$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: AGUgW4EVNSwLJiaLOn/kclROpQ+RzoYCf0kbGwzHzg0= Subject key identifier: 3C:BA:04:3A:CB:99:FF:33:2C:AB:6A:B8:8F:EE:24:7B:41:65:98:D1 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 571CD4FF4405C65E663377EA5F8D1AF6CBFD31CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: 82 Signing time: Tue 14 Jul 2026 06:20:36 +0000 Manifest this update: Tue 14 Jul 2026 06:15:36 +0000 Manifest next update: Wed 15 Jul 2026 06:43:36 +0000 Files and hashes: 1: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: JCVMvzv5/NDZha0evOlOy0vjbeUS+opiysMjd2vqQxw=) 2: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 3: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) 4: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) 5: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1c:d4:ff:44:05:c6:5e:66:33:77:ea:5f:8d:1a:f6:cb:fd:31:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Jul 14 06:15:36 2026 GMT Not After : Jul 15 06:43:36 2026 GMT Subject: CN=3CBA043ACB99FF332CAB6AB88FEE247B416598D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:c6:e3:63:e2:71:0a:91:39:eb:b2:b2:26: d9:4a:52:ad:6f:17:3f:9e:33:ec:9b:a1:60:75:34: ea:82:8e:7c:1c:96:4f:30:a7:3a:cb:7c:74:66:b3: ca:50:78:9b:b7:7d:c3:e3:52:15:3f:cd:70:65:49: 86:3b:70:7f:c1:89:39:5b:7f:27:33:e1:cb:b7:68: 96:09:ae:f1:42:b2:74:a5:bf:8b:f2:79:21:df:4d: ce:8a:6e:ce:06:78:00:70:9e:c3:23:b0:48:24:61: b3:26:9c:18:19:d6:71:c1:f0:a6:1e:8e:3d:25:89: 7f:e3:06:60:3a:cb:d8:fb:f9:93:1a:32:d1:d3:35: 68:8b:35:cb:b5:16:0d:f1:86:d2:ea:dd:5b:0b:3b: 99:de:f3:f9:6f:2c:eb:eb:3c:3f:af:75:80:97:67: e9:8c:ec:64:77:0f:22:ea:33:29:85:ec:a0:85:a8: 65:a3:2a:2d:96:ff:00:92:73:a1:43:00:44:3b:d9: 97:20:bb:48:c3:b7:76:e4:cc:97:bb:a1:ab:cc:7c: 2e:c6:f4:e9:82:ba:c9:74:f9:60:b9:81:4f:21:04: 68:f1:c7:a5:ce:36:17:85:67:e6:13:89:9a:30:30: 11:63:8b:0e:26:43:7d:c4:6b:ec:1c:a0:24:2a:55: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BA:04:3A:CB:99:FF:33:2C:AB:6A:B8:8F:EE:24:7B:41:65:98:D1 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9c:50:96:cc:7f:93:a9:bc:bf:cb:2c:ff:22:d9:78:b8:06: 5a:69:90:d5:a5:aa:26:db:95:81:a9:9f:13:48:58:6b:5f:81: 3c:77:9d:e6:56:29:ad:95:4b:43:8e:8a:80:bf:9b:b2:86:fc: 0a:b3:a5:d3:9f:18:04:cc:db:98:9e:88:59:73:c9:b3:f2:d6: 4a:94:99:4b:40:ae:af:e8:b6:0c:0d:ff:d4:ec:23:44:50:15: 13:f7:b7:0f:cd:c1:7a:74:c4:d2:a9:d2:d8:bb:cb:b2:2c:6d: fb:42:91:59:f7:89:e2:42:7e:21:fc:e9:8d:df:fa:5e:db:da: d9:76:87:90:4d:8b:bd:ef:0e:14:64:c2:b3:69:3b:63:05:f8: a0:32:82:a0:1b:a1:4b:8c:ce:b1:4e:b1:d2:49:7f:d3:77:cc: 11:71:ac:bd:7f:ed:bd:c6:c8:00:f9:0b:9c:92:f7:53:e8:6d: 1a:1b:bd:1f:0b:38:8c:fa:50:86:e3:5d:1f:e3:f1:2b:1d:19: 4c:8b:4f:a9:9c:0d:3c:87:ac:09:f9:f6:c0:1f:57:fb:ea:d7: 6e:f9:4a:a6:f3:1a:6e:44:40:79:fe:2a:23:38:f2:0e:37:5d: b6:af:a8:4d:c9:05:80:51:e5:9d:23:c1:e2:a8:80:95:b8:44: b3:c5:e6:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVxzU/0QFxl5mM3fqX40a9sv9McwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA3MTQwNjE1MzZaFw0yNjA3MTUwNjQzMzZaMDMxMTAvBgNV BAMTKDNDQkEwNDNBQ0I5OUZGMzMyQ0FCNkFCODhGRUUyNDdCNDE2NTk4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp8bjY+JxCpE567KyJtlKUq1v Fz+eM+yboWB1NOqCjnwclk8wpzrLfHRms8pQeJu3fcPjUhU/zXBlSYY7cH/BiTlb fycz4cu3aJYJrvFCsnSlv4vyeSHfTc6Kbs4GeABwnsMjsEgkYbMmnBgZ1nHB8KYe jj0liX/jBmA6y9j7+ZMaMtHTNWiLNcu1Fg3xhtLq3VsLO5ne8/lvLOvrPD+vdYCX Z+mM7GR3DyLqMymF7KCFqGWjKi2W/wCSc6FDAEQ72Zcgu0jDt3bkzJe7oavMfC7G 9OmCusl0+WC5gU8hBGjxx6XONheFZ+YTiZowMBFjiw4mQ33Ea+wcoCQqVQIpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPLoEOsuZ/zMsq2q4j+4ke0FlmNEwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZxQlsx/k6m8 v8ss/yLZeLgGWmmQ1aWqJtuVgamfE0hYa1+BPHed5lYprZVLQ46KgL+bsob8CrOl 058YBMzbmJ6IWXPJs/LWSpSZS0Cur+i2DA3/1OwjRFAVE/e3D83BenTE0qnS2LvL sixt+0KRWfeJ4kJ+Ifzpjd/6Xtva2XaHkE2Lve8OFGTCs2k7YwX4oDKCoBuhS4zO sU6x0kl/03fMEXGsvX/tvcbIAPkLnJL3U+htGhu9Hws4jPpQhuNdH+PxKx0ZTItP qZwNPIesCfn2wB9X++rXbvlKpvMabkRAef4qIzjyDjddtq+oTckFgFHlnSPB4qiA lbhEs8Xm6g== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:50 2026 by rpki-client