$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: UaP8wBKsx7J9JYvkehpzjRkPPHnib0hl1nwEG50tytU= Subject key identifier: 16:76:20:2D:26:28:9E:C5:46:0C:25:E3:63:67:E2:E8:69:49:5D:31 Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 7B68C3690D64FE103FBC64384958819DF6B0BA2F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 21 Signing time: Sat 13 Jun 2026 19:42:12 +0000 Manifest this update: Sat 13 Jun 2026 19:37:12 +0000 Manifest next update: Sun 14 Jun 2026 21:48:12 +0000 Files and hashes: 1: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) 2: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: XemsKqW2GaFIeNF1iPzfmNKx8EdHko++e8beNjCPMpE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:68:c3:69:0d:64:fe:10:3f:bc:64:38:49:58:81:9d:f6:b0:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Jun 13 19:37:12 2026 GMT Not After : Jun 14 21:48:12 2026 GMT Subject: CN=1676202D26289EC5460C25E36367E2E869495D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:4f:a0:2c:19:fb:5f:80:62:4f:7c:fe:82: c2:a9:ab:79:2f:09:bc:fd:df:d0:bc:e9:a9:80:53: 13:d8:2f:4c:cd:da:bb:08:df:6f:14:a6:d9:e9:8a: 3c:93:6b:4a:8d:24:6e:76:b6:7e:83:8f:37:83:3d: 56:1e:cc:f6:b3:f9:5f:37:a9:5c:00:37:30:1c:fc: 96:5b:a2:a7:02:88:47:5d:0c:2d:e8:ad:79:74:e2: 2d:aa:c8:19:72:3d:c6:b3:47:33:f8:88:16:9e:1e: 33:30:87:f2:98:74:0d:2a:62:fa:95:89:ff:08:43: c2:f2:82:d8:6d:92:05:5c:5c:d1:13:4e:fb:39:29: 56:90:a7:d7:67:7e:0a:61:16:b5:9f:43:3f:c6:a1: 93:55:a7:09:67:2c:86:8b:41:7b:9c:b1:e3:52:0b: 19:9b:cb:43:da:05:07:32:95:c8:10:23:4d:67:8b: 21:cb:de:cb:fc:11:d6:92:6b:9c:43:ae:b7:a5:11: ff:2a:1c:62:cf:84:e3:34:51:c4:bc:de:8d:70:8c: 67:7f:e9:87:14:f7:59:74:02:20:28:8a:86:09:d1: ca:37:98:f7:25:aa:13:ca:46:9a:af:22:d1:99:8d: af:dd:3b:b7:8f:9e:b7:e5:11:0c:11:c0:b0:d0:03: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:76:20:2D:26:28:9E:C5:46:0C:25:E3:63:67:E2:E8:69:49:5D:31 X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4b:a5:55:41:0f:c8:f7:3b:1a:5b:32:5d:ed:89:9d:ff:95: ed:b6:0a:98:6d:df:ec:bc:b9:37:fa:ac:f2:fb:fc:a9:09:45: fb:8f:5d:bf:93:9d:25:ca:7f:a1:49:df:59:b8:b8:5b:cb:9a: 57:a6:86:91:fc:ea:1e:77:eb:43:64:6b:60:d9:cc:9d:d8:21: 97:ec:e2:e1:fa:e6:ca:d4:9a:ed:ac:75:e7:d9:d7:d1:de:63: 6b:f7:8a:a3:72:8f:56:da:91:9e:9f:78:4b:b7:93:fa:14:46: 6c:1e:4c:6a:77:5c:a8:1c:80:8d:94:b6:a2:f6:02:a4:a7:0b: d2:70:de:7b:2f:74:48:db:9f:cc:5e:ff:14:99:9b:c7:0c:c8: d4:bb:52:5b:6d:81:61:6b:4a:5b:ab:da:4d:50:95:64:e3:99: 1e:b9:cb:c1:a6:76:0f:63:c8:5d:dd:20:09:90:40:bb:7c:17: e4:4b:a8:9c:b6:3f:c8:71:1b:5d:d8:a6:b4:e8:d4:ce:ad:88: 04:2b:ce:e5:9e:40:e6:c6:d9:6c:b4:1c:e8:3c:c9:e5:66:16: c7:af:61:a1:f3:76:0c:ec:6d:f8:18:a6:23:40:c3:52:90:9e: ac:0f:71:bd:89:75:8b:09:fd:cf:78:57:b4:76:4d:b3:ce:e7: 87:a5:a6:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe2jDaQ1k/hA/vGQ4SViBnfawui8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjA2MTMxOTM3MTJaFw0yNjA2MTQyMTQ4MTJaMDMxMTAvBgNV BAMTKDE2NzYyMDJEMjYyODlFQzU0NjBDMjVFMzYzNjdFMkU4Njk0OTVEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aE+gLBn7X4BiT3z+gsKpq3kv Cbz939C86amAUxPYL0zN2rsI328UptnpijyTa0qNJG52tn6DjzeDPVYezPaz+V83 qVwANzAc/JZboqcCiEddDC3orXl04i2qyBlyPcazRzP4iBaeHjMwh/KYdA0qYvqV if8IQ8LygthtkgVcXNETTvs5KVaQp9dnfgphFrWfQz/GoZNVpwlnLIaLQXucseNS Cxmby0PaBQcylcgQI01niyHL3sv8EdaSa5xDrrelEf8qHGLPhOM0UcS83o1wjGd/ 6YcU91l0AiAoioYJ0co3mPclqhPKRpqvItGZja/dO7ePnrflEQwRwLDQA8YjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFnYgLSYonsVGDCXjY2fi6GlJXTEwHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEulVUEPyPc7 GlsyXe2Jnf+V7bYKmG3f7Ly5N/qs8vv8qQlF+49dv5OdJcp/oUnfWbi4W8uaV6aG kfzqHnfrQ2RrYNnMndghl+zi4frmytSa7ax159nX0d5ja/eKo3KPVtqRnp94S7eT +hRGbB5MandcqByAjZS2ovYCpKcL0nDeey90SNufzF7/FJmbxwzI1LtSW22BYWtK W6vaTVCVZOOZHrnLwaZ2D2PIXd0gCZBAu3wX5EuonLY/yHEbXdimtOjUzq2IBCvO 5Z5A5sbZbLQc6DzJ5WYWx69hofN2DOxt+BimI0DDUpCerA9xvYl1iwn9z3hXtHZN s87nh6WmyQ== -----END CERTIFICATE-----Generated at Sun Jun 14 05:18:03 2026 by rpki-client