$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: I1Ru+UVhbAhy2YYO6W4Cx8M5tFyk85agWNhOAttjYqw= Subject key identifier: 18:D6:12:BD:58:CC:DD:BE:B7:29:DD:00:E3:C5:EE:24:34:8E:AA:F3 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 1D41EBDA4D83C76C502C0896F344E1F3CA7528C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 0211 Signing time: Fri 09 Oct 2026 20:08:44 +0000 Manifest this update: Fri 09 Oct 2026 20:03:44 +0000 Manifest next update: Mon 12 Oct 2026 20:12:44 +0000 Files and hashes: 1: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 2: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 3: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 4: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 5: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 6: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 7: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 8: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 9: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 10: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 11: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 12: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 13: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 14: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: yWME2Uz1SaOZ1s+3HvO9/jhJ/UZgqBTS3kB4G3AQck0=) 15: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 16: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 17: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 18: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 19: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 20:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:41:eb:da:4d:83:c7:6c:50:2c:08:96:f3:44:e1:f3:ca:75:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Oct 9 20:03:44 2026 GMT Not After : Oct 12 20:12:44 2026 GMT Subject: CN=18D612BD58CCDDBEB729DD00E3C5EE24348EAAF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:f2:a4:97:d3:da:48:09:69:3a:35:65:6c: b5:6e:36:be:67:cf:8a:e7:c0:ba:4d:39:d0:ba:36: 14:1f:7f:74:b6:74:d9:2c:96:ec:50:91:82:59:b6: 34:ac:3c:4a:e0:27:4e:6c:6c:54:dc:fa:67:1f:5e: ff:7c:dc:53:92:36:2c:30:49:d8:2b:d0:fd:af:55: d7:4b:bc:a0:99:a9:b9:b0:0b:33:9e:90:52:e7:48: 91:c7:36:e9:67:7e:36:c4:fa:8f:0f:2e:ec:20:8e: 27:f1:3a:da:10:8b:dd:a5:b1:6a:0e:9a:26:c9:b6: 00:66:33:b8:48:49:47:74:e6:c0:5d:a1:7d:ef:11: fb:da:7d:36:8d:63:a6:34:f7:fd:28:e6:1f:4d:58: 52:4f:6d:7d:b5:d5:ff:38:47:72:20:87:42:64:4c: 3a:bd:4b:15:b4:7e:86:04:01:6d:ec:aa:2b:2a:50: 24:4d:d1:ba:b8:46:70:63:44:2d:2f:fd:7a:d0:5b: b7:1b:58:d5:cd:41:c6:80:d4:11:7c:bf:ee:fd:5c: 8d:bf:66:eb:91:e0:fa:23:a4:2e:ee:68:b7:51:bb: a2:a7:ca:67:f1:26:5b:2a:52:0f:6c:27:86:54:da: 6d:de:3c:cb:f3:8f:04:ce:48:86:57:f4:82:2e:19: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D6:12:BD:58:CC:DD:BE:B7:29:DD:00:E3:C5:EE:24:34:8E:AA:F3 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:11:cd:86:9b:56:fc:2b:91:e9:89:92:66:ed:da:15:43:15: 7a:b7:5f:3e:f3:61:a4:fb:93:be:03:eb:3b:f1:dd:91:48:c0: 63:e5:9f:80:2b:df:fc:0c:33:39:e6:d3:eb:b1:22:e1:f0:ef: 37:ca:5c:9d:65:63:69:68:b9:e8:76:1b:b2:ad:98:2a:8b:3b: 4c:e6:f6:7b:ab:93:6a:73:1c:e2:df:ea:1b:b6:4b:88:ab:00: 67:ae:50:76:ec:9c:00:71:dd:59:27:43:ee:74:7d:7b:ac:38: a2:cc:30:25:90:33:34:8a:b7:38:1d:51:39:38:72:8b:fe:f9: 8b:66:bb:cf:f8:66:4f:bf:c8:48:d2:22:36:65:c6:6d:2d:9a: 58:05:59:05:fa:0a:b9:e3:8c:b4:c5:92:a8:0d:15:35:04:41: 91:b5:84:44:63:5d:be:d9:61:df:17:3f:d9:d3:bf:99:4f:d3: 4c:81:8c:31:77:f9:a2:47:32:01:50:ba:f9:25:ec:79:9f:e4: e9:39:8d:ad:d7:81:9a:5e:f9:08:c3:89:1e:71:09:c2:64:a3: 17:de:0b:d9:8e:d5:cf:87:55:eb:a6:78:f4:d8:8b:ba:a1:8c: 81:c0:f1:f3:1f:a8:9c:9d:c7:08:76:9d:ae:81:e9:c9:23:e3: a4:c7:a6:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHUHr2k2Dx2xQLAiW80Th88p1KMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjEwMDkyMDAzNDRaFw0yNjEwMTIyMDEyNDRaMDMxMTAvBgNV BAMTKDE4RDYxMkJENThDQ0REQkVCNzI5REQwMEUzQzVFRTI0MzQ4RUFBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/fKkl9PaSAlpOjVlbLVuNr5n z4rnwLpNOdC6NhQff3S2dNksluxQkYJZtjSsPErgJ05sbFTc+mcfXv983FOSNiww Sdgr0P2vVddLvKCZqbmwCzOekFLnSJHHNulnfjbE+o8PLuwgjifxOtoQi92lsWoO mibJtgBmM7hISUd05sBdoX3vEfvafTaNY6Y09/0o5h9NWFJPbX211f84R3Igh0Jk TDq9SxW0foYEAW3sqisqUCRN0bq4RnBjRC0v/XrQW7cbWNXNQcaA1BF8v+79XI2/ ZuuR4PojpC7uaLdRu6KnymfxJlsqUg9sJ4ZU2m3ePMvzjwTOSIZX9IIuGdK3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGNYSvVjM3b63Kd0A48XuJDSOqvMwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhHNhptW/CuR 6YmSZu3aFUMVerdfPvNhpPuTvgPrO/HdkUjAY+WfgCvf/AwzOebT67Ei4fDvN8pc nWVjaWi56HYbsq2YKos7TOb2e6uTanMc4t/qG7ZLiKsAZ65QduycAHHdWSdD7nR9 e6w4oswwJZAzNIq3OB1ROThyi/75i2a7z/hmT7/ISNIiNmXGbS2aWAVZBfoKueOM tMWSqA0VNQRBkbWERGNdvtlh3xc/2dO/mU/TTIGMMXf5okcyAVC6+SXseZ/k6TmN rdeBml75CMOJHnEJwmSjF94L2Y7Vz4dV66Z49NiLuqGMgcDx8x+onJ3HCHadroHp ySPjpMemdw== -----END CERTIFICATE-----Generated at Sat Oct 10 04:39:20 2026 by rpki-client