$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: +Erkc8FkVDtrEXA3pE+CoM3hGTv//6Q//IveGFe5lnc= Subject key identifier: 1E:B3:FA:9E:4F:C7:A1:89:24:AF:A7:3B:FF:E3:16:79:69:40:7B:95 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 02166774819F00D04977DEC79DA11FD38B55441F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: D4 Signing time: Tue 13 Oct 2026 09:57:55 +0000 Manifest this update: Tue 13 Oct 2026 09:52:55 +0000 Manifest next update: Fri 16 Oct 2026 11:28:55 +0000 Files and hashes: 1: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) 2: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: tolL2Uq5dYCE8NKAQImyUEwQdpXyXUR2oRxd41EW/FE=) 3: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) 4: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 5: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 11:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:16:67:74:81:9f:00:d0:49:77:de:c7:9d:a1:1f:d3:8b:55:44:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Oct 13 09:52:55 2026 GMT Not After : Oct 16 11:28:55 2026 GMT Subject: CN=1EB3FA9E4FC7A18924AFA73BFFE3167969407B95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:b5:1e:53:89:8f:d8:b3:72:9d:0f:b0:40: e0:a0:8f:60:d1:f2:e9:98:d5:e2:90:28:88:e7:20: 22:84:1c:89:fa:3c:3f:1d:7a:14:d7:48:83:e8:57: 5c:19:46:fd:0d:86:2f:3a:5d:e6:7e:24:bf:06:9b: 4c:70:6e:58:c3:0e:d1:45:15:ec:5e:9f:55:3f:83: 82:02:53:0b:f1:7b:8f:e1:6c:3b:e1:97:27:0b:33: 18:21:6b:9e:5d:2f:4b:4e:a1:dc:98:11:33:19:8e: 09:7f:b5:a5:f3:da:e1:40:f5:62:9c:29:f8:45:b7: cb:19:6f:a1:e6:e7:60:a4:ec:9e:bb:1e:bd:06:7b: 03:c4:4c:b7:ad:3e:5a:35:60:ed:0e:cf:cd:48:e9: c9:63:bf:46:c9:f5:e7:79:ab:32:82:c3:d7:98:cf: 17:66:21:3a:12:ea:0a:cd:4c:8c:39:b2:86:d9:5e: 06:38:b1:49:56:1a:e8:42:6b:f1:41:c0:7a:02:ca: 21:0b:05:39:b6:19:f3:1a:0e:e5:c9:fc:18:e4:7c: b2:c4:ec:7c:1f:8b:5d:f8:22:6f:6f:33:5c:59:7a: b7:26:8b:d4:24:03:8d:51:40:60:99:31:8b:a2:89: 7f:84:cb:99:86:f7:04:4f:06:04:2a:1f:e3:71:16: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B3:FA:9E:4F:C7:A1:89:24:AF:A7:3B:FF:E3:16:79:69:40:7B:95 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:73:17:8c:ae:ea:67:d5:ba:5f:ad:87:f2:e8:9f:39:4f:1a: f5:96:67:d1:0b:0f:f0:9d:fb:bd:75:af:0d:be:cd:b7:2b:b5: c4:43:5e:2c:53:55:16:88:68:3a:4a:52:be:70:35:21:97:8e: 39:90:87:17:cc:cd:56:97:78:f9:51:f7:c8:cf:dd:cf:f5:3d: e8:3e:00:b1:b7:59:54:95:1e:3d:aa:a8:85:06:06:ff:c0:26: 8e:06:f5:02:8b:b1:05:72:18:c2:b9:f2:2e:58:b1:46:69:a1: 44:20:40:32:ad:4e:15:02:4c:ce:bd:66:ad:65:20:41:57:23: de:66:27:9c:5c:52:77:ee:a8:ef:b2:1f:43:11:58:ad:47:8e: 23:8b:96:5a:6f:f9:24:39:47:c6:bf:79:9e:48:e0:4a:c5:cb: 85:b1:60:fd:2b:c8:fa:2a:fc:11:28:ae:7b:46:2a:93:dd:3d: ea:18:00:2d:19:7c:ff:54:c3:5c:ad:9f:55:3f:5f:1e:72:a5: 26:fa:e4:cc:17:32:17:08:eb:75:91:e5:9a:e8:9c:0c:d2:14: c2:ed:15:cc:21:c6:f3:2f:3b:0d:0e:f7:92:5a:ca:40:66:82: 8e:83:f3:15:1c:38:ea:64:9b:94:78:69:87:49:c3:c7:48:4f: fc:9b:8e:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAhZndIGfANBJd97HnaEf04tVRB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjEwMTMwOTUyNTVaFw0yNjEwMTYxMTI4NTVaMDMxMTAvBgNV BAMTKDFFQjNGQTlFNEZDN0ExODkyNEFGQTczQkZGRTMxNjc5Njk0MDdCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtbUeU4mP2LNynQ+wQOCgj2DR 8umY1eKQKIjnICKEHIn6PD8dehTXSIPoV1wZRv0Nhi86XeZ+JL8Gm0xwbljDDtFF Fexen1U/g4ICUwvxe4/hbDvhlycLMxgha55dL0tOodyYETMZjgl/taXz2uFA9WKc KfhFt8sZb6Hm52Ck7J67Hr0GewPETLetPlo1YO0Oz81I6cljv0bJ9ed5qzKCw9eY zxdmIToS6grNTIw5sobZXgY4sUlWGuhCa/FBwHoCyiELBTm2GfMaDuXJ/BjkfLLE 7Hwfi134Im9vM1xZercmi9QkA41RQGCZMYuiiX+Ey5mG9wRPBgQqH+NxFoUpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHrP6nk/HoYkkr6c7/+MWeWlAe5UwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnMXjK7qZ9W6 X62H8uifOU8a9ZZn0QsP8J37vXWvDb7Ntyu1xENeLFNVFohoOkpSvnA1IZeOOZCH F8zNVpd4+VH3yM/dz/U96D4AsbdZVJUePaqohQYG/8Amjgb1AouxBXIYwrnyLlix RmmhRCBAMq1OFQJMzr1mrWUgQVcj3mYnnFxSd+6o77IfQxFYrUeOI4uWWm/5JDlH xr95nkjgSsXLhbFg/SvI+ir8ESiue0Yqk9096hgALRl8/1TDXK2fVT9fHnKlJvrk zBcyFwjrdZHlmuicDNIUwu0VzCHG8y87DQ73klrKQGaCjoPzFRw46mSblHhph0nD x0hP/JuOQA== -----END CERTIFICATE-----Generated at Wed Oct 14 10:20:24 2026 by rpki-client