$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: hJpfQ3OE+l6u05Lf6xyIGHF/yS3zwzXNa18F3fIhRBw= Subject key identifier: D3:83:51:1F:A2:85:7D:44:F4:C1:27:1B:D1:65:96:67:2A:34:A8:44 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 3F98A003DC2BEBEEF5CE6D8D23150F0C1DE63BE3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 0198 Signing time: Sat 13 Jun 2026 02:36:05 +0000 Manifest this update: Sat 13 Jun 2026 02:31:05 +0000 Manifest next update: Sun 14 Jun 2026 04:25:05 +0000 Files and hashes: 1: 3130312e34382e302e302f31362d3136203d3e2030.roa (hash: u+t0+X0irGyRWL8Gk4WbGOrx9bKMVBUEmpla1mb4Nog=) 2: 323430323a653763303a3830303a3a2f34322d3432203d3e203539303738.roa (hash: YbfsCeRn1ULmX7StvSC732iltEvUTW6MKWivsDgY88M=) 3: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (hash: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o=) 4: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (hash: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M=) 5: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (hash: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc=) 6: 323430323a653763303a34303a3a2f34322d3432203d3e203539303738.roa (hash: goD2V1rSu2zowi6VOTodDwpQ4wulOKJZkxmvgOSz2BE=) 7: 34332e3234322e35322e302f32342d3234203d3e20313334333636.roa (hash: Wy3gDCRAbNPJI6Q6VL0wJx4Pa2cgkvGgI+huOvg3Sq8=) 8: 34332e3234322e35322e302f32322d3232203d3e2030.roa (hash: OfnqAkRJUOk2rMUn6ghg7Zkv5OQ7YaN/F8VonmsN4mo=) 9: 3130332e3233352e38352e302f32342d3234203d3e203233373234.roa (hash: R4+6zTU46zeCrg5LubX2IWQB6JiuA8qii48ZLdMG0sY=) 10: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (hash: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo=) 11: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (hash: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA=) 12: 323430323a653763303a6330303a3a2f34322d3432203d3e20313334333636.roa (hash: 0UikPrhI/+GFM55Vuzyt5EGwBY2bkgwQLA/oWxJuYHU=) 13: 323430323a653763303a3a2f34322d3432203d3e203539303738.roa (hash: gxOBTlC3js0yW1Dym47gaM5d4HJKte5KiC5Kl+Ymteo=) 14: 323430323a653763303a3430303a3a2f34322d3432203d3e203539303738.roa (hash: EqDp0BAfwIkJ/Hrp0K5IEau637qczsJdigzGmOq8OFs=) 15: 323430323a653763303a6330303a3a2f33382d3338203d3e20313334333636.roa (hash: hkZ5Ep886+9a5g9fGIQ5HddIZ9Cys8XnbUoAQ11p0TA=) 16: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) 17: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 18: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (hash: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A=) 19: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: HbpAUuaPxCI/qaxGAQNQMIFPzabk6hF5tYNTxSLhZdU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 04:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:98:a0:03:dc:2b:eb:ee:f5:ce:6d:8d:23:15:0f:0c:1d:e6:3b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Jun 13 02:31:05 2026 GMT Not After : Jun 14 04:25:05 2026 GMT Subject: CN=D383511FA2857D44F4C1271BD16596672A34A844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:50:d7:e3:4d:e7:f5:37:42:0a:e5:0e:6e: 3e:df:11:7a:2a:52:eb:ad:a7:89:29:bd:78:af:28: 59:19:9a:2f:84:88:a7:1d:9b:1d:38:5f:c2:b8:b0: 13:05:33:be:c9:d2:03:bf:a1:4e:21:66:1b:9b:43: 2a:f2:01:f8:47:e1:ba:1f:28:29:46:fa:62:9f:f9: 86:83:84:5a:2c:14:f4:e1:a0:c4:77:be:f7:59:5e: cd:9b:73:21:6e:ab:5a:06:f9:10:93:bd:1a:0f:23: 80:79:ab:04:ce:e3:38:14:89:4a:62:f8:4e:33:28: b9:0c:8c:a8:d3:c9:d5:04:a9:10:b1:3d:d9:0c:e0: 54:18:f7:2e:f7:39:fc:ec:09:dc:14:64:d0:b8:ba: 9e:37:53:fd:1c:8d:89:cb:2b:3a:b1:c5:f9:24:7d: ea:9e:6f:86:74:45:ce:73:4d:5d:80:98:df:9d:4b: bb:53:03:f5:ae:10:d2:ef:93:9b:9c:13:98:f6:94: ce:62:66:fd:51:5b:60:03:80:4d:19:85:fd:4b:93: ee:79:11:a7:29:bb:bb:b2:c6:d7:78:71:0b:f6:37: d3:06:20:2e:bd:f3:3d:e0:fe:69:86:fa:bf:84:2e: 15:7b:c5:c8:14:ef:78:6c:95:f2:f0:7e:8f:05:27: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:51:1F:A2:85:7D:44:F4:C1:27:1B:D1:65:96:67:2A:34:A8:44 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:c2:46:07:20:91:5c:63:41:f4:96:85:9c:5b:f4:7d:27: c4:f0:7e:66:ba:18:5f:ee:40:71:8f:95:46:fa:46:e0:ad:d7: 6d:a4:fc:60:da:8a:49:8d:31:3a:a6:23:2a:45:34:08:64:4e: 6b:60:18:53:fa:91:09:c8:0a:2f:dd:93:0c:b5:45:4a:f9:32: a7:ac:8a:10:8b:4f:51:0f:bb:7e:14:04:0b:c2:7d:88:46:d1: 16:f7:86:18:1b:15:fd:87:0f:88:f0:d3:41:2e:a3:bf:50:97: 28:53:ca:b4:8e:c8:f7:36:cb:66:91:1a:d4:90:77:41:97:1f: d8:b7:41:95:73:23:6d:cd:56:f5:9d:da:b0:31:5c:8c:2d:f8: db:a8:e5:35:7e:e3:23:ec:d3:81:0a:f4:b2:b2:78:ed:a7:a1: 4f:b4:6a:8e:41:34:74:7e:eb:6a:a5:9b:bb:ca:9a:a1:79:56: 23:f2:6d:90:d8:7e:91:ff:9f:87:c6:b0:c4:62:f8:ce:70:1c: 2c:1f:be:a3:a4:f2:01:38:b9:3e:7b:da:e6:ad:fa:0c:b6:70: d6:26:12:6f:87:2e:37:c3:12:41:16:91:50:54:cb:bf:49:ff: a2:cc:56:a2:4a:ee:3c:b6:e3:30:d4:b5:30:d1:55:d0:94:a6: 89:7a:d0:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP5igA9wr6+71zm2NIxUPDB3mO+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA2MTMwMjMxMDVaFw0yNjA2MTQwNDI1MDVaMDMxMTAvBgNV BAMTKEQzODM1MTFGQTI4NTdENDRGNEMxMjcxQkQxNjU5NjY3MkEzNEE4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNh1DX403n9TdCCuUObj7fEXoq Uuutp4kpvXivKFkZmi+EiKcdmx04X8K4sBMFM77J0gO/oU4hZhubQyryAfhH4bof KClG+mKf+YaDhFosFPThoMR3vvdZXs2bcyFuq1oG+RCTvRoPI4B5qwTO4zgUiUpi +E4zKLkMjKjTydUEqRCxPdkM4FQY9y73OfzsCdwUZNC4up43U/0cjYnLKzqxxfkk feqeb4Z0Rc5zTV2AmN+dS7tTA/WuENLvk5ucE5j2lM5iZv1RW2ADgE0Zhf1Lk+55 Eacpu7uyxtd4cQv2N9MGIC698z3g/mmG+r+ELhV7xcgU73hslfLwfo8FJ2urAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU04NRH6KFfUT0wScb0WWWZyo0qEQwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUo/CRgcgkVxj QfSWhZxb9H0nxPB+ZroYX+5AcY+VRvpG4K3XbaT8YNqKSY0xOqYjKkU0CGROa2AY U/qRCcgKL92TDLVFSvkyp6yKEItPUQ+7fhQEC8J9iEbRFveGGBsV/YcPiPDTQS6j v1CXKFPKtI7I9zbLZpEa1JB3QZcf2LdBlXMjbc1W9Z3asDFcjC3426jlNX7jI+zT gQr0srJ47aehT7RqjkE0dH7raqWbu8qaoXlWI/JtkNh+kf+fh8awxGL4znAcLB++ o6TyATi5Pnva5q36DLZw1iYSb4cuN8MSQRaRUFTLv0n/osxWokruPLbjMNS1MNFV 0JSmiXrQ/g== -----END CERTIFICATE-----Generated at Sat Jun 13 21:15:40 2026 by rpki-client