$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: Gg+Pba7Ln4/xSZkhyR6AZBU8lCoQC6Sa2D2URdUdS2Q= Subject key identifier: B7:A5:89:93:1A:F9:2D:76:0D:A8:34:98:D4:22:C8:69:B0:19:E2:F9 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 0C2C13D520BDDBDEF40271FCB6FA3847611D8FA6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 13:09:43 +0000 Manifest this update: Fri 17 Apr 2026 13:04:43 +0000 Manifest next update: Sat 18 Apr 2026 13:37:43 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: 7a28wrSPhJRxSMAm/VQkr2bfTyswtEcxl0MkZp/4NNA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2c:13:d5:20:bd:db:de:f4:02:71:fc:b6:fa:38:47:61:1d:8f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Apr 17 13:04:43 2026 GMT Not After : Apr 18 13:37:43 2026 GMT Subject: CN=B7A589931AF92D760DA83498D422C869B019E2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:59:b4:0d:ab:3f:99:1e:95:b4:cd:69:c0: 26:24:b1:50:87:1a:2b:41:9d:85:d0:41:b7:60:a5: 0a:c5:54:c2:cc:97:81:c9:85:e8:33:04:8c:38:1e: 80:2c:ec:38:4e:ba:7f:72:d6:57:75:7f:63:31:ee: 34:d2:23:f5:a7:06:23:4a:dc:9f:35:26:8f:4c:00: 4c:34:64:59:1f:f9:e0:a5:25:cc:b3:b5:ce:39:39: 47:4f:8d:95:30:96:f0:11:58:c8:57:21:21:70:54: c3:5f:8c:a7:29:11:0c:46:12:75:fd:86:b9:68:42: ee:b6:ad:db:68:ee:ae:99:48:c4:e1:80:ac:03:73: 8f:c6:bb:92:fc:7f:e5:c8:a6:c9:95:39:e6:bf:02: c5:a3:a4:3c:cd:ce:f1:ed:36:0e:ec:e6:9b:ff:eb: e6:7b:cf:cf:bd:db:2e:6e:8a:bd:e7:7a:73:07:54: dd:f3:de:fd:5f:ee:98:d2:8a:cf:03:e1:3c:c6:cf: ab:12:de:72:6e:f8:ba:86:ae:b5:d3:c8:53:be:aa: 12:12:f0:3a:a4:74:85:03:9e:c6:5b:79:f5:c1:db: ec:35:42:ab:2f:b8:ea:a7:2e:34:b1:00:0f:3d:ef: 46:63:75:70:49:4b:23:01:c3:fa:76:14:ca:39:c5: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:89:93:1A:F9:2D:76:0D:A8:34:98:D4:22:C8:69:B0:19:E2:F9 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d3:f8:7c:d9:06:cc:65:02:b8:6a:1b:38:d9:06:97:bf:0c: 22:12:5b:27:3a:41:ef:8c:96:19:22:2a:11:c9:ed:a0:87:1e: 33:a1:b3:0c:26:21:dc:7b:ba:30:2c:bf:35:a7:2c:ae:7b:f0: d9:b2:f4:35:1d:d8:2c:ef:9a:7b:e8:aa:e8:ab:c1:ac:e8:94: 0a:65:63:51:2d:e2:0d:e5:6e:50:3f:ed:a0:61:92:60:9a:fb: 2a:e6:69:75:5f:4f:c7:2a:f0:1d:d3:08:d8:d1:da:4b:20:c0: 79:2d:5a:16:0e:e1:4e:e9:f5:0c:43:02:67:7f:63:fe:12:84: 15:24:a8:f1:dd:8d:26:aa:fb:72:9d:2c:f9:62:bd:4c:df:d4: 78:d5:9e:1b:60:ca:e0:31:f6:0a:ee:f8:a3:b4:90:35:7b:51: b1:23:8a:55:1d:ea:bb:7d:22:a5:0b:d0:89:11:e6:04:04:c2: 3c:8b:b9:55:66:79:8d:dd:11:e2:a0:60:b6:a8:8e:63:68:e6: f9:43:8c:f4:d5:4e:99:46:77:49:73:9e:4a:86:7f:bb:71:9f: 2a:75:5a:3f:c3:ea:8e:f8:29:eb:73:de:65:9e:e8:b7:92:8c: 2e:07:41:aa:fd:39:63:f2:65:77:9b:44:59:6e:f0:c2:d0:0f: c7:88:e7:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDCwT1SC92970AnH8tvo4R2Edj6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA0MTcxMzA0NDNaFw0yNjA0MTgxMzM3NDNaMDMxMTAvBgNV BAMTKEI3QTU4OTkzMUFGOTJENzYwREE4MzQ5OEQ0MjJDODY5QjAxOUUyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X1m0Das/mR6VtM1pwCYksVCH GitBnYXQQbdgpQrFVMLMl4HJhegzBIw4HoAs7DhOun9y1ld1f2Mx7jTSI/WnBiNK 3J81Jo9MAEw0ZFkf+eClJcyztc45OUdPjZUwlvARWMhXISFwVMNfjKcpEQxGEnX9 hrloQu62rdto7q6ZSMThgKwDc4/Gu5L8f+XIpsmVOea/AsWjpDzNzvHtNg7s5pv/ 6+Z7z8+92y5uir3nenMHVN3z3v1f7pjSis8D4TzGz6sS3nJu+LqGrrXTyFO+qhIS 8DqkdIUDnsZbefXB2+w1QqsvuOqnLjSxAA8970ZjdXBJSyMBw/p2FMo5xQeVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt6WJkxr5LXYNqDSY1CLIabAZ4vkwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtP4fNkGzGUC uGobONkGl78MIhJbJzpB74yWGSIqEcntoIceM6GzDCYh3Hu6MCy/Nacsrnvw2bL0 NR3YLO+ae+iq6KvBrOiUCmVjUS3iDeVuUD/toGGSYJr7KuZpdV9PxyrwHdMI2NHa SyDAeS1aFg7hTun1DEMCZ39j/hKEFSSo8d2NJqr7cp0s+WK9TN/UeNWeG2DK4DH2 Cu74o7SQNXtRsSOKVR3qu30ipQvQiRHmBATCPIu5VWZ5jd0R4qBgtqiOY2jm+UOM 9NVOmUZ3SXOeSoZ/u3GfKnVaP8Pqjvgp63PeZZ7ot5KMLgdBqv05Y/Jld5tEWW7w wtAPx4jnCg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:30 2026 by rpki-client