$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json) Hash identifier: T+wUncNmK8T+fMWYT82OMxKbwIAX2B13kYYbK9hc4bA= Subject key identifier: D4:40:45:FD:09:5C:C9:A1:5D:EB:D9:23:6D:06:6E:5A:61:4B:D3:4D Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 26C1189B02F712697647D567FA399800A7440968 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:07:05 +0000 Manifest this update: Tue 28 Jul 2026 15:02:05 +0000 Manifest next update: Wed 29 Jul 2026 18:18:05 +0000 Files and hashes: 1: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=) 2: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=) 3: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=) 4: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=) 5: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=) 6: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=) 7: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=) 8: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=) 9: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: jUGScAA3FabhOujLwSARgQC+j1+8HHufbIenaCnACTQ=) 10: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=) 11: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=) 12: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=) 13: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=) 14: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=) 15: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=) 16: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=) 17: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=) 18: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=) 19: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=) 20: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c1:18:9b:02:f7:12:69:76:47:d5:67:fa:39:98:00:a7:44:09:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jul 28 15:02:05 2026 GMT Not After : Jul 29 18:18:05 2026 GMT Subject: CN=D44045FD095CC9A15DEBD9236D066E5A614BD34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:6f:a7:76:b5:9e:ad:18:77:1a:eb:d2:e0: d3:7b:79:0a:0f:50:6a:39:d9:0b:53:db:62:37:00: 7c:89:66:a4:96:63:06:bb:7f:a0:08:57:e2:8e:0f: 63:f0:d0:7a:10:02:16:44:14:23:b4:00:bd:2f:88: 60:dc:85:0b:07:18:4f:92:03:23:cd:99:50:ca:98: 4c:2e:0f:9b:06:7a:ff:1a:0a:11:a1:0d:7b:19:cb: 9e:84:c0:05:75:46:68:99:8a:d8:1a:06:1e:64:9a: dc:e1:cb:72:91:c3:6e:1a:5f:cc:f6:b1:57:58:0f: a6:44:ae:c8:96:bd:e1:cb:01:d0:78:4f:36:b8:5d: ac:d5:48:57:43:f8:7a:30:b7:1c:38:63:c4:6b:c3: bd:dd:c9:0d:44:50:2b:62:5b:18:41:5c:90:17:98: 77:63:6c:5c:87:e5:af:53:91:6a:2a:73:03:8e:cb: 64:b3:51:14:cf:c7:94:45:4c:4d:37:eb:1a:b6:0a: aa:b9:b7:d8:39:01:97:82:4f:c2:10:2f:bb:cc:46: 28:30:4c:cd:6f:8c:ae:d2:c6:39:e9:8c:62:d0:97: 2d:bc:ce:b1:59:96:23:7d:1c:d5:9d:f1:e9:05:26: 34:d4:e9:f2:ab:1d:31:08:bb:c5:c2:28:3b:ef:6c: fd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:40:45:FD:09:5C:C9:A1:5D:EB:D9:23:6D:06:6E:5A:61:4B:D3:4D X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:83:37:e9:85:41:40:48:0b:4e:34:b4:df:81:56:e6:cf:57: d7:74:e2:fd:c0:78:c3:bc:ea:ab:49:31:35:89:85:5b:06:d4: 58:9a:81:26:2e:a0:57:31:b4:d6:72:e2:43:ab:8d:ce:ea:a8: 2f:88:7a:18:32:e8:3a:d3:b8:29:f3:b8:ff:91:4c:f0:92:67: 75:ef:5d:2d:69:fd:a1:ea:e8:62:8d:de:a0:30:ad:93:4d:76: fe:e2:47:92:b7:52:21:4c:d7:99:b4:73:d2:bf:5c:97:56:28: f6:60:b7:d2:9f:6d:ad:f7:17:e8:f3:3a:cb:dc:87:9b:3c:2d: 0a:60:4d:66:b5:00:77:f7:94:a6:2d:d7:e8:b5:a1:c9:c5:05: ec:17:a8:f3:6a:a8:0a:eb:c0:0e:20:3a:9e:5d:46:6b:eb:10: 05:25:4b:c2:f6:de:f1:e9:fb:10:cb:8d:f3:ec:ba:f6:2d:4f: a2:7b:08:5e:07:d1:30:d5:9f:be:c8:4b:ea:48:5f:6f:53:66: 83:b0:78:1c:0f:5d:5c:4f:13:ef:ae:b7:be:d7:cc:83:a9:46: d1:59:e4:38:08:74:11:2e:27:b0:aa:2b:75:9f:30:dc:2a:d9: 12:ae:3c:cb:da:66:fb:38:7b:bb:a3:1d:22:88:f1:79:ce:f2: a4:08:4b:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJsEYmwL3Eml2R9Vn+jmYAKdECWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA3MjgxNTAyMDVaFw0yNjA3MjkxODE4MDVaMDMxMTAvBgNV BAMTKEQ0NDA0NUZEMDk1Q0M5QTE1REVCRDkyMzZEMDY2RTVBNjE0QkQzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQW+ndrWerRh3GuvS4NN7eQoP UGo52QtT22I3AHyJZqSWYwa7f6AIV+KOD2Pw0HoQAhZEFCO0AL0viGDchQsHGE+S AyPNmVDKmEwuD5sGev8aChGhDXsZy56EwAV1RmiZitgaBh5kmtzhy3KRw24aX8z2 sVdYD6ZErsiWveHLAdB4Tza4XazVSFdD+Howtxw4Y8Rrw73dyQ1EUCtiWxhBXJAX mHdjbFyH5a9TkWoqcwOOy2SzURTPx5RFTE036xq2Cqq5t9g5AZeCT8IQL7vMRigw TM1vjK7SxjnpjGLQly28zrFZliN9HNWd8ekFJjTU6fKrHTEIu8XCKDvvbP1TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1EBF/QlcyaFd69kjbQZuWmFL000wHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDc1NjQxNjk2NDI2MzkzNzkvMC8zRTU5ODlGNzJEQ0Ex OTc5RDFERDk2NjNDNTc1RUQxNUJGQTE5OEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIM36YVBQEgL TjS034FW5s9X13Ti/cB4w7zqq0kxNYmFWwbUWJqBJi6gVzG01nLiQ6uNzuqoL4h6 GDLoOtO4KfO4/5FM8JJnde9dLWn9oeroYo3eoDCtk012/uJHkrdSIUzXmbRz0r9c l1Yo9mC30p9trfcX6PM6y9yHmzwtCmBNZrUAd/eUpi3X6LWhycUF7Beo82qoCuvA DiA6nl1Ga+sQBSVLwvbe8en7EMuN8+y69i1PonsIXgfRMNWfvshL6khfb1Nmg7B4 HA9dXE8T7663vtfMg6lG0VnkOAh0ES4nsKordZ8w3CrZEq48y9pm+zh7u6MdIojx ec7ypAhLxA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:33 2026 by rpki-client