$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft File: 3AF3039AB5BC634C0747D8322F28313D0968683C.mft (raw, json) Hash identifier: Zk2NCeCX1CVgpzMjbxiGJnBXtJB1vwTLSsgG/zAqYOA= Subject key identifier: 68:CA:F6:C6:85:26:FC:87:A8:3A:F2:45:D6:20:EC:69:6B:98:3B:AF Authority key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Certificate issuer: /CN=3AF3039AB5BC634C0747D8322F28313D0968683C Certificate serial: 0DAECE32A86CF1DDC83720EF9422A1B804B3987B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft Manifest number: 9C Signing time: Mon 19 Oct 2026 03:05:29 +0000 Manifest this update: Mon 19 Oct 2026 03:00:29 +0000 Manifest next update: Thu 22 Oct 2026 14:18:29 +0000 Files and hashes: 1: 3AF3039AB5BC634C0747D8322F28313D0968683C.crl (hash: brqGjmBMxvVXq83XSpTCwrMMpJpB9UfUfhoGxYH5W+I=) 2: 3136352e3130312e3230382e302f32332d3233203d3e20313531323239.roa (hash: NQ+UOBYLNwCQoWZUvm0HrY0XKCR9Bi/MlTI1kowUzNU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 11:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:ce:32:a8:6c:f1:dd:c8:37:20:ef:94:22:a1:b8:04:b3:98:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Validity Not Before: Oct 19 03:00:29 2026 GMT Not After : Oct 22 14:18:29 2026 GMT Subject: CN=68CAF6C68526FC87A83AF245D620EC696B983BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c0:83:f6:2e:51:ef:7a:ba:bc:f7:62:1b:a4: 82:23:8c:2e:f5:b3:ba:38:79:6c:bd:a1:81:cf:85: d9:c6:e3:7a:b2:e0:5f:b6:fd:1d:83:97:4d:c0:27: ec:7f:ba:ec:d8:49:70:e6:93:b1:b6:0e:0c:f9:dd: 1d:20:c0:3e:de:c7:10:7b:32:0b:15:b7:ad:56:c8: 1d:88:37:e1:7c:77:de:c1:89:61:2d:93:76:18:1d: cb:53:c1:ab:88:45:78:59:f1:ea:86:cd:64:e7:c0: 22:6a:3d:8e:23:93:19:7d:3b:50:66:fd:19:43:1b: 8c:93:c4:56:ac:fa:51:ea:ea:87:0a:ce:d9:a6:4d: 3b:2f:78:69:d4:77:35:a7:aa:c3:a1:d7:c9:b9:7d: 5e:16:bc:f3:58:d3:7d:cc:a4:50:99:66:b4:9f:a3: ca:81:0b:5e:75:66:93:ec:7a:fa:5b:76:1f:db:4a: 58:da:07:9c:7d:1d:73:06:48:db:3e:6e:20:42:80: bf:a5:de:d9:97:f1:7d:c1:c0:21:00:1e:fd:d0:29: d2:59:43:09:24:32:27:9c:d7:a5:84:68:b1:a8:11: 9a:2b:1e:78:75:98:e9:03:d3:07:50:95:99:d5:db: 5d:6e:2a:61:dd:71:ae:d5:1e:82:c2:97:03:95:1d: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CA:F6:C6:85:26:FC:87:A8:3A:F2:45:D6:20:EC:69:6B:98:3B:AF X509v3 Authority Key Identifier: keyid:3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:8d:7a:0e:9a:05:fd:55:38:f3:c2:aa:f1:ae:49:2e:4f:44: 10:c0:01:6b:a0:2e:95:07:99:7f:ac:cf:47:20:69:27:55:37: b7:f5:6a:f6:8e:33:76:71:7c:6e:39:66:72:c1:c3:01:5b:cb: 7a:13:21:7a:38:ff:3b:21:09:83:11:c6:74:05:30:fe:5c:63: 12:de:db:d8:5b:7a:1a:8c:d5:fe:5f:f9:5c:77:83:95:b2:7e: 64:fe:9b:4c:59:47:68:1d:78:aa:5d:e7:6a:b9:2b:9b:27:fd: b9:7b:9f:36:c7:98:b7:a9:a6:05:d7:4e:0b:c5:c2:2f:3a:92: d5:f4:8f:42:25:8d:ed:90:c8:d0:53:7c:7d:fc:de:c4:2e:7d: f5:b1:df:8d:70:a9:35:eb:40:c1:75:e4:11:29:60:74:bb:aa: 81:8c:d5:b0:50:e7:45:68:e5:cf:e5:db:0b:ec:a6:b6:fa:f6: 4a:fd:1c:fc:87:4c:13:96:28:0d:ec:e1:6d:ad:7d:73:ee:e9: 10:8d:00:49:ca:a0:26:76:db:90:71:59:1d:1a:6e:e6:29:43: f7:fa:74:85:3a:c7:24:0f:bd:ee:dc:90:0d:9d:2f:19:45:54: f4:8b:71:d2:11:f9:12:d8:cb:85:bc:2d:62:80:dc:fc:9d:50: 64:c1:40:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDa7OMqhs8d3INyDvlCKhuASzmHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0Qw OTY4NjgzQzAeFw0yNjEwMTkwMzAwMjlaFw0yNjEwMjIxNDE4MjlaMDMxMTAvBgNV BAMTKDY4Q0FGNkM2ODUyNkZDODdBODNBRjI0NUQ2MjBFQzY5NkI5ODNCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwIP2LlHverq892IbpIIjjC71 s7o4eWy9oYHPhdnG43qy4F+2/R2Dl03AJ+x/uuzYSXDmk7G2Dgz53R0gwD7exxB7 MgsVt61WyB2IN+F8d97BiWEtk3YYHctTwauIRXhZ8eqGzWTnwCJqPY4jkxl9O1Bm /RlDG4yTxFas+lHq6ocKztmmTTsveGnUdzWnqsOh18m5fV4WvPNY033MpFCZZrSf o8qBC151ZpPsevpbdh/bSljaB5x9HXMGSNs+biBCgL+l3tmX8X3BwCEAHv3QKdJZ QwkkMiec16WEaLGoEZorHnh1mOkD0wdQlZnV211uKmHdca7VHoLClwOVHW1BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaMr2xoUm/IeoOvJF1iDsaWuYO68wHwYDVR0j BBgwFoAUOvMDmrW8Y0wHR9gyLygxPQloaDwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDA4Mzc3NTczMzIzNTczMy8wLzNBRjMwMzlBQjVCQzYzNEMwNzQ3RDgzMjJGMjgz MTNEMDk2ODY4M0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMC8zQUYzMDM5QUI1QkM2 MzRDMDc0N0Q4MzIyRjI4MzEzRDA5Njg2ODNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgI16DpoF/VU4 88Kq8a5JLk9EEMABa6AulQeZf6zPRyBpJ1U3t/Vq9o4zdnF8bjlmcsHDAVvLehMh ejj/OyEJgxHGdAUw/lxjEt7b2Ft6GozV/l/5XHeDlbJ+ZP6bTFlHaB14ql3narkr myf9uXufNseYt6mmBddOC8XCLzqS1fSPQiWN7ZDI0FN8ffzexC599bHfjXCpNetA wXXkESlgdLuqgYzVsFDnRWjlz+XbC+ymtvr2Sv0c/IdME5YoDezhba19c+7pEI0A ScqgJnbbkHFZHRpu5ilD9/p0hTrHJA+97tyQDZ0vGUVU9Itx0hH5EtjLhbwtYoDc /J1QZMFAig== -----END CERTIFICATE-----Generated at Mon Oct 19 20:15:22 2026 by rpki-client