$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json) Hash identifier: PEHL1SqKLGe0MfHkM5lGo7EfTU8i5D2/flP+iWMuXSs= Subject key identifier: B4:53:DF:54:12:4A:67:86:96:33:4A:8E:24:29:C6:F7:BB:AD:68:EB Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Certificate serial: 0D25ED334A72417608D66CADF931C67E6C8BE827 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft Manifest number: 88 Signing time: Mon 12 Oct 2026 05:46:40 +0000 Manifest this update: Mon 12 Oct 2026 05:41:40 +0000 Manifest next update: Thu 15 Oct 2026 09:31:40 +0000 Files and hashes: 1: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=) 2: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=) 3: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=) 4: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: CgSnXUS/repbvxq6OgDoVCYv4kxBq59nV7i21DCxJMA=) 5: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=) 6: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=) 7: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=) 8: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=) 9: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:25:ed:33:4a:72:41:76:08:d6:6c:ad:f9:31:c6:7e:6c:8b:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Validity Not Before: Oct 12 05:41:40 2026 GMT Not After : Oct 15 09:31:40 2026 GMT Subject: CN=B453DF54124A678696334A8E2429C6F7BBAD68EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:1e:97:21:c7:62:80:8f:51:ea:a0:ed:84: 38:69:ad:a1:80:12:2e:33:ff:50:b7:74:75:db:ad: 7a:37:5c:7b:62:e1:24:a3:0a:24:01:69:25:4b:36: b5:9d:8c:93:f7:0e:db:a9:ca:27:61:6e:a9:9b:f2: 01:5b:75:b4:eb:67:18:54:4c:5d:08:f4:a2:59:71: 45:d5:c7:5d:46:79:f7:aa:d4:89:3b:fd:40:2f:86: 07:40:b4:d3:76:bc:33:36:98:57:95:79:c6:10:73: e2:9b:5b:2e:0d:0f:4a:0c:93:34:0d:4a:c6:6a:56: 9c:9c:d8:70:bf:26:40:8e:52:41:3b:b4:cb:a1:f3: 38:ea:a4:da:17:d8:dd:db:cd:ce:45:d1:d1:8b:5d: c3:4a:09:3a:bc:44:f4:08:9a:dd:2e:83:20:35:c8: 7f:9d:e2:85:b9:cf:23:93:04:c8:8a:58:84:b4:f1: 6d:a2:42:7a:ac:d0:11:da:0a:57:11:c5:fb:0d:a7: 23:8e:e4:e9:6b:1c:4d:d1:65:9f:96:b2:bf:b8:83: 34:49:ef:75:7d:b5:30:49:9c:c1:dd:68:7e:b6:b7: 62:b8:40:73:2e:8a:4d:e5:b5:82:64:4c:1a:1f:d3: 01:28:b5:a9:0f:88:58:79:42:83:3f:cd:51:8d:e6: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:DF:54:12:4A:67:86:96:33:4A:8E:24:29:C6:F7:BB:AD:68:EB X509v3 Authority Key Identifier: keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:95:96:67:de:f8:c3:af:2e:c4:dc:a1:53:4d:d4:93:ea:ae: e8:ed:41:3c:80:7b:88:b9:c0:93:94:45:85:70:44:09:62:3b: 97:06:b0:7e:13:b8:f0:2b:21:16:05:60:18:50:6f:64:92:88: e5:89:bf:cd:ab:a8:bc:d2:d1:e6:49:90:36:2f:28:9e:4e:4f: 43:d1:51:bc:de:61:33:3d:ac:82:5a:4f:50:20:13:d5:0b:e5: 31:cb:1c:75:71:6c:65:21:2f:31:6e:a7:9a:94:2f:74:ea:ee: 74:60:e1:8d:12:16:91:60:a2:4c:f7:23:03:62:49:0c:17:ca: 9d:31:ad:87:ab:d4:61:f7:e7:ea:3d:37:e7:fb:51:aa:36:ff: 0d:f8:12:6b:e5:15:18:c1:f0:32:6b:ec:91:ee:b2:d9:ab:2e: ae:c1:8d:d7:90:0c:ee:e7:92:ba:a8:37:5e:fa:08:8f:9a:16: 75:41:91:05:a4:e5:b1:f1:cd:70:be:e5:eb:d6:88:d4:49:e9: 1c:d8:77:56:c7:5a:80:73:68:4c:66:0e:26:3c:99:cd:14:2f: 01:8e:91:a5:76:bd:e9:b0:d7:44:44:a6:e4:78:74:e2:da:23: f1:f5:5b:0e:f6:a7:fe:f8:c5:20:32:a5:24:5c:ff:30:8c:a6: 33:3a:b1:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDSXtM0pyQXYI1myt+THGfmyL6CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4 MzQ0QjM0ODAeFw0yNjEwMTIwNTQxNDBaFw0yNjEwMTUwOTMxNDBaMDMxMTAvBgNV BAMTKEI0NTNERjU0MTI0QTY3ODY5NjMzNEE4RTI0MjlDNkY3QkJBRDY4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaR6XIcdigI9R6qDthDhpraGA Ei4z/1C3dHXbrXo3XHti4SSjCiQBaSVLNrWdjJP3Dtupyidhbqmb8gFbdbTrZxhU TF0I9KJZcUXVx11Gefeq1Ik7/UAvhgdAtNN2vDM2mFeVecYQc+KbWy4ND0oMkzQN SsZqVpyc2HC/JkCOUkE7tMuh8zjqpNoX2N3bzc5F0dGLXcNKCTq8RPQImt0ugyA1 yH+d4oW5zyOTBMiKWIS08W2iQnqs0BHaClcRxfsNpyOO5OlrHE3RZZ+Wsr+4gzRJ 73V9tTBJnMHdaH62t2K4QHMuik3ltYJkTBof0wEotakPiFh5QoM/zVGN5t/LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtFPfVBJKZ4aWM0qOJCnG97utaOswHwYDVR0j BBgwFoAUN4k0n7q3ucdLKS7fWEm6NoNEs0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ2OTIzMjIxNDU0MDMxMS8wLzM3ODkzNDlGQkFCN0I5Qzc0QjI5MkVERjU4NDlC QTM2ODM0NEIzNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NjkyMzIyMTQ1NDAzMTEvMC8zNzg5MzQ5RkJBQjdC OUM3NEIyOTJFREY1ODQ5QkEzNjgzNDRCMzQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpWWZ974w68u xNyhU03Uk+qu6O1BPIB7iLnAk5RFhXBECWI7lwawfhO48CshFgVgGFBvZJKI5Ym/ zauovNLR5kmQNi8onk5PQ9FRvN5hMz2sglpPUCAT1QvlMcscdXFsZSEvMW6nmpQv dOrudGDhjRIWkWCiTPcjA2JJDBfKnTGth6vUYffn6j035/tRqjb/DfgSa+UVGMHw Mmvske6y2asursGN15AM7ueSuqg3XvoIj5oWdUGRBaTlsfHNcL7l69aI1EnpHNh3 VsdagHNoTGYOJjyZzRQvAY6RpXa96bDXRESm5Hh04toj8fVbDvan/vjFIDKlJFz/ MIymMzqxJw== -----END CERTIFICATE-----Generated at Mon Oct 12 19:19:58 2026 by rpki-client