
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json)
Hash identifier: SVcxsi/ceJMa4wORuHOs6JbJutR9BjjCBRUYxeKeMYI=
Subject key identifier: 48:37:F4:F5:53:A6:1B:C4:CA:B5:5B:F1:24:04:66:E7:EF:97:FA:BC
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial: 3804785749E62AF40EFF8CD16B670A3A6EE2BA55
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
Manifest number: 3B
Signing time: Sun 14 Jun 2026 01:12:33 +0000
Manifest this update: Sun 14 Jun 2026 01:07:33 +0000
Manifest next update: Mon 15 Jun 2026 04:21:33 +0000
Files and hashes: 1: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=)
2: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=)
3: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=)
4: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=)
5: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=)
6: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=)
7: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=)
8: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=)
9: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=)
10: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: pxbRPJTS4L4f02+zn4qX12NXTnOogLkLbZ4sr++4Utw=)
11: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=)
12: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=)
13: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=)
14: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=)
15: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=)
16: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=)
17: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=)
18: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=)
19: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=)
20: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:04:78:57:49:e6:2a:f4:0e:ff:8c:d1:6b:67:0a:3a:6e:e2:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Validity
Not Before: Jun 14 01:07:33 2026 GMT
Not After : Jun 15 04:21:33 2026 GMT
Subject: CN=4837F4F553A61BC4CAB55BF1240466E7EF97FABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:e0:59:97:2a:12:82:94:9d:5d:5d:fd:54:
3a:aa:76:09:86:4d:a6:52:ff:de:5c:71:44:b8:3c:
d2:ca:ab:86:04:91:86:f0:12:b4:6e:f3:f7:86:3c:
d6:09:3a:32:9c:b1:ef:22:db:94:13:92:ed:7e:d4:
5e:43:8a:5d:5c:2a:ec:25:3e:e6:70:df:b3:87:b5:
38:17:af:bd:52:85:b4:32:6a:62:f5:0d:54:76:5a:
5f:9b:83:cc:03:d8:48:88:ac:5f:7f:17:0d:b2:c4:
37:e3:b4:23:8d:02:1f:12:89:09:78:d3:0a:ff:d5:
b6:34:c2:49:bd:ab:fc:2d:12:e7:67:36:82:99:89:
cb:df:0c:d2:26:7c:5e:51:17:71:db:42:f7:44:6f:
07:76:ee:d4:0a:d2:7f:cb:9e:55:6a:84:66:d7:0e:
d9:20:42:3e:fe:95:40:13:b7:2d:a2:32:9e:3b:d1:
73:be:9d:3e:c4:d9:97:0a:9b:0d:03:56:e0:ad:bb:
e9:fd:c2:4e:be:03:75:02:c1:46:e9:55:65:0a:88:
d9:46:5a:b4:a7:33:c8:20:27:4d:07:d6:ef:30:8f:
4d:09:ad:81:45:3c:10:64:75:fc:44:d2:c7:91:44:
ec:10:1f:f1:f9:ac:a7:c7:fe:7e:1f:fb:da:41:1d:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:37:F4:F5:53:A6:1B:C4:CA:B5:5B:F1:24:04:66:E7:EF:97:FA:BC
X509v3 Authority Key Identifier:
keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5d:f9:96:9a:7a:5b:f5:06:f4:95:55:b6:e7:30:2f:d7:b1:
d6:ef:51:6a:79:1c:18:bb:ff:29:0d:66:a9:1d:7c:7b:9d:9e:
1c:29:bb:0d:f0:65:98:09:41:f8:49:e8:24:88:4b:68:11:60:
96:13:81:4b:38:7c:3a:c3:50:d3:b3:47:b8:51:87:4d:4f:31:
2a:5b:6d:ae:40:11:71:27:b2:40:53:68:b8:86:fe:80:45:51:
5d:27:dc:c5:ec:79:99:ea:af:1c:88:eb:79:08:17:1a:5b:de:
e6:1f:b9:05:40:40:8e:a7:4b:a7:75:1f:86:07:19:9b:07:c8:
4f:62:bd:64:c9:43:84:46:95:42:bb:1a:cf:b9:18:47:c2:dc:
10:99:78:c0:99:1a:72:93:4a:b8:58:60:18:45:ba:51:89:8a:
55:39:57:3c:57:cd:5f:08:64:06:43:15:20:cd:6d:dd:36:44:
ec:5c:ac:c8:69:c7:6e:b6:df:60:9c:65:89:3e:50:6a:25:07:
b9:73:f1:d9:46:eb:5d:12:b1:fc:ac:80:e9:92:fd:cc:c5:e4:
7a:d9:b9:4e:92:e8:38:ff:24:99:e2:62:92:24:08:da:ce:df:
5e:31:42:89:43:52:93:5d:86:e8:7f:46:5c:29:8a:55:6c:d1:
ff:0c:47:66
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOAR4V0nmKvQO/4zRa2cKOm7iulUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC
RkExOThENTAeFw0yNjA2MTQwMTA3MzNaFw0yNjA2MTUwNDIxMzNaMDMxMTAvBgNV
BAMTKDQ4MzdGNEY1NTNBNjFCQzRDQUI1NUJGMTI0MDQ2NkU3RUY5N0ZBQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXM+BZlyoSgpSdXV39VDqqdgmG
TaZS/95ccUS4PNLKq4YEkYbwErRu8/eGPNYJOjKcse8i25QTku1+1F5Dil1cKuwl
PuZw37OHtTgXr71ShbQyamL1DVR2Wl+bg8wD2EiIrF9/Fw2yxDfjtCONAh8SiQl4
0wr/1bY0wkm9q/wtEudnNoKZicvfDNImfF5RF3HbQvdEbwd27tQK0n/LnlVqhGbX
DtkgQj7+lUATty2iMp470XO+nT7E2ZcKmw0DVuCtu+n9wk6+A3UCwUbpVWUKiNlG
WrSnM8ggJ00H1u8wj00JrYFFPBBkdfxE0seRROwQH/H5rKfH/n4f+9pBHZDhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUSDf09VOmG8TKtVvxJARm5++X+rwwHwYDVR0j
BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF
RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex
OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr135lpp6W/UG
9JVVtucwL9ex1u9RankcGLv/KQ1mqR18e52eHCm7DfBlmAlB+EnoJIhLaBFglhOB
Szh8OsNQ07NHuFGHTU8xKlttrkARcSeyQFNouIb+gEVRXSfcxex5meqvHIjreQgX
Glve5h+5BUBAjqdLp3UfhgcZmwfIT2K9ZMlDhEaVQrsaz7kYR8LcEJl4wJkacpNK
uFhgGEW6UYmKVTlXPFfNXwhkBkMVIM1t3TZE7FysyGnHbrbfYJxliT5QaiUHuXPx
2UbrXRKx/KyA6ZL9zMXketm5TpLoOP8kmeJikiQI2s7fXjFCiUNSk12G6H9GXCmK
VWzR/wxHZg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:19 2026 by rpki-client