$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: CyjKcjuPMhsjB0w82i9zJU19ZKrhFMGEHRHnP7FfAbE= Subject key identifier: 69:8B:F2:69:F4:DC:C1:CE:CB:0D:8C:85:CB:98:C3:FB:CF:4D:9D:A2 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 5B7E0B7763120C1F3C1DE14CCB00F8F88C08FE39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 01D5 Signing time: Tue 28 Jul 2026 21:42:47 +0000 Manifest this update: Tue 28 Jul 2026 21:37:47 +0000 Manifest next update: Thu 30 Jul 2026 00:41:47 +0000 Files and hashes: 1: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 2: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 3: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 4: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 5: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 6: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 7: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 8: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 9: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: GJuJ35gvFv4RP6MazYjpL1HXxG9Wz8YkLUDANATnlXI=) 10: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 11: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 12: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 13: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 14: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 15: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 16: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 17: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 18: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 19: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7e:0b:77:63:12:0c:1f:3c:1d:e1:4c:cb:00:f8:f8:8c:08:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jul 28 21:37:47 2026 GMT Not After : Jul 30 00:41:47 2026 GMT Subject: CN=698BF269F4DCC1CECB0D8C85CB98C3FBCF4D9DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:20:d0:a4:3f:7c:65:31:c9:56:f3:88:29: 92:90:bb:05:ac:d9:e1:52:6d:47:ce:1f:17:4a:c8: 34:e0:ae:93:1b:1b:ac:0f:3b:dd:a4:9e:73:3a:c9: cf:43:f6:e8:1b:94:a7:67:75:29:46:2a:e4:3a:92: f0:13:9f:fc:86:38:d4:b5:01:00:02:c4:06:66:9d: a9:50:ec:e4:ac:d1:ae:fb:12:5a:77:76:93:95:19: ce:cb:07:6b:aa:10:37:e4:b6:f7:59:5a:ec:f1:58: 52:26:bb:37:20:58:a8:8b:dc:ab:89:a7:55:68:c4: d8:e2:3b:cd:a4:77:f3:4f:55:a6:cc:6d:df:17:8a: 3d:9f:a8:d8:3e:20:47:92:f0:35:a8:eb:67:1f:79: 08:09:62:eb:7b:f2:fd:ca:18:7a:ab:08:00:92:36: a5:86:5f:3c:9d:b6:64:87:fb:94:f8:74:13:db:2c: c2:b1:08:d2:aa:2c:1d:bb:25:2c:00:fd:97:af:56: 56:79:d0:61:7b:91:7d:05:82:9f:41:d8:ab:13:2e: ae:c4:e8:7b:64:0f:98:ca:1c:30:fb:17:e0:a0:c8: dc:9c:8c:ec:66:64:b0:5d:fa:e5:40:cd:a4:4e:d5: 2b:a1:4b:ed:0d:8d:bc:85:d7:52:30:e6:8a:40:86: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8B:F2:69:F4:DC:C1:CE:CB:0D:8C:85:CB:98:C3:FB:CF:4D:9D:A2 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:db:43:54:a7:3f:fc:ad:19:80:d8:d4:72:dc:13:f6:9e:e7: cc:17:22:bb:16:8f:c7:03:15:a8:c5:76:14:25:64:e7:6b:60: 4b:e4:92:b2:2f:94:36:2a:22:4e:71:ae:16:bf:8f:6c:ab:a5: d8:72:9b:29:9f:e7:09:07:dd:78:29:78:ee:ea:f1:b7:cd:15: 91:22:e5:25:3c:e7:d5:02:94:6f:20:84:11:45:7f:39:d7:58: 48:99:6f:4a:cd:af:50:01:d9:b8:10:09:e4:b3:ee:02:18:3b: 85:38:aa:c9:77:d0:44:e6:fe:9f:76:07:79:65:8a:1d:96:99: d4:fa:1c:79:fb:a2:26:a6:10:d0:3c:33:60:21:a3:e2:2c:c6: 45:8e:e8:74:f2:2b:67:12:45:6f:71:65:bf:56:c4:1b:4e:ce: 3f:6e:d8:01:b6:78:fa:a6:41:a1:be:ef:7f:04:45:f0:04:ed: 6f:86:65:08:fe:97:a6:70:93:11:35:da:30:27:25:1a:44:0c: 3b:13:89:84:09:39:4d:a1:5c:b3:00:b6:1c:5b:e7:ed:0a:d7: b6:6e:29:ac:1c:f0:7b:ba:f0:c1:48:70:68:da:b2:09:1e:bd: 4b:4b:a3:55:c5:f0:7a:ae:33:57:d5:82:cb:8b:4f:43:4e:dc: 6e:13:4b:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW34Ld2MSDB88HeFMywD4+IwI/jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA3MjgyMTM3NDdaFw0yNjA3MzAwMDQxNDdaMDMxMTAvBgNV BAMTKDY5OEJGMjY5RjREQ0MxQ0VDQjBEOEM4NUNCOThDM0ZCQ0Y0RDlEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVSDQpD98ZTHJVvOIKZKQuwWs 2eFSbUfOHxdKyDTgrpMbG6wPO92knnM6yc9D9ugblKdndSlGKuQ6kvATn/yGONS1 AQACxAZmnalQ7OSs0a77Elp3dpOVGc7LB2uqEDfktvdZWuzxWFImuzcgWKiL3KuJ p1VoxNjiO82kd/NPVabMbd8Xij2fqNg+IEeS8DWo62cfeQgJYut78v3KGHqrCACS NqWGXzydtmSH+5T4dBPbLMKxCNKqLB27JSwA/ZevVlZ50GF7kX0Fgp9B2KsTLq7E 6HtkD5jKHDD7F+CgyNycjOxmZLBd+uVAzaRO1SuhS+0NjbyF11Iw5opAhoNrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaYvyafTcwc7LDYyFy5jD+89NnaIwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdtDVKc//K0Z gNjUctwT9p7nzBciuxaPxwMVqMV2FCVk52tgS+SSsi+UNioiTnGuFr+PbKul2HKb KZ/nCQfdeCl47urxt80VkSLlJTzn1QKUbyCEEUV/OddYSJlvSs2vUAHZuBAJ5LPu Ahg7hTiqyXfQROb+n3YHeWWKHZaZ1PocefuiJqYQ0DwzYCGj4izGRY7odPIrZxJF b3Flv1bEG07OP27YAbZ4+qZBob7vfwRF8ATtb4ZlCP6XpnCTETXaMCclGkQMOxOJ hAk5TaFcswC2HFvn7QrXtm4prBzwe7rwwUhwaNqyCR69S0ujVcXweq4zV9WCy4tP Q07cbhNL8A== -----END CERTIFICATE-----Generated at Wed Jul 29 09:39:51 2026 by rpki-client