$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: gpUCMmPjMqtdMFfVD0xwn24ieu2bZtkE2r96HYxkCUA= Subject key identifier: 4C:6D:1D:6E:A1:08:20:9B:C6:A2:9D:27:4E:B0:E1:0F:4F:4A:B3:97 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 3677EC5F6D385405CA34639396D76EB69416D568 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 01:08:16 +0000 Manifest this update: Mon 02 Mar 2026 01:03:16 +0000 Manifest next update: Tue 03 Mar 2026 02:57:16 +0000 Files and hashes: 1: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: wvaxN9tEWg76kTwuhzIjXJd7fHSSQo9rXzw7uipDEjg=) 2: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 3: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:77:ec:5f:6d:38:54:05:ca:34:63:93:96:d7:6e:b6:94:16:d5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Mar 2 01:03:16 2026 GMT Not After : Mar 3 02:57:16 2026 GMT Subject: CN=4C6D1D6EA108209BC6A29D274EB0E10F4F4AB397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:00:85:cb:5b:71:76:d1:cb:51:d1:86:68: c6:d5:61:91:a8:c0:2e:56:e7:b4:0f:38:90:74:e0: 92:d2:71:2b:f9:65:ac:5b:67:93:d8:73:3f:c9:e8: 7f:ac:87:25:70:f9:41:04:2f:81:0d:9c:5c:ba:6a: 67:32:ff:7a:17:d3:d2:be:e2:9d:da:f9:53:4f:bc: 0d:02:e4:31:f9:87:c5:33:51:6c:b8:fe:6c:a7:e5: 54:bc:0f:f4:ea:6a:40:52:e8:d0:08:0d:60:43:b6: 51:69:f9:77:70:ce:85:43:46:09:8d:ec:1d:87:64: 25:6a:fb:e6:a5:92:8b:e4:48:a2:5d:fe:96:80:c0: 37:0f:95:57:b5:65:86:b2:1e:33:c3:8b:bd:40:02: 21:de:36:53:18:27:1e:79:e4:ed:6a:02:77:93:90: c6:82:df:56:6f:55:18:1c:3c:94:cf:3c:66:d3:ab: ba:fc:a2:e1:75:e3:66:db:24:63:13:5b:6e:fc:a1: a3:ae:ce:4e:91:ef:a5:3b:74:d1:7f:da:ec:f9:a4: a5:58:e0:75:5e:c0:08:74:49:6c:28:cc:a8:24:2b: 82:74:4c:40:8b:e6:ed:10:ad:31:e7:77:95:1a:7d: 47:20:64:e2:b7:06:09:ba:42:76:c0:2a:1c:ca:3a: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:1D:6E:A1:08:20:9B:C6:A2:9D:27:4E:B0:E1:0F:4F:4A:B3:97 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fb:3e:c3:ed:99:e7:8f:5e:7d:67:96:8c:e8:44:4b:1e:77: 8f:c6:c9:a6:42:a2:ee:7b:c9:e7:4b:fa:8c:d6:f8:38:c4:95: 32:5d:34:e0:e9:54:2d:17:e4:a1:20:eb:4b:3b:d4:87:2c:3a: 12:54:72:42:7a:ae:0f:ed:9c:3c:d6:7f:c5:68:29:fe:7c:5f: 6a:e4:aa:1c:e9:96:ab:81:2e:7e:14:d8:c6:aa:f6:ad:56:03: e5:63:51:e1:08:51:ae:4b:91:d5:33:fb:78:92:87:1e:5e:65: 89:dd:af:81:23:7e:2c:66:88:6b:74:ff:f8:b8:c6:58:7e:8b: a0:2c:28:51:98:84:fd:7a:f0:2b:8c:46:e5:d7:f2:59:00:41: b6:64:91:44:8a:9c:a8:fb:75:c0:c7:2c:a7:4c:97:87:e4:5e: 6f:fd:3c:1a:dd:d2:e3:e4:f7:c0:e8:e7:a0:a7:6a:e9:31:1a: 6f:f2:83:e3:af:0e:22:5d:68:8a:d6:b9:1b:f0:e9:42:66:16: 67:ac:ad:e2:05:74:cc:91:fa:8b:c2:2e:92:d4:6c:77:ba:15: 8f:58:e1:f3:bb:90:94:4d:e4:5c:c8:e8:2e:a2:41:e1:a2:cd: 1c:42:0e:09:74:5f:0f:c7:6b:8e:32:8f:54:04:a8:a7:2b:83: 48:e0:24:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNnfsX204VAXKNGOTltdutpQW1WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjAzMDIwMTAzMTZaFw0yNjAzMDMwMjU3MTZaMDMxMTAvBgNV BAMTKDRDNkQxRDZFQTEwODIwOUJDNkEyOUQyNzRFQjBFMTBGNEY0QUIzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKwCFy1txdtHLUdGGaMbVYZGo wC5W57QPOJB04JLScSv5ZaxbZ5PYcz/J6H+shyVw+UEEL4ENnFy6amcy/3oX09K+ 4p3a+VNPvA0C5DH5h8UzUWy4/myn5VS8D/TqakBS6NAIDWBDtlFp+XdwzoVDRgmN 7B2HZCVq++alkovkSKJd/paAwDcPlVe1ZYayHjPDi71AAiHeNlMYJx555O1qAneT kMaC31ZvVRgcPJTPPGbTq7r8ouF142bbJGMTW278oaOuzk6R76U7dNF/2uz5pKVY 4HVewAh0SWwozKgkK4J0TECL5u0QrTHnd5UafUcgZOK3Bgm6QnbAKhzKOgUlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTG0dbqEIIJvGop0nTrDhD09Ks5cwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfs+w+2Z549e fWeWjOhESx53j8bJpkKi7nvJ50v6jNb4OMSVMl004OlULRfkoSDrSzvUhyw6ElRy QnquD+2cPNZ/xWgp/nxfauSqHOmWq4EufhTYxqr2rVYD5WNR4QhRrkuR1TP7eJKH Hl5lid2vgSN+LGaIa3T/+LjGWH6LoCwoUZiE/XrwK4xG5dfyWQBBtmSRRIqcqPt1 wMcsp0yXh+Reb/08Gt3S4+T3wOjnoKdq6TEab/KD468OIl1oita5G/DpQmYWZ6yt 4gV0zJH6i8IuktRsd7oVj1jh87uQlE3kXMjoLqJB4aLNHEIOCXRfD8drjjKPVASo pyuDSOAkhA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:40:23 2026 by rpki-client