$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: WzhIwt3+22wLmXs6eRGmUba9y2ZLD7ZV0WTdcAAY+NY= Subject key identifier: 76:2B:79:38:5D:09:BC:93:89:C1:44:5D:A6:84:A9:1C:A5:E7:5A:5A Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 4DF46FFF62929F35508CC6D0657DFD3C46512663 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 22:43:16 +0000 Manifest this update: Sun 01 Mar 2026 22:38:16 +0000 Manifest next update: Mon 02 Mar 2026 23:30:16 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 2: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: yh7A3NZrX1aTwfJDk4CrkWy7PjHPc4Co4vX/cJflStg=) 3: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f4:6f:ff:62:92:9f:35:50:8c:c6:d0:65:7d:fd:3c:46:51:26:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Mar 1 22:38:16 2026 GMT Not After : Mar 2 23:30:16 2026 GMT Subject: CN=762B79385D09BC9389C1445DA684A91CA5E75A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:e7:95:f0:05:3d:b4:cb:71:09:a4:34:ac: 66:f3:c4:67:9b:ff:ee:31:41:a9:8c:81:dc:72:1a: b5:93:eb:44:4d:85:b7:67:51:97:8d:65:8b:83:30: 2e:12:c4:a5:7a:6a:cd:7c:c9:cd:c9:56:49:0f:34: ab:d1:11:b2:a4:ae:2e:e3:1c:4f:59:32:69:da:89: 83:bd:8c:9c:16:87:cf:08:22:a0:9c:4e:ef:ab:ae: 00:31:13:55:a8:1f:16:ba:a6:7d:e8:c9:ed:2c:2b: c3:4e:39:ca:2c:0e:fc:76:7c:7b:9a:12:6d:97:1f: 7b:8b:24:50:c2:59:77:47:c4:74:95:8e:59:e9:c1: 2b:d5:bb:44:97:80:4b:37:77:04:dc:15:43:2e:28: 0b:42:8b:31:90:be:23:40:c1:c5:5b:8e:b9:0e:93: 3a:b7:21:5e:e8:96:cb:d1:fb:2b:09:6e:98:c6:b6: 25:34:24:e9:6c:c9:28:5a:31:57:70:14:c9:39:da: 9c:6e:c3:4c:cc:13:4b:ba:3f:92:24:fe:48:d0:0d: 79:7c:a0:95:8b:4c:63:24:d2:26:59:ea:2c:9e:71: 6a:6c:ba:05:1d:45:64:8c:8b:a8:7b:1a:a4:0a:49: e6:38:48:4b:a9:ca:7a:13:d9:91:28:1f:25:4d:72: b6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:79:38:5D:09:BC:93:89:C1:44:5D:A6:84:A9:1C:A5:E7:5A:5A X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e6:d1:aa:e9:47:35:e9:5b:2c:61:58:1e:1d:9e:f4:45:71: ff:2e:cc:30:40:bc:1a:ff:af:26:7c:3b:f3:85:34:de:9c:6e: be:f3:60:bd:35:8f:0a:51:40:4d:aa:a6:9e:86:d9:b7:90:a9: 99:9b:98:1e:ce:f7:52:f2:52:47:0a:46:7e:08:40:8d:cc:82: 3e:a2:52:ee:e5:ed:79:79:f2:19:4b:d1:2d:ed:c9:7e:3d:33: 5f:ef:e6:f7:54:17:a7:d6:f0:da:d1:2f:7d:24:89:9c:97:d2: a8:31:fd:82:d1:e5:66:b6:17:42:6f:3b:83:bd:e9:3c:a0:62: 8a:50:74:16:7c:db:ca:e4:1f:2a:c6:46:76:bb:32:8b:3e:fe: 82:88:a2:4a:2c:2c:dd:d8:44:92:43:e1:b1:3d:3c:42:f0:ed: 1a:65:95:7e:fc:54:da:4d:e7:1f:f0:a3:1e:a3:c4:e5:66:11: d6:a6:58:f1:ed:b1:cd:97:22:0f:f1:b2:fd:90:db:b3:7f:23: 1a:38:18:76:b0:89:06:28:02:34:7a:48:36:96:b4:2b:75:4a: 38:20:53:53:12:6f:3a:c5:d0:d8:c6:c6:cb:be:a0:0e:f5:00: f8:7a:a4:b2:30:e3:13:1a:06:60:ed:26:5e:24:c9:a0:bd:8f: 14:e6:b5:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTfRv/2KSnzVQjMbQZX39PEZRJmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAzMDEyMjM4MTZaFw0yNjAzMDIyMzMwMTZaMDMxMTAvBgNV BAMTKDc2MkI3OTM4NUQwOUJDOTM4OUMxNDQ1REE2ODRBOTFDQTVFNzVBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGOeV8AU9tMtxCaQ0rGbzxGeb /+4xQamMgdxyGrWT60RNhbdnUZeNZYuDMC4SxKV6as18yc3JVkkPNKvREbKkri7j HE9ZMmnaiYO9jJwWh88IIqCcTu+rrgAxE1WoHxa6pn3oye0sK8NOOcosDvx2fHua Em2XH3uLJFDCWXdHxHSVjlnpwSvVu0SXgEs3dwTcFUMuKAtCizGQviNAwcVbjrkO kzq3IV7olsvR+ysJbpjGtiU0JOlsyShaMVdwFMk52pxuw0zME0u6P5Ik/kjQDXl8 oJWLTGMk0iZZ6iyecWpsugUdRWSMi6h7GqQKSeY4SEupynoT2ZEoHyVNcrY7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdit5OF0JvJOJwURdpoSpHKXnWlowHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhebRqulHNelb LGFYHh2e9EVx/y7MMEC8Gv+vJnw784U03pxuvvNgvTWPClFATaqmnobZt5CpmZuY Hs73UvJSRwpGfghAjcyCPqJS7uXteXnyGUvRLe3Jfj0zX+/m91QXp9bw2tEvfSSJ nJfSqDH9gtHlZrYXQm87g73pPKBiilB0FnzbyuQfKsZGdrsyiz7+goiiSiws3dhE kkPhsT08QvDtGmWVfvxU2k3nH/CjHqPE5WYR1qZY8e2xzZciD/Gy/ZDbs38jGjgY drCJBigCNHpINpa0K3VKOCBTUxJvOsXQ2MbGy76gDvUA+HqksjDjExoGYO0mXiTJ oL2PFOa1YA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:37:20 2026 by rpki-client