$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft File: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json) Hash identifier: 8GYw7J3q1Ea3R0h2rXXvdlALcDE5XNvehrWzVVnPLB4= Subject key identifier: 87:53:3F:07:5E:55:F3:5D:97:2E:A5:8A:4B:98:42:F3:A8:46:F1:AF Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 115C09D9BC3EC7B3C78585CDA4E2FBA2475B1476 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 12:34:17 +0000 Manifest this update: Mon 13 Apr 2026 12:29:17 +0000 Manifest next update: Tue 14 Apr 2026 12:48:17 +0000 Files and hashes: 1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: 2LF3BYRozJv7GaMGvL8wF6vSmPOv37YB7tnHI+beMwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5c:09:d9:bc:3e:c7:b3:c7:85:85:cd:a4:e2:fb:a2:47:5b:14:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: Apr 13 12:29:17 2026 GMT Not After : Apr 14 12:48:17 2026 GMT Subject: CN=87533F075E55F35D972EA58A4B9842F3A846F1AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:e4:93:e0:65:ba:cc:81:09:2d:2b:d4:0d: 5f:41:4c:4d:aa:0d:56:93:ff:5a:de:9a:dc:be:84: 6f:0e:d5:65:a1:9e:5a:ff:60:6e:8d:62:63:5f:8f: a2:00:42:a4:0b:f2:c9:b0:40:59:c9:67:64:32:9c: 88:e1:cd:5a:6d:5c:3a:1f:a8:33:5d:17:bb:53:84: 85:5b:3b:82:29:86:2e:52:ec:c9:0a:8d:69:84:a2: 6b:31:3b:ed:d3:66:49:dc:48:01:19:3b:01:d4:ee: 8a:c7:7c:a3:76:7e:2e:91:5d:5c:9a:c9:30:4d:2c: 2a:8f:81:47:2d:fb:36:6c:00:e3:1a:a4:03:9c:b7: 56:82:6d:2c:cf:ff:76:f6:51:e5:62:ad:1b:fc:d5: e2:52:f1:fa:40:26:c0:e9:46:00:ff:b0:c5:19:e6: 4c:5b:0f:8c:82:c0:4f:d1:29:74:a2:07:ad:d9:a8: 7f:1d:a0:4f:17:f5:54:0e:2d:1a:7e:5b:4c:ab:e8: 24:f3:9b:6c:a2:95:7e:d9:f6:2e:64:65:ed:93:f8: 65:ca:7a:86:a6:06:a7:7f:ac:32:51:05:b4:58:93: 60:fd:8e:30:c5:ca:89:c2:88:5e:10:cf:e9:14:52: 29:3d:c4:3a:a8:b1:cf:91:48:19:b9:2b:73:4b:1f: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:3F:07:5E:55:F3:5D:97:2E:A5:8A:4B:98:42:F3:A8:46:F1:AF X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2c:6d:33:d0:14:d6:f4:99:73:02:a2:c0:1f:36:e7:1f:eb: d9:2a:da:c5:5b:11:d7:14:42:aa:a4:42:f9:cd:bd:23:06:64: fd:cf:6a:92:8e:f4:a5:46:21:d3:2e:15:db:99:ab:27:f1:33: c3:06:16:bf:d6:64:fe:d0:bb:74:b3:6c:6d:89:82:19:94:14: 4d:9d:3d:05:3b:57:d6:b5:69:27:6c:76:dc:ae:0d:8a:5c:30: a6:9d:e0:f6:e1:74:fa:23:d9:47:3a:74:f6:04:9c:4f:df:75: e9:0e:33:84:db:50:f7:1d:37:0d:b1:5f:92:21:66:26:b7:ff: 40:21:07:26:92:09:42:dd:e1:65:15:04:82:68:05:43:4c:6c: 37:54:b8:50:25:a5:50:b4:f7:a8:17:23:8c:d0:14:4f:6e:c6: 28:37:6d:b3:fb:22:0b:32:a4:2c:0e:cb:63:5f:6c:01:87:d8: d9:1d:be:ac:c8:f2:18:9e:88:95:03:f9:42:55:48:f3:ca:df: cc:42:3f:6e:ae:c0:8f:e0:0f:e9:8f:4a:ca:bc:e9:a9:e3:ed: b2:dc:8f:64:dc:3f:ab:03:ca:92:4b:3d:91:7a:1b:66:d5:3e: cf:f3:cd:6c:86:34:46:5e:1d:cc:2a:41:1b:ec:0f:39:c7:20: bf:35:c2:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEVwJ2bw+x7PHhYXNpOL7okdbFHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjA0MTMxMjI5MTdaFw0yNjA0MTQxMjQ4MTdaMDMxMTAvBgNV BAMTKDg3NTMzRjA3NUU1NUYzNUQ5NzJFQTU4QTRCOTg0MkYzQTg0NkYxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgeST4GW6zIEJLSvUDV9BTE2q DVaT/1remty+hG8O1WWhnlr/YG6NYmNfj6IAQqQL8smwQFnJZ2QynIjhzVptXDof qDNdF7tThIVbO4Iphi5S7MkKjWmEomsxO+3TZkncSAEZOwHU7orHfKN2fi6RXVya yTBNLCqPgUct+zZsAOMapAOct1aCbSzP/3b2UeVirRv81eJS8fpAJsDpRgD/sMUZ 5kxbD4yCwE/RKXSiB63ZqH8doE8X9VQOLRp+W0yr6CTzm2yilX7Z9i5kZe2T+GXK eoamBqd/rDJRBbRYk2D9jjDFyonCiF4Qz+kUUik9xDqosc+RSBm5K3NLHzuDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh1M/B15V812XLqWKS5hC86hG8a8wHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyxtM9AU1vSZ cwKiwB825x/r2SraxVsR1xRCqqRC+c29IwZk/c9qko70pUYh0y4V25mrJ/EzwwYW v9Zk/tC7dLNsbYmCGZQUTZ09BTtX1rVpJ2x23K4Nilwwpp3g9uF0+iPZRzp09gSc T9916Q4zhNtQ9x03DbFfkiFmJrf/QCEHJpIJQt3hZRUEgmgFQ0xsN1S4UCWlULT3 qBcjjNAUT27GKDdts/siCzKkLA7LY19sAYfY2R2+rMjyGJ6IlQP5QlVI88rfzEI/ bq7Aj+AP6Y9KyrzpqePtstyPZNw/qwPKkks9kXobZtU+z/PNbIY0Rl4dzCpBG+wP OccgvzXCTA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:47 2026 by rpki-client