$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: d/3Y16StRgWpnoSN/GQElJuy4xco5gVyX+2gYowNhQY= Subject key identifier: 94:C2:94:B3:99:52:BA:BC:26:0B:E0:70:1B:21:4B:58:09:59:A9:84 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 5EB2D9DF807CC4C9197E88113C906F820FA2B61B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: BF Signing time: Fri 28 Aug 2026 06:48:20 +0000 Manifest this update: Fri 28 Aug 2026 06:43:20 +0000 Manifest next update: Mon 31 Aug 2026 13:25:20 +0000 Files and hashes: 1: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=) 2: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) 3: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 4: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: SmXooxnrT1nPT3vmcWifxnNpvcHbpsROriTf9762m1A=) 5: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b2:d9:df:80:7c:c4:c9:19:7e:88:11:3c:90:6f:82:0f:a2:b6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Aug 28 06:43:20 2026 GMT Not After : Aug 31 13:25:20 2026 GMT Subject: CN=94C294B39952BABC260BE0701B214B580959A984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:bc:ce:5e:71:35:98:8d:7e:05:87:b4:0a:08: a8:0d:b7:98:24:24:b3:8d:2b:55:2a:52:d6:81:78: 0f:ea:5b:85:8e:4e:dc:99:92:97:65:a0:ae:fe:34: a1:2c:06:d4:09:99:79:d6:e9:70:4c:e6:ce:16:be: 12:ff:67:af:fa:e7:a8:44:0b:33:0f:b3:2b:56:46: 5f:ce:3a:ea:43:b0:09:aa:92:96:53:b0:72:bb:03: 29:8f:ed:33:55:7a:22:da:4a:19:89:87:31:f6:25: 88:4d:f0:fe:17:e7:8f:39:55:66:f7:03:56:2a:77: c3:61:d4:b4:14:c0:af:d0:22:1d:0c:c1:b6:70:43: da:37:29:64:3d:5b:90:70:61:df:6f:a6:a2:58:68: d8:03:f3:8a:2d:00:6a:c1:a1:fc:d8:0e:02:e7:6b: fe:55:4d:01:f1:34:9f:de:ee:8b:e7:15:d1:cb:6c: b9:dd:9a:e5:ac:eb:20:4d:25:78:4c:02:72:3e:4c: 44:d8:5b:74:18:1b:51:43:56:09:d1:aa:82:b9:75: 96:bf:92:65:f8:aa:7c:03:30:47:c8:47:f0:e1:07: 9f:74:4c:c1:79:e2:be:b1:f1:5f:76:50:22:88:fe: e9:3d:f3:0f:42:0b:54:5b:71:21:09:a0:d3:00:de: 53:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C2:94:B3:99:52:BA:BC:26:0B:E0:70:1B:21:4B:58:09:59:A9:84 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:56:7c:36:9d:5a:a6:56:4e:cb:68:10:60:3b:a0:99:25:c0: 7f:f4:1d:cf:8f:65:78:b9:9f:50:86:85:16:30:87:a3:51:a9: 29:92:1a:aa:79:e5:2e:b6:0a:a2:4a:36:ed:07:5e:4f:87:b9: 0a:90:e3:69:9b:1b:a8:a8:29:59:82:4e:ee:87:66:ca:10:c0: 3a:a3:ac:18:42:c0:e1:74:79:4d:b1:ff:39:d7:68:ec:40:51: bb:77:27:4e:7c:85:09:6b:1c:64:28:d6:51:bf:0b:30:0b:b7: 62:dd:dc:68:b3:ed:86:5a:82:04:b5:d2:4b:ff:78:c9:59:a9: fa:3c:8c:84:17:a4:25:97:f9:59:9a:41:ee:97:bd:32:85:ec: ae:f2:af:e6:f3:a3:4c:ea:16:ef:0d:0f:40:5a:41:dd:a1:a8: 15:01:d1:f6:13:f3:01:67:e1:a3:af:04:14:5f:43:8e:eb:94: c1:00:5e:75:15:de:69:ab:e4:ed:1d:49:ba:95:1a:1a:03:09: f8:60:44:3b:23:fa:65:85:c4:54:fe:50:dd:a3:e1:bd:99:05: 1b:35:48:81:59:4c:2a:72:87:30:0e:c1:f4:18:76:1e:98:7c: f8:c4:4f:c2:ac:a3:75:0c:07:80:40:9c:e1:1d:a7:9c:e1:67: a1:cf:d9:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXrLZ34B8xMkZfogRPJBvgg+ithswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA4MjgwNjQzMjBaFw0yNjA4MzExMzI1MjBaMDMxMTAvBgNV BAMTKDk0QzI5NEIzOTk1MkJBQkMyNjBCRTA3MDFCMjE0QjU4MDk1OUE5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1vM5ecTWYjX4Fh7QKCKgNt5gk JLONK1UqUtaBeA/qW4WOTtyZkpdloK7+NKEsBtQJmXnW6XBM5s4WvhL/Z6/656hE CzMPsytWRl/OOupDsAmqkpZTsHK7AymP7TNVeiLaShmJhzH2JYhN8P4X5485VWb3 A1Yqd8Nh1LQUwK/QIh0MwbZwQ9o3KWQ9W5BwYd9vpqJYaNgD84otAGrBofzYDgLn a/5VTQHxNJ/e7ovnFdHLbLndmuWs6yBNJXhMAnI+TETYW3QYG1FDVgnRqoK5dZa/ kmX4qnwDMEfIR/DhB590TMF54r6x8V92UCKI/uk98w9CC1RbcSEJoNMA3lNtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlMKUs5lSurwmC+BwGyFLWAlZqYQwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVZ8Np1aplZO y2gQYDugmSXAf/Qdz49leLmfUIaFFjCHo1GpKZIaqnnlLrYKoko27QdeT4e5CpDj aZsbqKgpWYJO7odmyhDAOqOsGELA4XR5TbH/Oddo7EBRu3cnTnyFCWscZCjWUb8L MAu3Yt3caLPthlqCBLXSS/94yVmp+jyMhBekJZf5WZpB7pe9MoXsrvKv5vOjTOoW 7w0PQFpB3aGoFQHR9hPzAWfho68EFF9DjuuUwQBedRXeaavk7R1JupUaGgMJ+GBE OyP6ZYXEVP5Q3aPhvZkFGzVIgVlMKnKHMA7B9Bh2Hph8+MRPwqyjdQwHgECc4R2n nOFnoc/ZXw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:54 2026 by rpki-client