$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: kkcGdfOxTjegwme7VRiMGijEuJCpx4xWeaHe2D3Et9w= Subject key identifier: 2D:0F:2D:17:AE:9C:0F:A3:E5:48:6A:61:69:E5:00:33:89:FD:FF:30 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 7C93CD65C71C69A68A1A0BE22BCB4FDC0566AB10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: 45 Signing time: Fri 29 May 2026 19:38:17 +0000 Manifest this update: Fri 29 May 2026 19:33:17 +0000 Manifest next update: Sat 30 May 2026 21:17:17 +0000 Files and hashes: 1: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: FOtLGC7cXjr6Nef/YCURN3QZsxXCYOGJexqeK1xTxas=) 2: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=) 3: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 4: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) 5: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:93:cd:65:c7:1c:69:a6:8a:1a:0b:e2:2b:cb:4f:dc:05:66:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: May 29 19:33:17 2026 GMT Not After : May 30 21:17:17 2026 GMT Subject: CN=2D0F2D17AE9C0FA3E5486A6169E5003389FDFF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:e7:0a:32:6a:3f:1b:5d:ca:85:54:91:08: 62:7c:50:43:96:55:d5:3b:70:a4:89:bb:cd:c3:76: 99:97:f0:c6:3c:6a:40:76:96:67:b1:ef:57:85:c5: 00:b3:5d:7a:e3:dc:59:bb:68:f8:8b:33:cd:8a:a2: 55:0d:06:fb:a6:81:66:57:40:48:5b:b9:bb:19:e2: 22:3a:ac:78:44:08:1d:15:e4:ff:ad:14:ce:af:a5: a5:db:01:69:53:d6:73:ca:ea:be:82:e1:f7:1a:c3: ac:e5:2e:ba:2a:1b:03:c4:26:0a:32:37:2f:20:15: e0:9e:6c:f2:3f:07:98:c7:f3:61:4e:56:12:95:a9: b6:01:da:97:49:6c:18:28:6e:f5:5b:13:ee:55:aa: 7a:d8:a7:40:c7:9d:db:7d:e8:3c:dd:d3:a2:89:3d: 87:3d:f4:85:5b:06:82:52:e0:a1:5a:47:2a:fe:02: 2a:5a:4a:dc:6c:1e:9e:6f:d5:b5:f5:ed:c1:c3:55: 5c:fd:54:8b:a0:81:4c:88:c3:54:bb:80:f1:97:9e: 59:f7:65:5d:1e:83:77:0e:7e:4b:bb:38:15:9d:3e: 39:24:9a:9a:42:4b:87:9e:4b:05:92:71:dd:eb:a1: 31:37:73:75:5a:02:c9:dd:5d:fe:3a:32:0f:62:dc: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0F:2D:17:AE:9C:0F:A3:E5:48:6A:61:69:E5:00:33:89:FD:FF:30 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:14:81:c2:db:2b:68:89:de:e3:ba:04:87:10:60:5f:8a: 69:18:8e:7e:cf:cf:29:1f:0c:46:ae:f6:5b:1d:24:f8:e0:8f: 9b:d6:6e:de:eb:ec:63:37:7d:ab:82:fc:69:f1:21:b0:da:77: 43:60:9a:b1:b7:39:b0:73:eb:9e:87:43:7e:e8:ad:f1:e5:50: c9:0e:ae:76:26:c3:13:65:39:c9:72:c4:5a:58:a9:9f:3a:4f: 3f:8b:d2:e1:79:a2:2e:82:fd:6d:0a:59:1e:ed:21:3f:da:7c: af:fc:f1:69:39:74:16:c1:e8:9f:3f:8a:7a:0c:27:d8:bf:c6: 19:97:3a:26:cb:ca:9a:bf:43:bf:ca:02:5d:32:a8:e7:28:a4: bc:05:aa:32:06:5f:36:e8:5b:fa:6d:7d:b3:4d:24:a9:15:3b: e7:7e:11:76:fb:2d:7f:5a:ae:1b:8c:c3:0e:d2:d1:9d:fd:a2: e7:e3:0c:d4:f2:a5:fb:9a:32:f7:b3:d9:71:2b:b7:ef:9a:0a: a0:1e:21:cc:8b:77:37:80:65:77:5e:f5:f2:f8:b6:8d:ec:0b: 60:7e:22:88:c8:94:9f:df:46:1d:6f:da:53:6a:9f:d8:7c:f2: 8c:b9:8a:bb:99:0d:69:31:4d:92:88:3c:be:5e:aa:b0:71:da: d8:0b:50:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfJPNZcccaaaKGgviK8tP3AVmqxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA1MjkxOTMzMTdaFw0yNjA1MzAyMTE3MTdaMDMxMTAvBgNV BAMTKDJEMEYyRDE3QUU5QzBGQTNFNTQ4NkE2MTY5RTUwMDMzODlGREZGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWhucKMmo/G13KhVSRCGJ8UEOW VdU7cKSJu83DdpmX8MY8akB2lmex71eFxQCzXXrj3Fm7aPiLM82KolUNBvumgWZX QEhbubsZ4iI6rHhECB0V5P+tFM6vpaXbAWlT1nPK6r6C4fcaw6zlLroqGwPEJgoy Ny8gFeCebPI/B5jH82FOVhKVqbYB2pdJbBgobvVbE+5VqnrYp0DHndt96Dzd06KJ PYc99IVbBoJS4KFaRyr+AipaStxsHp5v1bX17cHDVVz9VIuggUyIw1S7gPGXnln3 ZV0eg3cOfku7OBWdPjkkmppCS4eeSwWScd3roTE3c3VaAsndXf46Mg9i3P79AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULQ8tF66cD6PlSGphaeUAM4n9/zAwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb0UgcLbK2iJ 3uO6BIcQYF+KaRiOfs/PKR8MRq72Wx0k+OCPm9Zu3uvsYzd9q4L8afEhsNp3Q2Ca sbc5sHPrnodDfuit8eVQyQ6udibDE2U5yXLEWlipnzpPP4vS4XmiLoL9bQpZHu0h P9p8r/zxaTl0FsHonz+Kegwn2L/GGZc6JsvKmr9Dv8oCXTKo5yikvAWqMgZfNuhb +m19s00kqRU7534Rdvstf1quG4zDDtLRnf2i5+MM1PKl+5oy97PZcSu375oKoB4h zIt3N4Bld1718vi2jewLYH4iiMiUn99GHW/aU2qf2HzyjLmKu5kNaTFNkog8vl6q sHHa2AtQag== -----END CERTIFICATE-----Generated at Fri May 29 22:05:30 2026 by rpki-client