$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft (raw, json) Hash identifier: tQcbUFz7aF9C2J8VQv7KlmW76HB/Hx0i6K9/4oNUQj8= Subject key identifier: 0C:88:BC:5B:0D:C2:8B:28:E3:BB:BC:A8:C9:7F:EE:F8:66:19:9A:64 Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 493C1F4DD028D60D229866619B58A6E2319D5482 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft Manifest number: 50 Signing time: Sat 13 Jun 2026 12:31:49 +0000 Manifest this update: Sat 13 Jun 2026 12:26:49 +0000 Manifest next update: Sun 14 Jun 2026 13:01:49 +0000 Files and hashes: 1: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl (hash: Wb3XaeXbGEmGDKCAZqw4xYzObbIUFtZiUDUvChJmw3c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3c:1f:4d:d0:28:d6:0d:22:98:66:61:9b:58:a6:e2:31:9d:54:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Jun 13 12:26:49 2026 GMT Not After : Jun 14 13:01:49 2026 GMT Subject: CN=0C88BC5B0DC28B28E3BBBCA8C97FEEF866199A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:86:14:37:e4:0d:57:67:5c:ec:0c:2a:28: 20:a1:56:fb:7e:9a:2c:7c:a4:92:8a:1b:63:1b:18: cc:98:3a:fe:33:af:36:d9:f2:59:93:13:6d:bc:a1: fe:ca:7d:09:7c:f4:94:eb:fc:a4:54:e5:9b:af:e2: 9d:68:34:71:23:81:69:e9:b5:50:4b:7f:bb:cd:0d: 77:2f:e6:f6:a3:d4:f0:8b:1b:96:ba:e6:50:91:6c: 76:52:e2:c3:7f:c5:92:ea:24:d2:d8:d1:b3:14:1a: 5d:26:a8:68:23:c6:38:c1:8f:63:d8:4c:5c:1c:de: 43:ff:ee:c7:f6:9e:19:40:bf:2d:13:10:40:ad:82: c6:ac:21:c7:05:12:52:10:71:ad:86:36:2b:34:7a: e3:da:39:c4:16:66:b3:3d:7f:5f:07:c2:f2:17:59: 16:1b:8e:20:79:88:25:81:3c:22:14:e2:3b:5f:47: 1f:2e:ce:1b:6b:21:74:55:68:cf:5f:0e:90:e2:94: ca:f3:a2:46:b7:3b:4a:76:b1:e0:bd:4c:b2:65:90: e7:bf:5e:4d:e1:8a:d3:ef:ee:99:14:8f:5a:e9:a4: f2:8e:f4:41:1d:7d:60:fe:9d:0e:1f:f0:0c:dc:25: ee:57:e9:8e:23:63:0c:f9:a5:9f:cf:a2:87:62:c6: 22:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:BC:5B:0D:C2:8B:28:E3:BB:BC:A8:C9:7F:EE:F8:66:19:9A:64 X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4f:9e:98:59:b1:ca:5c:65:2a:38:68:c4:90:7e:28:5d:86: 12:73:6e:e2:6a:cd:bf:02:bd:f2:15:3e:7e:3d:df:a9:d6:22: 94:f8:9f:4f:cb:e0:6f:da:c2:ec:16:33:a5:50:77:7a:54:0f: 13:79:99:ea:33:21:99:e1:ca:2e:e3:d3:82:1f:f6:8a:ee:01: a9:34:6b:56:2f:a6:76:35:60:d4:3e:87:ba:96:a8:02:bb:57: c5:30:b8:73:da:00:a5:94:9e:71:c6:e6:a4:c9:f4:ea:d0:cc: 65:96:d6:c9:75:81:37:f4:c7:5b:0b:a5:a6:04:a4:3a:08:be: f4:aa:6f:1f:7e:20:3c:68:70:b2:f7:cb:06:bc:e5:f1:a4:f6: e4:0e:18:5b:a7:a8:2f:93:b6:3b:42:be:44:69:66:8d:81:6f: 88:7e:80:03:44:70:de:de:89:53:f0:3c:d5:30:2d:1f:52:bd: ab:57:c0:7c:58:48:8b:fb:03:20:37:cf:e6:5d:fd:88:32:34: b6:1d:4a:43:cf:ec:43:e3:48:93:4b:ef:b9:60:97:7f:5d:d9: 96:1e:cf:48:43:eb:bd:0d:e3:5c:40:69:0e:4f:17:f1:2a:b9: be:e1:36:90:b2:3d:c1:9f:d5:22:17:9c:e5:ce:80:f8:ec:97: 17:16:5c:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSTwfTdAo1g0imGZhm1im4jGdVIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA2MTMxMjI2NDlaFw0yNjA2MTQxMzAxNDlaMDMxMTAvBgNV BAMTKDBDODhCQzVCMERDMjhCMjhFM0JCQkNBOEM5N0ZFRUY4NjYxOTlBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJIYUN+QNV2dc7AwqKCChVvt+ mix8pJKKG2MbGMyYOv4zrzbZ8lmTE228of7KfQl89JTr/KRU5Zuv4p1oNHEjgWnp tVBLf7vNDXcv5vaj1PCLG5a65lCRbHZS4sN/xZLqJNLY0bMUGl0mqGgjxjjBj2PY TFwc3kP/7sf2nhlAvy0TEECtgsasIccFElIQca2GNis0euPaOcQWZrM9f18HwvIX WRYbjiB5iCWBPCIU4jtfRx8uzhtrIXRVaM9fDpDilMrzoka3O0p2seC9TLJlkOe/ Xk3hitPv7pkUj1rppPKO9EEdfWD+nQ4f8AzcJe5X6Y4jYwz5pZ/PoodixiKnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDIi8Ww3Ciyjju7yoyX/u+GYZmmQwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2OTgwMjk4NzM4MjM3NDcvMC8zRjNDNjA1REY2MEM1 NEQwMDUwNUJDRDhDMEM2RjdBMzhCMEFFM0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk+emFmxylxl KjhoxJB+KF2GEnNu4mrNvwK98hU+fj3fqdYilPifT8vgb9rC7BYzpVB3elQPE3mZ 6jMhmeHKLuPTgh/2iu4BqTRrVi+mdjVg1D6HupaoArtXxTC4c9oApZSeccbmpMn0 6tDMZZbWyXWBN/THWwulpgSkOgi+9KpvH34gPGhwsvfLBrzl8aT25A4YW6eoL5O2 O0K+RGlmjYFviH6AA0Rw3t6JU/A81TAtH1K9q1fAfFhIi/sDIDfP5l39iDI0th1K Q8/sQ+NIk0vvuWCXf13Zlh7PSEPrvQ3jXEBpDk8X8Sq5vuE2kLI9wZ/VIhec5c6A +OyXFxZcJA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:11 2026 by rpki-client