$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: CvXJfkXjaECn0E62iTY9kkd6joAfgdMVmLBNiYOyDqg= Subject key identifier: 36:26:F4:10:FB:AC:C1:3C:35:00:26:EA:22:EB:BA:1D:DC:7B:37:0B Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 395B0F9D9BEFE260BE6986ADC242616A920CF001 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 4C Signing time: Wed 29 Jul 2026 05:03:30 +0000 Manifest this update: Wed 29 Jul 2026 04:58:30 +0000 Manifest next update: Thu 30 Jul 2026 07:27:30 +0000 Files and hashes: 1: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 2: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 3: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 4: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 5: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 6: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 7: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: 3CEx60GZ0n4JPVxY6ekG8Raw1sOMtW0wQXIkp5nvv/0=) 8: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 9: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5b:0f:9d:9b:ef:e2:60:be:69:86:ad:c2:42:61:6a:92:0c:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jul 29 04:58:30 2026 GMT Not After : Jul 30 07:27:30 2026 GMT Subject: CN=3626F410FBACC13C350026EA22EBBA1DDC7B370B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:42:08:cb:28:41:df:f1:a2:55:49:fe:41: bf:b4:6a:18:50:1c:37:65:28:63:0f:9d:76:28:4f: 2a:90:da:33:ef:41:5b:5c:8c:48:a7:b5:8d:7b:a6: 15:56:79:f7:26:b6:be:bf:5a:52:04:2a:ff:fb:94: 57:87:3b:af:34:30:07:9a:da:ca:db:61:3d:35:74: d2:ae:78:23:67:9b:8b:88:4c:0f:c7:1f:94:a5:5f: bb:28:cc:60:54:d7:1b:9d:16:4c:0f:fc:45:0b:1b: 1c:4b:75:db:de:0f:70:9f:97:19:25:7e:d5:7f:23: e8:c9:8f:ed:af:ad:21:06:1f:70:6f:e7:d2:e9:b7: 3c:a5:c2:6c:66:41:06:4f:69:f4:e2:70:e9:40:40: 7b:20:dd:b2:89:65:8e:5f:b5:b3:c8:c7:d0:c7:8b: 93:34:96:8e:e3:67:36:09:06:47:23:13:c5:56:43: 84:f9:86:49:81:ec:67:36:d9:e7:17:2e:ab:25:f8: fb:22:86:7d:6c:d2:f0:8f:14:3f:8d:2a:5c:c6:3e: 58:5c:27:0e:10:56:cf:cb:08:be:78:2d:b2:70:45: 93:45:71:83:12:80:0c:f7:2b:08:7c:9c:df:40:42: 90:d5:8c:22:34:85:4f:5b:0f:1c:71:5c:09:f8:02: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:26:F4:10:FB:AC:C1:3C:35:00:26:EA:22:EB:BA:1D:DC:7B:37:0B X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:aa:c7:96:42:18:72:e8:16:a7:6e:02:b9:ec:e0:a2:97:ee: 11:05:b5:36:d9:09:12:c8:f2:f3:3d:f9:2c:06:f5:f6:57:b2: a4:19:31:3b:a6:6f:ec:8d:f1:39:4c:34:7f:39:8e:ad:18:1f: 67:6d:17:37:c5:69:57:2d:5f:c9:73:4c:8b:a9:cf:9c:81:cb: ec:96:93:10:19:17:b4:a7:70:ac:c6:6c:94:01:68:35:17:8c: be:52:4c:c1:ad:64:cb:93:dd:9a:f3:71:02:4f:5b:b0:d2:ae: f7:c2:9e:19:95:c8:41:3d:27:3c:1b:75:46:b7:91:b4:d9:c0: e9:94:6c:0d:10:d7:6f:88:7f:b4:1b:47:a5:c3:06:89:be:3f: 41:17:2e:22:b2:09:5f:72:a5:06:b2:c7:19:eb:39:6b:0f:ff: ce:34:67:72:82:6f:d0:4c:2f:f5:8e:b0:05:81:80:ee:6d:3a: 0f:dd:5a:74:f5:e7:0e:a9:74:c7:cf:a0:c2:5d:c0:0d:ef:ae: 29:6d:a7:30:8e:42:e3:26:e0:c0:21:00:f6:49:97:3b:84:ad: 68:7e:9b:bd:98:92:0c:47:94:95:53:3f:86:db:12:7a:c6:4f: 11:34:94:36:91:9f:32:1c:6e:99:ee:0d:67:0b:9f:53:23:38: 66:cc:f5:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOVsPnZvv4mC+aYatwkJhapIM8AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA3MjkwNDU4MzBaFw0yNjA3MzAwNzI3MzBaMDMxMTAvBgNV BAMTKDM2MjZGNDEwRkJBQ0MxM0MzNTAwMjZFQTIyRUJCQTFEREM3QjM3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWD0IIyyhB3/GiVUn+Qb+0ahhQ HDdlKGMPnXYoTyqQ2jPvQVtcjEintY17phVWefcmtr6/WlIEKv/7lFeHO680MAea 2srbYT01dNKueCNnm4uITA/HH5SlX7sozGBU1xudFkwP/EULGxxLddveD3Cflxkl ftV/I+jJj+2vrSEGH3Bv59LptzylwmxmQQZPafTicOlAQHsg3bKJZY5ftbPIx9DH i5M0lo7jZzYJBkcjE8VWQ4T5hkmB7Gc22ecXLqsl+Psihn1s0vCPFD+NKlzGPlhc Jw4QVs/LCL54LbJwRZNFcYMSgAz3Kwh8nN9AQpDVjCI0hU9bDxxxXAn4AinZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNib0EPuswTw1ACbqIuu6Hdx7NwswHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqrHlkIYcugW p24CuezgopfuEQW1NtkJEsjy8z35LAb19leypBkxO6Zv7I3xOUw0fzmOrRgfZ20X N8VpVy1fyXNMi6nPnIHL7JaTEBkXtKdwrMZslAFoNReMvlJMwa1ky5PdmvNxAk9b sNKu98KeGZXIQT0nPBt1RreRtNnA6ZRsDRDXb4h/tBtHpcMGib4/QRcuIrIJX3Kl BrLHGes5aw//zjRncoJv0Ewv9Y6wBYGA7m06D91adPXnDql0x8+gwl3ADe+uKW2n MI5C4ybgwCEA9kmXO4StaH6bvZiSDEeUlVM/htsSesZPETSUNpGfMhxume4NZwuf UyM4Zsz16Q== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:09 2026 by rpki-client