 12: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=) 13: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: puXwfNAb5ZiEj0s5hQmoaNl5sw3ooYtcVq1jDzBXap0=) 14: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=) 15: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=) 16: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=) 17: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=) 18: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=) 19: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=) 20: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f2:31:0d:c2:b1:2b:a4:6b:3f:48:61:a0:e9:a4:f4:43:00:eb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jul 24 00:09:54 2026 GMT Not After : Jul 25 04:01:54 2026 GMT Subject: CN=2B905E5578F6C229B151C863A7BD5204E9114748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:9f:b6:56:d6:81:cf:b0:fe:28:a9:ff:7f: fa:32:c4:0b:52:77:1d:28:e8:02:9e:c3:81:4e:cf: 91:60:f5:05:df:31:bc:5b:3a:5e:0e:6f:ae:8b:57: 6f:23:6b:cc:b6:f1:c8:24:12:f0:9d:bc:64:a3:8c: d9:ac:f4:d5:72:cd:04:0c:d5:c5:a5:f8:89:a6:e9: c5:3d:de:b3:c7:8e:8c:c6:22:9f:17:3b:43:e4:98: 3b:9f:02:55:84:4f:c1:93:ab:89:3d:c3:48:c1:e7: 97:04:0a:97:71:2e:6d:c2:5d:68:e1:22:41:c7:42: 72:eb:49:26:69:f0:dd:51:37:5c:fc:dc:1b:d2:ac: 08:8e:0d:ac:e7:e1:83:62:b2:91:24:14:9e:91:de: b9:2a:1c:68:f4:9a:c5:ce:ad:2e:6d:08:cf:aa:dd: d2:c4:67:c7:66:93:42:a7:db:e2:39:5f:ae:a5:83: bc:41:08:bb:1d:77:ee:37:54:8b:17:cf:15:79:3e: 68:d3:2e:b7:4c:14:0f:3a:40:6b:30:ab:eb:f0:83: 9e:b8:68:b0:ae:25:3a:17:dc:db:4e:37:d4:3e:20: dc:cf:cb:68:a4:95:5a:1f:7c:ff:13:f6:0c:1c:c1: 50:d4:df:14:49:62:ca:91:3b:34:62:be:b7:c7:a2: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:5E:55:78:F6:C2:29:B1:51:C8:63:A7:BD:52:04:E9:11:47:48 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4a:0f:39:e8:0d:6f:11:2a:a2:ae:1d:25:16:36:94:5f:91: 09:98:66:7d:f1:57:a6:cd:b4:b2:6f:ad:07:a1:7f:c0:4b:c5: fd:cd:85:a4:93:07:74:32:41:41:94:ab:d5:04:c6:23:ef:d1: 5b:e0:7b:70:49:8a:e4:b3:9c:9d:1f:ec:f4:fc:c5:13:d0:c0: 3e:f4:8e:d5:1f:1d:c4:65:05:3a:77:a8:c2:f7:79:62:02:f4: be:55:97:c8:0b:57:ed:ad:0f:bb:cc:72:2e:12:34:af:57:f7: 0e:89:e0:a3:7d:03:7e:a9:e5:8d:42:6e:93:1b:3d:4b:d6:55: 0b:b2:94:a0:fb:8f:98:69:a1:ff:a2:a0:b2:08:00:eb:40:04: 5f:51:46:45:32:72:d1:08:b9:8e:b3:b2:39:f8:8c:9b:35:cd: c8:cb:69:e9:0a:6f:bc:65:3e:47:c4:2a:bd:9e:cd:da:de:cd: 7c:a8:9a:b7:01:f6:33:bb:93:bd:e3:a4:ba:39:77:3f:4e:65: c7:fe:67:2a:d1:43:4f:46:9a:ff:30:42:8e:56:b8:79:22:2d: c4:6a:d0:53:01:42:f8:15:95:bf:bb:b1:04:db:47:d1:9c:fd: e6:28:37:9e:61:e0:bd:71:db:c7:04:fa:f6:5a:33:51:2f:e9: a0:3b:ff:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULPIxDcKxK6RrP0hhoOmk9EMA6/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA3MjQwMDA5NTRaFw0yNjA3MjUwNDAxNTRaMDMxMTAvBgNV BAMTKDJCOTA1RTU1NzhGNkMyMjlCMTUxQzg2M0E3QkQ1MjA0RTkxMTQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b5+2VtaBz7D+KKn/f/oyxAtS dx0o6AKew4FOz5Fg9QXfMbxbOl4Ob66LV28ja8y28cgkEvCdvGSjjNms9NVyzQQM 1cWl+Imm6cU93rPHjozGIp8XO0PkmDufAlWET8GTq4k9w0jB55cECpdxLm3CXWjh IkHHQnLrSSZp8N1RN1z83BvSrAiODazn4YNispEkFJ6R3rkqHGj0msXOrS5tCM+q 3dLEZ8dmk0Kn2+I5X66lg7xBCLsdd+43VIsXzxV5PmjTLrdMFA86QGswq+vwg564 aLCuJToX3NtON9Q+INzPy2iklVoffP8T9gwcwVDU3xRJYsqROzRivrfHoo1HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK5BeVXj2wimxUchjp71SBOkRR0gwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUoPOegNbxEq oq4dJRY2lF+RCZhmffFXps20sm+tB6F/wEvF/c2FpJMHdDJBQZSr1QTGI+/RW+B7 cEmK5LOcnR/s9PzFE9DAPvSO1R8dxGUFOneowvd5YgL0vlWXyAtX7a0Pu8xyLhI0 r1f3Dongo30DfqnljUJukxs9S9ZVC7KUoPuPmGmh/6KgsggA60AEX1FGRTJy0Qi5 jrOyOfiMmzXNyMtp6QpvvGU+R8QqvZ7N2t7NfKiatwH2M7uTveOkujl3P05lx/5n KtFDT0aa/zBCjla4eSItxGrQUwFC+BWVv7uxBNtH0Zz95ig3nmHgvXHbxwT69loz US/poDv/Ew== -----END CERTIFICATE-----Generated at Fri Jul 24 16:09:11 2026 by rpki-client