$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: 5SNBYuvQ5jP304fzR39CUbkf5ffe6ymLa9MxG02B3Pk= Subject key identifier: E6:A2:74:F1:E7:D6:F3:18:6E:07:C0:FD:9D:9D:66:A2:4F:9A:B9:9E Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 0854D93A90ECD5721960A69DCC8B9BDD12D1B85E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 98 Signing time: Tue 12 May 2026 21:30:47 +0000 Manifest this update: Tue 12 May 2026 21:25:47 +0000 Manifest next update: Wed 13 May 2026 23:48:47 +0000 Files and hashes: 1: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) 2: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 3: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: FDkQM2zNl3K1ZX5JpP8cwO0uSNOq/vyyncOhpKtAYuU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:54:d9:3a:90:ec:d5:72:19:60:a6:9d:cc:8b:9b:dd:12:d1:b8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: May 12 21:25:47 2026 GMT Not After : May 13 23:48:47 2026 GMT Subject: CN=E6A274F1E7D6F3186E07C0FD9D9D66A24F9AB99E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:65:04:22:18:82:9d:6c:9d:36:69:24:70: 65:a4:f4:c0:af:95:4a:7c:f7:cd:c6:74:a0:fd:77: cf:d1:69:f5:1c:0a:07:4c:12:b3:d2:26:9e:94:b0: 04:17:d9:cf:0e:d7:93:8b:ef:b5:4d:f8:43:0d:45: ec:41:22:9d:82:f2:2a:cc:39:48:be:81:3d:82:5f: 48:b0:a6:80:c4:44:84:8e:a4:55:b6:99:ce:a4:a5: d9:82:71:c0:ed:2a:12:6d:c8:9e:36:82:09:9c:7f: 4a:29:40:36:75:e4:19:db:ab:df:7c:45:c4:76:32: a0:8a:5e:8a:3b:f5:23:7b:c6:c6:b9:5a:24:e5:bc: 3f:af:2c:2b:d2:8f:aa:97:3b:ed:38:91:af:65:9e: fc:e4:0a:26:ca:d7:66:46:da:f2:46:82:46:25:eb: 19:41:d7:db:93:42:9c:7d:21:cd:f2:d3:ea:2b:09: ee:25:2d:02:bc:bb:10:36:07:3c:b3:93:f3:1d:7a: 80:3e:be:a2:fc:c6:c2:08:33:66:8f:4c:33:25:25: 11:07:9c:f1:cc:fb:f2:0e:41:66:63:68:90:12:34: 7a:47:db:99:c7:15:ae:46:81:cc:ec:bc:39:55:a1: c6:dd:03:c5:b7:ec:b6:de:ea:e2:2a:26:1a:a9:2a: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A2:74:F1:E7:D6:F3:18:6E:07:C0:FD:9D:9D:66:A2:4F:9A:B9:9E X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1a:86:45:f8:f7:44:00:23:7f:9b:0c:62:c3:12:a3:51:b9: 33:1c:b9:a9:b5:78:c3:ff:ea:fd:73:f8:0d:bd:f3:69:e2:aa: 6f:4d:d6:0a:65:c4:28:64:3e:f8:1e:3b:15:b1:ca:1e:45:75: c4:15:d9:42:f8:18:04:cb:55:4a:7e:ef:af:73:4b:1a:9f:94: 71:fb:3c:39:90:fb:3e:1b:13:2b:bd:e9:5a:88:c1:db:b0:af: 76:4d:6a:67:21:d2:7b:5c:08:da:f1:7a:af:19:f1:80:a0:3c: f4:7a:61:e6:b1:cc:ef:33:69:1a:d7:71:99:cb:31:f7:16:b2: a8:81:19:72:0d:07:4e:d1:67:87:2f:4f:8f:45:88:a0:7a:2b: 21:5f:df:5e:c7:dc:20:2a:15:82:36:3d:c9:fb:6a:13:0b:46: 9c:72:9a:30:4e:b4:e9:8d:ec:ab:d7:70:c3:f8:4b:a0:41:55: b6:a3:fa:22:13:a4:6c:86:a2:39:fc:c9:f2:ea:8c:14:65:3d: 7d:6b:db:18:6d:ad:21:6c:9e:13:4a:01:a9:50:f5:fb:e0:9d: 53:5c:03:b2:1e:51:b6:d9:d1:b7:ab:14:fb:f7:5e:cb:f0:b5: b8:46:3d:77:47:fa:d4:bd:c1:32:65:fb:bb:d6:3d:43:fc:ad: 6a:c3:61:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCFTZOpDs1XIZYKadzIub3RLRuF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA1MTIyMTI1NDdaFw0yNjA1MTMyMzQ4NDdaMDMxMTAvBgNV BAMTKEU2QTI3NEYxRTdENkYzMTg2RTA3QzBGRDlEOUQ2NkEyNEY5QUI5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAmUEIhiCnWydNmkkcGWk9MCv lUp8983GdKD9d8/RafUcCgdMErPSJp6UsAQX2c8O15OL77VN+EMNRexBIp2C8irM OUi+gT2CX0iwpoDERISOpFW2mc6kpdmCccDtKhJtyJ42ggmcf0opQDZ15Bnbq998 RcR2MqCKXoo79SN7xsa5WiTlvD+vLCvSj6qXO+04ka9lnvzkCibK12ZG2vJGgkYl 6xlB19uTQpx9Ic3y0+orCe4lLQK8uxA2Bzyzk/MdeoA+vqL8xsIIM2aPTDMlJREH nPHM+/IOQWZjaJASNHpH25nHFa5GgczsvDlVocbdA8W37Lbe6uIqJhqpKkc5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5qJ08efW8xhuB8D9nZ1mok+auZ4wHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxqGRfj3RAAj f5sMYsMSo1G5Mxy5qbV4w//q/XP4Db3zaeKqb03WCmXEKGQ++B47FbHKHkV1xBXZ QvgYBMtVSn7vr3NLGp+Ucfs8OZD7PhsTK73pWojB27Cvdk1qZyHSe1wI2vF6rxnx gKA89Hph5rHM7zNpGtdxmcsx9xayqIEZcg0HTtFnhy9Pj0WIoHorIV/fXsfcICoV gjY9yftqEwtGnHKaME606Y3sq9dww/hLoEFVtqP6IhOkbIaiOfzJ8uqMFGU9fWvb GG2tIWyeE0oBqVD1++CdU1wDsh5RttnRt6sU+/dey/C1uEY9d0f61L3BMmX7u9Y9 Q/ytasNhig== -----END CERTIFICATE-----Generated at Wed May 13 18:23:12 2026 by rpki-client