$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft (raw, json) Hash identifier: Oj4i9QEWT23j3QvB08ea3WC1PvcVdhUe8UxtekxRMw8= Subject key identifier: 92:65:67:A4:A5:E7:1A:5E:C1:5D:5E:05:2D:31:F1:F7:2D:A4:2A:F5 Authority key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Certificate issuer: /CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Certificate serial: 6767F54AB2F8BE870ECA7762F1184388CB463190 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft Manifest number: 0169 Signing time: Mon 21 Sep 2026 17:23:21 +0000 Manifest this update: Mon 21 Sep 2026 17:18:21 +0000 Manifest next update: Fri 25 Sep 2026 04:14:21 +0000 Files and hashes: 1: AS56048.roa (hash: J3G+8EpP6UnjZ5Ay2JaZkQH6cjSptCG/cpPdY9l4Hw0=) 2: AS139080.roa (hash: U/IL8feF994RfO2Vsy8FW4Kbm6Xe9ifnJAV0mHVen0M=) 3: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl (hash: 4BkzZD0H/5VmdPIALss7Tg0j8rZFmupbRw/xBQ/MiKk=) 4: AS56041.roa (hash: j3MydZIwFzbA7pEJNS2KQQkkIo227SN882DriyfZV7M=) 5: AS56046.roa (hash: hJ5hwDbWAFZkoac+eVhYLOXEqc2G0m6IEhRi/theClw=) 6: AS56045.roa (hash: Gg5VNX7IQBrsBCbg2ckO3knrdXyT0v0Z8wt9+eZYHcs=) 7: AS141425.roa (hash: 52D7WEYcm8k7Y2m4nU3pSNgewAODaPiuk+mLjCKjZEI=) 8: AS9808.roa (hash: uaSOliprAgA0IkX51riHsBtorjZpqQETV5vrIgSFdVQ=) 9: AS56042.roa (hash: UKjsFxWD9jWzWhIKzWlCLqB67Q9B9HRs0lVDSAwC6go=) 10: AS132525.roa (hash: afahKFQ6Bt8YGNoqXZhU34laJEPbN+Z+WjhST1lW/Jc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:67:f5:4a:b2:f8:be:87:0e:ca:77:62:f1:18:43:88:cb:46:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Validity Not Before: Sep 21 17:18:21 2026 GMT Not After : Sep 25 04:14:21 2026 GMT Subject: CN=926567A4A5E71A5EC15D5E052D31F1F72DA42AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:21:0f:37:2f:07:74:5a:7d:6f:fd:68:61: 29:52:a8:cd:a8:00:c9:df:76:b4:53:01:54:e7:d7: dc:48:18:58:45:1f:23:2c:2e:1d:75:1f:ae:bf:eb: 55:6b:ab:44:d7:a3:3c:48:7e:11:d8:34:c9:78:23: f1:70:b4:f9:c4:ef:79:77:b7:fd:97:9a:b9:f1:2e: a9:39:18:70:5b:47:6f:98:cc:d6:78:04:d7:d2:6c: b7:9e:47:0a:e0:9a:f6:c5:32:7a:56:33:f8:ef:9a: 77:4c:10:ab:22:df:a4:51:7c:77:9d:d7:b1:d4:57: ec:1d:cb:9d:09:0b:a7:e0:79:59:80:b1:17:bb:8b: a2:10:f6:18:89:dd:b6:e0:5f:ae:64:e7:5d:92:cc: 1a:b5:75:a7:75:d0:4c:1c:31:8d:4e:de:76:70:e2: dd:30:8d:03:ba:bd:08:e9:c5:b2:a9:4b:a9:e5:1f: 48:25:c3:58:b8:fa:2e:07:1e:ea:98:76:29:1d:4f: 89:75:64:b0:e8:2e:2e:02:69:be:8a:1c:2e:17:7b: d1:6a:4a:ac:de:ff:5c:9b:27:12:ea:10:40:be:c7: 80:62:84:27:bf:45:9b:8d:74:dc:3b:d2:53:4c:6f: 40:5e:f8:76:6c:cc:07:43:4e:65:02:c1:16:9a:f9: c2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:65:67:A4:A5:E7:1A:5E:C1:5D:5E:05:2D:31:F1:F7:2D:A4:2A:F5 X509v3 Authority Key Identifier: keyid:3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:28:88:f1:a1:4a:72:de:3e:aa:66:fc:37:6e:89:25:5c:32: cf:36:9b:48:b2:9d:72:72:7a:be:a0:f0:d5:85:18:5f:d4:3e: ce:14:12:ab:33:20:48:4c:9b:5b:71:17:f3:45:ef:3e:a1:1a: 41:13:15:76:52:d4:8a:07:0c:2b:5f:62:3c:3d:ea:4d:5a:27: d9:64:8a:e3:03:2d:02:08:58:0c:e0:89:43:88:f3:a6:df:1e: b6:00:53:4e:fd:ef:1f:68:fd:28:d9:93:b3:2a:02:af:ad:27: a1:9c:64:0b:98:2f:63:de:88:16:2e:94:53:2f:e6:59:85:23: 5b:ac:bb:0f:ad:b0:ce:2a:15:c4:d2:82:09:b6:a5:3a:55:25: f8:93:16:1d:b5:64:60:63:ca:76:9f:36:6f:e1:1a:10:45:3c: f5:fe:99:ae:44:cc:92:38:8f:4f:8c:87:89:11:aa:99:81:34: f7:b4:47:4a:02:14:ed:9d:44:d9:21:ff:a6:97:41:67:f4:9e: eb:78:df:7a:e5:09:b7:3a:cc:a2:91:d2:2e:22:14:ff:c5:89: a0:4b:eb:43:4e:da:52:f2:fc:89:4f:4f:70:b5:a5:7d:1d:e9: e2:d9:db:e1:de:f9:15:4a:68:98:d7:29:64:c9:98:d8:0c:e1: 3b:09:cc:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ2f1SrL4vocOyndi8RhDiMtGMZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2 MzdFMEY2NjAeFw0yNjA5MjExNzE4MjFaFw0yNjA5MjUwNDE0MjFaMDMxMTAvBgNV BAMTKDkyNjU2N0E0QTVFNzFBNUVDMTVENUUwNTJEMzFGMUY3MkRBNDJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSCEPNy8HdFp9b/1oYSlSqM2o AMnfdrRTAVTn19xIGFhFHyMsLh11H66/61Vrq0TXozxIfhHYNMl4I/FwtPnE73l3 t/2XmrnxLqk5GHBbR2+YzNZ4BNfSbLeeRwrgmvbFMnpWM/jvmndMEKsi36RRfHed 17HUV+wdy50JC6fgeVmAsRe7i6IQ9hiJ3bbgX65k512SzBq1dad10EwcMY1O3nZw 4t0wjQO6vQjpxbKpS6nlH0glw1i4+i4HHuqYdikdT4l1ZLDoLi4Cab6KHC4Xe9Fq Sqze/1ybJxLqEEC+x4BihCe/RZuNdNw70lNMb0Be+HZszAdDTmUCwRaa+cIDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkmVnpKXnGl7BXV4FLTHx9y2kKvUwHwYDVR0j BBgwFoAUOrRHeDmeV+xNmy32rIBCxmN+D2YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjgzMjc4NzUwNTE1MjAxOS8wLzNBQjQ0Nzc4Mzk5RTU3RUM0RDlCMkRGNkFDODA0 MkM2NjM3RTBGNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4MzI3ODc1MDUxNTIwMTkvMC8zQUI0NDc3ODM5OUU1 N0VDNEQ5QjJERjZBQzgwNDJDNjYzN0UwRjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiiI8aFKct4+ qmb8N26JJVwyzzabSLKdcnJ6vqDw1YUYX9Q+zhQSqzMgSEybW3EX80XvPqEaQRMV dlLUigcMK19iPD3qTVon2WSK4wMtAghYDOCJQ4jzpt8etgBTTv3vH2j9KNmTsyoC r60noZxkC5gvY96IFi6UUy/mWYUjW6y7D62wzioVxNKCCbalOlUl+JMWHbVkYGPK dp82b+EaEEU89f6ZrkTMkjiPT4yHiRGqmYE097RHSgIU7Z1E2SH/ppdBZ/Se63jf euUJtzrMopHSLiIU/8WJoEvrQ07aUvL8iU9PcLWlfR3p4tnb4d75FUpomNcpZMmY 2AzhOwnM4A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:07:09 2026 by rpki-client