$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: uDct2J3K4nIRgP6K0x+rjCRhvaEa6j6NUwGIB/f+72I= Subject key identifier: E9:38:5D:E2:F0:60:1B:45:ED:FD:EE:80:17:D4:3B:DD:5D:BC:90:84 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 7362B3E03621E0D157AF3FF48C94FD0CD9F07623 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 77 Signing time: Sat 18 Apr 2026 07:24:52 +0000 Manifest this update: Sat 18 Apr 2026 07:19:52 +0000 Manifest next update: Sun 19 Apr 2026 08:54:52 +0000 Files and hashes: 1: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 2: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: XiT4zJI4DjG4uyASyO2JXmougKv94A8MVzYtMEjtfVw=) 3: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:62:b3:e0:36:21:e0:d1:57:af:3f:f4:8c:94:fd:0c:d9:f0:76:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Apr 18 07:19:52 2026 GMT Not After : Apr 19 08:54:52 2026 GMT Subject: CN=E9385DE2F0601B45EDFDEE8017D43BDD5DBC9084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:e2:51:82:e4:4a:fb:3e:f0:8c:34:10:14: 58:2f:d9:3a:73:b6:f0:aa:4a:b8:e1:33:12:b9:a9: 42:c8:ee:d2:0f:ae:1a:5c:ae:fd:ff:93:1f:46:10: 92:a0:9a:b5:bc:ea:aa:15:b3:ed:29:fc:2a:73:34: f6:72:f8:74:53:b9:2c:f9:8c:67:77:1b:8f:c3:56: a6:d8:5b:60:75:3d:30:f9:e9:c2:bb:1d:38:9f:7a: 38:78:6e:e2:cd:a1:19:78:27:40:72:d5:08:30:9e: b7:7a:9a:18:c5:1e:77:52:9b:b8:96:73:69:9d:0b: 3b:21:02:e3:b8:c1:14:e4:2a:24:68:71:ed:b2:67: b4:63:09:c1:4b:af:d2:ba:96:ee:41:80:a9:6e:4d: fc:9d:04:33:12:b2:bd:c1:cb:e5:ed:cc:cb:52:57: ba:53:58:ff:db:28:83:2f:60:e2:f0:e5:14:2a:b0: 27:6d:a0:4f:2c:e2:55:95:08:b6:44:2a:26:4f:10: 28:7e:a9:a7:94:4a:5a:68:f9:8d:1e:82:75:50:d4: ed:70:66:ea:76:bf:97:3e:19:6c:83:9c:66:98:22: 40:29:82:bf:92:67:a4:8f:81:09:ae:b1:39:84:17: c4:f3:24:50:85:7b:71:a6:3e:b9:89:fc:77:e5:d3: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:5D:E2:F0:60:1B:45:ED:FD:EE:80:17:D4:3B:DD:5D:BC:90:84 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e8:b6:9b:2a:7b:46:09:b8:88:76:70:8a:d6:50:a5:56:90: 90:e5:c9:e9:c7:45:d4:c5:ad:d3:83:f0:ea:05:cb:31:63:8b: 72:d1:64:ce:04:53:a1:13:0a:ce:70:3d:5f:36:7f:33:12:e3: 26:f5:27:e9:2a:74:09:8c:56:e4:d6:e6:32:2c:3e:b0:f6:f0: 3d:7c:6c:28:d7:01:ce:b2:d9:8f:38:4f:0f:b3:ab:e2:60:1f: 87:46:63:14:76:8d:05:48:ab:55:05:a7:c0:f5:cd:3d:89:aa: 26:45:6d:a6:6e:60:9e:43:ad:eb:a0:0f:16:b1:02:6b:95:c9: 59:35:49:5b:ce:89:ee:98:16:20:c1:bb:28:5c:ed:a1:e0:73: 89:3d:e6:73:8a:be:ef:09:5e:30:96:08:71:14:37:96:3c:f3: 04:2c:23:18:70:52:47:65:e3:b4:3e:ba:cf:9b:4b:4c:7d:cb: 46:22:ad:b2:c3:f3:1b:d2:22:65:41:05:d2:d1:ab:e2:ec:c8: 16:96:cc:66:41:81:50:13:66:e5:ef:9c:80:c5:e7:d9:b0:bc: 74:2b:63:8a:c7:6b:90:70:32:5a:f3:72:a0:9e:3f:df:9a:6b: 65:7a:f9:c7:01:97:a9:1f:1e:ed:9c:6f:a3:7c:01:53:bc:24: ff:36:eb:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc2Kz4DYh4NFXrz/0jJT9DNnwdiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA0MTgwNzE5NTJaFw0yNjA0MTkwODU0NTJaMDMxMTAvBgNV BAMTKEU5Mzg1REUyRjA2MDFCNDVFREZERUU4MDE3RDQzQkRENURCQzkwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4OJRguRK+z7wjDQQFFgv2Tpz tvCqSrjhMxK5qULI7tIPrhpcrv3/kx9GEJKgmrW86qoVs+0p/CpzNPZy+HRTuSz5 jGd3G4/DVqbYW2B1PTD56cK7HTifejh4buLNoRl4J0By1Qgwnrd6mhjFHndSm7iW c2mdCzshAuO4wRTkKiRoce2yZ7RjCcFLr9K6lu5BgKluTfydBDMSsr3By+XtzMtS V7pTWP/bKIMvYOLw5RQqsCdtoE8s4lWVCLZEKiZPECh+qaeUSlpo+Y0egnVQ1O1w Zup2v5c+GWyDnGaYIkApgr+SZ6SPgQmusTmEF8TzJFCFe3GmPrmJ/Hfl00qLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6Thd4vBgG0Xt/e6AF9Q73V28kIQwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOi2myp7Rgm4 iHZwitZQpVaQkOXJ6cdF1MWt04Pw6gXLMWOLctFkzgRToRMKznA9XzZ/MxLjJvUn 6Sp0CYxW5NbmMiw+sPbwPXxsKNcBzrLZjzhPD7Or4mAfh0ZjFHaNBUirVQWnwPXN PYmqJkVtpm5gnkOt66APFrECa5XJWTVJW86J7pgWIMG7KFztoeBziT3mc4q+7wle MJYIcRQ3ljzzBCwjGHBSR2XjtD66z5tLTH3LRiKtssPzG9IiZUEF0tGr4uzIFpbM ZkGBUBNm5e+cgMXn2bC8dCtjisdrkHAyWvNyoJ4/35prZXr5xwGXqR8e7Zxvo3wB U7wk/zbrIQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:16:19 2026 by rpki-client