$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json) Hash identifier: 7uoalROW6O7xjwUFAcYC/xEOubviheHvd5jkp+3R6po= Subject key identifier: 68:99:27:4C:C9:F0:60:62:01:48:41:4C:F2:63:14:42:DD:2C:4F:7C Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Certificate serial: 7179C237A26CD5A52ED6C8236FB78D81023E34E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft Manifest number: FF Signing time: Wed 29 Jul 2026 06:28:42 +0000 Manifest this update: Wed 29 Jul 2026 06:23:42 +0000 Manifest next update: Thu 30 Jul 2026 09:05:42 +0000 Files and hashes: 1: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=) 2: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: 0L4//sz9OIuT0CUnmJSRT/q7WRY8tW1AP2oLiy+nP2w=) 3: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=) 4: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=) 5: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=) 6: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=) 7: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=) 8: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=) 9: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=) 10: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=) 11: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:c2:37:a2:6c:d5:a5:2e:d6:c8:23:6f:b7:8d:81:02:3e:34:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A Validity Not Before: Jul 29 06:23:42 2026 GMT Not After : Jul 30 09:05:42 2026 GMT Subject: CN=6899274CC9F060620148414CF2631442DD2C4F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:a5:0e:f3:0e:76:e6:6c:57:16:94:c6:4d: af:56:15:f5:60:da:f8:5e:5e:45:38:34:ae:96:bf: bd:6a:28:22:0c:3d:9a:3e:7c:00:02:dd:66:0d:cd: 16:18:97:80:5d:d6:dc:63:48:42:ce:4c:78:0e:d7: 02:52:a6:90:4d:2d:12:a8:26:71:0e:20:4d:d8:4a: 37:d3:de:df:2d:db:84:52:c0:40:01:60:1e:82:90: ed:8c:ab:c3:47:ab:f8:c6:8b:45:e0:34:97:7b:b2: a0:90:d5:58:48:ce:1c:c7:e0:5a:3c:02:f1:3c:cd: 06:97:4b:b1:f7:7e:7e:a3:9c:22:cf:78:df:25:8b: 3f:8f:37:15:a2:ed:a4:05:78:3d:08:2a:62:1d:f7: 7c:d2:f2:7e:41:de:18:8e:38:bf:84:4f:96:41:e9: 1c:4b:0c:12:58:28:0f:74:44:ba:ed:e1:e5:ca:fe: df:f7:5f:35:eb:d9:48:a0:40:02:14:15:29:28:48: 5d:4b:d6:24:8c:88:82:4a:21:12:13:3a:e1:a5:1b: ea:04:70:fd:ec:0f:6f:29:c8:28:13:2a:ba:1c:77: a5:e9:3a:fd:57:75:da:d9:af:50:e4:60:73:d1:a9: d1:77:78:38:cd:5b:00:3c:2d:c0:57:36:54:e0:56: 51:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:99:27:4C:C9:F0:60:62:01:48:41:4C:F2:63:14:42:DD:2C:4F:7C X509v3 Authority Key Identifier: keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:f2:05:e5:28:ba:20:9e:b0:be:56:b3:8c:26:60:92:ae: fa:d7:17:7d:1f:55:03:fb:9b:f8:e0:e5:0c:c9:27:97:f8:78: f0:41:4e:d8:9d:b8:c4:ce:3f:f7:72:96:5f:59:36:1d:41:bc: be:8a:28:b7:3b:90:50:7c:6c:6b:a0:a2:b4:cc:37:24:98:cb: bb:81:2a:79:9c:9b:e6:d9:56:7f:0b:8a:00:e7:15:ae:8a:d9: 40:8d:58:8a:0c:b7:d5:08:be:80:7e:2c:65:0d:48:66:bb:e5: 5c:86:65:82:46:c8:30:91:55:e2:13:74:4d:8c:8a:d5:e6:f7: ea:57:3e:14:8d:7e:64:a9:47:3c:57:df:9c:ba:88:7e:0d:5d: 0b:3a:50:ea:35:13:3a:46:d2:d2:a2:e2:c3:a3:25:49:ec:7c: 1b:2f:49:6d:aa:8f:42:cf:50:b8:0e:1a:6e:6d:4a:24:74:dc: a9:a9:d0:b2:0d:7e:c8:80:63:8f:5f:dc:b1:a8:ed:87:dd:af: dc:54:ca:d3:60:3f:a7:71:74:76:bf:4a:d1:b0:ed:b3:26:05: b6:f4:6c:a0:5e:75:28:1d:59:bd:4d:69:53:a9:b8:00:67:cb: ee:88:4c:d8:3b:65:56:a1:49:bc:d1:06:cc:fa:a6:6c:cb:6d: 5a:7b:5f:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcXnCN6Js1aUu1sgjb7eNgQI+NOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2 QTgwN0EwQTAeFw0yNjA3MjkwNjIzNDJaFw0yNjA3MzAwOTA1NDJaMDMxMTAvBgNV BAMTKDY4OTkyNzRDQzlGMDYwNjIwMTQ4NDE0Q0YyNjMxNDQyREQyQzRGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyW6UO8w525mxXFpTGTa9WFfVg 2vheXkU4NK6Wv71qKCIMPZo+fAAC3WYNzRYYl4Bd1txjSELOTHgO1wJSppBNLRKo JnEOIE3YSjfT3t8t24RSwEABYB6CkO2Mq8NHq/jGi0XgNJd7sqCQ1VhIzhzH4Fo8 AvE8zQaXS7H3fn6jnCLPeN8liz+PNxWi7aQFeD0IKmId93zS8n5B3hiOOL+ET5ZB 6RxLDBJYKA90RLrt4eXK/t/3XzXr2UigQAIUFSkoSF1L1iSMiIJKIRITOuGlG+oE cP3sD28pyCgTKrocd6XpOv1XddrZr1DkYHPRqdF3eDjNWwA8LcBXNlTgVlExAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaJknTMnwYGIBSEFM8mMUQt0sT3wwHwYDVR0j BBgwFoAUPcMjidjrALsxxqlbNK/IV2qAegowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTg1MjkzMS8wLzNEQzMyMzg5RDhFQjAwQkIzMUM2QTk1QjM0QUZD ODU3NkE4MDdBMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0RDMzIzODlEOEVCMDBCQjMxQzZBOTVCMzRBRkM4NTc2QTgwN0EwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk4NTI5MzEvMC8zREMzMjM4OUQ4RUIw MEJCMzFDNkE5NUIzNEFGQzg1NzZBODA3QTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbvyBeUouiCe sL5Ws4wmYJKu+tcXfR9VA/ub+ODlDMknl/h48EFO2J24xM4/93KWX1k2HUG8vooo tzuQUHxsa6CitMw3JJjLu4EqeZyb5tlWfwuKAOcVrorZQI1Yigy31Qi+gH4sZQ1I ZrvlXIZlgkbIMJFV4hN0TYyK1eb36lc+FI1+ZKlHPFffnLqIfg1dCzpQ6jUTOkbS 0qLiw6MlSex8Gy9JbaqPQs9QuA4abm1KJHTcqanQsg1+yIBjj1/csajth92v3FTK 02A/p3F0dr9K0bDtsyYFtvRsoF51KB1ZvU1pU6m4AGfL7ohM2DtlVqFJvNEGzPqm bMttWntf5Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client