$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: mChpKdXBGiSrp8e2SVAbVZ5XHwkX9cTEAMQUicW3zNI= Subject key identifier: 59:50:27:34:13:99:63:45:4C:09:7D:0E:75:BC:E6:FB:2C:B4:58:D6 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 372ECDFF21BCA8FCDFA0ED1BCE047834AC235A34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 8E Signing time: Wed 29 Jul 2026 13:39:30 +0000 Manifest this update: Wed 29 Jul 2026 13:34:30 +0000 Manifest next update: Thu 30 Jul 2026 17:06:30 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: UFYQKaoZhtxUy9qLC4tpH1dMRuev+UVfLxeB9+YmTvI=) 2: 3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (hash: vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=) 3: 323430343a653863303a3a2f33322d3332203d3e20313339303930.roa (hash: 5oz//eZO/26udoPVEo7M+cH2yOaR6/BK884dNaQEd/4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2e:cd:ff:21:bc:a8:fc:df:a0:ed:1b:ce:04:78:34:ac:23:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Jul 29 13:34:30 2026 GMT Not After : Jul 30 17:06:30 2026 GMT Subject: CN=59502734139963454C097D0E75BCE6FB2CB458D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:6e:3d:8a:95:15:1f:41:bb:42:16:5c:09: 4f:30:04:ca:fb:f4:12:55:36:9e:5e:ef:11:0b:d8: b0:87:98:9b:cb:7a:a7:4d:8f:a2:c8:28:9d:4d:41: 91:4a:7d:a6:5a:20:c0:26:d5:37:cd:cf:f3:a9:f9: 5c:45:29:bb:0a:c6:25:1e:bd:3f:4e:d5:40:f7:a8: 63:fe:0d:26:4c:03:ec:4c:f5:e5:be:cc:d2:72:19: c7:bf:3e:9e:3f:e7:a6:7d:0d:47:00:17:20:16:35: 31:dd:33:78:0d:d6:d2:23:ea:a6:c9:5e:da:1c:15: ab:f9:1a:a2:d4:ff:75:64:71:2e:1e:01:ed:af:75: 85:3c:4a:c9:9a:4e:a5:59:70:4f:36:7f:6d:55:87: d5:7f:1e:ec:c2:3b:a4:db:85:e1:63:dd:f4:e4:ab: b0:9e:06:cc:6b:07:4a:47:09:3d:98:0f:35:32:79: e2:f2:a5:5b:95:a5:a9:90:64:d1:1f:3f:3a:80:cf: 02:da:9c:96:10:e7:91:53:17:e7:1f:71:26:d2:1c: 2f:7b:f3:3c:54:da:ad:f0:59:3d:81:84:0a:54:c6: b2:2a:f7:b8:94:be:15:70:46:33:ed:c6:bf:64:fc: 3e:23:96:83:8e:bf:d8:64:9e:8e:8f:ef:0d:67:5e: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:50:27:34:13:99:63:45:4C:09:7D:0E:75:BC:E6:FB:2C:B4:58:D6 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:43:aa:28:68:22:72:fe:37:d0:14:f2:e1:b1:4c:62:b6:6d: 19:a9:46:d2:15:a8:50:4d:bc:59:00:7b:a3:99:c9:ab:bc:48: 1c:6e:6d:34:81:fa:8a:e7:7a:ca:85:f7:be:e5:14:49:5b:f2: 1d:b7:32:64:3e:77:0e:45:5c:db:e8:36:ee:ff:a5:41:b6:f6: d3:3b:3c:2f:ba:64:d1:10:5d:c7:f5:ba:23:9a:bc:e4:df:d9: e5:94:d4:18:46:8d:7c:80:3c:fa:46:14:1e:b8:00:84:5a:d0: b0:26:ef:2e:cf:c9:4f:20:25:dc:e3:2c:c6:55:1e:0d:ff:09: fa:35:ad:36:0d:f3:de:ab:a3:e0:87:50:71:28:e4:14:b4:82: f1:13:fa:d0:e7:b4:42:c8:fd:c6:7e:67:dc:e8:ae:4b:98:72: 0a:4f:78:c9:8f:39:64:26:5f:6f:4c:bb:c5:28:ae:01:8a:78: 7a:4c:a2:72:90:5f:bc:76:1a:93:c5:27:99:49:f2:2e:3a:6f: 2a:98:c2:6d:99:b0:d8:b5:ab:18:2e:9a:9e:db:4b:9e:e0:e8: 9e:ff:1d:88:e4:fe:24:4a:bd:12:bb:8b:c0:6a:69:0d:3a:72: 17:00:fa:71:ab:99:78:bf:d5:07:93:8f:87:09:c7:fd:99:6c: a5:bb:6c:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNy7N/yG8qPzfoO0bzgR4NKwjWjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA3MjkxMzM0MzBaFw0yNjA3MzAxNzA2MzBaMDMxMTAvBgNV BAMTKDU5NTAyNzM0MTM5OTYzNDU0QzA5N0QwRTc1QkNFNkZCMkNCNDU4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2um49ipUVH0G7QhZcCU8wBMr7 9BJVNp5e7xEL2LCHmJvLeqdNj6LIKJ1NQZFKfaZaIMAm1TfNz/Op+VxFKbsKxiUe vT9O1UD3qGP+DSZMA+xM9eW+zNJyGce/Pp4/56Z9DUcAFyAWNTHdM3gN1tIj6qbJ XtocFav5GqLU/3VkcS4eAe2vdYU8SsmaTqVZcE82f21Vh9V/HuzCO6TbheFj3fTk q7CeBsxrB0pHCT2YDzUyeeLypVuVpamQZNEfPzqAzwLanJYQ55FTF+cfcSbSHC97 8zxU2q3wWT2BhApUxrIq97iUvhVwRjPtxr9k/D4jloOOv9hkno6P7w1nXh1PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWVAnNBOZY0VMCX0Odbzm+yy0WNYwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUOqKGgicv43 0BTy4bFMYrZtGalG0hWoUE28WQB7o5nJq7xIHG5tNIH6iud6yoX3vuUUSVvyHbcy ZD53DkVc2+g27v+lQbb20zs8L7pk0RBdx/W6I5q85N/Z5ZTUGEaNfIA8+kYUHrgA hFrQsCbvLs/JTyAl3OMsxlUeDf8J+jWtNg3z3quj4IdQcSjkFLSC8RP60Oe0Qsj9 xn5n3OiuS5hyCk94yY85ZCZfb0y7xSiuAYp4ekyicpBfvHYak8UnmUnyLjpvKpjC bZmw2LWrGC6anttLnuDonv8diOT+JEq9EruLwGppDTpyFwD6cauZeL/VB5OPhwnH /Zlspbts1A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:23 2026 by rpki-client