$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft File: 3EEEE97335393C19F4043C9CE5E7352198F585B8.mft (raw, json) Hash identifier: fcP59IYudfv7SGBkqVyg8VModbDa4NG/lUwgUIcutZU= Subject key identifier: B9:23:56:43:CF:8C:5B:D9:85:3C:CD:37:2A:3C:06:38:EF:67:4A:42 Authority key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 Certificate issuer: /CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Certificate serial: 2BE7911287B9FBB66706594ED9EEE64A55B28844 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft Manifest number: 66 Signing time: Sat 26 Sep 2026 06:28:13 +0000 Manifest this update: Sat 26 Sep 2026 06:23:13 +0000 Manifest next update: Tue 29 Sep 2026 09:56:13 +0000 Files and hashes: 1: 3EEEE97335393C19F4043C9CE5E7352198F585B8.crl (hash: 7kPJvzfxaqUZcaJW3ia9Hba3Krb5EFD76vugliQ0IpA=) 2: 3231302e37362e34382e302f32302d3230203d3e2034383337.roa (hash: 4JklFnUiQ9RVk24i9PELwuHpnqaXPe2enthJw8gDFEs=) 3: 3231302e37362e33322e302f31392d3139203d3e2034383337.roa (hash: v5qZkA184lUeQZJHDQwhK9Q2fbhNxvuiIjmXjqZSX+Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e7:91:12:87:b9:fb:b6:67:06:59:4e:d9:ee:e6:4a:55:b2:88:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Validity Not Before: Sep 26 06:23:13 2026 GMT Not After : Sep 29 09:56:13 2026 GMT Subject: CN=B9235643CF8C5BD9853CCD372A3C0638EF674A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:c9:36:e7:83:fa:08:4f:9a:02:0b:35:85: e5:1f:00:eb:63:94:62:7d:38:ec:11:68:a8:d5:61: d9:19:2e:54:03:da:f5:be:e4:13:3a:b7:19:a6:6f: fa:74:a8:00:de:7b:26:3b:e6:7c:9e:31:8a:6c:3b: bf:0d:ec:d8:d3:f0:23:d2:b0:65:0a:08:a5:44:27: bd:2b:4d:22:94:2b:7b:57:c4:31:78:89:cd:7f:b0: 7b:7b:37:1a:28:4f:b3:c6:bb:8c:72:62:9a:73:f0: a1:0f:48:a2:ac:84:fc:c1:d4:08:79:11:8f:aa:ae: 03:57:95:99:c5:f5:dc:a3:1d:7b:6b:c5:f1:00:88: 6b:bb:64:5b:93:80:84:60:c7:29:9a:ed:8e:7f:30: 84:17:c5:05:63:73:61:53:40:89:f9:f1:bf:76:63: 1d:13:75:66:b1:31:bd:fd:cf:da:7d:4d:a4:ec:9f: 63:83:89:2c:61:6f:09:05:d0:70:e4:46:eb:2c:d7: 81:ab:40:88:e7:b9:4a:f5:c6:81:11:3c:af:10:a9: b2:46:ea:87:09:3f:2b:f4:04:9e:96:15:5d:32:6f: d7:34:e7:18:5b:bc:5b:2d:b1:1a:88:cd:e7:41:84: 46:63:78:86:71:fe:7a:68:bd:fc:59:8b:c3:36:90: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:23:56:43:CF:8C:5B:D9:85:3C:CD:37:2A:3C:06:38:EF:67:4A:42 X509v3 Authority Key Identifier: keyid:3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dd:8e:26:78:9e:05:b1:3a:ee:f4:5f:5d:29:14:1d:9d:50: d0:d8:68:a3:d3:a4:de:ea:43:c6:76:cf:57:54:b8:eb:85:89: 94:c7:ff:43:ab:f3:90:2d:63:87:16:ae:98:63:38:e3:7c:a1: 9a:21:d2:50:b4:b5:01:f8:d1:7f:51:5e:a2:9c:71:93:f9:33: 95:ae:30:86:5a:62:36:7b:44:95:77:7f:82:5b:e9:3e:e0:34: e9:1d:df:bb:83:97:3d:da:b4:f4:8d:d8:6f:e6:3b:e5:1e:05: 57:35:89:d4:89:08:d0:19:6e:86:fa:95:29:fc:6b:d1:67:87: e9:3a:98:c2:b8:aa:6e:5a:1d:f7:52:ab:83:60:6c:14:e4:50: 4b:ab:4c:5c:44:6d:d4:ee:79:75:c3:df:b8:5e:98:10:4a:57: e8:bf:06:dc:b2:49:9c:73:66:9b:aa:c5:97:4c:56:21:68:d6: 2c:a3:fe:cb:79:96:3e:a3:6c:98:c8:42:2c:84:58:26:9d:07: b7:3d:fd:df:6d:bf:67:be:7a:c9:be:7b:8e:60:db:4e:16:70: 96:60:b0:1f:a4:9f:bb:3f:f9:19:31:75:8d:fd:03:3a:d2:24: 00:f3:32:5b:c9:8c:e7:0f:2c:2a:21:fa:58:96:c8:fa:68:99: c2:30:64:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK+eREoe5+7ZnBllO2e7mSlWyiEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5 OEY1ODVCODAeFw0yNjA5MjYwNjIzMTNaFw0yNjA5MjkwOTU2MTNaMDMxMTAvBgNV BAMTKEI5MjM1NjQzQ0Y4QzVCRDk4NTNDQ0QzNzJBM0MwNjM4RUY2NzRBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/ck254P6CE+aAgs1heUfAOtj lGJ9OOwRaKjVYdkZLlQD2vW+5BM6txmmb/p0qADeeyY75nyeMYpsO78N7NjT8CPS sGUKCKVEJ70rTSKUK3tXxDF4ic1/sHt7NxooT7PGu4xyYppz8KEPSKKshPzB1Ah5 EY+qrgNXlZnF9dyjHXtrxfEAiGu7ZFuTgIRgxyma7Y5/MIQXxQVjc2FTQIn58b92 Yx0TdWaxMb39z9p9TaTsn2ODiSxhbwkF0HDkRuss14GrQIjnuUr1xoERPK8QqbJG 6ocJPyv0BJ6WFV0yb9c05xhbvFstsRqIzedBhEZjeIZx/npovfxZi8M2kLY5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuSNWQ8+MW9mFPM03KjwGOO9nSkIwHwYDVR0j BBgwFoAUPu7pczU5PBn0BDyc5ec1IZj1hbgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjQwNjEyMzExNTExODYyNy8wLzNFRUVFOTczMzUzOTNDMTlGNDA0M0M5Q0U1RTcz NTIxOThGNTg1QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5OEY1ODVCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI0MDYxMjMxMTUxMTg2MjcvMC8zRUVFRTk3MzM1Mzkz QzE5RjQwNDNDOUNFNUU3MzUyMTk4RjU4NUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHd2OJnieBbE6 7vRfXSkUHZ1Q0Nhoo9Ok3upDxnbPV1S464WJlMf/Q6vzkC1jhxaumGM443yhmiHS ULS1AfjRf1Feopxxk/kzla4whlpiNntElXd/glvpPuA06R3fu4OXPdq09I3Yb+Y7 5R4FVzWJ1IkI0BluhvqVKfxr0WeH6TqYwriqblod91Krg2BsFORQS6tMXERt1O55 dcPfuF6YEEpX6L8G3LJJnHNmm6rFl0xWIWjWLKP+y3mWPqNsmMhCLIRYJp0Htz39 322/Z756yb57jmDbThZwlmCwH6Sfuz/5GTF1jf0DOtIkAPMyW8mM5w8sKiH6WJbI +miZwjBk2w== -----END CERTIFICATE-----Generated at Sat Sep 26 17:14:03 2026 by rpki-client