$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: el3ObpIw4WGihwv+WMOsAMdILx1pTzKq6KGifB64la4= Subject key identifier: AD:CE:37:34:62:6F:24:9E:F7:88:3C:43:3E:48:47:AF:5A:AC:8F:D2 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 04774D4BC7DBB9558DF7372BD17F23DACE84D478 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: BA Signing time: Thu 04 Jun 2026 10:39:29 +0000 Manifest this update: Thu 04 Jun 2026 10:34:29 +0000 Manifest next update: Fri 05 Jun 2026 10:48:29 +0000 Files and hashes: 1: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 2: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) 3: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: uBwhraPMvVi8YacCoHwEDiP0oV2bgqXvf+LgvN+vM9o=) 4: 3133392e3135392e3131382e302f32342d3234203d3e203633313939.roa (hash: ODBMFYaAiytyw17J8mjVJAI0FXJU3dAq/ESFApRWkt4=) 5: 3133392e3135392e3131392e302f32342d3234203d3e203633313939.roa (hash: HGltnfQzZnrsAIgWAyhlvRhkH48URAVKBK8ranwE+jM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 10:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:77:4d:4b:c7:db:b9:55:8d:f7:37:2b:d1:7f:23:da:ce:84:d4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Jun 4 10:34:29 2026 GMT Not After : Jun 5 10:48:29 2026 GMT Subject: CN=ADCE3734626F249EF7883C433E4847AF5AAC8FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:fb:cc:16:db:16:97:b9:71:4b:16:e7:2b: 6a:e8:b5:dd:63:35:cf:38:8a:f6:50:2b:6a:1b:e8: be:b9:2c:26:4a:88:70:2a:ca:87:0f:fe:73:c0:20: c6:10:7a:f8:3e:82:24:e5:94:ca:45:69:5b:a5:a7: be:eb:a4:33:03:23:67:84:b0:f3:0f:90:a4:d8:1a: 88:78:fb:27:d6:61:cf:c1:9f:8b:45:51:9e:e2:52: 29:46:e1:49:18:02:84:80:52:26:15:e4:aa:90:22: 31:e4:c1:50:4b:e3:ce:38:91:a9:47:39:80:bd:3c: 86:7f:0e:64:aa:8c:d1:76:2c:98:1b:9b:e8:ca:d9: 83:25:2c:59:06:69:3e:14:69:85:05:b4:50:97:38: c0:a8:ae:b5:1d:08:5a:87:5f:2a:17:89:3b:40:0b: 12:32:e4:d2:48:42:e3:88:b2:6a:48:53:87:d5:6b: 59:a6:74:68:a8:d5:03:3d:f0:fe:21:8e:76:28:c8: 48:17:33:e7:da:ed:b5:ac:d1:ea:78:a1:86:aa:b4: fc:c1:94:9b:98:cd:8c:9a:6f:d3:5a:75:c8:5d:40: c2:9e:4e:be:14:08:ed:5b:4e:21:e2:61:7b:a4:63: 77:e7:9d:d9:96:14:18:56:9b:be:1f:2b:16:0c:62: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:37:34:62:6F:24:9E:F7:88:3C:43:3E:48:47:AF:5A:AC:8F:D2 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:10:84:cf:90:d1:94:b8:28:f2:16:f3:a9:7b:bf:24:60:95: 8e:2d:2a:87:cc:15:80:49:65:10:19:58:a7:a2:6f:60:5a:1b: b5:d7:a3:fe:16:b5:16:8f:c5:ef:7e:72:33:8c:0e:a2:68:c1: ec:07:d2:8e:ef:92:7d:5e:a6:0b:18:d4:13:e6:0b:1c:93:45: 51:c0:cd:3b:e4:16:c1:63:8e:2d:84:95:20:f5:8a:87:5b:06: c6:48:49:04:56:de:37:6c:9b:96:1f:67:94:b8:f9:fc:04:31: 73:6a:96:cc:14:03:05:80:17:3d:c6:5c:c6:54:88:18:a9:10: a8:86:f6:be:8d:ad:90:81:78:79:e2:ba:bc:a9:1c:6e:95:4d: 16:84:9f:88:ba:90:7c:80:49:52:6d:af:76:ee:d7:0b:ec:ba: 3f:bc:6d:33:cb:45:d8:91:54:00:e1:7f:4c:4d:31:13:35:43: fd:11:ca:a0:40:3a:24:93:d3:a2:f0:a3:42:c3:ca:65:27:84: 7d:06:d2:32:86:3f:93:fe:5c:c5:1a:6b:cd:0b:20:12:03:46: 37:79:72:db:af:51:c5:f8:c3:9a:5d:2a:ea:df:03:60:1f:86: f0:5c:ec:ac:45:8f:39:d6:bd:b6:eb:26:6b:07:f0:70:f3:70: f7:8e:a1:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBHdNS8fbuVWN9zcr0X8j2s6E1HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA2MDQxMDM0MjlaFw0yNjA2MDUxMDQ4MjlaMDMxMTAvBgNV BAMTKEFEQ0UzNzM0NjI2RjI0OUVGNzg4M0M0MzNFNDg0N0FGNUFBQzhGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ifvMFtsWl7lxSxbnK2rotd1j Nc84ivZQK2ob6L65LCZKiHAqyocP/nPAIMYQevg+giTllMpFaVulp77rpDMDI2eE sPMPkKTYGoh4+yfWYc/Bn4tFUZ7iUilG4UkYAoSAUiYV5KqQIjHkwVBL4844kalH OYC9PIZ/DmSqjNF2LJgbm+jK2YMlLFkGaT4UaYUFtFCXOMCorrUdCFqHXyoXiTtA CxIy5NJIQuOIsmpIU4fVa1mmdGio1QM98P4hjnYoyEgXM+fa7bWs0ep4oYaqtPzB lJuYzYyab9NadchdQMKeTr4UCO1bTiHiYXukY3fnndmWFBhWm74fKxYMYqVNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrc43NGJvJJ73iDxDPkhHr1qsj9IwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhCEz5DRlLgo 8hbzqXu/JGCVji0qh8wVgEllEBlYp6JvYFobtdej/ha1Fo/F735yM4wOomjB7AfS ju+SfV6mCxjUE+YLHJNFUcDNO+QWwWOOLYSVIPWKh1sGxkhJBFbeN2yblh9nlLj5 /AQxc2qWzBQDBYAXPcZcxlSIGKkQqIb2vo2tkIF4eeK6vKkcbpVNFoSfiLqQfIBJ Um2vdu7XC+y6P7xtM8tF2JFUAOF/TE0xEzVD/RHKoEA6JJPTovCjQsPKZSeEfQbS MoY/k/5cxRprzQsgEgNGN3ly269RxfjDml0q6t8DYB+G8FzsrEWPOda9tusmawfw cPNw946h0g== -----END CERTIFICATE-----Generated at Thu Jun 4 13:06:03 2026 by rpki-client