$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json) Hash identifier: 1nT4EBgevQK3VXvPISEsJ3WdtPiC/7tzgeS6M/OKgwk= Subject key identifier: DF:33:73:58:BD:AB:CE:0A:B2:75:9B:B2:D1:23:A5:D3:4B:A9:E9:DD Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 415EBC7DFAA341EFDCA829EF7733275DE09AF84C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft Manifest number: B1 Signing time: Fri 09 Oct 2026 14:38:27 +0000 Manifest this update: Fri 09 Oct 2026 14:33:27 +0000 Manifest next update: Mon 12 Oct 2026 18:29:27 +0000 Files and hashes: 1: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=) 2: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=) 3: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=) 4: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=) 5: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: Ey83aXnrPrRmHR8wPD/cKC8PlSUJw9KegwOiHZ9EnLk=) 6: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=) 7: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=) 8: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=) 9: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=) 10: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=) 11: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=) 12: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=) 13: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=) 14: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=) 15: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=) 16: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=) 17: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=) 18: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=) 19: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=) 20: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 16:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5e:bc:7d:fa:a3:41:ef:dc:a8:29:ef:77:33:27:5d:e0:9a:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Oct 9 14:33:27 2026 GMT Not After : Oct 12 18:29:27 2026 GMT Subject: CN=DF337358BDABCE0AB2759BB2D123A5D34BA9E9DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c4:15:8c:07:14:47:78:b2:e2:89:d9:44:a3: 45:6b:a4:d7:ba:e0:c9:d5:74:b0:b9:b0:d3:1d:10: 1a:31:41:eb:40:53:9c:15:ba:92:d7:2d:03:57:f6: fa:6c:92:3b:ea:cd:1e:17:ee:6a:e2:34:c2:4e:99: 3e:c3:6d:42:e1:1b:0c:16:3c:67:0d:cb:7f:c4:a4: bc:25:cb:20:25:ee:87:33:46:da:ca:39:3e:e2:3b: 11:61:68:b1:a0:72:d9:0a:b5:45:a6:8a:3b:1b:cf: a4:56:6c:cb:68:77:bf:eb:12:d9:a9:d8:bf:81:0f: 7c:42:03:45:37:b3:82:15:7a:49:49:a9:31:89:e0: ee:0f:a1:00:a3:14:6d:f0:61:07:0b:bd:f2:ff:1a: 80:61:64:f7:3d:e6:b4:7d:c6:d3:7c:6b:48:1f:00: 23:3e:9c:59:0a:34:b2:36:57:d4:11:40:8c:00:47: 85:00:71:2c:1b:44:c3:e7:6a:dd:d4:b1:da:84:db: 59:8d:62:7f:2c:b1:c7:3c:e6:17:a1:b3:e4:61:79: 76:90:2f:df:ec:36:4f:b9:97:cd:99:97:95:fa:4e: 79:2c:00:a5:89:60:36:ea:70:32:85:a4:0d:f1:e2: 1e:a3:53:e5:cb:65:d9:c2:74:59:ec:03:35:9f:4d: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:33:73:58:BD:AB:CE:0A:B2:75:9B:B2:D1:23:A5:D3:4B:A9:E9:DD X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:49:95:4c:db:c9:5d:ec:16:ce:4d:25:ea:28:f5:c6:34:77: 94:a0:14:18:28:b6:08:41:b4:ae:29:5c:c3:cb:ff:76:4b:72: 5d:45:65:de:e0:62:0f:42:c8:31:91:c3:26:01:94:ca:47:2c: 5c:e0:f2:ad:8b:a2:97:66:e5:85:53:60:90:14:40:e1:25:74: 2c:b5:89:72:1b:32:40:aa:e4:19:12:37:8f:de:c0:87:5a:6d: dc:3d:b8:ab:33:5c:06:d1:2e:44:16:5d:c6:ab:ed:32:e0:d6: 6c:47:14:7c:e4:51:86:7f:b7:a1:23:13:60:55:88:46:41:5b: 0d:55:a0:67:1c:51:fb:4f:4a:c3:94:65:ae:19:d4:b9:78:17: 3c:f0:be:00:18:72:fe:b8:76:47:e3:34:95:37:f3:01:f1:a2: eb:2b:83:8a:ae:97:e7:80:b8:89:85:e1:d8:99:0f:86:8e:e7: 71:ea:22:43:8d:5b:49:ee:31:ac:ed:a7:65:d5:d8:da:a4:d1: e2:eb:d9:e3:f5:68:8a:74:a9:63:db:21:10:fe:57:50:85:3d: 24:fd:84:9f:06:2d:78:7c:8c:8e:b9:93:96:06:7a:09:ca:c1: 01:65:a0:e9:3c:8a:d6:4c:f2:0d:6e:48:b6:36:f8:98:99:6a: 5b:41:90:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQV68ffqjQe/cqCnvdzMnXeCa+EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjEwMDkxNDMzMjdaFw0yNjEwMTIxODI5MjdaMDMxMTAvBgNV BAMTKERGMzM3MzU4QkRBQkNFMEFCMjc1OUJCMkQxMjNBNUQzNEJBOUU5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzxBWMBxRHeLLiidlEo0VrpNe6 4MnVdLC5sNMdEBoxQetAU5wVupLXLQNX9vpskjvqzR4X7mriNMJOmT7DbULhGwwW PGcNy3/EpLwlyyAl7oczRtrKOT7iOxFhaLGgctkKtUWmijsbz6RWbMtod7/rEtmp 2L+BD3xCA0U3s4IVeklJqTGJ4O4PoQCjFG3wYQcLvfL/GoBhZPc95rR9xtN8a0gf ACM+nFkKNLI2V9QRQIwAR4UAcSwbRMPnat3UsdqE21mNYn8sscc85hehs+RheXaQ L9/sNk+5l82Zl5X6TnksAKWJYDbqcDKFpA3x4h6jU+XLZdnCdFnsAzWfTdAlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3zNzWL2rzgqydZuy0SOl00up6d0wHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkmVTNvJXewW zk0l6ij1xjR3lKAUGCi2CEG0rilcw8v/dktyXUVl3uBiD0LIMZHDJgGUykcsXODy rYuil2blhVNgkBRA4SV0LLWJchsyQKrkGRI3j97Ah1pt3D24qzNcBtEuRBZdxqvt MuDWbEcUfORRhn+3oSMTYFWIRkFbDVWgZxxR+09Kw5RlrhnUuXgXPPC+ABhy/rh2 R+M0lTfzAfGi6yuDiq6X54C4iYXh2JkPho7nceoiQ41bSe4xrO2nZdXY2qTR4uvZ 4/VoinSpY9shEP5XUIU9JP2EnwYteHyMjrmTlgZ6CcrBAWWg6TyK1kzyDW5Itjb4 mJlqW0GQjA== -----END CERTIFICATE-----Generated at Sat Oct 10 04:13:26 2026 by rpki-client