$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: QsOfN1Bx38In/3eYk66+DLzaNiWpPeN/HlBbZ9iRSdc= Subject key identifier: EB:C4:D5:A6:43:71:01:A9:51:2C:71:14:DB:C5:28:A9:12:78:8F:84 Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 0576EDC5C85AFD4A7FC25C9D443750672125D164 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 3B Signing time: Wed 04 Mar 2026 01:23:20 +0000 Manifest this update: Wed 04 Mar 2026 01:18:20 +0000 Manifest next update: Thu 05 Mar 2026 01:28:20 +0000 Files and hashes: 1: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 2: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: F1ufUUbOkj9oHv84kAGn+BUe8nZknp3ZVb3kW7XcNvM=) 3: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:76:ed:c5:c8:5a:fd:4a:7f:c2:5c:9d:44:37:50:67:21:25:d1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Mar 4 01:18:20 2026 GMT Not After : Mar 5 01:28:20 2026 GMT Subject: CN=EBC4D5A6437101A9512C7114DBC528A912788F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:10:30:d9:cf:3b:88:1d:2e:bc:99:7f:a7: b3:01:d2:29:6d:e9:b5:e1:5b:c0:fe:76:ee:4c:54: 82:ab:d0:b9:73:fa:91:b4:82:64:97:b4:32:14:41: b5:6b:85:5b:f7:bb:b7:03:49:47:81:8c:e8:92:47: 79:5e:40:f2:e2:50:a2:f1:9b:ed:49:98:fa:e8:91: 42:e2:82:91:12:12:f2:6c:04:8a:5e:2c:5c:32:85: a7:02:2a:38:8e:ad:d6:92:f8:8b:bd:bc:4e:cd:55: 67:1d:ed:44:77:f1:7c:11:9a:6b:f2:f3:c9:16:0b: 1e:46:25:c3:83:c4:b0:3d:24:fc:a7:9b:e9:5c:db: 1e:b5:f8:61:e4:6f:04:58:c4:5e:77:38:71:27:b4: c3:bb:aa:27:0a:3b:99:45:6a:c3:b0:82:5a:8a:d4: 5b:46:2b:56:0d:80:c5:26:85:d8:b1:e5:80:79:2e: 0a:bc:55:b5:5a:7d:45:3d:03:b6:a3:da:03:27:99: 72:c9:c1:53:8e:2b:d8:2c:02:11:71:2c:fb:e7:bc: 34:2f:45:9c:07:16:3e:e8:37:31:01:fe:a6:60:55: a6:a6:8b:f0:17:a1:15:d5:6c:69:9a:87:2b:1a:de: c0:b8:d1:9c:23:fe:7d:1f:2a:d8:9c:7e:a2:e1:02: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C4:D5:A6:43:71:01:A9:51:2C:71:14:DB:C5:28:A9:12:78:8F:84 X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:20:dc:f9:17:5c:aa:c2:d2:14:e1:68:bf:3f:ae:bb:ff:8e: 39:e0:e9:a1:cc:e0:1c:d2:fa:3d:18:bc:aa:f4:61:4c:0e:11: 77:bf:7f:d8:93:25:17:0d:46:c8:ae:ef:78:a3:54:5d:81:1b: ff:5b:28:6e:51:48:47:08:a3:61:50:28:40:03:a2:ba:a5:74: 9f:8c:97:f1:42:60:26:b3:bb:06:32:ea:59:b0:99:94:a8:e3: 4d:28:f2:07:09:60:44:f9:a0:6b:ab:1b:89:b6:de:3e:84:d5: df:1b:10:44:da:cb:43:92:ca:64:0c:f3:ea:af:6c:93:4b:b4: bc:6d:e5:4f:25:0a:8a:1d:ae:ca:73:ff:94:b8:f4:bf:d2:6c: f0:d2:79:23:a5:69:a6:6f:04:bd:7f:49:ae:51:c2:5a:e2:d1: 93:e7:ad:9c:73:79:fb:51:ba:cd:61:0c:2a:4e:fa:d0:d0:58: cc:24:46:fa:d1:12:6a:3c:38:8f:a6:88:d7:82:24:42:89:aa: 52:6f:c5:89:92:40:bb:83:69:f0:20:f7:06:16:7c:c2:ee:38: 2e:0e:5f:33:bf:9b:43:0a:3a:4d:51:0b:83:8b:3a:c5:3c:08: 9f:f0:f1:07:d1:3a:24:3b:6a:6d:0e:f2:78:c8:4d:ec:5b:a5: 23:b2:5e:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBXbtxcha/Up/wlydRDdQZyEl0WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjAzMDQwMTE4MjBaFw0yNjAzMDUwMTI4MjBaMDMxMTAvBgNV BAMTKEVCQzRENUE2NDM3MTAxQTk1MTJDNzExNERCQzUyOEE5MTI3ODhGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnBAw2c87iB0uvJl/p7MB0ilt 6bXhW8D+du5MVIKr0Llz+pG0gmSXtDIUQbVrhVv3u7cDSUeBjOiSR3leQPLiUKLx m+1JmProkULigpESEvJsBIpeLFwyhacCKjiOrdaS+Iu9vE7NVWcd7UR38XwRmmvy 88kWCx5GJcODxLA9JPynm+lc2x61+GHkbwRYxF53OHEntMO7qicKO5lFasOwglqK 1FtGK1YNgMUmhdix5YB5Lgq8VbVafUU9A7aj2gMnmXLJwVOOK9gsAhFxLPvnvDQv RZwHFj7oNzEB/qZgVaami/AXoRXVbGmahysa3sC40Zwj/n0fKticfqLhAruvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU68TVpkNxAalRLHEU28UoqRJ4j4QwHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyDc+RdcqsLS FOFovz+uu/+OOeDpoczgHNL6PRi8qvRhTA4Rd79/2JMlFw1GyK7veKNUXYEb/1so blFIRwijYVAoQAOiuqV0n4yX8UJgJrO7BjLqWbCZlKjjTSjyBwlgRPmga6sbibbe PoTV3xsQRNrLQ5LKZAzz6q9sk0u0vG3lTyUKih2uynP/lLj0v9Js8NJ5I6Vppm8E vX9JrlHCWuLRk+etnHN5+1G6zWEMKk760NBYzCRG+tESajw4j6aI14IkQomqUm/F iZJAu4Np8CD3BhZ8wu44Lg5fM7+bQwo6TVELg4s6xTwIn/DxB9E6JDtqbQ7yeMhN 7FulI7JeFA== -----END CERTIFICATE-----Generated at Wed Mar 4 13:08:34 2026 by rpki-client