$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: dPVr4ew7k3KmuP3mWZC0DaNaDQ8IfNlP8K0cgCOEno0= Subject key identifier: 5C:35:73:7C:C0:2A:E6:0B:4A:17:15:0B:FA:CC:AA:1F:59:C2:A2:FA Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 5F8E9DEEEEB0427E8848CE92643F4315DC10D396 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 5D Signing time: Wed 29 Jul 2026 01:38:06 +0000 Manifest this update: Wed 29 Jul 2026 01:33:06 +0000 Manifest next update: Thu 30 Jul 2026 02:48:06 +0000 Files and hashes: 1: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: dLlIuW/+8wadzP53dC38xnWMr8tGZXR7rDJIwSrUkcc=) 2: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8e:9d:ee:ee:b0:42:7e:88:48:ce:92:64:3f:43:15:dc:10:d3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Jul 29 01:33:06 2026 GMT Not After : Jul 30 02:48:06 2026 GMT Subject: CN=5C35737CC02AE60B4A17150BFACCAA1F59C2A2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:91:b1:9b:0b:4f:5d:c4:77:6f:b0:0b:5d: 3e:38:6e:2e:8c:94:48:0b:b9:b3:f8:e3:95:5f:3c: 6a:b5:c9:62:b4:ed:c3:32:75:01:42:61:34:a4:1a: 9b:c0:0b:c0:a7:f5:d8:6e:e9:dc:65:d5:74:73:c4: 4e:a5:f9:22:e8:b6:70:c9:b5:2e:cd:9d:49:8e:10: 6f:4c:c9:cf:0a:10:e4:46:09:79:b8:4e:4e:04:b6: 18:7f:9a:1d:7a:e7:c7:3e:1e:19:9f:bb:3f:d5:5b: 96:cd:e2:88:6a:c9:26:84:53:0c:84:7b:9b:13:8d: 9c:01:b5:4f:19:0f:49:8e:a7:4a:4a:0f:27:a0:89: 90:75:46:c9:14:37:11:82:de:42:cc:ca:c5:2a:55: 1e:cc:c3:a8:fa:1f:77:ac:76:ba:ff:e6:ec:41:1f: 65:f8:e6:6c:fa:6a:10:5e:ca:ab:bd:84:d7:4d:49: 94:9f:b9:03:38:c3:0a:b5:28:01:27:59:4a:e5:c4: 45:ef:90:53:72:6e:ec:79:b7:df:cd:b3:6d:cc:47: 65:cb:49:68:6b:fe:73:9f:a4:a8:8e:78:3d:12:0e: 2c:fd:7a:4e:f9:b8:d8:fc:9d:fc:24:fa:68:c6:58: 08:2e:dc:ad:60:4c:f9:2c:14:ba:51:09:f4:69:b2: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:73:7C:C0:2A:E6:0B:4A:17:15:0B:FA:CC:AA:1F:59:C2:A2:FA X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:41:0f:29:73:45:86:4b:39:9f:a7:38:99:ba:4e:81:2a: 76:67:de:7e:b5:01:f4:30:27:02:fa:e3:16:1c:dc:04:1d:f3: e1:ec:f3:e0:3e:90:cf:a1:88:a7:51:bf:c6:31:0d:d4:89:ba: 2c:2a:6a:6b:b0:ba:07:0a:f3:b5:de:09:ad:b0:56:0b:83:2b: 78:6a:b0:ac:cc:92:80:ff:44:13:5e:91:ce:f3:47:7d:76:81: 50:18:f6:f1:ff:60:45:f9:c4:c0:2f:ff:4a:ac:f0:8d:a9:41: 90:69:3a:55:27:5a:2f:24:fc:12:de:ca:6f:29:3f:19:30:37: 99:11:08:43:8b:b3:22:bf:f6:c3:ce:2f:31:65:af:a9:f1:b3: 75:98:5c:90:b1:47:d0:fd:95:e4:0d:27:70:52:69:64:8c:d4: be:fc:e7:ce:1b:76:94:81:bc:c1:6f:73:21:1c:04:5c:ad:4e: b8:7a:c5:f0:eb:87:82:e5:c4:5f:7b:bc:64:8c:db:07:3c:09: 2a:1d:ec:73:5b:bd:b8:2f:52:f1:cd:5e:c1:bf:dc:55:ca:eb: 72:46:31:fd:5d:bd:fb:12:ec:7b:b5:30:dc:f9:65:5e:53:70: f6:1b:88:e2:be:eb:c1:a2:31:69:80:c7:d4:0d:da:8e:da:46: 58:f8:ba:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX46d7u6wQn6ISM6SZD9DFdwQ05YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjA3MjkwMTMzMDZaFw0yNjA3MzAwMjQ4MDZaMDMxMTAvBgNV BAMTKDVDMzU3MzdDQzAyQUU2MEI0QTE3MTUwQkZBQ0NBQTFGNTlDMkEyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHpGxmwtPXcR3b7ALXT44bi6M lEgLubP445VfPGq1yWK07cMydQFCYTSkGpvAC8Cn9dhu6dxl1XRzxE6l+SLotnDJ tS7NnUmOEG9Myc8KEORGCXm4Tk4Ethh/mh1658c+Hhmfuz/VW5bN4ohqySaEUwyE e5sTjZwBtU8ZD0mOp0pKDyegiZB1RskUNxGC3kLMysUqVR7Mw6j6H3esdrr/5uxB H2X45mz6ahBeyqu9hNdNSZSfuQM4wwq1KAEnWUrlxEXvkFNybux5t9/Ns23MR2XL SWhr/nOfpKiOeD0SDiz9ek75uNj8nfwk+mjGWAgu3K1gTPksFLpRCfRpsqghAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXDVzfMAq5gtKFxUL+syqH1nCovowHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2NBDylzRYZL OZ+nOJm6ToEqdmfefrUB9DAnAvrjFhzcBB3z4ezz4D6Qz6GIp1G/xjEN1Im6LCpq a7C6Bwrztd4JrbBWC4MreGqwrMySgP9EE16RzvNHfXaBUBj28f9gRfnEwC//Sqzw jalBkGk6VSdaLyT8Et7Kbyk/GTA3mREIQ4uzIr/2w84vMWWvqfGzdZhckLFH0P2V 5A0ncFJpZIzUvvznzht2lIG8wW9zIRwEXK1OuHrF8OuHguXEX3u8ZIzbBzwJKh3s c1u9uC9S8c1ewb/cVcrrckYx/V29+xLse7Uw3PllXlNw9huI4r7rwaIxaYDH1A3a jtpGWPi60w== -----END CERTIFICATE-----Generated at Wed Jul 29 10:11:50 2026 by rpki-client