$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: 73+Xi+kZZFiwPxF5L1Vyb+zCp01DwbnGivoevFNPIOc= Subject key identifier: 9E:D4:14:18:09:C7:BA:91:17:65:66:D4:F9:18:F4:44:21:40:D8:54 Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 7488A26432A2DE37BA9FB5118AAC31A69110AF56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 01:08:02 +0000 Manifest this update: Wed 29 Jul 2026 01:03:02 +0000 Manifest next update: Thu 30 Jul 2026 03:32:02 +0000 Files and hashes: 1: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 2: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: Ftr+UNOg9I775wA4z9YdP8Oe8tFmuWLuAbL0LhjhoAY=) 3: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) 4: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 5: 3130332e3231332e3134342e302f32332d3234203d3e20323031373730.roa (hash: XSas62NUmKKTKVdBVXhYeDcrrZr2LY5eeEdj+lQLJV8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:88:a2:64:32:a2:de:37:ba:9f:b5:11:8a:ac:31:a6:91:10:af:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Jul 29 01:03:02 2026 GMT Not After : Jul 30 03:32:02 2026 GMT Subject: CN=9ED4141809C7BA91176566D4F918F4442140D854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:b8:30:71:25:69:e7:05:08:a1:86:0e:cc: 7f:a8:53:47:21:5d:0d:35:86:3c:a6:99:af:73:9f: 62:94:cc:ec:30:ca:a1:89:14:e4:31:34:4e:f3:c2: d8:78:42:7b:43:2f:cd:d4:cc:64:f4:8e:41:86:0d: 22:87:78:bf:6f:ee:e2:ed:17:75:ac:cf:18:cc:4e: 52:3d:e5:b4:ed:19:ec:ef:f3:48:fc:83:19:93:93: 33:e3:f8:12:50:e8:c7:2b:1e:78:05:78:87:db:7e: d8:00:ec:91:18:1e:f0:1f:da:1c:0a:15:96:0f:c6: 9b:be:55:97:61:3b:e1:74:d0:20:26:a1:a5:76:a1: bf:32:eb:fd:44:37:8f:dc:a9:f7:41:a8:74:23:15: 3c:05:8e:88:bd:e7:94:00:a2:be:90:18:37:bd:dc: 95:ec:bd:ee:53:3c:b2:62:dd:c6:05:27:f2:bd:8b: 13:0f:9e:55:38:40:3b:52:a0:c3:1f:1e:92:61:d1: bc:cc:9b:84:fb:5a:cb:40:4a:18:b3:86:dd:46:cf: a7:b9:07:61:86:8f:2c:d7:84:b9:69:17:ab:4c:ce: 53:57:4f:8c:20:d8:1b:f2:a4:94:cc:5a:70:c0:f8: aa:09:69:25:de:0e:10:73:c0:48:76:d6:ec:5b:76: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:14:18:09:C7:BA:91:17:65:66:D4:F9:18:F4:44:21:40:D8:54 X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7b:50:b1:74:8b:00:fb:8b:56:11:f4:71:d7:36:a6:de:18: fb:be:47:c4:3e:64:f1:17:ba:53:5c:3a:17:b5:01:b1:75:d0: 38:ba:69:37:5f:6a:a0:35:3a:ad:c6:e9:4f:90:6a:c4:0e:ec: 0e:2d:d9:38:ce:18:8e:46:a1:69:55:d7:e4:5b:ae:dd:59:57: a3:15:7a:29:94:48:e3:80:22:35:29:c1:2b:ad:00:1d:f8:5b: 51:fd:ef:91:f1:2b:f4:9f:e7:d0:a2:24:9c:7e:14:55:f5:8a: 77:bf:f7:63:67:4c:30:26:65:32:c0:a1:24:ce:8a:6f:21:10: 9f:ed:49:f6:28:65:f2:e7:b4:c8:4a:bb:9c:e2:cb:5a:2e:3b: 46:0d:7b:16:f9:6f:21:6e:e5:85:54:9e:ab:19:66:f7:cc:36: 80:c9:d1:3a:5b:11:2e:45:7f:da:e7:5b:fc:c9:a1:91:a0:36: dc:50:51:fb:d4:a4:e0:a7:83:9f:22:02:11:98:3e:98:f2:8f: 2e:08:9a:e1:92:b5:d1:ec:6f:06:94:4b:1e:e1:8a:9e:c9:36: ac:8c:3d:08:73:0a:4b:d3:6e:38:2f:c6:61:8a:6e:48:78:3e: 60:03:81:d1:c3:12:12:9b:05:32:ef:56:05:5f:6b:48:c3:f0: 45:93:af:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdIiiZDKi3je6n7URiqwxppEQr1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjA3MjkwMTAzMDJaFw0yNjA3MzAwMzMyMDJaMDMxMTAvBgNV BAMTKDlFRDQxNDE4MDlDN0JBOTExNzY1NjZENEY5MThGNDQ0MjE0MEQ4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83bgwcSVp5wUIoYYOzH+oU0ch XQ01hjymma9zn2KUzOwwyqGJFOQxNE7zwth4QntDL83UzGT0jkGGDSKHeL9v7uLt F3WszxjMTlI95bTtGezv80j8gxmTkzPj+BJQ6McrHngFeIfbftgA7JEYHvAf2hwK FZYPxpu+VZdhO+F00CAmoaV2ob8y6/1EN4/cqfdBqHQjFTwFjoi955QAor6QGDe9 3JXsve5TPLJi3cYFJ/K9ixMPnlU4QDtSoMMfHpJh0bzMm4T7WstAShizht1Gz6e5 B2GGjyzXhLlpF6tMzlNXT4wg2BvypJTMWnDA+KoJaSXeDhBzwEh21uxbdnB3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUntQUGAnHupEXZWbU+Rj0RCFA2FQwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlntQsXSLAPuL VhH0cdc2pt4Y+75HxD5k8Re6U1w6F7UBsXXQOLppN19qoDU6rcbpT5BqxA7sDi3Z OM4YjkahaVXX5Fuu3VlXoxV6KZRI44AiNSnBK60AHfhbUf3vkfEr9J/n0KIknH4U VfWKd7/3Y2dMMCZlMsChJM6KbyEQn+1J9ihl8ue0yEq7nOLLWi47Rg17FvlvIW7l hVSeqxlm98w2gMnROlsRLkV/2udb/MmhkaA23FBR+9Sk4KeDnyICEZg+mPKPLgia 4ZK10exvBpRLHuGKnsk2rIw9CHMKS9NuOC/GYYpuSHg+YAOB0cMSEpsFMu9WBV9r SMPwRZOvHg== -----END CERTIFICATE-----Generated at Wed Jul 29 16:33:13 2026 by rpki-client