$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: isltifp1wQ2E5cCYnRkv3Acv9p5J3J7/QC8ITA9lpEA= Subject key identifier: 8E:6D:E1:F7:F8:CA:CF:3C:40:9C:A7:27:A8:EC:2B:6C:B6:D9:AF:92 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 54E7039FFCD9B7C6D368798ED61A5B3304A8A9FA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 013E Signing time: Mon 12 Oct 2026 11:51:55 +0000 Manifest this update: Mon 12 Oct 2026 11:46:55 +0000 Manifest next update: Thu 15 Oct 2026 18:36:55 +0000 Files and hashes: 1: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 2: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: LIOp8eQ3Uo2yzzVjHOu57L/BqzTWNBTAC1XLspcFzV8=) 3: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 4: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 5: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e7:03:9f:fc:d9:b7:c6:d3:68:79:8e:d6:1a:5b:33:04:a8:a9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Oct 12 11:46:55 2026 GMT Not After : Oct 15 18:36:55 2026 GMT Subject: CN=8E6DE1F7F8CACF3C409CA727A8EC2B6CB6D9AF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:1d:34:a2:13:30:ff:06:ef:96:95:34:61: b7:b8:df:8f:86:60:ff:77:aa:79:04:14:87:b7:f9: e3:ff:19:c4:f8:aa:27:77:fd:f5:fe:2b:f1:11:9e: 51:f4:a9:c0:7f:27:0c:60:f6:7f:91:d9:fa:70:ff: f1:97:d6:77:28:b0:57:90:32:74:8e:04:0e:98:b8: 3c:19:42:83:58:a7:2c:d0:18:f1:e5:77:c4:18:fa: c2:1f:9c:6a:0e:2a:3c:f7:32:d7:6e:a4:9c:02:3f: cd:e8:6a:2c:16:bd:a0:24:d2:7e:2c:97:95:f6:6b: f0:b3:ef:ba:6f:5b:3e:09:85:72:9f:76:48:64:5b: b1:f5:25:29:74:f8:ff:ef:ce:96:02:07:82:22:ac: fb:ea:8f:56:79:65:08:fd:78:64:83:e2:50:78:dc: c5:4b:f9:fe:f3:ed:fa:04:4f:f5:80:cf:f0:03:40: 5b:61:0d:63:66:cb:e7:2e:99:03:80:d2:52:35:ff: d8:07:cb:38:8b:7e:f5:ef:5d:4e:d4:7f:63:46:be: 99:c4:e0:77:13:6a:3f:b9:14:30:b1:f3:8c:24:13: 14:f6:3f:c3:7e:90:f5:92:6f:42:2a:c5:bc:a7:b8: 68:c7:9c:f8:75:34:f4:58:27:bc:4e:94:7e:c1:f2: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6D:E1:F7:F8:CA:CF:3C:40:9C:A7:27:A8:EC:2B:6C:B6:D9:AF:92 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:46:9b:ed:e6:d1:54:42:27:e3:bc:88:fd:32:ba:da:a0:c7: fa:e0:08:de:4c:6c:9c:34:df:3a:5c:3e:f8:0f:94:ad:e3:be: 6a:a1:2f:b5:39:d9:4f:ac:82:6e:d7:e7:27:7b:8d:8a:5e:e5: 19:a8:07:7b:2c:53:26:7c:4c:0d:f8:24:30:7f:a0:4f:9c:46: 69:b1:22:4f:04:52:d7:6f:1a:7d:0d:03:3f:02:2e:3b:99:23: 60:88:1b:cf:d9:22:92:aa:a7:6f:16:04:d9:6c:fe:30:f9:db: ab:a0:5b:6f:3c:d4:ec:38:ef:04:f1:b5:4a:73:7c:4d:51:83: bd:c7:6b:3e:23:82:31:0c:d7:e5:7c:af:62:c1:fc:63:10:c9: c4:4f:c2:80:0b:68:56:26:78:38:a1:e7:91:18:ae:5e:cf:9f: 8e:03:12:09:d7:87:fb:59:cd:c1:d9:0d:9e:24:4e:a8:95:9b: 8d:e5:1c:93:99:73:4a:a8:1e:82:5a:86:89:28:9f:71:2c:dc: b9:8e:9a:ff:d9:f3:9c:33:1b:bf:8a:2a:d2:c8:ef:40:ec:ea: 46:a2:4e:70:70:68:1b:bd:02:a9:7c:cc:ee:89:cd:be:8d:4b: 08:72:82:f8:89:66:cc:98:ae:52:c6:08:b5:9f:2f:8c:62:64: 1d:8b:8c:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVOcDn/zZt8bTaHmO1hpbMwSoqfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjEwMTIxMTQ2NTVaFw0yNjEwMTUxODM2NTVaMDMxMTAvBgNV BAMTKDhFNkRFMUY3RjhDQUNGM0M0MDlDQTcyN0E4RUMyQjZDQjZEOUFGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXvh00ohMw/wbvlpU0Ybe434+G YP93qnkEFIe3+eP/GcT4qid3/fX+K/ERnlH0qcB/Jwxg9n+R2fpw//GX1ncosFeQ MnSOBA6YuDwZQoNYpyzQGPHld8QY+sIfnGoOKjz3MtdupJwCP83oaiwWvaAk0n4s l5X2a/Cz77pvWz4JhXKfdkhkW7H1JSl0+P/vzpYCB4IirPvqj1Z5ZQj9eGSD4lB4 3MVL+f7z7foET/WAz/ADQFthDWNmy+cumQOA0lI1/9gHyziLfvXvXU7Uf2NGvpnE 4HcTaj+5FDCx84wkExT2P8N+kPWSb0IqxbynuGjHnPh1NPRYJ7xOlH7B8spVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjm3h9/jKzzxAnKcnqOwrbLbZr5IwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEab7ebRVEIn 47yI/TK62qDH+uAI3kxsnDTfOlw++A+UreO+aqEvtTnZT6yCbtfnJ3uNil7lGagH eyxTJnxMDfgkMH+gT5xGabEiTwRS128afQ0DPwIuO5kjYIgbz9kikqqnbxYE2Wz+ MPnbq6BbbzzU7DjvBPG1SnN8TVGDvcdrPiOCMQzX5XyvYsH8YxDJxE/CgAtoViZ4 OKHnkRiuXs+fjgMSCdeH+1nNwdkNniROqJWbjeUck5lzSqgeglqGiSifcSzcuY6a /9nznDMbv4oq0sjvQOzqRqJOcHBoG70CqXzM7onNvo1LCHKC+IlmzJiuUsYItZ8v jGJkHYuMLw== -----END CERTIFICATE-----Generated at Tue Oct 13 10:47:57 2026 by rpki-client