$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: y5BFFLsZp1TA863ps2ZhBDxdjdJBQzBP00xy+AmyJKs= Subject key identifier: 39:1F:EF:2B:7D:6A:1A:6C:23:CD:54:75:B9:93:BF:37:03:3C:62:33 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 61208EEDE4F75017C836F2CDC75EEED43F419FD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:33:28 +0000 Manifest this update: Thu 26 Mar 2026 12:28:28 +0000 Manifest next update: Fri 27 Mar 2026 15:23:28 +0000 Files and hashes: 1: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) 2: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: +uyAYscvBNiXYuylop6ZhBOIWcl7wRYVQgjKJhmif8o=) 3: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:20:8e:ed:e4:f7:50:17:c8:36:f2:cd:c7:5e:ee:d4:3f:41:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Mar 26 12:28:28 2026 GMT Not After : Mar 27 15:23:28 2026 GMT Subject: CN=391FEF2B7D6A1A6C23CD5475B993BF37033C6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:ba:c0:9c:15:8f:e0:ab:a5:f2:53:80:4c: 16:e1:9d:68:2e:3a:6d:10:7f:2c:f8:db:89:9f:41: 4d:3d:29:7e:38:47:2b:0c:13:7a:1b:55:ba:82:38: ce:eb:96:97:79:fb:ff:03:6f:38:9b:29:a6:69:a9: 88:47:22:78:b5:0a:d1:d6:92:7a:5a:69:a9:69:3a: ab:18:bc:dd:7a:72:0c:1e:2d:7f:d1:b9:bc:25:f3: 03:ba:b8:c0:09:f2:c2:b4:31:80:01:b2:a6:ac:3e: fd:a4:44:d2:85:8c:91:4b:7a:ad:5a:6f:57:1b:48: ef:7e:1d:bf:9b:a1:8e:21:a2:7e:ff:75:be:ee:ce: b9:60:94:c1:df:6e:ed:0f:39:63:68:dc:f3:87:d8: e7:74:1f:81:7f:9d:93:ce:f4:1c:68:a0:b7:e5:f7: e5:85:41:4d:14:44:21:71:be:8e:72:2d:04:c5:ae: 20:cd:95:72:c9:13:bd:c5:39:7a:92:2c:66:ce:88: 62:fd:6c:32:a5:23:ee:e0:4d:9f:55:65:16:e8:e7: 8d:cd:0d:2b:52:bb:aa:83:fb:b4:d6:88:af:9b:14: 41:e3:f4:b9:b7:ea:9d:8b:a8:d7:c9:df:0d:2a:f4: 9a:eb:38:92:14:28:af:db:65:9b:b5:58:ee:be:b6: 8a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:EF:2B:7D:6A:1A:6C:23:CD:54:75:B9:93:BF:37:03:3C:62:33 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2e:90:90:54:ab:71:9b:1e:02:d1:67:e1:7f:1b:a8:87:fb: 0a:1f:c1:72:57:2f:9f:2c:40:21:45:a5:d6:04:ef:7f:37:42: aa:ef:b1:3b:f5:83:99:a9:a7:2a:5e:d3:9e:78:0d:e2:0c:f6: 85:b9:f3:ab:98:f6:73:75:f9:64:3d:35:49:0d:4e:26:b0:f9: ab:ab:fa:2a:b7:dd:5e:46:c3:d1:c1:7e:ba:fe:17:2a:91:9d: f8:ef:e4:bd:e5:46:c6:fa:1d:2b:6e:35:c8:ae:96:a5:01:f8: af:c3:34:ce:c8:db:6a:6b:71:17:fe:a3:e8:71:20:77:89:9a: 9d:b1:bd:eb:a0:d6:e1:d7:df:e0:e1:73:ba:6f:4d:1d:b9:22: cc:1f:ac:d0:f1:e9:6e:97:c0:e6:50:04:49:9e:cc:79:f6:c7: 08:48:58:9e:29:45:8e:db:07:fa:7c:eb:bd:eb:b5:7b:3f:61: c6:d0:e5:2d:be:6c:7d:11:92:a7:9d:b4:b9:50:cf:2c:85:af: cd:6e:1e:ed:5d:98:6c:c3:a7:ca:96:7b:b2:4a:fe:25:95:ca: 7e:a4:77:5e:9d:d9:46:29:0b:57:2c:d8:6a:ed:9d:46:fe:d6: 17:b3:db:30:92:ba:aa:79:f7:25:a9:b4:c1:05:15:05:28:4d: c7:ad:2b:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYSCO7eT3UBfINvLNx17u1D9Bn9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjAzMjYxMjI4MjhaFw0yNjAzMjcxNTIzMjhaMDMxMTAvBgNV BAMTKDM5MUZFRjJCN0Q2QTFBNkMyM0NENTQ3NUI5OTNCRjM3MDMzQzYyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8LrAnBWP4Kul8lOATBbhnWgu Om0Qfyz424mfQU09KX44RysME3obVbqCOM7rlpd5+/8DbzibKaZpqYhHIni1CtHW knpaaalpOqsYvN16cgweLX/Rubwl8wO6uMAJ8sK0MYABsqasPv2kRNKFjJFLeq1a b1cbSO9+Hb+boY4hon7/db7uzrlglMHfbu0POWNo3POH2Od0H4F/nZPO9BxooLfl 9+WFQU0URCFxvo5yLQTFriDNlXLJE73FOXqSLGbOiGL9bDKlI+7gTZ9VZRbo543N DStSu6qD+7TWiK+bFEHj9Lm36p2LqNfJ3w0q9JrrOJIUKK/bZZu1WO6+topfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOR/vK31qGmwjzVR1uZO/NwM8YjMwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy6QkFSrcZse AtFn4X8bqIf7Ch/BclcvnyxAIUWl1gTvfzdCqu+xO/WDmamnKl7TnngN4gz2hbnz q5j2c3X5ZD01SQ1OJrD5q6v6KrfdXkbD0cF+uv4XKpGd+O/kveVGxvodK241yK6W pQH4r8M0zsjbamtxF/6j6HEgd4manbG966DW4dff4OFzum9NHbkizB+s0PHpbpfA 5lAESZ7MefbHCEhYnilFjtsH+nzrveu1ez9hxtDlLb5sfRGSp520uVDPLIWvzW4e 7V2YbMOnypZ7skr+JZXKfqR3Xp3ZRikLVyzYau2dRv7WF7PbMJK6qnn3Jam0wQUV BShNx60rJg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:07 2026 by rpki-client