$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft File: 3EEEE97335393C19F4043C9CE5E7352198F585B8.mft (raw, json) Hash identifier: Spj0fbRmXVfLmXjzXOAh3h/qeSoha0tBBKI0FeIyFbg= Subject key identifier: 46:5E:61:D6:15:9C:2D:F1:9A:8C:57:C7:4E:04:ED:4F:58:62:6F:18 Authority key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 Certificate issuer: /CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Certificate serial: 5CD95A9DBF688A7EE8B92E42A9F837D1ABEAF1D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft Manifest number: 29 Signing time: Thu 23 Jul 2026 21:44:38 +0000 Manifest this update: Thu 23 Jul 2026 21:39:38 +0000 Manifest next update: Fri 24 Jul 2026 23:03:38 +0000 Files and hashes: 1: 3231302e37362e33322e302f31392d3139203d3e2034383337.roa (hash: v5qZkA184lUeQZJHDQwhK9Q2fbhNxvuiIjmXjqZSX+Y=) 2: 3231302e37362e34382e302f32302d3230203d3e2034383337.roa (hash: 4JklFnUiQ9RVk24i9PELwuHpnqaXPe2enthJw8gDFEs=) 3: 3EEEE97335393C19F4043C9CE5E7352198F585B8.crl (hash: +wGUHPGVu7wBJl754TJrXu72AaqwusYLaKut9G0pyw8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d9:5a:9d:bf:68:8a:7e:e8:b9:2e:42:a9:f8:37:d1:ab:ea:f1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Validity Not Before: Jul 23 21:39:38 2026 GMT Not After : Jul 24 23:03:38 2026 GMT Subject: CN=465E61D6159C2DF19A8C57C74E04ED4F58626F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:03:45:cd:ae:7c:d5:7f:e0:5b:32:e4:1e: 0d:f1:1a:88:18:7e:1a:c1:f9:1a:cd:95:c3:74:1d: 3c:02:9c:50:51:c1:d8:4c:8f:86:26:01:29:83:34: 77:60:7b:8f:4c:31:d0:80:33:d8:fc:39:54:4b:ca: 36:a3:79:37:30:da:1a:01:56:27:bc:51:89:c9:53: 1f:db:24:f9:d6:00:dc:f7:e2:d0:1b:d5:50:fa:13: db:bf:91:80:f1:2e:fb:bf:ac:29:88:89:5c:c6:69: 75:c2:74:33:8a:9b:b2:89:b9:26:a8:b1:ad:7c:d7: e5:fd:7a:96:da:d6:eb:38:56:89:4c:d9:f1:32:c1: e5:de:48:83:b8:7b:e7:25:5d:c6:78:c8:c9:a0:9e: fd:04:51:0f:b5:4f:d1:48:4a:3e:2e:b4:75:86:47: 46:13:f7:37:9d:a9:e6:72:ca:b3:3b:ff:df:8a:44: 7b:16:68:3a:52:27:5a:b3:75:d0:e5:4a:f6:e7:6e: f5:c0:c4:53:b2:05:19:8d:34:fd:1c:57:80:43:df: 5f:5f:66:73:5b:84:a8:be:5d:17:8c:ec:49:6d:bb: 87:1d:94:17:1f:2d:9b:20:57:0d:65:ef:f7:90:ee: 7c:58:4d:5d:2e:c2:a2:82:80:9c:05:7d:56:fd:3b: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:61:D6:15:9C:2D:F1:9A:8C:57:C7:4E:04:ED:4F:58:62:6F:18 X509v3 Authority Key Identifier: keyid:3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b9:c3:5b:60:a7:0f:c1:2e:70:94:09:01:9f:0a:43:b6:47: 2f:55:ba:45:60:43:eb:df:33:70:c2:52:cd:42:dc:f1:ad:bb: 54:6a:53:1e:02:cb:0d:32:1a:bb:7c:4b:e6:48:63:84:cd:29: ca:0d:0b:33:e8:5a:cb:c8:24:ce:10:11:44:1e:25:51:6f:2c: 28:35:cc:33:59:2b:cf:06:af:37:f4:bc:d7:56:e5:43:55:e5: b0:c1:e1:ae:64:f9:56:16:a0:33:85:90:c8:de:ef:c8:fb:cf: 9e:c2:1a:a3:41:9b:bf:d9:0b:61:b5:44:65:55:8d:45:be:f7: 7d:63:49:df:62:2c:4c:f3:36:3b:29:23:3d:7d:05:7e:e6:57: 02:45:9f:23:72:1f:9b:93:6b:6e:78:a3:d4:1c:2b:22:f5:37: 93:c9:1b:3a:e5:9a:9a:bb:b5:6c:fe:71:0c:68:03:9f:89:dd: 9d:f8:51:a6:8a:4b:b5:70:a9:26:7a:47:7a:17:a3:3d:69:27: a9:28:0a:c6:78:3e:76:cf:66:1d:c9:22:7e:0f:d5:55:69:a8: e8:79:0d:13:ed:fb:b8:cd:88:3d:e8:dc:f3:75:a7:3d:ce:b9: b1:1c:0d:98:42:45:52:4e:30:b5:c5:87:53:4f:a7:20:5b:70: 9e:1c:1d:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXNlanb9oin7ouS5Cqfg30avq8dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5 OEY1ODVCODAeFw0yNjA3MjMyMTM5MzhaFw0yNjA3MjQyMzAzMzhaMDMxMTAvBgNV BAMTKDQ2NUU2MUQ2MTU5QzJERjE5QThDNTdDNzRFMDRFRDRGNTg2MjZGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZrgNFza581X/gWzLkHg3xGogY fhrB+RrNlcN0HTwCnFBRwdhMj4YmASmDNHdge49MMdCAM9j8OVRLyjajeTcw2hoB Vie8UYnJUx/bJPnWANz34tAb1VD6E9u/kYDxLvu/rCmIiVzGaXXCdDOKm7KJuSao sa181+X9epba1us4VolM2fEyweXeSIO4e+clXcZ4yMmgnv0EUQ+1T9FISj4utHWG R0YT9zedqeZyyrM7/9+KRHsWaDpSJ1qzddDlSvbnbvXAxFOyBRmNNP0cV4BD319f ZnNbhKi+XReM7Eltu4cdlBcfLZsgVw1l7/eQ7nxYTV0uwqKCgJwFfVb9O3BPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURl5h1hWcLfGajFfHTgTtT1hibxgwHwYDVR0j BBgwFoAUPu7pczU5PBn0BDyc5ec1IZj1hbgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjQwNjEyMzExNTExODYyNy8wLzNFRUVFOTczMzUzOTNDMTlGNDA0M0M5Q0U1RTcz NTIxOThGNTg1QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5OEY1ODVCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI0MDYxMjMxMTUxMTg2MjcvMC8zRUVFRTk3MzM1Mzkz QzE5RjQwNDNDOUNFNUU3MzUyMTk4RjU4NUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7nDW2CnD8Eu cJQJAZ8KQ7ZHL1W6RWBD698zcMJSzULc8a27VGpTHgLLDTIau3xL5khjhM0pyg0L M+hay8gkzhARRB4lUW8sKDXMM1krzwavN/S811blQ1XlsMHhrmT5VhagM4WQyN7v yPvPnsIao0Gbv9kLYbVEZVWNRb73fWNJ32IsTPM2OykjPX0FfuZXAkWfI3Ifm5Nr bnij1BwrIvU3k8kbOuWamru1bP5xDGgDn4ndnfhRpopLtXCpJnpHehejPWknqSgK xng+ds9mHckifg/VVWmo6HkNE+37uM2IPejc83WnPc65sRwNmEJFUk4wtcWHU0+n IFtwnhwd9w== -----END CERTIFICATE-----Generated at Fri Jul 24 02:34:21 2026 by rpki-client