$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft File: 3EEEE97335393C19F4043C9CE5E7352198F585B8.mft (raw, json) Hash identifier: vPagxMn2COytB0Al5tmUqAMou0g5TZyOz5uQYHe0u8E= Subject key identifier: C6:75:F9:F9:A2:0C:05:A1:BE:73:1F:E3:DB:7F:6C:BB:D0:3D:03:15 Authority key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 Certificate issuer: /CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Certificate serial: 44C78EFBD4C720C93C24931F7BFA6910504BFF84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft Manifest number: 67 Signing time: Mon 28 Sep 2026 10:00:39 +0000 Manifest this update: Mon 28 Sep 2026 09:55:39 +0000 Manifest next update: Thu 01 Oct 2026 19:30:39 +0000 Files and hashes: 1: 3EEEE97335393C19F4043C9CE5E7352198F585B8.crl (hash: jBKtXqD2oOpuBAzUM6eETjLDNg7I4WkEpzn3hKQQ3qc=) 2: 3231302e37362e33322e302f31392d3139203d3e2034383337.roa (hash: v5qZkA184lUeQZJHDQwhK9Q2fbhNxvuiIjmXjqZSX+Y=) 3: 3231302e37362e34382e302f32302d3230203d3e2034383337.roa (hash: 4JklFnUiQ9RVk24i9PELwuHpnqaXPe2enthJw8gDFEs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c7:8e:fb:d4:c7:20:c9:3c:24:93:1f:7b:fa:69:10:50:4b:ff:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Validity Not Before: Sep 28 09:55:39 2026 GMT Not After : Oct 1 19:30:39 2026 GMT Subject: CN=C675F9F9A20C05A1BE731FE3DB7F6CBBD03D0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:1e:1b:59:b0:bc:fd:58:0a:4b:a9:7a:db: 6f:8f:aa:e7:44:b8:db:30:c1:4b:c1:48:36:ff:8d: a4:22:e0:88:72:77:ad:70:ba:4c:41:0e:45:bc:7b: 46:67:8f:58:42:3e:32:19:39:de:63:e1:cc:16:c0: 9b:c6:db:a3:22:72:76:fd:46:0e:7f:8c:82:c6:8b: 2e:a7:b3:33:4f:2b:db:87:17:f6:32:35:51:32:cb: a8:b6:bf:03:78:ab:0b:7d:99:2d:48:a4:ed:4d:0d: 77:a5:08:dd:f5:c8:ad:b8:f0:8c:ed:3a:55:c9:e8: 30:7d:02:0e:4b:92:9c:27:52:ef:18:00:e6:c4:4b: 8d:88:37:a7:d8:6a:b5:0a:64:24:6e:58:02:97:9e: f8:d3:1d:4d:02:76:be:5c:b7:fd:65:09:36:ab:6a: ab:c4:10:b8:b4:86:49:4a:e7:74:5d:9f:d5:4a:ec: 97:c9:c4:09:38:45:7f:3d:26:50:77:81:f4:ec:00: c7:43:02:f6:bd:4f:26:ba:82:fd:c7:cc:d6:b2:ae: 9f:03:70:5e:5f:fe:44:86:92:4b:ab:6d:e3:01:54: 20:e6:b8:3e:90:a3:ca:36:3e:ab:d7:e2:bf:81:2a: 12:03:0b:7e:1a:dd:65:be:72:86:82:80:b2:ce:76: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:75:F9:F9:A2:0C:05:A1:BE:73:1F:E3:DB:7F:6C:BB:D0:3D:03:15 X509v3 Authority Key Identifier: keyid:3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d3:f1:86:b8:da:74:47:db:aa:e2:9c:d4:c2:a1:87:49:9c: 5d:6a:6b:de:3d:87:90:ea:bc:64:e8:74:83:f4:41:b5:56:37: b2:cc:12:64:89:90:3e:7b:3c:5e:58:a9:fc:25:81:a7:fc:e6: bc:90:6e:e1:e7:b2:be:23:47:be:30:f3:5b:6f:33:4a:43:0f: 64:dd:a2:d8:45:07:ea:8a:76:98:c3:60:16:42:a5:75:a5:90: 2e:e1:95:93:0a:d4:3e:49:f1:d8:b7:65:5a:8c:6a:da:10:5c: 00:d8:01:23:c3:23:6f:b4:be:08:1b:bc:bc:47:70:d4:0f:61: a2:86:b5:df:de:a8:d1:39:f6:e9:5c:06:3e:06:16:a9:d7:f8: 70:44:98:93:24:a3:25:ca:7c:88:9f:70:76:09:d6:74:2d:0e: 27:05:f8:77:2f:91:6a:84:a5:85:f6:59:c1:c5:cf:6e:6b:27: 16:3a:b1:90:b4:2a:2d:c7:c3:2c:d1:d7:3e:83:15:cc:fa:b9: 32:36:1b:0f:b9:a3:13:a0:ab:57:30:17:2f:d3:79:ed:fb:7f: 1e:cf:73:a9:3a:b3:84:51:7b:c4:a5:fb:b0:12:a2:6e:ac:e3: 1b:5d:74:09:f8:ee:0d:4c:df:f4:43:37:72:f5:13:70:f7:37: 90:8b:8b:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURMeO+9THIMk8JJMfe/ppEFBL/4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5 OEY1ODVCODAeFw0yNjA5MjgwOTU1MzlaFw0yNjEwMDExOTMwMzlaMDMxMTAvBgNV BAMTKEM2NzVGOUY5QTIwQzA1QTFCRTczMUZFM0RCN0Y2Q0JCRDAzRDAzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/h4bWbC8/VgKS6l622+PqudE uNswwUvBSDb/jaQi4Ihyd61wukxBDkW8e0Znj1hCPjIZOd5j4cwWwJvG26Micnb9 Rg5/jILGiy6nszNPK9uHF/YyNVEyy6i2vwN4qwt9mS1IpO1NDXelCN31yK248Izt OlXJ6DB9Ag5LkpwnUu8YAObES42IN6fYarUKZCRuWAKXnvjTHU0Cdr5ct/1lCTar aqvEELi0hklK53Rdn9VK7JfJxAk4RX89JlB3gfTsAMdDAva9Tya6gv3HzNayrp8D cF5f/kSGkkurbeMBVCDmuD6Qo8o2PqvX4r+BKhIDC34a3WW+coaCgLLOdp9bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxnX5+aIMBaG+cx/j239su9A9AxUwHwYDVR0j BBgwFoAUPu7pczU5PBn0BDyc5ec1IZj1hbgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjQwNjEyMzExNTExODYyNy8wLzNFRUVFOTczMzUzOTNDMTlGNDA0M0M5Q0U1RTcz NTIxOThGNTg1QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5OEY1ODVCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI0MDYxMjMxMTUxMTg2MjcvMC8zRUVFRTk3MzM1Mzkz QzE5RjQwNDNDOUNFNUU3MzUyMTk4RjU4NUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntPxhrjadEfb quKc1MKhh0mcXWpr3j2HkOq8ZOh0g/RBtVY3sswSZImQPns8Xlip/CWBp/zmvJBu 4eeyviNHvjDzW28zSkMPZN2i2EUH6op2mMNgFkKldaWQLuGVkwrUPknx2LdlWoxq 2hBcANgBI8Mjb7S+CBu8vEdw1A9hooa1396o0Tn26VwGPgYWqdf4cESYkySjJcp8 iJ9wdgnWdC0OJwX4dy+RaoSlhfZZwcXPbmsnFjqxkLQqLcfDLNHXPoMVzPq5MjYb D7mjE6CrVzAXL9N57ft/Hs9zqTqzhFF7xKX7sBKibqzjG110CfjuDUzf9EM3cvUT cPc3kIuL5g== -----END CERTIFICATE-----Generated at Mon Sep 28 20:32:29 2026 by rpki-client