$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: Yd2KzsO0fDGYGcJh7g6bra/BNHXZVVuVzunjVoVoKAo= Subject key identifier: F1:DA:03:E1:1A:FF:52:63:FA:62:D1:30:9F:F5:F0:2D:A2:D5:B8:3F Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 767AB3EDE77047618D59E301731700AF8574E1BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 0F Signing time: Sat 13 Jun 2026 07:46:31 +0000 Manifest this update: Sat 13 Jun 2026 07:41:31 +0000 Manifest next update: Sun 14 Jun 2026 09:07:31 +0000 Files and hashes: 1: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 2: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 3: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: ehwmscv7OTxajIpwoMfE1l5h+4wOzDFY5hlgGq05vYg=) 4: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) 5: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 6: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 7: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 8: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 9: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7a:b3:ed:e7:70:47:61:8d:59:e3:01:73:17:00:af:85:74:e1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Jun 13 07:41:31 2026 GMT Not After : Jun 14 09:07:31 2026 GMT Subject: CN=F1DA03E11AFF5263FA62D1309FF5F02DA2D5B83F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:02:4b:75:88:aa:0c:7d:4e:59:8e:e5:3a: e1:8f:c0:8f:1f:af:73:aa:52:74:4d:b1:d7:cd:54: 3c:22:bc:c6:3f:7b:e6:d8:8f:bb:62:3c:0f:e4:96: 3e:77:d4:72:c3:87:ce:48:4f:53:81:fd:af:61:01: 58:51:6a:21:7d:27:1e:83:e7:51:e8:7b:16:c3:31: 9f:b3:20:6e:15:36:4d:a4:1a:c3:61:fd:1a:aa:4c: 08:11:8c:5d:da:11:82:af:a1:0d:8a:58:05:51:1d: 55:4f:8f:c3:f1:22:69:0f:6e:df:1d:cb:70:ef:48: d0:1d:83:d2:6b:3b:dd:66:2b:29:30:1e:05:d7:d6: 81:c1:a7:88:b3:95:19:0c:61:36:ac:bf:89:71:39: b4:55:52:67:cc:19:da:d6:63:9e:80:b3:f9:2f:1f: d2:ba:fe:2f:bc:a0:11:48:15:9b:2b:5b:9b:16:85: 37:3e:b2:4e:61:ff:49:15:11:c6:05:e3:98:f5:97: 3c:ce:8f:98:4d:86:99:c9:65:fa:23:3e:bf:ef:95: c6:65:c3:e0:08:13:6b:13:c6:76:7e:d8:d8:f7:f3: f4:03:f3:2b:fe:4a:bf:8d:1f:b7:a1:87:ef:41:6c: c8:28:9f:f1:75:72:35:17:9c:4a:d3:63:5d:5f:5f: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DA:03:E1:1A:FF:52:63:FA:62:D1:30:9F:F5:F0:2D:A2:D5:B8:3F X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:7a:22:15:3e:ee:16:97:00:1e:26:48:8f:1a:fc:15:73: dc:8c:00:fa:2e:ae:79:a6:ea:de:da:ac:03:21:6a:91:2b:1d: 31:05:29:d8:fa:3b:d9:dd:d7:d4:e7:e9:6e:19:7d:aa:3c:9a: bd:60:2c:c5:4e:76:54:9c:23:c1:5e:9e:f4:ae:97:e8:1c:f6: f9:44:3c:df:1a:58:b5:de:f2:a5:5a:0e:ca:0c:b7:25:9a:66: 5b:89:73:ff:bf:2c:e7:82:d6:33:06:7a:67:48:6a:0f:8a:e7: c1:39:27:4d:d0:ec:15:1f:50:64:0a:47:b5:50:54:1f:05:19: ea:2e:b7:0b:b0:c1:e1:f6:90:7c:46:33:35:6d:46:e3:51:61: fa:b8:49:8c:e4:17:7b:bb:49:7d:90:ee:87:63:63:e2:48:52: 31:3a:e4:5c:af:fb:8a:9e:6b:ff:9c:4e:0a:e7:93:d4:56:55: 20:63:9b:73:97:01:4b:1b:03:d5:8e:d8:1a:8c:eb:70:ee:84: 5e:06:d9:38:ff:a6:60:ce:e5:72:20:c6:35:14:4d:5b:74:fa: 21:25:b7:7f:c1:23:b0:90:a3:07:74:52:31:fb:87:69:b3:c6: 5f:de:33:0a:7c:af:cc:0e:e9:92:65:9f:00:5b:b3:53:aa:a7: bf:44:3c:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdnqz7edwR2GNWeMBcxcAr4V04b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjA2MTMwNzQxMzFaFw0yNjA2MTQwOTA3MzFaMDMxMTAvBgNV BAMTKEYxREEwM0UxMUFGRjUyNjNGQTYyRDEzMDlGRjVGMDJEQTJENUI4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhQJLdYiqDH1OWY7lOuGPwI8f r3OqUnRNsdfNVDwivMY/e+bYj7tiPA/klj531HLDh85IT1OB/a9hAVhRaiF9Jx6D 51HoexbDMZ+zIG4VNk2kGsNh/RqqTAgRjF3aEYKvoQ2KWAVRHVVPj8PxImkPbt8d y3DvSNAdg9JrO91mKykwHgXX1oHBp4izlRkMYTasv4lxObRVUmfMGdrWY56As/kv H9K6/i+8oBFIFZsrW5sWhTc+sk5h/0kVEcYF45j1lzzOj5hNhpnJZfojPr/vlcZl w+AIE2sTxnZ+2Nj38/QD8yv+Sr+NH7ehh+9BbMgon/F1cjUXnErTY11fX7ZfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8doD4Rr/UmP6YtEwn/XwLaLVuD8wHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFp6IhU+7haX AB4mSI8a/BVz3IwA+i6ueabq3tqsAyFqkSsdMQUp2Po72d3X1Ofpbhl9qjyavWAs xU52VJwjwV6e9K6X6Bz2+UQ83xpYtd7ypVoOygy3JZpmW4lz/78s54LWMwZ6Z0hq D4rnwTknTdDsFR9QZApHtVBUHwUZ6i63C7DB4faQfEYzNW1G41Fh+rhJjOQXe7tJ fZDuh2Nj4khSMTrkXK/7ip5r/5xOCueT1FZVIGObc5cBSxsD1Y7YGozrcO6EXgbZ OP+mYM7lciDGNRRNW3T6ISW3f8EjsJCjB3RSMfuHabPGX94zCnyvzA7pkmWfAFuz U6qnv0Q8eA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:13:03 2026 by rpki-client