$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: 6EXR5CY5/s7sdmcMRE4CvRedjMFUmGjmC3c6udjsy78= Subject key identifier: 2C:ED:37:76:52:27:16:3A:1C:E5:C5:7B:E9:3C:28:D4:5D:54:16:7F Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 59DD7D35410C1D24053361FA7778930A09C23044 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 13:58:17 +0000 Manifest this update: Mon 02 Mar 2026 13:53:17 +0000 Manifest next update: Tue 03 Mar 2026 16:38:17 +0000 Files and hashes: 1: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: vgxFKom4ORMrnrSt79iJ7U2g96gYgM53dCp8q08qe/w=) 2: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 3: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:dd:7d:35:41:0c:1d:24:05:33:61:fa:77:78:93:0a:09:c2:30:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Mar 2 13:53:17 2026 GMT Not After : Mar 3 16:38:17 2026 GMT Subject: CN=2CED37765227163A1CE5C57BE93C28D45D54167F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:8e:54:91:f4:21:b3:15:62:7f:6d:37:50: 2e:f1:45:5b:8f:1e:7f:40:e2:0e:f4:58:cc:7b:66: b9:d9:2e:5b:44:08:18:8e:e1:bc:05:e1:bc:4c:bd: d7:7f:ae:8a:cb:52:3c:a8:8c:99:7b:eb:c5:df:ee: 9c:c7:cc:0d:2d:7c:55:00:53:51:7f:ea:2a:66:5f: 2b:a2:f7:b3:d1:03:44:c6:27:bb:55:54:33:3c:b7: 55:3d:37:de:36:64:7d:ea:9e:69:89:d9:b0:b5:b5: d1:9a:34:4c:54:5b:e4:8e:80:2d:c8:86:e0:28:e5: ff:61:6d:51:08:1f:9f:a8:5a:8e:df:32:73:f9:e7: 26:d6:00:cc:7a:75:89:ac:59:06:e1:28:12:ed:89: f0:77:5c:1b:f7:69:67:a6:f9:b7:02:ba:33:52:d0: 80:98:cb:80:c4:91:36:06:7f:af:1e:c8:87:d0:8e: 6e:88:ce:38:06:e3:24:f2:67:23:f5:82:fa:08:5a: 9b:66:dc:0d:43:8d:22:a2:de:7f:78:bb:1f:8d:24: ac:ba:11:3b:87:5c:f9:d1:40:b4:25:51:4b:2f:d6: 70:51:bb:53:c0:42:e7:a9:36:91:66:6b:a8:ec:d8: 19:bb:b4:d5:8c:62:1d:2e:18:63:7e:e3:c0:03:01: e7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:ED:37:76:52:27:16:3A:1C:E5:C5:7B:E9:3C:28:D4:5D:54:16:7F X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8b:35:46:a8:ac:04:25:86:f6:9e:73:a4:99:12:ce:73:75: a7:d1:5f:da:90:57:ee:35:33:8f:b8:78:4d:d8:8d:e7:8c:87: 6c:2c:eb:27:68:28:6b:b2:3b:c4:7d:10:62:80:cb:01:56:75: ef:fe:10:5b:e5:71:c2:80:a8:b0:42:30:02:4d:d5:60:eb:59: 42:e5:d8:fc:67:fe:88:b0:9d:09:50:de:32:13:3b:9a:5f:e1: 3c:86:51:4c:62:74:b8:51:28:30:02:cf:35:6f:58:ec:5d:b9: ed:c5:dd:fd:46:dc:77:23:ea:8a:b9:a5:66:f6:be:f6:1d:0f: 37:66:70:08:10:1d:e1:da:9d:df:dd:cc:3f:63:42:8e:60:b7: 0e:a8:7c:c7:30:b0:2c:f3:8e:16:53:4e:23:11:ec:92:ae:cb: b3:3d:ee:02:19:f9:80:9e:aa:a8:d5:41:9e:c1:06:4e:0b:06: 78:65:58:71:12:fa:4e:40:17:d3:a3:8b:ce:1b:c7:3d:dd:77: 89:fe:2c:c9:24:2f:ae:84:f0:d1:ff:eb:12:62:4c:cc:28:07: a9:6c:dc:60:3b:75:5b:39:f6:5f:12:45:9b:b9:65:b5:44:ee: 0b:5e:38:d4:24:c5:97:fa:28:fa:01:04:42:fd:7b:86:db:9e: 92:15:88:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWd19NUEMHSQFM2H6d3iTCgnCMEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjAzMDIxMzUzMTdaFw0yNjAzMDMxNjM4MTdaMDMxMTAvBgNV BAMTKDJDRUQzNzc2NTIyNzE2M0ExQ0U1QzU3QkU5M0MyOEQ0NUQ1NDE2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9H45UkfQhsxVif203UC7xRVuP Hn9A4g70WMx7ZrnZLltECBiO4bwF4bxMvdd/rorLUjyojJl768Xf7pzHzA0tfFUA U1F/6ipmXyui97PRA0TGJ7tVVDM8t1U9N942ZH3qnmmJ2bC1tdGaNExUW+SOgC3I huAo5f9hbVEIH5+oWo7fMnP55ybWAMx6dYmsWQbhKBLtifB3XBv3aWem+bcCujNS 0ICYy4DEkTYGf68eyIfQjm6IzjgG4yTyZyP1gvoIWptm3A1DjSKi3n94ux+NJKy6 ETuHXPnRQLQlUUsv1nBRu1PAQuepNpFma6js2Bm7tNWMYh0uGGN+48ADAeefAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULO03dlInFjoc5cV76Two1F1UFn8wHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYs1RqisBCWG 9p5zpJkSznN1p9Ff2pBX7jUzj7h4TdiN54yHbCzrJ2goa7I7xH0QYoDLAVZ17/4Q W+VxwoCosEIwAk3VYOtZQuXY/Gf+iLCdCVDeMhM7ml/hPIZRTGJ0uFEoMALPNW9Y 7F257cXd/UbcdyPqirmlZva+9h0PN2ZwCBAd4dqd393MP2NCjmC3Dqh8xzCwLPOO FlNOIxHskq7Lsz3uAhn5gJ6qqNVBnsEGTgsGeGVYcRL6TkAX06OLzhvHPd13if4s ySQvroTw0f/rEmJMzCgHqWzcYDt1Wzn2XxJFm7lltUTuC1441CTFl/oo+gEEQv17 htuekhWI8g== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:12 2026 by rpki-client