$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: nZaCBIUSWnt969vmjj8H7+jMOCKG/rL3C2SztVYK9/E= Subject key identifier: A8:B5:4C:E0:6D:6B:65:88:9B:D9:EC:BB:36:9F:4B:82:E5:29:BB:1D Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 5070423406FBDA3B9413692E2865B6C86717DB93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: CC Signing time: Wed 29 Jul 2026 02:23:11 +0000 Manifest this update: Wed 29 Jul 2026 02:18:11 +0000 Manifest next update: Thu 30 Jul 2026 04:52:11 +0000 Files and hashes: 1: AS56046.roa (hash: hJ5hwDbWAFZkoac+eVhYLOXEqc2G0m6IEhRi/theClw=) 2: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 3: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) 4: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 5: AS56042.roa (hash: UKjsFxWD9jWzWhIKzWlCLqB67Q9B9HRs0lVDSAwC6go=) 6: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) 7: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 8: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: Mwl3XV0Cp/JXnASZAXAynO5N0DvIfdLcODzjYSV42RI=) 9: AS9808.roa (hash: WhejpRktrBp4DhuCjSqxXKBeqsCvxI/AeCBWlA0jPh0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:70:42:34:06:fb:da:3b:94:13:69:2e:28:65:b6:c8:67:17:db:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Jul 29 02:18:11 2026 GMT Not After : Jul 30 04:52:11 2026 GMT Subject: CN=A8B54CE06D6B65889BD9ECBB369F4B82E529BB1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:d7:a8:bb:36:06:54:ec:8f:99:f9:c4:7d: d3:76:e2:5c:68:ab:06:c1:3f:3a:30:00:ff:16:b6: cb:d5:49:d5:7a:cf:2d:bd:75:2c:ac:ac:21:52:c4: ec:78:f9:9b:f4:87:49:32:c1:93:3e:1b:96:f4:97: 99:af:50:5d:0f:8f:97:cb:7e:04:3b:de:a3:82:c8: 0f:c9:d7:14:df:9e:75:a8:a5:9b:f0:41:ad:0b:dc: fb:78:47:46:1d:5f:41:1c:66:2b:b9:8d:db:72:64: f0:ad:e3:54:b4:0b:ee:cf:be:da:26:a1:2d:98:a9: 83:56:b2:dd:63:49:2f:8f:55:f9:a6:bc:8f:94:13: 47:4a:fc:64:60:d8:08:5e:a2:42:4c:5f:1b:33:b8: f2:c7:c0:d5:76:b9:08:7c:2b:54:25:59:f4:44:40: aa:c9:f7:ab:3c:2f:d8:34:de:75:48:50:01:36:dd: 51:9d:86:1c:31:08:28:96:cb:31:17:83:e5:de:7d: 99:96:17:d4:90:54:ef:07:27:93:f4:4e:53:3a:49: 24:9a:b3:97:ad:c4:20:53:2b:b6:7c:8f:7e:02:ff: aa:c4:3c:75:ec:b3:59:fc:e9:8c:85:c4:e6:61:ec: 49:bc:ca:ee:42:d5:31:6a:be:c8:e2:8c:d3:03:69: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B5:4C:E0:6D:6B:65:88:9B:D9:EC:BB:36:9F:4B:82:E5:29:BB:1D X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a7:29:30:82:b1:38:20:26:54:37:f4:bd:b3:0f:4f:35:17: 03:9d:74:12:fc:37:26:30:62:91:65:f2:31:18:4d:ad:2c:15: c3:64:f1:ce:05:55:ed:be:07:84:07:ec:ee:c5:49:27:f9:41: f9:96:ab:5f:03:f4:bc:ed:a3:2a:b2:0b:f0:ff:74:4b:36:50: 5e:57:4c:0f:83:42:61:93:4f:c9:eb:30:8d:27:95:11:cd:c3: 5b:7c:b3:04:8c:a7:10:a0:34:0e:30:0a:9c:71:bf:19:d1:45: 48:49:a1:c2:98:61:9e:3e:0f:96:5f:23:a7:4e:e1:a1:e4:bb: cf:6d:a9:23:c9:4d:9c:a6:58:ba:14:e0:13:98:9b:c3:e8:15: 6f:9c:28:22:cb:00:7c:24:35:d2:4f:71:88:48:53:07:43:74: 9c:bc:4f:2e:af:90:42:26:24:e8:17:4a:fe:5b:5e:b1:86:03: be:ad:80:e3:cc:a9:ce:38:c9:7b:2f:a6:4b:85:4e:74:fc:86: 94:48:fe:32:94:b2:13:b2:f3:ce:9a:82:5d:91:2e:c1:6b:54: 2e:a6:86:86:54:b0:72:e5:64:9f:1c:4a:ef:b0:a9:92:17:7a: 92:07:f4:cb:8a:c8:21:99:51:f1:13:6d:2e:c9:e1:2a:2c:35: 2f:bd:ac:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUHBCNAb72juUE2kuKGW2yGcX25MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA3MjkwMjE4MTFaFw0yNjA3MzAwNDUyMTFaMDMxMTAvBgNV BAMTKEE4QjU0Q0UwNkQ2QjY1ODg5QkQ5RUNCQjM2OUY0QjgyRTUyOUJCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGc9eouzYGVOyPmfnEfdN24lxo qwbBPzowAP8WtsvVSdV6zy29dSysrCFSxOx4+Zv0h0kywZM+G5b0l5mvUF0Pj5fL fgQ73qOCyA/J1xTfnnWopZvwQa0L3Pt4R0YdX0EcZiu5jdtyZPCt41S0C+7Pvtom oS2YqYNWst1jSS+PVfmmvI+UE0dK/GRg2AheokJMXxszuPLHwNV2uQh8K1QlWfRE QKrJ96s8L9g03nVIUAE23VGdhhwxCCiWyzEXg+XefZmWF9SQVO8HJ5P0TlM6SSSa s5etxCBTK7Z8j34C/6rEPHXss1n86YyFxOZh7Em8yu5C1TFqvsjijNMDadszAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqLVM4G1rZYib2ey7Np9LguUpux0wHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVacpMIKxOCAm VDf0vbMPTzUXA510Evw3JjBikWXyMRhNrSwVw2TxzgVV7b4HhAfs7sVJJ/lB+Zar XwP0vO2jKrIL8P90SzZQXldMD4NCYZNPyeswjSeVEc3DW3yzBIynEKA0DjAKnHG/ GdFFSEmhwphhnj4Pll8jp07hoeS7z22pI8lNnKZYuhTgE5ibw+gVb5woIssAfCQ1 0k9xiEhTB0N0nLxPLq+QQiYk6BdK/ltesYYDvq2A48ypzjjJey+mS4VOdPyGlEj+ MpSyE7LzzpqCXZEuwWtULqaGhlSwcuVknxxK77Cpkhd6kgf0y4rIIZlR8RNtLsnh Kiw1L72ssw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:23:19 2026 by rpki-client