$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json) Hash identifier: zicgc/t7QYHaVV4pZVil0Jlt78MSL+M55SDi4j3kP40= Subject key identifier: 81:8D:D6:B3:DE:FD:8E:41:6F:39:71:E2:58:5F:BC:0F:F6:FD:78:B1 Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Certificate serial: 4357742104B33D5026A36BF82091DAAED89EF2A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft Manifest number: 71 Signing time: Tue 28 Jul 2026 14:42:01 +0000 Manifest this update: Tue 28 Jul 2026 14:37:01 +0000 Manifest next update: Wed 29 Jul 2026 18:35:01 +0000 Files and hashes: 1: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=) 2: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=) 3: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=) 4: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: 58Q+83pbxmQ8J5KiHL8PVTCfCegRpDGWSO6QCpFCCqY=) 5: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:57:74:21:04:b3:3d:50:26:a3:6b:f8:20:91:da:ae:d8:9e:f2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A Validity Not Before: Jul 28 14:37:01 2026 GMT Not After : Jul 29 18:35:01 2026 GMT Subject: CN=818DD6B3DEFD8E416F3971E2585FBC0FF6FD78B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:76:69:c3:06:d1:24:0b:16:b1:40:55:57: 79:ce:da:60:26:66:f7:c8:b7:c8:65:45:f5:7b:30: 35:49:86:6b:db:07:5e:d6:98:51:84:0c:3f:6e:12: 1d:8f:9d:57:b8:16:0e:4e:e2:f6:34:d8:cb:e7:f6: d7:6e:9b:bd:f1:cc:6f:26:fe:16:7e:b4:36:3e:3f: dc:a5:53:88:f9:7b:4e:82:b9:a6:a1:de:61:95:4d: 0b:ce:ea:86:2a:bd:98:33:f1:7b:8b:bc:57:78:d7: 0d:8f:6f:f3:a8:0f:35:a0:00:f7:17:c5:45:4c:69: fe:91:1c:35:97:4f:9e:a0:d9:23:43:69:25:b7:f8: d4:c0:84:df:7a:7f:25:1f:02:75:18:61:54:a5:bd: f3:f0:76:fc:0e:98:88:5c:0b:b3:30:19:8f:85:ea: b6:de:f1:6f:3c:f4:8b:68:e3:2b:62:32:e2:ea:cf: ab:ca:2a:3b:4e:6a:1b:88:43:f1:8e:d4:b4:8a:11: 69:22:b2:b6:aa:c5:7b:45:d0:aa:1f:a1:6a:19:94: 1e:e2:8c:d9:22:07:81:bf:13:52:87:e0:8b:74:96: c4:f0:ab:a0:8e:bb:89:26:76:29:bc:e4:9c:58:72: b7:01:1d:24:27:ab:ef:b7:90:a2:b0:5c:12:ea:cf: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8D:D6:B3:DE:FD:8E:41:6F:39:71:E2:58:5F:BC:0F:F6:FD:78:B1 X509v3 Authority Key Identifier: keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:b0:58:c6:d3:f6:c0:70:b4:83:bf:80:78:95:04:96:c6:35: ca:3e:7a:d9:df:63:02:68:89:a2:9f:3d:af:7b:56:96:ae:63: c1:54:47:6b:7b:12:59:37:78:25:f0:56:60:22:07:f6:17:e1: 27:32:cf:c9:15:67:8b:54:17:d6:8a:99:03:00:62:1c:90:f4: 5b:88:28:53:ec:d0:92:3e:34:58:79:73:fa:0b:3a:1f:15:07: 40:89:f5:91:dc:30:68:2e:5d:89:13:d0:ba:39:8c:19:e3:31: ba:6a:68:89:e1:38:ca:14:12:9a:73:de:4c:ee:e9:0b:ad:86: 4f:8c:45:d8:34:9d:43:6b:e2:1e:38:a4:ab:22:ad:ac:01:52: 22:ef:12:27:5d:b9:c8:a1:6b:17:5f:11:b3:02:fd:b6:53:1a: 08:31:e6:2e:1a:1a:5b:2b:e1:6e:84:37:12:ca:b2:59:88:a3: 62:ea:6d:4e:2f:27:8f:b1:5f:ae:18:92:09:33:2b:2d:2b:58: 4e:e7:66:8d:4a:8c:8b:30:69:a1:0e:74:e1:c0:b0:c5:fe:08: 6b:e2:68:08:4b:05:ab:a5:d5:03:f1:56:60:a6:d7:c2:76:f1: 94:1b:ba:06:7e:1d:f8:62:15:ac:2f:c6:c4:0b:eb:f9:80:3b: 56:db:60:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ1d0IQSzPVAmo2v4IJHartie8qcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERC MUU0MjQwQTAeFw0yNjA3MjgxNDM3MDFaFw0yNjA3MjkxODM1MDFaMDMxMTAvBgNV BAMTKDgxOERENkIzREVGRDhFNDE2RjM5NzFFMjU4NUZCQzBGRjZGRDc4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMXZpwwbRJAsWsUBVV3nO2mAm ZvfIt8hlRfV7MDVJhmvbB17WmFGEDD9uEh2PnVe4Fg5O4vY02Mvn9tdum73xzG8m /hZ+tDY+P9ylU4j5e06Cuaah3mGVTQvO6oYqvZgz8XuLvFd41w2Pb/OoDzWgAPcX xUVMaf6RHDWXT56g2SNDaSW3+NTAhN96fyUfAnUYYVSlvfPwdvwOmIhcC7MwGY+F 6rbe8W889Ito4ytiMuLqz6vKKjtOahuIQ/GO1LSKEWkisraqxXtF0KofoWoZlB7i jNkiB4G/E1KH4It0lsTwq6COu4kmdim85JxYcrcBHSQnq++3kKKwXBLqzwlZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgY3Ws979jkFvOXHiWF+8D/b9eLEwHwYDVR0j BBgwFoAUPAdt/JNaGDnMM3X28hEBDbHkJAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA0NjQ0NDM3MDI5NjgzOS8wLzNDMDc2REZDOTM1QTE4MzlDQzMzNzVGNkYyMTEw MTBEQjFFNDI0MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0MwNzZERkM5MzVBMTgzOUNDMzM3NUY2RjIxMTAxMERCMUU0MjQwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNDY0NDQzNzAyOTY4MzkvMC8zQzA3NkRGQzkzNUEx ODM5Q0MzMzc1RjZGMjExMDEwREIxRTQyNDBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bBYxtP2wHC0 g7+AeJUElsY1yj562d9jAmiJop89r3tWlq5jwVRHa3sSWTd4JfBWYCIH9hfhJzLP yRVni1QX1oqZAwBiHJD0W4goU+zQkj40WHlz+gs6HxUHQIn1kdwwaC5diRPQujmM GeMxumpoieE4yhQSmnPeTO7pC62GT4xF2DSdQ2viHjikqyKtrAFSIu8SJ125yKFr F18RswL9tlMaCDHmLhoaWyvhboQ3EsqyWYijYuptTi8nj7FfrhiSCTMrLStYTudm jUqMizBpoQ504cCwxf4Ia+JoCEsFq6XVA/FWYKbXwnbxlBu6Bn4d+GIVrC/GxAvr +YA7VttgKA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:37:11 2026 by rpki-client