$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: TxUohjhant8tDbQRfGWTIuYdn7oI8EexxuQUt8GGZDA= Subject key identifier: 11:EE:9B:E7:90:8F:95:9A:F7:52:78:EE:D1:93:C5:FD:38:CE:28:F2 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 4B2D32FC51F2CE718F0EA38FA1C3449FE5757A16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 05:34:40 +0000 Manifest this update: Fri 17 Apr 2026 05:29:40 +0000 Manifest next update: Sat 18 Apr 2026 08:41:40 +0000 Files and hashes: 1: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) 2: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: QO+s87HWYq3heFlaXGmKI4ywdTOaIwAOlIrBHArt4SM=) 3: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 4: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2d:32:fc:51:f2:ce:71:8f:0e:a3:8f:a1:c3:44:9f:e5:75:7a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Apr 17 05:29:40 2026 GMT Not After : Apr 18 08:41:40 2026 GMT Subject: CN=11EE9BE7908F959AF75278EED193C5FD38CE28F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:97:54:f9:fd:b6:ef:38:b4:10:b7:b0:1b: 9f:7f:9c:ae:78:2c:4d:5f:8c:41:02:87:62:51:19: ce:59:32:d9:1a:ea:a9:57:32:b6:7d:c1:d9:a8:10: 5e:41:4b:9f:c5:8f:a0:77:b6:59:1e:f7:b7:1c:8e: bc:84:51:08:84:bf:93:bd:5a:ce:8f:57:72:17:3a: 68:ab:b8:59:e0:ec:2a:2d:c5:5c:02:f2:78:d1:78: e2:ca:b0:97:6c:da:c4:18:83:c1:28:fe:fd:a9:90: 14:95:2a:ea:76:b8:c9:24:68:ac:85:78:e7:b1:eb: 64:4d:22:ce:e4:70:0f:38:51:3f:f7:78:a4:09:7c: 8c:81:59:9b:44:62:e0:82:ce:a1:1f:6e:fe:f6:26: bf:02:e3:8e:8b:16:4d:91:c2:79:8d:c6:cc:da:f5: a1:2b:b9:cb:92:7d:18:96:ca:ed:35:7c:be:77:ae: fe:40:ff:0f:f5:ea:91:4b:2f:c4:d1:76:fc:5e:5d: ef:4f:bc:d4:f6:1c:8c:32:62:93:2a:24:3b:5d:6d: 45:f9:3c:b6:ad:42:6f:0b:84:34:27:af:99:f4:59: 0a:0e:7f:98:bc:17:0a:69:05:14:63:e6:88:52:a5: 80:c8:ab:58:b8:07:34:9e:54:94:ac:79:60:1f:9d: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EE:9B:E7:90:8F:95:9A:F7:52:78:EE:D1:93:C5:FD:38:CE:28:F2 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b4:24:bd:39:14:1b:1c:9b:66:b6:ad:28:e1:77:69:b6:b0: e9:f3:0f:ff:b8:e2:3e:93:1c:f5:be:8c:9e:f7:36:47:79:45: 1a:05:2f:c3:93:3f:56:98:af:99:1d:2f:c5:7d:27:4b:63:8c: fb:ae:02:25:c0:4e:aa:6a:3f:03:85:4b:48:1a:33:f6:8f:e9: 20:b3:aa:c8:d2:db:fb:9c:68:39:de:57:ed:e5:8b:a3:da:ce: 59:28:a5:e5:d2:dd:b6:5a:bc:8e:eb:c8:67:c8:6e:eb:08:f8: 00:ad:1b:1a:47:86:7a:c6:9e:1e:ef:94:fd:45:1c:12:bb:8b: 4a:f6:de:30:54:fc:d9:ca:b3:af:3c:97:3e:ee:cb:ac:85:53: 58:c9:03:24:b8:68:df:df:00:51:5d:6f:e6:69:61:6e:c0:4d: a4:7c:45:40:35:14:a8:05:47:68:c8:72:88:a6:d4:9d:44:c8: 16:c6:c9:e8:af:eb:4c:6b:69:2b:9c:2d:13:3a:10:ca:98:c1: 8c:e2:9f:84:3d:e4:6e:64:db:0d:ac:92:11:4a:39:c2:97:62: 3a:43:17:7b:39:07:f1:10:3e:3d:83:67:57:12:2b:ba:0e:69: 88:49:d7:12:2a:75:74:a5:3f:be:8f:bc:99:55:d7:da:2e:b9: f2:2d:01:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSy0y/FHyznGPDqOPocNEn+V1ehYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA0MTcwNTI5NDBaFw0yNjA0MTgwODQxNDBaMDMxMTAvBgNV BAMTKDExRUU5QkU3OTA4Rjk1OUFGNzUyNzhFRUQxOTNDNUZEMzhDRTI4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEy5dU+f227zi0ELewG59/nK54 LE1fjEECh2JRGc5ZMtka6qlXMrZ9wdmoEF5BS5/Fj6B3tlke97ccjryEUQiEv5O9 Ws6PV3IXOmiruFng7CotxVwC8njReOLKsJds2sQYg8Eo/v2pkBSVKup2uMkkaKyF eOex62RNIs7kcA84UT/3eKQJfIyBWZtEYuCCzqEfbv72Jr8C446LFk2RwnmNxsza 9aErucuSfRiWyu01fL53rv5A/w/16pFLL8TRdvxeXe9PvNT2HIwyYpMqJDtdbUX5 PLatQm8LhDQnr5n0WQoOf5i8FwppBRRj5ohSpYDIq1i4BzSeVJSseWAfneEJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEe6b55CPlZr3Unju0ZPF/TjOKPIwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbQkvTkUGxyb ZratKOF3abaw6fMP/7jiPpMc9b6Mnvc2R3lFGgUvw5M/VpivmR0vxX0nS2OM+64C JcBOqmo/A4VLSBoz9o/pILOqyNLb+5xoOd5X7eWLo9rOWSil5dLdtlq8juvIZ8hu 6wj4AK0bGkeGesaeHu+U/UUcEruLSvbeMFT82cqzrzyXPu7LrIVTWMkDJLho398A UV1v5mlhbsBNpHxFQDUUqAVHaMhyiKbUnUTIFsbJ6K/rTGtpK5wtEzoQypjBjOKf hD3kbmTbDaySEUo5wpdiOkMXezkH8RA+PYNnVxIrug5piEnXEip1dKU/vo+8mVXX 2i658i0B1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:11 2026 by rpki-client