$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json) Hash identifier: B4Skr73uzoAxkP9mr+3XlabaWr1Ml9aP5TE4o3H1IPI= Subject key identifier: 0F:9B:E1:2D:1B:77:3A:B6:26:D8:6E:5E:F1:0F:5C:D4:64:CB:34:32 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 0AA54F93CCEBF3A35E7997D1B10DDC7BE7BF101F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft Manifest number: D5 Signing time: Thu 15 Oct 2026 11:31:46 +0000 Manifest this update: Thu 15 Oct 2026 11:26:46 +0000 Manifest next update: Sun 18 Oct 2026 21:39:46 +0000 Files and hashes: 1: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=) 2: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: fiQouV6C7fjE6YzU/4NbgCeaK+XnA0ispTF6wbNmdEQ=) 3: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=) 4: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=) 5: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a5:4f:93:cc:eb:f3:a3:5e:79:97:d1:b1:0d:dc:7b:e7:bf:10:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Oct 15 11:26:46 2026 GMT Not After : Oct 18 21:39:46 2026 GMT Subject: CN=0F9BE12D1B773AB626D86E5EF10F5CD464CB3432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:10:33:b7:e5:22:b8:75:9b:03:41:63:cb: a6:12:c5:c2:1c:79:29:2c:55:eb:9b:6b:54:8c:4e: b5:51:04:36:d8:e1:c0:0f:0b:31:7e:7c:da:74:4a: 26:17:43:3d:37:2c:22:f0:8b:ce:e2:47:3b:f9:97: 36:be:e3:2b:4f:0f:d2:3b:28:cc:7d:a7:24:0c:07: a0:e1:b1:dd:a2:77:db:a8:58:3f:d3:14:20:f6:f9: 0a:c7:c2:42:6e:4c:d3:86:92:ae:b4:3d:ef:c8:be: d9:db:23:3a:0b:ec:a1:4c:f7:e4:64:8d:25:44:57: 05:f4:6e:d9:9e:42:71:07:1c:98:76:4e:34:bf:f9: 17:15:29:80:c2:d6:9d:04:9f:ef:79:6d:a6:3e:29: f5:ec:96:b3:4c:8a:55:b3:ff:d7:21:fe:ac:3a:3a: 3d:11:73:53:49:b3:10:b7:66:c6:f8:a8:78:54:51: 0a:6f:01:6f:c5:45:2b:16:ee:ad:4a:7d:15:59:05: 0b:45:01:d7:c3:8c:41:3a:24:f8:48:8e:81:bc:72: 6d:15:27:28:fa:d0:3a:85:59:cf:a7:2a:e2:85:4b: 6e:23:39:d0:63:c1:dd:10:c7:68:c8:5b:1c:4f:af: bb:32:bd:cc:1e:4f:da:a4:a8:44:c6:38:de:1e:91: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9B:E1:2D:1B:77:3A:B6:26:D8:6E:5E:F1:0F:5C:D4:64:CB:34:32 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a3:6b:c4:f9:83:f8:c8:72:45:b1:4a:3d:32:af:ce:f4:a6: bc:eb:9c:2b:6c:ff:81:2e:9e:35:7b:60:c6:1f:f5:13:4b:1d: f1:37:ad:c3:b0:bc:0c:b6:ef:42:84:ad:65:e8:ba:9e:f6:70: 74:14:59:cf:8a:eb:74:9d:64:dc:ac:66:d2:1c:39:d7:61:df: 6b:51:59:48:1c:df:1b:9e:37:5d:0b:3b:54:45:1c:73:1a:06: 75:84:28:95:b5:37:d3:ea:51:a6:e8:00:0e:b1:a5:7a:06:a3: 77:09:f6:69:e2:6e:f9:f5:08:65:04:2a:9c:c2:4f:dc:fc:d2: 11:d0:02:a0:f4:39:b7:0c:18:00:44:9e:d3:26:f9:2d:23:2e: bf:2b:c3:f4:5b:02:d9:93:23:5e:38:09:1e:8e:0d:50:86:c5: b0:52:c1:88:2d:1e:3b:e8:6b:7e:b2:31:04:b1:eb:aa:62:4c: a2:13:b6:11:89:0f:79:53:5f:15:92:51:12:ad:c4:9a:79:e6: ea:df:4d:4f:c6:f3:42:49:3c:0b:c8:f9:fc:de:dc:39:c3:2b: 72:94:62:6b:2d:3f:9a:66:3f:c6:c7:71:58:50:16:6b:73:a7: 75:bd:46:f6:7a:c2:0b:08:32:73:2c:e8:58:2a:64:2c:6e:f7: 8d:cf:8f:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCqVPk8zr86NeeZfRsQ3ce+e/EB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjEwMTUxMTI2NDZaFw0yNjEwMTgyMTM5NDZaMDMxMTAvBgNV BAMTKDBGOUJFMTJEMUI3NzNBQjYyNkQ4NkU1RUYxMEY1Q0Q0NjRDQjM0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wBAzt+UiuHWbA0Fjy6YSxcIc eSksVeuba1SMTrVRBDbY4cAPCzF+fNp0SiYXQz03LCLwi87iRzv5lza+4ytPD9I7 KMx9pyQMB6Dhsd2id9uoWD/TFCD2+QrHwkJuTNOGkq60Pe/IvtnbIzoL7KFM9+Rk jSVEVwX0btmeQnEHHJh2TjS/+RcVKYDC1p0En+95baY+KfXslrNMilWz/9ch/qw6 Oj0Rc1NJsxC3Zsb4qHhUUQpvAW/FRSsW7q1KfRVZBQtFAdfDjEE6JPhIjoG8cm0V Jyj60DqFWc+nKuKFS24jOdBjwd0Qx2jIWxxPr7syvcweT9qkqETGON4ekbiLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD5vhLRt3OrYm2G5e8Q9c1GTLNDIwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzQwOTA1ODMzNTk0ODkvMC81RjM0REFEOUZGMUQ4 QjAwQzlCNjg3QTcxQzA5MDc5NEI5RTkxRTkzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqNrxPmD+Mhy RbFKPTKvzvSmvOucK2z/gS6eNXtgxh/1E0sd8Tetw7C8DLbvQoStZei6nvZwdBRZ z4rrdJ1k3Kxm0hw512Hfa1FZSBzfG543XQs7VEUccxoGdYQolbU30+pRpugADrGl egajdwn2aeJu+fUIZQQqnMJP3PzSEdACoPQ5twwYAESe0yb5LSMuvyvD9FsC2ZMj XjgJHo4NUIbFsFLBiC0eO+hrfrIxBLHrqmJMohO2EYkPeVNfFZJREq3Emnnm6t9N T8bzQkk8C8j5/N7cOcMrcpRiay0/mmY/xsdxWFAWa3Ondb1G9nrCCwgycyzoWCpk LG73jc+P6A== -----END CERTIFICATE-----Generated at Thu Oct 15 19:49:17 2026 by rpki-client