$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: Nu0sB1l+psfYdHEwkMu8aRUmBbpzx7QAGhF2G+e0yYw= Subject key identifier: 10:DB:47:48:4B:B7:10:C7:3F:31:97:9C:41:90:D8:DB:36:33:AD:48 Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 31AFD482CCAD6208672E6E93EEA60E51DA536302 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 57 Signing time: Fri 24 Jul 2026 12:51:14 +0000 Manifest this update: Fri 24 Jul 2026 12:46:14 +0000 Manifest next update: Sat 25 Jul 2026 15:16:14 +0000 Files and hashes: 1: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) 2: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: fxvanCkM9bugBQf686qHHyl8Pt2X2jSWzpyqt4wFYek=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 15:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:af:d4:82:cc:ad:62:08:67:2e:6e:93:ee:a6:0e:51:da:53:63:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Jul 24 12:46:14 2026 GMT Not After : Jul 25 15:16:14 2026 GMT Subject: CN=10DB47484BB710C73F31979C4190D8DB3633AD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:4a:dd:f1:91:83:cd:9d:10:07:34:5f:d1: d2:c8:0c:f2:40:fc:b0:d9:47:51:6d:2c:b4:19:f3: f9:0c:01:cd:b8:de:77:77:75:c9:7b:d7:87:87:1b: ee:58:80:77:fe:5d:ba:2c:ff:c5:67:9a:b3:2e:0a: 27:fe:e1:81:85:66:4f:42:a9:61:0b:0b:f6:61:d3: f2:c7:ba:9a:c6:e4:26:1a:9e:e0:24:04:c1:7a:57: 95:d7:2f:47:a6:3a:a2:e6:40:b7:b1:96:3a:73:57: 28:d1:80:2b:a3:32:9b:ad:e8:56:c1:20:c7:fd:a3: d0:74:68:a6:21:a1:88:d0:50:3e:b7:f9:8b:bf:96: 4c:74:2b:5c:b4:96:50:ef:81:6c:cf:72:10:ef:8e: 74:f1:f2:a6:59:9d:c3:e5:05:02:79:bc:8b:51:71: 31:14:c8:61:7b:93:a0:79:ee:fe:75:6e:33:03:c7: 14:e7:24:6e:1c:c0:a7:87:12:27:34:8e:2a:a4:5e: df:d3:61:4e:d9:63:ac:75:7e:ad:f4:00:e5:09:6a: 90:aa:87:a5:28:e1:06:a9:a5:89:4a:e7:35:50:ad: 66:8d:67:35:93:70:a7:c3:fa:cb:56:41:ee:5a:a4: 8b:36:ab:01:d7:e8:d1:e3:8b:79:4d:da:9a:70:82: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:47:48:4B:B7:10:C7:3F:31:97:9C:41:90:D8:DB:36:33:AD:48 X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:20:52:9e:ec:da:c4:0b:e5:f3:d3:7d:fd:28:77:75:ab:61: 66:b5:fc:f8:df:7c:47:ac:5c:10:25:a1:aa:0b:99:cc:cb:3b: 5a:30:6b:09:d5:fe:9e:70:a1:3f:5d:bd:e5:66:8e:68:d5:98: 80:ea:8b:01:7b:23:67:fe:2b:9c:6f:71:25:ff:4c:5e:47:cf: b5:80:8c:20:b3:d9:be:4e:61:73:67:ae:1a:e7:e5:83:34:ff: 1d:63:50:c5:d9:37:31:22:b6:d6:af:c1:9a:d2:46:03:66:3f: 9f:4b:f2:d3:2c:61:86:a6:53:78:ea:a9:9c:c8:7f:48:8e:30: 57:ae:9c:8c:cc:39:41:fa:2f:5d:a6:5e:51:60:c5:97:9b:da: fe:cc:42:df:c2:19:e0:c8:d6:4f:33:61:b2:0e:c2:52:eb:b6: 78:8d:0b:1f:cc:02:f3:93:27:8b:1d:77:ad:07:4b:64:0f:4f: ce:f1:6c:45:79:2a:a5:4b:82:aa:4c:48:bd:f8:eb:1c:d1:24: fe:07:62:a7:fc:12:67:42:0c:4a:d1:eb:27:f9:7e:ce:0c:b8: 38:f9:fb:03:79:2d:87:7d:79:27:c0:e6:df:c7:78:d7:38:a7: 67:93:4a:8d:f0:d7:17:06:7a:37:b5:b2:7a:83:01:d8:0d:7f: ef:3b:0c:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMa/UgsytYghnLm6T7qYOUdpTYwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjA3MjQxMjQ2MTRaFw0yNjA3MjUxNTE2MTRaMDMxMTAvBgNV BAMTKDEwREI0NzQ4NEJCNzEwQzczRjMxOTc5QzQxOTBEOERCMzYzM0FENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/Erd8ZGDzZ0QBzRf0dLIDPJA /LDZR1FtLLQZ8/kMAc243nd3dcl714eHG+5YgHf+Xbos/8VnmrMuCif+4YGFZk9C qWELC/Zh0/LHuprG5CYanuAkBMF6V5XXL0emOqLmQLexljpzVyjRgCujMput6FbB IMf9o9B0aKYhoYjQUD63+Yu/lkx0K1y0llDvgWzPchDvjnTx8qZZncPlBQJ5vItR cTEUyGF7k6B57v51bjMDxxTnJG4cwKeHEic0jiqkXt/TYU7ZY6x1fq30AOUJapCq h6Uo4QappYlK5zVQrWaNZzWTcKfD+stWQe5apIs2qwHX6NHji3lN2ppwgn8pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUENtHSEu3EMc/MZecQZDY2zYzrUgwHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyBSnuzaxAvl 89N9/Sh3dathZrX8+N98R6xcECWhqguZzMs7WjBrCdX+nnChP1295WaOaNWYgOqL AXsjZ/4rnG9xJf9MXkfPtYCMILPZvk5hc2euGuflgzT/HWNQxdk3MSK21q/BmtJG A2Y/n0vy0yxhhqZTeOqpnMh/SI4wV66cjMw5QfovXaZeUWDFl5va/sxC38IZ4MjW TzNhsg7CUuu2eI0LH8wC85Mnix13rQdLZA9PzvFsRXkqpUuCqkxIvfjrHNEk/gdi p/wSZ0IMStHrJ/l+zgy4OPn7A3kth315J8Dm38d41zinZ5NKjfDXFwZ6N7WyeoMB 2A1/7zsMBQ== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:29 2026 by rpki-client