$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: J7atizddmNnws7+Mobf4jkxtfYgNyAlzLbkEu6Lkw1E= Subject key identifier: 4F:28:5F:EE:AD:22:E1:57:E8:18:20:0B:A2:74:D2:14:2A:81:E2:5F Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 4587D86A639CBD75DA3D7E2FD84CA657F56A8F34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 0199 Signing time: Sat 13 Jun 2026 20:27:13 +0000 Manifest this update: Sat 13 Jun 2026 20:22:13 +0000 Manifest next update: Sun 14 Jun 2026 21:21:13 +0000 Files and hashes: 1: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 2: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 3: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 4: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 5: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 6: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 7: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 8: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 9: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 10: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 11: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 12: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 13: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 14: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 15: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 16: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 17: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 18: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: 4J52rCnrbquH0OqM7a3mFUFF/cehsaTrgw024Z2P9uk=) 19: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:87:d8:6a:63:9c:bd:75:da:3d:7e:2f:d8:4c:a6:57:f5:6a:8f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jun 13 20:22:13 2026 GMT Not After : Jun 14 21:21:13 2026 GMT Subject: CN=4F285FEEAD22E157E818200BA274D2142A81E25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:8d:aa:17:64:fa:1b:76:52:91:12:d6:bd: f7:73:d5:be:62:ce:ae:cb:fb:94:3c:6c:b3:c8:f9: 5d:e7:fa:c3:ee:1e:55:08:df:f9:5c:01:96:28:8c: 01:f1:c7:e6:98:38:1e:d7:66:ae:e3:68:88:10:21: 81:96:e1:fc:eb:54:8a:0b:ca:48:5b:9f:7d:e6:b9: b1:5b:5e:b3:2f:18:7f:e0:e4:0a:3c:9b:32:cf:13: c5:83:68:86:ee:aa:d8:99:dd:c3:0d:96:96:ec:c8: f6:68:99:dd:57:f1:f7:b1:b0:c1:3c:56:5a:bf:18: ab:fd:30:ba:94:88:03:e2:10:02:f8:a8:07:1e:6e: eb:b3:e8:26:b4:58:31:59:bc:c7:47:b9:65:fb:31: 71:66:b1:82:21:f1:19:00:54:f1:02:89:d8:b1:46: af:72:ce:04:01:be:76:a6:03:ed:b7:c8:51:24:2d: ea:52:5f:39:77:6c:67:cf:27:e1:ac:ae:64:a5:a3: 4f:8f:38:75:e1:e0:d1:a8:1b:f7:0d:bc:81:89:b8: 8a:f1:00:99:38:b2:33:f1:00:df:6d:f1:67:ca:cc: ad:0d:dc:94:c1:9d:c8:44:a1:74:de:49:cd:7b:10: df:62:4b:2c:82:8d:eb:72:ee:2c:df:f0:e3:27:c7: f4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:28:5F:EE:AD:22:E1:57:E8:18:20:0B:A2:74:D2:14:2A:81:E2:5F X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4e:18:1e:d8:c3:23:95:84:15:6b:91:82:25:13:40:02:19: 5e:7f:41:2d:4f:35:be:e8:eb:0b:22:81:16:f1:cf:a1:6a:8a: 18:6e:2f:03:0e:0c:d0:ca:7c:a6:e1:28:2c:20:e9:50:64:27: 0f:2b:7e:ef:c3:72:d5:9c:cc:57:56:09:8e:66:78:d6:d6:99: aa:52:1e:6b:33:af:ca:26:30:84:70:ad:57:46:40:cf:34:a4: 25:02:bb:77:f8:48:97:2f:b2:e4:2c:97:e4:ac:06:b7:3f:f0: c8:c9:e7:eb:df:b4:b1:57:3e:1a:ab:8f:00:d8:9d:79:15:1b: 54:dc:3b:b0:e0:9f:16:2c:31:4a:b2:a5:90:8f:83:2d:ca:d9: cb:98:7f:ac:55:a3:12:dd:bc:6b:e7:ea:3d:13:f9:59:e1:82: 9a:86:84:ed:8d:57:35:41:0a:7e:c5:9d:88:2a:33:d6:64:7d: 0d:19:ec:65:2f:2a:34:49:65:a9:e2:a6:9f:0f:4a:d5:7b:0b: ca:1f:54:07:c1:13:bc:6f:cd:dd:d6:28:80:24:66:a2:53:2d: a3:da:3a:f0:f2:75:27:c7:e8:06:33:e1:a6:64:1b:f6:26:76: 62:50:ce:58:ef:13:5f:85:e2:79:2b:c5:9a:bd:69:25:aa:51: b7:cd:b7:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURYfYamOcvXXaPX4v2EymV/VqjzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA2MTMyMDIyMTNaFw0yNjA2MTQyMTIxMTNaMDMxMTAvBgNV BAMTKDRGMjg1RkVFQUQyMkUxNTdFODE4MjAwQkEyNzREMjE0MkE4MUUyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf742qF2T6G3ZSkRLWvfdz1b5i zq7L+5Q8bLPI+V3n+sPuHlUI3/lcAZYojAHxx+aYOB7XZq7jaIgQIYGW4fzrVIoL ykhbn33mubFbXrMvGH/g5Ao8mzLPE8WDaIbuqtiZ3cMNlpbsyPZomd1X8fexsME8 Vlq/GKv9MLqUiAPiEAL4qAcebuuz6Ca0WDFZvMdHuWX7MXFmsYIh8RkAVPECidix Rq9yzgQBvnamA+23yFEkLepSXzl3bGfPJ+GsrmSlo0+POHXh4NGoG/cNvIGJuIrx AJk4sjPxAN9t8WfKzK0N3JTBnchEoXTeSc17EN9iSyyCjety7izf8OMnx/RzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTyhf7q0i4VfoGCALonTSFCqB4l8wHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA04YHtjDI5WE FWuRgiUTQAIZXn9BLU81vujrCyKBFvHPoWqKGG4vAw4M0Mp8puEoLCDpUGQnDyt+ 78Ny1ZzMV1YJjmZ41taZqlIeazOvyiYwhHCtV0ZAzzSkJQK7d/hIly+y5CyX5KwG tz/wyMnn69+0sVc+GquPANideRUbVNw7sOCfFiwxSrKlkI+DLcrZy5h/rFWjEt28 a+fqPRP5WeGCmoaE7Y1XNUEKfsWdiCoz1mR9DRnsZS8qNEllqeKmnw9K1XsLyh9U B8ETvG/N3dYogCRmolMto9o68PJ1J8foBjPhpmQb9iZ2YlDOWO8TX4XieSvFmr1p JapRt823BA== -----END CERTIFICATE-----Generated at Sat Jun 13 23:19:33 2026 by rpki-client