
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json)
Hash identifier: jx6w+n4K6F4ob6uFQFhXuI+9udrJsdmjuxslmHdrl7Y=
Subject key identifier: 44:6A:30:01:FD:9A:C3:DC:AC:3B:68:1A:79:4A:66:8B:8E:2C:9E:1A
Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Certificate serial: 32615537A3AED7F247ACFB7522962AC23F3D4F05
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
Manifest number: 0144
Signing time: Thu 16 Apr 2026 21:54:35 +0000
Manifest this update: Thu 16 Apr 2026 21:49:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=)
2: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=)
3: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=)
4: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=)
5: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=)
6: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=)
7: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=)
8: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=)
9: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: QoyczAHWqFlOkatC4ZApHpPmQKtukmayRWoC7yDg59w=)
10: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=)
11: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=)
12: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=)
13: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=)
14: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=)
15: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=)
16: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=)
17: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:61:55:37:a3:ae:d7:f2:47:ac:fb:75:22:96:2a:c2:3f:3d:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE
Validity
Not Before: Apr 16 21:49:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=446A3001FD9AC3DCAC3B681A794A668B8E2C9E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:14:fa:bc:46:24:3f:6a:1b:a1:89:fa:1d:
f2:ad:5f:48:8a:23:00:4b:c1:7e:45:71:2f:64:df:
d7:79:52:d5:12:e0:e7:32:1e:7c:60:2d:6a:31:bf:
c0:34:71:18:86:ea:30:77:ba:07:cb:31:9b:01:aa:
35:66:cb:7e:1a:05:70:6a:63:49:74:dd:6e:a9:e5:
59:ff:3a:77:f9:0c:88:1a:83:e1:1b:d8:77:a4:c9:
17:d3:31:6a:3e:a7:22:26:22:40:c5:00:2c:0a:4b:
84:52:77:e7:59:7a:50:be:3d:c0:d2:9f:c7:19:b8:
5b:88:fd:21:2c:a5:28:a8:e7:0a:a1:f3:43:ff:8b:
da:3c:90:19:00:ed:3d:43:de:8d:83:5f:d7:f4:da:
a3:23:a7:23:b6:3a:68:a1:d4:9c:74:86:eb:79:d9:
40:4f:d3:26:05:27:bb:00:0c:1b:ca:b2:49:ff:33:
9a:6c:3c:10:08:44:de:0e:ff:4d:9d:75:97:ff:79:
68:a3:a5:5f:6f:a6:15:0f:e4:e5:b2:18:e6:d8:56:
60:5c:3f:74:9e:b7:94:22:d0:fb:c3:15:21:e0:5c:
44:59:7a:c2:87:0f:b6:2f:d7:28:2a:c5:d7:9f:51:
92:5f:fe:d6:e8:3b:6c:ff:76:3d:13:d5:27:b3:3e:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:30:01:FD:9A:C3:DC:AC:3B:68:1A:79:4A:66:8B:8E:2C:9E:1A
X509v3 Authority Key Identifier:
keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4d:40:16:89:9e:99:3c:60:fb:7c:2d:27:dd:aa:9a:68:06:
70:cb:33:7c:bf:26:ec:bc:b2:4a:da:ea:5d:21:bc:3b:31:cb:
22:53:e9:3b:95:99:77:b1:b8:5e:bd:6f:7d:1b:5e:cb:48:96:
9a:aa:2e:5c:58:1e:2e:00:6d:8a:f7:da:d1:bb:1a:3d:8b:ed:
ef:44:06:82:91:33:ca:9a:c5:df:ab:83:54:cd:55:96:c3:4b:
f8:33:db:5e:16:5a:c5:18:10:80:bd:6c:2f:83:f0:97:58:83:
ab:d4:02:8e:33:ab:1c:58:7b:8a:34:9a:36:cc:4d:8b:db:18:
eb:63:e3:5c:5a:13:fd:42:99:6f:70:9e:ef:7d:54:74:34:21:
72:4b:94:4f:0b:20:1a:d0:58:23:1a:73:da:df:61:3f:64:40:
8b:cd:cc:90:e5:41:32:42:7a:6a:54:0c:64:d5:8f:bb:56:1b:
27:47:29:62:15:06:85:2d:e2:8c:5b:a9:e4:58:66:32:04:0f:
c0:fc:7e:48:c1:cf:dd:4b:38:51:d1:1c:a7:4c:67:80:41:ee:
80:8e:44:0b:80:0f:13:22:f6:5f:53:ac:50:e1:fa:ca:87:4d:
e8:c9:a1:84:b6:8d:b1:af:46:0a:71:bc:b8:b4:9f:0b:8e:0c:
1f:af:a1:3c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMmFVN6Ou1/JHrPt1IpYqwj89TwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy
NjVGOTZDRTAeFw0yNjA0MTYyMTQ5MzVaFw0yNjA0MTgwMDAwMzVaMDMxMTAvBgNV
BAMTKDQ0NkEzMDAxRkQ5QUMzRENBQzNCNjgxQTc5NEE2NjhCOEUyQzlFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9BT6vEYkP2oboYn6HfKtX0iK
IwBLwX5FcS9k39d5UtUS4OcyHnxgLWoxv8A0cRiG6jB3ugfLMZsBqjVmy34aBXBq
Y0l03W6p5Vn/Onf5DIgag+Eb2HekyRfTMWo+pyImIkDFACwKS4RSd+dZelC+PcDS
n8cZuFuI/SEspSio5wqh80P/i9o8kBkA7T1D3o2DX9f02qMjpyO2Omih1Jx0hut5
2UBP0yYFJ7sADBvKskn/M5psPBAIRN4O/02ddZf/eWijpV9vphUP5OWyGObYVmBc
P3Set5Qi0PvDFSHgXERZesKHD7Yv1ygqxdefUZJf/tboO2z/dj0T1SezPvH1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQURGowAf2aw9ysO2gaeUpmi44snhowHwYDVR0j
BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB
QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz
RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU1AFomemTxg
+3wtJ92qmmgGcMszfL8m7LyyStrqXSG8OzHLIlPpO5WZd7G4Xr1vfRtey0iWmqou
XFgeLgBtivfa0bsaPYvt70QGgpEzyprF36uDVM1VlsNL+DPbXhZaxRgQgL1sL4Pw
l1iDq9QCjjOrHFh7ijSaNsxNi9sY62PjXFoT/UKZb3Ce731UdDQhckuUTwsgGtBY
Ixpz2t9hP2RAi83MkOVBMkJ6alQMZNWPu1YbJ0cpYhUGhS3ijFup5FhmMgQPwPx+
SMHP3Us4UdEcp0xngEHugI5EC4APEyL2X1OsUOH6yodN6MmhhLaNsa9GCnG8uLSf
C44MH6+hPA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:40 2026 by rpki-client