$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: fEc5C2JJPjZxt+Nc1kUCTOrKlX3MAiiBL5ruoj4Vgzk= Subject key identifier: D3:6E:E1:4C:5B:C4:FE:9A:30:40:2A:F1:B6:2B:6A:98:46:C0:BB:A8 Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 7F66E619E98E83A2573A1A0BB5366E32D2A28AF8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 87 Signing time: Sat 10 Oct 2026 02:29:06 +0000 Manifest this update: Sat 10 Oct 2026 02:24:06 +0000 Manifest next update: Tue 13 Oct 2026 05:42:06 +0000 Files and hashes: 1: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 2: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 3: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) 4: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 5: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 6: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 7: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 8: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: cmDGwFOrd2K3CnE3cVGs7LSCHgNYtZXetDpRALKp2YA=) 9: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 05:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:66:e6:19:e9:8e:83:a2:57:3a:1a:0b:b5:36:6e:32:d2:a2:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Oct 10 02:24:06 2026 GMT Not After : Oct 13 05:42:06 2026 GMT Subject: CN=D36EE14C5BC4FE9A30402AF1B62B6A9846C0BBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:47:55:2d:c1:b1:29:e1:db:a4:b4:bb:60: b7:4f:cf:32:1c:22:64:4e:1c:f4:58:71:d1:f1:04: ba:d9:95:3b:6f:e0:a3:cf:dd:12:ce:b5:c4:92:97: 7c:15:af:5b:d0:55:a2:7c:c9:a0:f9:66:c8:95:08: 04:df:ea:77:30:74:ea:cd:d4:3c:5d:5a:57:36:f8: da:97:e9:3e:c3:ce:51:eb:d8:42:4b:8d:1d:ac:37: 28:0a:b6:b1:73:65:a6:8d:93:ce:5e:21:13:d4:ce: c6:19:60:c9:db:5a:0a:f6:29:e4:e4:73:07:40:3d: 98:e0:b2:4d:38:78:35:4a:25:1c:b4:90:df:d8:43: 9b:91:55:ec:d5:78:5f:8c:2b:34:61:63:7a:5d:6a: 78:68:37:b7:20:82:3d:60:ef:ea:bd:53:41:e6:46: 41:c9:aa:1b:4c:1b:76:8d:1c:c1:f4:f5:0e:f9:0f: ff:d3:8f:6b:51:a1:db:32:f1:9d:3b:8a:bc:cb:e2: 7e:29:ee:18:b3:38:0c:5c:04:18:d8:ea:56:05:90: 9b:80:9b:b5:fb:ac:74:01:f0:db:d6:5d:2f:b0:f2: 6b:67:46:e7:cf:31:ab:83:f3:87:5a:0f:9a:b6:c0: 92:dc:28:a0:81:8e:26:8a:31:28:a2:d7:b3:c4:0f: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:E1:4C:5B:C4:FE:9A:30:40:2A:F1:B6:2B:6A:98:46:C0:BB:A8 X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:78:5c:48:64:5f:9e:01:48:5c:d2:69:06:9c:68:d2:b3:a3: 40:7a:75:68:88:96:5f:13:56:84:c7:4b:b8:4b:29:56:87:06: 0d:a5:af:1c:44:08:a1:e6:64:e1:e8:89:0c:26:cb:4a:93:e5: 80:69:65:e6:b1:6c:9c:a0:71:58:e7:79:23:0e:f7:de:62:0b: 1a:08:89:2c:aa:a9:4d:6c:54:d2:64:1c:70:fb:6e:ec:05:96: 8e:cb:13:84:85:21:cc:27:aa:1f:01:1f:57:f6:39:d2:00:97: 92:d8:90:22:66:1f:0a:ea:da:7e:eb:4d:26:69:8a:19:da:71: 08:e3:ee:4a:c3:ca:56:26:9a:67:9a:aa:1f:11:47:7e:ab:b2: 15:45:d9:5c:08:6e:51:be:62:ce:91:d8:be:e8:27:1c:85:14: 76:86:94:3c:12:45:cb:5d:fe:ea:7a:d4:98:5a:5b:d9:3e:00: 13:dd:80:0d:68:0f:0d:fe:d9:e7:b6:e1:61:61:37:d4:a7:aa: 51:c9:bd:25:30:16:e4:04:81:73:83:ba:f1:44:40:32:ef:0d: 79:d1:40:11:81:1d:95:d6:24:bb:90:35:fc:8e:16:d0:c5:a4: 38:cc:52:3e:16:c2:1b:5b:b3:8c:0d:2b:1b:47:5b:88:f3:99: a6:bc:84:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf2bmGemOg6JXOhoLtTZuMtKiivgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjEwMTAwMjI0MDZaFw0yNjEwMTMwNTQyMDZaMDMxMTAvBgNV BAMTKEQzNkVFMTRDNUJDNEZFOUEzMDQwMkFGMUI2MkI2QTk4NDZDMEJCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuEdVLcGxKeHbpLS7YLdPzzIc ImROHPRYcdHxBLrZlTtv4KPP3RLOtcSSl3wVr1vQVaJ8yaD5ZsiVCATf6ncwdOrN 1DxdWlc2+NqX6T7DzlHr2EJLjR2sNygKtrFzZaaNk85eIRPUzsYZYMnbWgr2KeTk cwdAPZjgsk04eDVKJRy0kN/YQ5uRVezVeF+MKzRhY3pdanhoN7cggj1g7+q9U0Hm RkHJqhtMG3aNHMH09Q75D//Tj2tRodsy8Z07irzL4n4p7hizOAxcBBjY6lYFkJuA m7X7rHQB8NvWXS+w8mtnRufPMauD84daD5q2wJLcKKCBjiaKMSii17PEDxg9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU027hTFvE/powQCrxtitqmEbAu6gwHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXhcSGRfngFI XNJpBpxo0rOjQHp1aIiWXxNWhMdLuEspVocGDaWvHEQIoeZk4eiJDCbLSpPlgGll 5rFsnKBxWOd5Iw733mILGgiJLKqpTWxU0mQccPtu7AWWjssThIUhzCeqHwEfV/Y5 0gCXktiQImYfCurafutNJmmKGdpxCOPuSsPKViaaZ5qqHxFHfquyFUXZXAhuUb5i zpHYvugnHIUUdoaUPBJFy13+6nrUmFpb2T4AE92ADWgPDf7Z57bhYWE31KeqUcm9 JTAW5ASBc4O68URAMu8NedFAEYEdldYku5A1/I4W0MWkOMxSPhbCG1uzjA0rG0db iPOZpryEfA== -----END CERTIFICATE-----Generated at Sun Oct 11 17:24:27 2026 by rpki-client