$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft (raw, json) Hash identifier: lyNFwNadY6kolgdbLQFPNHnZRsnm7JinrK6CrRlWaeY= Subject key identifier: 9A:A9:08:DF:C8:90:24:A9:3B:C5:BD:12:1F:6D:BF:2F:C5:C9:69:0D Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Certificate serial: 4FD6ADFEAA1D84974B07547F92C726937FCD36E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 12:24:43 +0000 Manifest this update: Fri 17 Apr 2026 12:19:43 +0000 Manifest next update: Sat 18 Apr 2026 15:23:43 +0000 Files and hashes: 1: 3133392e3135392e35312e302f32342d3234203d3e203633313939.roa (hash: PVEHr3xLjN/Y+XWHbs6wuYStrC2CXu3JSGQ3cVReSGE=) 2: 3133392e3135392e35302e302f32342d3234203d3e203633313939.roa (hash: htnGuaz2MsHiJIKc2wvhToZZ5NT4EQSJoH274B7vPNs=) 3: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl (hash: 98KW+WYF0ps3oZn6cTwJGRKqpvFOLMvEUMbljq2Cc1k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d6:ad:fe:aa:1d:84:97:4b:07:54:7f:92:c7:26:93:7f:cd:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Validity Not Before: Apr 17 12:19:43 2026 GMT Not After : Apr 18 15:23:43 2026 GMT Subject: CN=9AA908DFC89024A93BC5BD121F6DBF2FC5C9690D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:92:37:51:97:a5:90:f6:0c:d9:cc:91:af: 26:27:3b:cd:99:8a:e2:7c:ed:aa:53:1e:f2:0d:56: 20:cc:63:88:c8:f2:a0:ef:19:5a:7e:78:52:10:21: cc:9e:df:20:56:bd:4d:9b:e8:db:c9:09:db:f3:8c: 3c:50:c8:86:3b:b6:0a:f5:2b:96:2c:e6:9a:91:ec: 80:ff:b7:0f:1b:99:5b:bc:c4:e0:3e:01:ad:53:1c: c3:58:27:c0:34:44:d1:78:07:0a:55:c2:91:8c:83: 86:4e:33:7e:1d:69:8f:c8:fd:63:28:87:0c:80:b0: 01:d6:9f:04:f3:f4:dd:b6:05:38:69:b0:c4:e3:5f: 2e:98:88:dc:77:82:91:6b:cc:a8:ec:d9:3f:64:f1: c9:38:99:bc:ba:7a:61:8e:1c:59:87:55:1f:dc:02: a5:1a:98:3d:d9:e0:45:1d:2a:e4:97:e2:ae:b0:84: 9c:54:4f:4c:b8:4d:80:24:35:31:43:e0:e4:c8:2f: f3:2a:00:58:07:73:86:c3:15:6c:a6:f8:c0:83:19: 48:93:59:e3:c7:9d:06:b8:38:88:19:99:17:1c:15: 9a:07:77:73:d4:d7:ba:46:c6:e6:9b:c7:88:1a:89: de:d3:0c:30:ab:ed:dd:c3:4f:73:36:a1:9c:df:60: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A9:08:DF:C8:90:24:A9:3B:C5:BD:12:1F:6D:BF:2F:C5:C9:69:0D X509v3 Authority Key Identifier: keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:76:1e:f7:18:86:83:50:7d:41:ae:7e:83:73:98:47:a7: c8:48:03:84:09:b2:9a:89:28:c0:d2:e7:a7:4d:84:ee:84:14: bc:df:cb:ca:41:06:75:72:bb:3c:dd:d5:32:a5:f0:57:61:7e: 76:8d:93:e3:05:a4:8d:58:05:7c:69:9c:b4:53:3e:9c:93:c8: e4:37:df:71:1b:26:11:d5:a0:4b:16:61:4f:b6:c2:bf:14:cf: 08:cc:b8:28:33:a5:bf:94:2b:46:82:60:63:62:11:6b:39:2b: 31:45:1f:99:e2:39:0f:c0:eb:f8:81:53:d6:8e:a0:c5:78:5b: d7:6c:34:32:12:6b:a0:d2:db:c6:46:aa:7d:06:71:cb:4d:f0: e3:5d:c6:a0:22:26:81:a0:5e:1b:79:cf:2e:d4:6b:fe:93:fa: cc:77:23:a7:11:4d:cf:5a:59:b9:c9:37:7d:84:95:19:9c:72: 87:d2:45:ba:c3:4b:6a:b3:fe:60:c6:46:aa:3b:9b:77:bf:59: 63:f1:75:c5:44:fc:d7:05:99:9e:b6:44:99:2b:90:cd:4f:4e: d6:2a:87:69:55:c7:c1:c1:39:c9:56:72:49:3d:d1:e2:15:6c: 46:9e:94:0b:15:62:51:65:ee:55:15:3d:5f:63:e2:80:c3:58: e8:34:3f:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT9at/qodhJdLB1R/kscmk3/NNuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZE RUYwMERCQTAeFw0yNjA0MTcxMjE5NDNaFw0yNjA0MTgxNTIzNDNaMDMxMTAvBgNV BAMTKDlBQTkwOERGQzg5MDI0QTkzQkM1QkQxMjFGNkRCRjJGQzVDOTY5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIJI3UZelkPYM2cyRryYnO82Z iuJ87apTHvINViDMY4jI8qDvGVp+eFIQIcye3yBWvU2b6NvJCdvzjDxQyIY7tgr1 K5Ys5pqR7ID/tw8bmVu8xOA+Aa1THMNYJ8A0RNF4BwpVwpGMg4ZOM34daY/I/WMo hwyAsAHWnwTz9N22BThpsMTjXy6YiNx3gpFrzKjs2T9k8ck4mby6emGOHFmHVR/c AqUamD3Z4EUdKuSX4q6whJxUT0y4TYAkNTFD4OTIL/MqAFgHc4bDFWym+MCDGUiT WePHnQa4OIgZmRccFZoHd3PU17pGxuabx4gaid7TDDCr7d3DT3M2oZzfYOcRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmqkI38iQJKk7xb0SH22/L8XJaQ0wHwYDVR0j BBgwFoAUNNWKBis9mW2x6KK7J2QYj97wDbowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8xLzM0RDU4QTA2MkIzRDk5NkRCMUU4QTJCQjI3NjQx ODhGREVGMDBEQkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMS8zNEQ1OEEwNjJCM0Q5 OTZEQjFFOEEyQkIyNzY0MTg4RkRFRjAwREJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi12HvcYhoNQ fUGufoNzmEenyEgDhAmymokowNLnp02E7oQUvN/LykEGdXK7PN3VMqXwV2F+do2T 4wWkjVgFfGmctFM+nJPI5DffcRsmEdWgSxZhT7bCvxTPCMy4KDOlv5QrRoJgY2IR azkrMUUfmeI5D8Dr+IFT1o6gxXhb12w0MhJroNLbxkaqfQZxy03w413GoCImgaBe G3nPLtRr/pP6zHcjpxFNz1pZuck3fYSVGZxyh9JFusNLarP+YMZGqjubd79ZY/F1 xUT81wWZnrZEmSuQzU9O1iqHaVXHwcE5yVZyST3R4hVsRp6UCxViUWXuVRU9X2Pi gMNY6DQ/gQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:35 2026 by rpki-client