
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json)
Hash identifier: TcNDx28E7pSi+EVRHDWmASPCSCv5/xEBUJ9YXwhWmt4=
Subject key identifier: E6:30:58:9B:C5:59:EC:1D:E3:E3:7E:00:5D:2A:D1:C2:05:A4:B5:E9
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial: 2BF5EFC8AB933F5AD09A42FB240DA2D0A2AE0A9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
Manifest number: B2
Signing time: Sun 11 Oct 2026 18:30:50 +0000
Manifest this update: Sun 11 Oct 2026 18:25:50 +0000
Manifest next update: Thu 15 Oct 2026 03:55:50 +0000
Files and hashes: 1: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=)
2: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=)
3: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=)
4: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=)
5: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=)
6: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=)
7: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=)
8: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=)
9: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=)
10: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=)
11: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=)
12: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: 1VFoH78lEBkbG/opxRd3Rv0qTv6HUUQyk3f5i6qv6hE=)
13: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=)
14: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=)
15: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=)
16: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=)
17: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=)
18: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=)
19: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=)
20: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f5:ef:c8:ab:93:3f:5a:d0:9a:42:fb:24:0d:a2:d0:a2:ae:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Validity
Not Before: Oct 11 18:25:50 2026 GMT
Not After : Oct 15 03:55:50 2026 GMT
Subject: CN=E630589BC559EC1DE3E37E005D2AD1C205A4B5E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:24:d2:f6:76:ba:23:a4:9e:9c:5c:07:a2:
09:90:8d:56:cb:bc:30:83:d3:b4:0d:71:ce:36:76:
87:f0:cf:88:c7:13:91:a6:62:2d:46:ed:39:e1:09:
f0:23:0a:28:08:ea:a4:15:41:0a:38:59:3c:b6:fd:
f3:31:9e:d1:25:b4:ec:f2:5a:7c:ae:42:71:61:1b:
63:01:36:e7:a8:b5:0b:4c:cc:15:4d:a6:35:24:88:
df:3b:f3:0c:74:fd:5d:b7:ce:9e:b9:ab:7d:28:e7:
6e:01:41:a3:4c:6d:d9:66:ad:64:9c:3b:c0:55:c6:
c1:35:81:e1:e7:fa:a8:e7:ce:13:18:0a:10:83:36:
33:0f:c4:e3:5d:b5:50:e0:54:6a:06:d3:53:77:fd:
14:63:d3:70:ca:7a:d6:86:a9:38:aa:af:d2:52:0d:
d8:d3:4f:f4:d6:f7:11:18:26:84:bc:0f:74:cb:05:
98:84:48:84:3f:9b:64:77:4e:af:cb:eb:91:20:86:
f6:1a:9c:6e:22:7f:4b:88:85:a4:4c:a8:92:38:ea:
1e:04:5d:dc:e2:1d:e2:4c:21:c6:c9:f2:63:ce:79:
79:7c:d9:a0:49:e6:1d:58:88:98:84:75:6b:b9:91:
85:cd:d2:59:e1:ae:b6:c9:3b:19:a7:69:4b:25:1d:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:58:9B:C5:59:EC:1D:E3:E3:7E:00:5D:2A:D1:C2:05:A4:B5:E9
X509v3 Authority Key Identifier:
keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:07:83:11:b2:de:86:8c:40:c1:50:50:47:30:b7:66:51:26:
78:71:6e:03:4a:6d:1f:eb:78:d7:50:e5:48:60:87:aa:90:92:
8a:41:93:7e:b6:8e:21:af:50:5a:f5:b7:9f:aa:bc:08:10:ba:
f1:68:26:ef:d2:82:25:79:69:ae:61:25:b1:8d:29:3a:6e:9e:
28:ba:91:a9:e8:ef:aa:5b:6d:29:1a:7c:7a:31:3c:e9:83:2c:
a2:3d:70:a6:c3:87:c9:c2:e2:f6:95:03:99:aa:96:d8:3c:6f:
2a:a5:53:51:58:21:0b:13:f5:9b:89:5f:b0:58:c3:6b:a6:a2:
ee:6a:d2:84:7d:72:1a:d2:df:00:9d:52:bb:f4:0c:16:75:c5:
1c:eb:32:22:ee:1c:69:78:06:b7:18:eb:47:61:63:8e:e4:3b:
94:30:3f:1f:9f:77:e2:9e:55:f8:02:20:11:5c:af:48:89:2c:
60:41:4f:41:a0:6c:af:88:5e:bf:f8:17:ba:4f:65:5b:61:8b:
28:95:64:c5:be:ac:57:d2:e2:fd:a7:7f:57:cd:6b:63:21:21:
84:16:24:29:ef:69:9a:49:06:b7:f7:46:f4:da:70:26:9a:14:
45:67:6b:89:a4:9a:d9:ba:4a:4d:87:24:b4:c3:8d:46:be:6a:
7c:04:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:02:57 2026 by rpki-client