$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: xfhZwQf7cX0E2RuS6vtm0DYK15nPudoPdKxHrCrGuJU= Subject key identifier: 6E:EA:5D:80:E6:41:58:40:C1:68:2B:8B:7A:97:39:58:F4:25:E9:AB Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 5863465EA1B9773AA7B64BE76D7F525923CA709A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 9A Signing time: Wed 14 Oct 2026 09:18:54 +0000 Manifest this update: Wed 14 Oct 2026 09:13:54 +0000 Manifest next update: Sat 17 Oct 2026 16:26:54 +0000 Files and hashes: 1: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: xiCYp5q+g02io07MyRuegXi9hs+JB+mc0M2NgrBZvfA=) 2: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:46:5e:a1:b9:77:3a:a7:b6:4b:e7:6d:7f:52:59:23:ca:70:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Oct 14 09:13:54 2026 GMT Not After : Oct 17 16:26:54 2026 GMT Subject: CN=6EEA5D80E6415840C1682B8B7A973958F425E9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:be:c5:78:45:7d:e4:98:a0:44:f5:8b:3f: d6:1f:e9:8f:63:0a:1b:59:6b:81:10:e7:f2:77:a7: f2:a7:e2:77:c3:90:63:ad:42:9f:96:f6:5f:e9:04: f7:d1:5e:2d:3a:67:c5:f9:7c:cf:bd:0a:69:b5:06: b4:53:03:07:00:be:26:17:f8:0c:76:d1:29:5d:5d: dd:d7:e1:56:70:f0:0a:07:ab:ef:10:dd:fc:82:31: e0:b8:de:87:0a:59:15:7b:6d:22:59:f1:d8:c9:a0: 08:91:ad:db:ec:63:f7:96:c4:df:11:58:09:a1:50: da:e0:d1:37:97:6c:9a:6f:37:fe:a0:a5:91:60:12: d4:79:7e:5b:f1:3c:37:22:93:1f:46:f2:0e:a5:93: 8c:bc:e0:4e:30:7b:8a:c8:22:5f:c2:48:f1:f3:a6: db:b1:3f:0f:4a:eb:fb:f8:3a:6f:ed:fc:0f:16:43: 00:4c:64:31:e3:48:89:75:1d:c3:ff:33:63:97:8d: f0:b6:36:77:d7:ee:70:09:07:6f:66:32:54:30:d8: 0b:e3:94:34:42:8f:30:2d:9f:cd:0b:87:00:f2:76: 11:4b:df:93:cc:26:6e:8d:9b:0f:37:02:fd:00:4c: 75:c4:1c:b4:8c:8b:6a:30:d7:57:cb:3c:96:2f:7d: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EA:5D:80:E6:41:58:40:C1:68:2B:8B:7A:97:39:58:F4:25:E9:AB X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:eb:cf:2c:2b:1f:7d:54:54:37:83:5a:3b:db:5d:8b:eb:ea: 24:9a:e4:46:ae:33:b7:4c:65:57:c2:4a:35:58:66:fe:77:cc: f5:bf:b3:01:77:c6:f6:a8:33:74:9b:08:73:74:8e:e6:ec:5e: 76:fa:2b:b9:25:52:59:56:ce:43:41:21:78:ab:1a:e4:6e:0f: bc:8e:47:6f:05:f1:34:ac:74:1b:f4:ea:d3:d4:3a:c4:7d:0e: 02:f1:82:a6:76:02:37:be:b1:a6:23:5e:0b:72:9b:50:c3:d9: be:41:18:74:3a:89:a9:1f:b2:ed:c1:12:09:7e:56:d0:4d:19: 8d:b6:3a:b4:b9:b4:7a:b8:74:12:6a:7b:0e:7a:b4:ce:4f:50: 1b:59:7f:08:71:76:40:5f:54:e2:17:7e:95:0a:60:ef:df:47: 96:42:95:de:b4:bc:1d:f6:21:69:bb:1f:32:ba:78:81:31:a2: 12:ad:a0:89:52:41:27:89:b7:88:e8:29:4e:ff:be:77:1e:e7: 27:40:0b:6f:c2:c9:5a:15:ae:35:80:8a:0d:fd:51:8a:ea:27: e4:11:02:55:4d:c4:8b:04:01:ac:0e:e6:66:d7:48:df:7d:6b: ec:ad:ce:6d:8c:ab:15:0a:41:d4:bf:18:f0:be:82:f2:a0:6f: 06:f6:2c:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWGNGXqG5dzqntkvnbX9SWSPKcJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjEwMTQwOTEzNTRaFw0yNjEwMTcxNjI2NTRaMDMxMTAvBgNV BAMTKDZFRUE1RDgwRTY0MTU4NDBDMTY4MkI4QjdBOTczOTU4RjQyNUU5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pL7FeEV95JigRPWLP9Yf6Y9j ChtZa4EQ5/J3p/Kn4nfDkGOtQp+W9l/pBPfRXi06Z8X5fM+9Cmm1BrRTAwcAviYX +Ax20SldXd3X4VZw8AoHq+8Q3fyCMeC43ocKWRV7bSJZ8djJoAiRrdvsY/eWxN8R WAmhUNrg0TeXbJpvN/6gpZFgEtR5flvxPDcikx9G8g6lk4y84E4we4rIIl/CSPHz ptuxPw9K6/v4Om/t/A8WQwBMZDHjSIl1HcP/M2OXjfC2NnfX7nAJB29mMlQw2Avj lDRCjzAtn80LhwDydhFL35PMJm6Nmw83Av0ATHXEHLSMi2ow11fLPJYvfduvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbupdgOZBWEDBaCuLepc5WPQl6aswHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+vPLCsffVRU N4NaO9tdi+vqJJrkRq4zt0xlV8JKNVhm/nfM9b+zAXfG9qgzdJsIc3SO5uxedvor uSVSWVbOQ0EheKsa5G4PvI5HbwXxNKx0G/Tq09Q6xH0OAvGCpnYCN76xpiNeC3Kb UMPZvkEYdDqJqR+y7cESCX5W0E0ZjbY6tLm0erh0Emp7Dnq0zk9QG1l/CHF2QF9U 4hd+lQpg799HlkKV3rS8HfYhabsfMrp4gTGiEq2giVJBJ4m3iOgpTv++dx7nJ0AL b8LJWhWuNYCKDf1Riuon5BECVU3EiwQBrA7mZtdI331r7K3ObYyrFQpB1L8Y8L6C 8qBvBvYsvA== -----END CERTIFICATE-----Generated at Wed Oct 14 21:03:40 2026 by rpki-client