$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: abSMhpw9smbfqaNLcrE54EitJrPTnPPRr09mQDnNKKo= Subject key identifier: 5D:0B:62:B3:CD:47:DE:8A:5C:44:9E:A2:70:F9:E3:2D:B9:A5:42:96 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 59F2FF123D5A2B4244FD29695C4A8BC95A27A191 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: C4 Signing time: Sat 13 Jun 2026 14:41:52 +0000 Manifest this update: Sat 13 Jun 2026 14:36:52 +0000 Manifest next update: Sun 14 Jun 2026 18:26:52 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 2: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: poiWUSt5qXW6XhMAkkcM1DwdRFn43G5KLcnts2C3v90=) 3: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 5: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f2:ff:12:3d:5a:2b:42:44:fd:29:69:5c:4a:8b:c9:5a:27:a1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jun 13 14:36:52 2026 GMT Not After : Jun 14 18:26:52 2026 GMT Subject: CN=5D0B62B3CD47DE8A5C449EA270F9E32DB9A54296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:e1:de:e8:f2:b1:90:eb:93:4c:e6:43:5b: 07:98:a9:19:bd:06:ca:ba:a2:f0:89:ff:60:cc:0c: 23:12:ad:7c:06:c4:3f:4d:0c:bf:93:e6:d9:6e:be: f6:90:e4:b1:fb:02:95:3a:8b:24:67:e0:80:c2:74: a6:90:69:af:fd:ca:5b:02:99:3b:43:e8:fd:7b:e6: 9a:c2:f7:ec:2e:c8:62:a3:f9:df:0c:ed:ee:8f:32: 72:d8:92:9a:75:b5:ac:2a:57:83:ed:c0:d8:94:5f: 2b:32:0a:33:d9:02:54:46:16:3e:2f:54:53:33:e9: 20:a9:8e:b1:e4:b1:19:1a:dd:f0:32:e0:78:9a:b3: 2a:0a:d4:7c:f1:69:53:ee:51:f1:c4:63:a1:bf:c8: 2a:15:f8:43:30:53:48:e0:07:9c:c0:ff:84:8c:67: 16:c5:73:61:b1:5e:ee:04:f3:69:f9:51:08:86:0e: f0:85:f8:25:7d:b5:53:9f:0e:45:39:1d:ea:98:a9: d9:27:8c:d6:0d:93:54:20:2a:ff:30:34:aa:fd:ba: 81:11:f4:81:28:1a:8c:cd:da:9f:d1:d6:b7:bd:82: fd:c2:79:22:11:a1:cd:b6:0e:c4:86:c2:9c:c9:54: cc:93:33:e1:66:30:ba:34:56:28:9d:81:e1:9c:96: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:62:B3:CD:47:DE:8A:5C:44:9E:A2:70:F9:E3:2D:B9:A5:42:96 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:16:92:fb:f9:d7:39:8c:eb:3e:82:3f:27:83:37:a6:ea:de: fe:4b:c7:df:68:a7:52:28:56:81:4b:b9:d2:9e:a2:18:8f:58: 03:c1:68:ca:52:af:5d:b0:b1:6e:51:0d:02:73:82:d5:38:20: 59:a3:f0:69:66:24:f5:4c:b3:3f:c5:ae:85:4c:db:83:c9:2b: f4:97:9a:db:4c:f2:9d:77:f6:27:5e:4f:ed:d9:0a:8e:d9:a6: 44:7f:c8:79:87:f3:86:de:fb:61:57:a0:ac:eb:e6:1a:66:da: 93:31:a3:34:8d:8c:0f:fc:5c:6c:c7:65:18:c7:3c:88:93:f3: db:a1:d0:82:b2:30:b0:de:45:d9:18:54:c9:8b:b5:ff:7e:36: a3:2e:6a:ee:e9:bb:a4:0f:3e:73:e4:23:ea:ee:24:40:5d:95: 94:8a:6b:2f:68:23:90:67:df:1f:a9:ae:0e:ff:1b:be:01:80: 4f:1d:9f:38:e3:05:a1:35:88:ef:47:ab:f6:77:8c:56:8c:40: 83:84:88:33:81:35:26:a6:b0:b5:3e:6d:4b:e7:be:22:a5:a4: e2:b8:49:b5:20:a3:63:17:dd:0f:e7:40:1f:f3:e2:a2:ab:b7: 43:f3:f3:6b:f1:3d:c2:df:54:51:24:09:c0:b8:7e:41:8d:3a: 23:13:a8:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWfL/Ej1aK0JE/SlpXEqLyVonoZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA2MTMxNDM2NTJaFw0yNjA2MTQxODI2NTJaMDMxMTAvBgNV BAMTKDVEMEI2MkIzQ0Q0N0RFOEE1QzQ0OUVBMjcwRjlFMzJEQjlBNTQyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAOHe6PKxkOuTTOZDWweYqRm9 Bsq6ovCJ/2DMDCMSrXwGxD9NDL+T5tluvvaQ5LH7ApU6iyRn4IDCdKaQaa/9ylsC mTtD6P175prC9+wuyGKj+d8M7e6PMnLYkpp1tawqV4PtwNiUXysyCjPZAlRGFj4v VFMz6SCpjrHksRka3fAy4HiasyoK1HzxaVPuUfHEY6G/yCoV+EMwU0jgB5zA/4SM ZxbFc2GxXu4E82n5UQiGDvCF+CV9tVOfDkU5HeqYqdknjNYNk1QgKv8wNKr9uoER 9IEoGozN2p/R1re9gv3CeSIRoc22DsSGwpzJVMyTM+FmMLo0ViidgeGcluOhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXQtis81H3opcRJ6icPnjLbmlQpYwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxaS+/nXOYzr PoI/J4M3pure/kvH32inUihWgUu50p6iGI9YA8FoylKvXbCxblENAnOC1TggWaPw aWYk9UyzP8WuhUzbg8kr9Jea20zynXf2J15P7dkKjtmmRH/IeYfzht77YVegrOvm GmbakzGjNI2MD/xcbMdlGMc8iJPz26HQgrIwsN5F2RhUyYu1/342oy5q7um7pA8+ c+Qj6u4kQF2VlIprL2gjkGffH6muDv8bvgGATx2fOOMFoTWI70er9neMVoxAg4SI M4E1JqawtT5tS+e+IqWk4rhJtSCjYxfdD+dAH/Pioqu3Q/Pza/E9wt9UUSQJwLh+ QY06IxOoOQ== -----END CERTIFICATE-----Generated at Sun Jun 14 05:57:15 2026 by rpki-client