$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: lkfonjdW2xdH6inSj/trok4nNJGJkBn8uX/sBIC5Mf0= Subject key identifier: F0:95:DB:23:5E:61:3B:7D:8F:76:FF:DC:2F:29:85:F6:A2:17:63:DF Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 2E2759DBB3CA023C2078A1BC84A5A2A106DB80E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 45 Signing time: Fri 24 Jul 2026 05:20:27 +0000 Manifest this update: Fri 24 Jul 2026 05:15:27 +0000 Manifest next update: Sat 25 Jul 2026 07:35:27 +0000 Files and hashes: 1: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 2: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: 8JPFgxXos7XVUPsP1S11s49ctKA/zMtyOlcw2qFuRSE=) 3: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 4: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 5: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 6: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 7: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 8: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 9: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:27:59:db:b3:ca:02:3c:20:78:a1:bc:84:a5:a2:a1:06:db:80:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jul 24 05:15:27 2026 GMT Not After : Jul 25 07:35:27 2026 GMT Subject: CN=F095DB235E613B7D8F76FFDC2F2985F6A21763DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:79:5e:0c:72:9c:de:f6:a9:5a:56:50:8a: a2:7f:19:4a:1f:a1:44:32:48:90:f1:dd:8a:46:02: c1:21:96:6f:74:08:1b:1b:e2:7e:8a:cb:b9:41:e7: 10:83:a5:3b:a3:46:91:15:67:18:b2:95:e4:d3:40: 11:d7:24:ac:be:7b:eb:ad:1f:27:b1:26:80:0b:bc: 2f:87:db:dc:fd:d8:2b:3b:09:bc:fd:ff:16:67:c4: 83:25:02:c2:21:60:9b:e1:2e:00:e8:b3:0d:19:ed: 28:bd:12:b5:1b:be:ad:46:f5:4f:d1:b4:e8:37:6a: 8f:6d:b2:ed:26:30:55:a8:f5:93:e4:c3:b0:3c:33: 97:f2:73:4e:2f:be:c3:07:8e:7a:f2:c8:b7:62:c3: 6e:a8:3a:77:cb:fa:a4:9c:3d:64:41:00:eb:1e:57: 5b:c3:b4:89:9e:ac:77:12:bb:0d:6b:66:ea:7b:c4: 70:ae:52:1f:a7:a7:35:10:8c:df:d2:f7:bb:06:65: f9:42:68:0a:46:72:5e:91:c8:2b:79:65:05:c9:a9: d4:39:81:dd:f4:67:9b:d9:b1:79:2c:bf:1e:19:bc: 11:1e:1e:15:9c:89:cc:22:e7:1b:16:8e:0b:4e:8c: d0:fd:a9:8d:bc:b6:bb:6a:46:ad:f2:ec:63:52:00: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:95:DB:23:5E:61:3B:7D:8F:76:FF:DC:2F:29:85:F6:A2:17:63:DF X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:17:ad:90:ef:40:67:f5:06:b1:05:0f:d4:cb:43:57:fe:48: 5d:12:25:4d:2e:b4:c8:03:7d:bf:95:55:d4:ad:63:a6:37:4d: fe:fc:1d:51:9c:68:98:67:86:f6:c5:34:94:d6:2d:cd:7a:aa: 1e:4e:9e:7e:a0:15:3f:3d:5b:dd:a5:20:94:f1:48:e4:8f:74: c8:71:d6:e0:7f:a4:d2:69:77:50:57:33:61:8c:ed:99:7c:cf: 74:30:df:01:03:71:27:e8:73:6b:ce:83:a7:f7:dd:21:34:34: 02:7b:60:28:3d:7a:40:9b:87:a5:e0:8f:c6:4b:df:6d:37:26: 1c:d2:fd:5d:b6:e5:bb:19:31:6e:40:76:ab:c9:3a:34:00:d8: 6f:24:51:76:51:b6:93:95:f2:b3:29:54:cf:62:e3:6c:52:73: 35:c5:c2:d4:e0:31:2a:dd:eb:61:56:8b:6d:2a:12:84:a6:56: 2e:4c:5a:8f:07:ac:87:a2:14:4e:e2:45:cb:f5:83:76:b9:d4: e0:84:31:1d:4f:85:f1:ba:6b:1f:9a:7c:56:16:14:c4:25:41: 1f:4a:d1:74:6d:72:f2:9b:3e:d4:09:82:93:ca:42:47:6b:9f: 4d:f0:94:b3:1b:21:a7:82:8c:fc:8d:83:0a:d7:d3:44:bd:b6: bb:86:2e:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULidZ27PKAjwgeKG8hKWioQbbgOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA3MjQwNTE1MjdaFw0yNjA3MjUwNzM1MjdaMDMxMTAvBgNV BAMTKEYwOTVEQjIzNUU2MTNCN0Q4Rjc2RkZEQzJGMjk4NUY2QTIxNzYzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/f3leDHKc3vapWlZQiqJ/GUof oUQySJDx3YpGAsEhlm90CBsb4n6Ky7lB5xCDpTujRpEVZxiyleTTQBHXJKy+e+ut HyexJoALvC+H29z92Cs7Cbz9/xZnxIMlAsIhYJvhLgDosw0Z7Si9ErUbvq1G9U/R tOg3ao9tsu0mMFWo9ZPkw7A8M5fyc04vvsMHjnryyLdiw26oOnfL+qScPWRBAOse V1vDtImerHcSuw1rZup7xHCuUh+npzUQjN/S97sGZflCaApGcl6RyCt5ZQXJqdQ5 gd30Z5vZsXksvx4ZvBEeHhWcicwi5xsWjgtOjND9qY28trtqRq3y7GNSAK2HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8JXbI15hO32Pdv/cLymF9qIXY98wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRetkO9AZ/UG sQUP1MtDV/5IXRIlTS60yAN9v5VV1K1jpjdN/vwdUZxomGeG9sU0lNYtzXqqHk6e fqAVPz1b3aUglPFI5I90yHHW4H+k0ml3UFczYYztmXzPdDDfAQNxJ+hza86Dp/fd ITQ0AntgKD16QJuHpeCPxkvfbTcmHNL9XbbluxkxbkB2q8k6NADYbyRRdlG2k5Xy sylUz2LjbFJzNcXC1OAxKt3rYVaLbSoShKZWLkxajwesh6IUTuJFy/WDdrnU4IQx HU+F8bprH5p8VhYUxCVBH0rRdG1y8ps+1AmCk8pCR2ufTfCUsxshp4KM/I2DCtfT RL22u4YuRQ== -----END CERTIFICATE-----Generated at Fri Jul 24 18:35:30 2026 by rpki-client