$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: S93bBbq+f3Ej3Qiy0t/XRUJQhoLLa5Ga/Bs6idgS0p8= Subject key identifier: 10:EE:20:48:FD:EF:19:4B:F4:AB:0D:B6:AA:F9:2B:18:0B:0F:F1:9F Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 6A20193F87598939BEF6B98CE79671BC9C358CE5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 78 Signing time: Fri 17 Apr 2026 20:39:48 +0000 Manifest this update: Fri 17 Apr 2026 20:34:48 +0000 Manifest next update: Sun 19 Apr 2026 00:09:48 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 2: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 3: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: eylAdA4pDU+1qzcHCahQn77k4vY4WbHPD9L8EefhZGY=) 4: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) 5: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:20:19:3f:87:59:89:39:be:f6:b9:8c:e7:96:71:bc:9c:35:8c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Apr 17 20:34:48 2026 GMT Not After : Apr 19 00:09:48 2026 GMT Subject: CN=10EE2048FDEF194BF4AB0DB6AAF92B180B0FF19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:89:b0:7e:d3:05:fc:72:b4:a0:d6:7d:47: 38:0a:27:f0:3b:7c:0f:bb:42:75:17:25:10:36:60: 4f:71:96:4c:bd:a4:c2:4f:b3:0a:ed:69:81:fd:8c: 98:c4:60:3f:67:ba:76:ac:1d:59:32:9e:83:d0:41: 33:b6:d2:63:25:41:f1:3f:0f:36:36:22:2a:f5:76: 2f:b8:e2:6e:fc:cd:f0:7d:e0:9e:5b:54:72:41:07: 40:dd:70:e8:1c:30:dc:6f:a4:8b:6b:16:d3:e2:16: f0:8a:82:ea:f1:ef:9a:90:3d:86:96:9b:55:d2:61: b7:38:cc:e7:d4:97:b4:da:27:db:0e:26:05:33:a1: 2f:28:af:37:2d:70:19:03:45:ff:81:ee:2a:5a:29: b8:fe:c6:1b:2b:11:91:15:a4:78:b2:ae:9c:40:50: 25:40:27:9b:bd:b1:09:1d:87:a1:b1:1b:7f:e9:31: af:c5:ec:81:62:3b:bf:6c:02:be:c2:c5:14:79:03: 7d:4a:0d:a6:89:69:0b:9a:55:0e:b0:dc:b4:ea:fd: 85:1a:c9:b0:b6:dd:ec:45:43:1f:8a:a9:7b:4d:f6: 2b:87:11:73:00:6d:24:1f:f6:6c:01:86:a6:8d:c1: 12:04:e1:91:b3:ae:e8:73:b3:10:cb:8c:ce:a7:77: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:20:48:FD:EF:19:4B:F4:AB:0D:B6:AA:F9:2B:18:0B:0F:F1:9F X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5d:6f:c8:35:8d:0d:73:1c:dc:a1:dc:56:b1:07:88:c4:9f: f0:da:9c:ea:2d:f6:12:eb:a0:86:a4:a0:0d:a4:03:28:7a:b9: ae:6c:d1:7e:4b:62:6a:72:5d:99:59:10:5c:0b:5e:29:ad:9e: 56:53:9a:2d:94:2c:24:35:f9:c3:94:ec:95:30:90:58:09:5f: 66:0b:6e:f5:bd:5e:35:e3:7e:10:94:b8:bf:12:b2:9c:33:da: de:f3:8d:24:c0:a9:88:bf:8d:df:8d:4e:36:57:9c:7d:86:d0: bb:c5:44:4d:73:c0:07:ba:ba:69:57:28:5b:b4:d2:7d:ca:42: 96:d2:a2:95:87:19:d3:b8:7d:2c:0c:aa:bf:dc:18:69:ac:e9: 8e:0d:47:f8:45:6d:7d:63:23:01:ba:a5:55:7b:36:d5:4f:33: ef:db:22:a2:96:df:c8:5b:3b:08:e4:67:5a:f7:46:2b:48:15: 15:27:eb:54:97:35:44:9e:2c:e2:a7:f9:c2:7b:05:1a:66:16: 2f:f3:16:f7:d3:90:80:e3:9e:ea:a9:b1:b2:3b:ab:4b:76:1f: 73:5d:5a:af:fd:61:d9:8f:ce:8b:ff:b2:49:53:e5:0e:d5:aa: 41:06:50:a1:42:0a:76:ce:96:32:54:b6:1d:56:81:94:29:b5: a9:0d:7a:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaiAZP4dZiTm+9rmM55ZxvJw1jOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA0MTcyMDM0NDhaFw0yNjA0MTkwMDA5NDhaMDMxMTAvBgNV BAMTKDEwRUUyMDQ4RkRFRjE5NEJGNEFCMERCNkFBRjkyQjE4MEIwRkYxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS3YmwftMF/HK0oNZ9RzgKJ/A7 fA+7QnUXJRA2YE9xlky9pMJPswrtaYH9jJjEYD9nunasHVkynoPQQTO20mMlQfE/ DzY2Iir1di+44m78zfB94J5bVHJBB0DdcOgcMNxvpItrFtPiFvCKgurx75qQPYaW m1XSYbc4zOfUl7TaJ9sOJgUzoS8orzctcBkDRf+B7ipaKbj+xhsrEZEVpHiyrpxA UCVAJ5u9sQkdh6GxG3/pMa/F7IFiO79sAr7CxRR5A31KDaaJaQuaVQ6w3LTq/YUa ybC23exFQx+KqXtN9iuHEXMAbSQf9mwBhqaNwRIE4ZGzruhzsxDLjM6nd/WPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEO4gSP3vGUv0qw22qvkrGAsP8Z8wHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl1vyDWNDXMc 3KHcVrEHiMSf8Nqc6i32EuughqSgDaQDKHq5rmzRfktianJdmVkQXAteKa2eVlOa LZQsJDX5w5TslTCQWAlfZgtu9b1eNeN+EJS4vxKynDPa3vONJMCpiL+N341ONlec fYbQu8VETXPAB7q6aVcoW7TSfcpCltKilYcZ07h9LAyqv9wYaazpjg1H+EVtfWMj AbqlVXs21U8z79siopbfyFs7CORnWvdGK0gVFSfrVJc1RJ4s4qf5wnsFGmYWL/MW 99OQgOOe6qmxsjurS3Yfc11ar/1h2Y/Oi/+ySVPlDtWqQQZQoUIKds6WMlS2HVaB lCm1qQ16iw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:13 2026 by rpki-client