$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft File: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json) Hash identifier: sdzzmjIThRNAGpx0TFhNxAvJc4VoXZfDjqTdUKuie+0= Subject key identifier: 0B:C6:D8:A7:5D:80:37:2D:18:72:D3:8D:D9:C9:AF:B5:78:BA:74:41 Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 7897EE37AE64D764D286B2916E6D7B04D31A767C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 15:38:17 +0000 Manifest this update: Mon 02 Mar 2026 15:33:17 +0000 Manifest next update: Tue 03 Mar 2026 19:01:17 +0000 Files and hashes: 1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: 2LGIzaAUWLyp7R+vML/DDdv8SoepIsvyLVdKRdvowdM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:97:ee:37:ae:64:d7:64:d2:86:b2:91:6e:6d:7b:04:d3:1a:76:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: Mar 2 15:33:17 2026 GMT Not After : Mar 3 19:01:17 2026 GMT Subject: CN=0BC6D8A75D80372D1872D38DD9C9AFB578BA7441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:99:24:89:83:0c:a6:c9:9d:67:98:14:94: b8:b5:58:c6:54:0b:73:d7:c6:b6:65:ba:f7:6f:fa: 74:45:e8:6b:1d:4a:90:31:da:c7:a6:d5:53:2d:1c: a1:78:e0:46:90:e6:03:94:e1:c9:e5:c9:80:9a:a4: f2:35:0c:7f:f0:91:d8:07:e9:db:b4:da:f5:a7:86: 79:e7:2c:39:2b:38:fd:dc:7f:d8:b2:bf:df:b4:d5: fc:c6:0f:1a:32:77:b7:37:66:26:36:3b:52:0a:61: 04:e8:31:79:64:61:1e:16:44:8b:67:5a:77:19:16: 54:f0:ef:bd:51:ac:fd:c8:96:53:48:ea:b0:6c:98: 51:53:10:fc:45:92:ed:ec:15:54:fc:6d:16:36:fa: b3:be:fc:20:15:b3:4f:91:89:73:2f:1f:3f:b3:ec: 97:e8:b2:c6:dc:b1:12:88:56:1c:55:93:71:b1:4b: 65:3e:1d:9c:4b:35:4a:3b:9d:73:de:27:b9:67:92: 38:63:bd:b8:4b:97:18:83:85:49:04:6b:a5:78:10: a3:35:ea:9e:7b:68:0c:a3:97:07:8f:44:9e:2f:64: 29:a9:43:2b:17:3b:bb:34:2a:b8:e4:66:17:54:db: af:89:2d:ff:ad:4d:d8:73:3e:bc:f4:6d:1e:a5:1f: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C6:D8:A7:5D:80:37:2D:18:72:D3:8D:D9:C9:AF:B5:78:BA:74:41 X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:85:a6:5a:3f:23:73:bb:e6:f0:b0:39:de:36:ab:cb:b5:e6: 1f:e5:8d:ef:6f:08:a3:76:2f:d0:a6:4a:47:e3:a4:0e:0e:cf: 3a:3c:fd:0d:ba:cb:0d:d0:9a:01:f0:64:f8:90:f9:83:6c:4b: 52:c3:ce:87:66:e7:1a:49:65:62:86:5b:56:40:1f:bb:63:48: 40:68:7c:2c:a1:d1:88:07:83:20:1b:21:7c:a3:b3:40:89:c0: a2:a1:94:33:05:32:e4:3a:91:ff:52:25:49:cc:6d:05:57:9a: 7d:81:ff:a8:86:a5:8f:cd:d4:c8:ff:42:b3:3b:60:85:d2:df: 7f:de:90:55:3a:96:4d:1d:28:05:92:9b:e1:44:c0:95:44:7b: 42:5d:47:a9:9f:2c:b0:01:0e:86:55:62:2d:5a:b9:eb:be:ca: 82:f1:26:11:b6:10:63:90:13:fe:32:21:73:63:95:4b:a7:bb: 1b:cd:b5:8d:c7:cb:5c:52:f7:6c:36:88:f2:47:a9:ff:5b:dd: 3b:9b:13:07:6d:49:02:e8:05:60:a0:2e:5c:04:b4:3a:1d:43: 6d:65:fa:c1:b8:79:21:93:05:72:a3:8c:a9:aa:43:4d:c7:5c: 24:7e:66:49:a2:c6:cc:23:b3:04:40:f4:06:3b:93:11:e3:e1: 06:44:ad:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeJfuN65k12TShrKRbm17BNMadnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjAzMDIxNTMzMTdaFw0yNjAzMDMxOTAxMTdaMDMxMTAvBgNV BAMTKDBCQzZEOEE3NUQ4MDM3MkQxODcyRDM4REQ5QzlBRkI1NzhCQTc0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpJkkiYMMpsmdZ5gUlLi1WMZU C3PXxrZluvdv+nRF6GsdSpAx2sem1VMtHKF44EaQ5gOU4cnlyYCapPI1DH/wkdgH 6du02vWnhnnnLDkrOP3cf9iyv9+01fzGDxoyd7c3ZiY2O1IKYQToMXlkYR4WRItn WncZFlTw771RrP3IllNI6rBsmFFTEPxFku3sFVT8bRY2+rO+/CAVs0+RiXMvHz+z 7JfossbcsRKIVhxVk3GxS2U+HZxLNUo7nXPeJ7lnkjhjvbhLlxiDhUkEa6V4EKM1 6p57aAyjlwePRJ4vZCmpQysXO7s0KrjkZhdU26+JLf+tTdhzPrz0bR6lH+ITAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC8bYp12ANy0YctON2cmvtXi6dEEwHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIWmWj8jc7vm 8LA53jary7XmH+WN728Io3Yv0KZKR+OkDg7POjz9DbrLDdCaAfBk+JD5g2xLUsPO h2bnGkllYoZbVkAfu2NIQGh8LKHRiAeDIBshfKOzQInAoqGUMwUy5DqR/1IlScxt BVeafYH/qIalj83UyP9CsztghdLff96QVTqWTR0oBZKb4UTAlUR7Ql1HqZ8ssAEO hlViLVq5677KgvEmEbYQY5AT/jIhc2OVS6e7G821jcfLXFL3bDaI8kep/1vdO5sT B21JAugFYKAuXAS0Oh1DbWX6wbh5IZMFcqOMqapDTcdcJH5mSaLGzCOzBED0BjuT EePhBkSt9A== -----END CERTIFICATE-----Generated at Mon Mar 2 20:33:34 2026 by rpki-client