$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json) Hash identifier: lBqh4CesJbmO8il/DMXbB3p06Rib+Fk8WWNZRRMOmA0= Subject key identifier: 59:2B:24:B1:4E:94:FE:77:D6:FC:93:F5:DC:E5:15:73:47:31:A8:5D Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Certificate serial: 41BC946A6861CE1C22FC493E33B48A4472E22C12 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft Manifest number: 02B0 Signing time: Tue 28 Jul 2026 05:56:29 +0000 Manifest this update: Tue 28 Jul 2026 05:51:29 +0000 Manifest next update: Wed 29 Jul 2026 09:34:29 +0000 Files and hashes: 1: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: xPCXeEltoIg3CmUrOlf+OESkVlxOwwOYTR1iwLjR3V0=) 2: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=) 3: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=) 4: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=) 5: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=) 6: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=) 7: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=) 8: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=) 9: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=) 10: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=) 11: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=) 12: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=) 13: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=) 14: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=) 15: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=) 16: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=) 17: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=) 18: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bc:94:6a:68:61:ce:1c:22:fc:49:3e:33:b4:8a:44:72:e2:2c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC Validity Not Before: Jul 28 05:51:29 2026 GMT Not After : Jul 29 09:34:29 2026 GMT Subject: CN=592B24B14E94FE77D6FC93F5DCE515734731A85D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:02:74:6d:b0:98:c2:2e:1f:3b:fe:46:79: 08:3d:1b:4d:70:4c:f9:67:59:9f:10:5a:47:ff:1a: b7:2e:df:12:f1:73:21:83:bf:4e:a2:ac:1f:fe:47: 87:5b:bf:64:a9:1f:53:54:e1:81:cb:af:f0:d7:54: 36:84:66:18:1b:1c:d9:03:0e:f7:4d:6e:c2:5e:de: f3:0b:20:13:90:32:ec:3c:e7:6a:fb:03:32:79:2a: ce:ce:d3:13:56:d8:6b:41:83:e0:25:09:dd:9f:c1: 44:da:5a:5f:d4:07:b1:2b:a8:32:f3:54:be:74:12: e6:f5:19:2c:d3:00:31:03:8f:d5:b3:96:92:b3:87: 29:ee:dd:89:bd:22:bd:07:ba:6d:b2:d5:60:e0:89: bc:57:0a:7c:20:62:3f:6e:b7:7b:5a:27:5a:a5:e2: 16:4d:3c:ca:67:f5:cb:bb:c6:19:43:4c:6b:e9:91: 87:8d:80:f3:3b:f5:97:58:c6:8d:f2:a4:e4:17:5a: a8:94:1d:bb:a0:3b:46:51:1b:85:24:5f:28:23:79: e2:92:bc:9d:7f:6a:27:46:59:1b:03:b1:74:72:3e: 7b:e2:bd:dd:e7:6e:fb:4b:89:64:76:8a:14:0a:8d: 10:6e:63:e9:f8:eb:0f:5b:fb:a6:d4:be:13:72:31: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:24:B1:4E:94:FE:77:D6:FC:93:F5:DC:E5:15:73:47:31:A8:5D X509v3 Authority Key Identifier: keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:b2:3a:e7:f0:06:1d:96:d5:23:de:f2:95:23:11:8f:22: a1:3e:8b:a0:72:af:f3:b3:73:ea:30:37:ce:72:1e:6d:9a:ce: 7f:e3:cc:f2:d8:59:56:f8:bf:9a:99:08:2f:5d:df:87:ed:9b: ad:7c:fa:72:3f:25:1a:34:30:93:7e:9e:97:e1:d6:e7:83:b2: 5f:b3:9d:01:15:7f:15:fb:54:d4:3a:c8:53:49:f1:d0:c8:ea: 11:09:39:fe:0e:a2:03:dd:53:cb:a5:e7:0c:6e:63:57:ea:06: 88:eb:80:22:9f:41:43:c5:d1:c7:85:7e:c1:c8:05:78:08:3c: 9a:16:61:30:75:7e:91:41:6c:ae:c7:a7:09:c8:5e:23:64:79: 3b:7a:de:4d:07:60:91:60:f1:6a:67:c7:c9:42:d6:b5:b8:6e: 0a:9d:53:03:71:cd:7b:e6:e1:40:0c:eb:b9:61:70:39:8d:89: 38:5c:dd:06:9a:37:42:48:e9:41:8e:cc:fc:17:2f:1a:b0:05: 66:39:da:76:ee:a0:86:0a:fb:16:f9:76:3b:6d:ce:81:7f:e8: c6:5d:03:90:81:26:5a:c7:07:c8:5b:7d:78:86:6e:7f:63:c2: d7:dd:a8:3f:60:d5:c1:e9:ab:d1:c2:e6:98:d6:03:22:17:b4: a3:7c:31:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQbyUamhhzhwi/Ek+M7SKRHLiLBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEygzOTA5Q0NGNjlE N0YxQTE3RENBMDE4NzhGQUUwNkVDMzlCMzhFM0JDMB4XDTI2MDcyODA1NTEyOVoX DTI2MDcyOTA5MzQyOVowMzExMC8GA1UEAxMoNTkyQjI0QjE0RTk0RkU3N0Q2RkM5 M0Y1RENFNTE1NzM0NzMxQTg1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfBAnRtsJjCLh87/kZ5CD0bTXBM+WdZnxBaR/8aty7fEvFzIYO/TqKsH/5H h1u/ZKkfU1Thgcuv8NdUNoRmGBsc2QMO901uwl7e8wsgE5Ay7DznavsDMnkqzs7T E1bYa0GD4CUJ3Z/BRNpaX9QHsSuoMvNUvnQS5vUZLNMAMQOP1bOWkrOHKe7dib0i vQe6bbLVYOCJvFcKfCBiP263e1onWqXiFk08ymf1y7vGGUNMa+mRh42A8zv1l1jG jfKk5BdaqJQdu6A7RlEbhSRfKCN54pK8nX9qJ0ZZGwOxdHI+e+K93edu+0uJZHaK FAqNEG5j6fjrD1v7ptS+E3Ixym8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRZKySx TpT+d9b8k/Xc5RVzRzGoXTAfBgNVHSMEGDAWgBQ5Ccz2nX8aF9ygGHj64G7Dmzjj vDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzAvMzkwOUND RjY5RDdGMUExN0RDQTAxODc4RkFFMDZFQzM5QjM4RTNCQy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvT1FuTTlwMV9H aGZjb0JoNC11QnV3NXM0NDd3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8wLzM5MDlDQ0Y2OUQ3RjFBMTdEQ0EwMTg3OEZBRTA2RUMzOUIzOEUz QkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBXKrI65/AGHZbVI97ylSMRjyKhPougcq/zs3PqMDfOch5t ms5/48zy2FlW+L+amQgvXd+H7ZutfPpyPyUaNDCTfp6X4dbng7Jfs50BFX8V+1TU OshTSfHQyOoRCTn+DqID3VPLpecMbmNX6gaI64Ain0FDxdHHhX7ByAV4CDyaFmEw dX6RQWyux6cJyF4jZHk7et5NB2CRYPFqZ8fJQta1uG4KnVMDcc175uFADOu5YXA5 jYk4XN0GmjdCSOlBjsz8Fy8asAVmOdp27qCGCvsW+XY7bc6Bf+jGXQOQgSZaxwfI W314hm5/Y8LX3ag/YNXB6avRwuaY1gMiF7SjfDES -----END CERTIFICATE-----Generated at Tue Jul 28 21:05:04 2026 by rpki-client