$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: 5/7owRF0YxLFRqz9LtyN91Q7Vnj7hFf5c6Enmod2YiM= Subject key identifier: EB:67:FE:E2:EF:C8:0E:0C:FC:B4:06:8E:61:F1:A3:85:E3:14:56:2C Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 1890582D15801E581F1BED1F58B37D71F2AAE27F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: CB Signing time: Mon 12 Oct 2026 08:46:49 +0000 Manifest this update: Mon 12 Oct 2026 08:41:49 +0000 Manifest next update: Thu 15 Oct 2026 17:26:49 +0000 Files and hashes: 1: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: F3j+96+cVwYTKKrfHyASKNLsq7k81omKCiyi3tn9lvo=) 2: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) 3: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 4: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:58:2d:15:80:1e:58:1f:1b:ed:1f:58:b3:7d:71:f2:aa:e2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Oct 12 08:41:49 2026 GMT Not After : Oct 15 17:26:49 2026 GMT Subject: CN=EB67FEE2EFC80E0CFCB4068E61F1A385E314562C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:fa:83:2a:63:ba:4e:92:3e:e1:2f:b4:04: 9e:9c:6c:bb:47:e2:25:9c:b0:4e:9a:0b:94:29:4a: df:bd:e8:fe:43:77:6d:e2:5e:ad:7f:37:79:8e:b5: 4d:7d:79:ea:58:1b:d7:cb:43:5d:98:ee:a6:fd:fb: b2:38:b4:2e:a6:a8:eb:19:9f:18:60:e0:5f:54:64: 90:2e:fa:32:35:4e:e6:9f:5d:d8:9d:60:ee:47:a6: ff:d4:8f:14:78:f7:98:a4:63:d4:9e:eb:fc:35:71: 06:a2:b8:d1:19:73:1f:d4:7c:59:91:e8:75:7f:64: 68:02:e9:09:f1:1c:03:df:83:ab:64:07:cc:4b:66: 93:2f:98:fa:fb:ac:dd:65:91:25:56:50:34:f7:29: f5:79:5e:fe:d5:bf:3d:57:12:98:96:11:86:67:83: 21:73:b7:c0:09:5f:5c:f0:97:f8:d3:78:65:81:27: fd:ff:bc:e0:bf:8c:ac:ed:e7:0a:cf:e1:5d:62:ef: 8f:23:7a:88:87:a2:f6:d7:05:48:89:69:a3:49:ae: 4e:ac:f7:0b:3c:32:cc:4b:2c:ca:6a:36:fe:33:b9: 42:93:26:67:07:73:44:8f:5f:6f:97:40:c6:7e:db: 87:ab:96:a1:e1:7e:c6:35:cf:fd:be:8f:81:5d:76: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:FE:E2:EF:C8:0E:0C:FC:B4:06:8E:61:F1:A3:85:E3:14:56:2C X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:19:cb:18:54:bf:79:09:e5:52:4f:32:82:bd:63:61:f3: 48:24:e4:a5:d2:e9:0f:f9:52:d9:ec:cc:d6:b7:66:12:39:99: d1:a9:33:23:87:c6:de:ba:37:8e:f5:c6:d4:f2:8c:b2:32:08: 18:31:bb:ca:81:47:8d:d2:2f:93:5b:29:de:cf:22:a7:fb:e8: 03:54:b8:37:c5:90:00:29:a2:24:5e:21:f0:0b:83:79:bc:43: f5:bf:ac:fb:91:6d:01:11:0a:44:fb:2f:31:95:7d:a2:ac:9f: 64:e3:13:83:3f:0d:c7:55:72:ae:37:d5:8f:67:39:aa:fc:40: 45:24:46:2b:7a:3f:f9:1c:fe:a5:16:3c:04:e4:92:8c:7e:0e: 36:69:61:d3:75:9f:63:19:57:2d:14:fc:b1:ba:7a:13:e0:4e: 94:0d:e9:20:80:3e:2f:50:5e:7f:28:00:9c:6c:37:4f:f9:73: a5:58:85:98:ef:28:4a:e8:b2:83:26:6c:11:c4:7c:dd:68:06: 0e:34:26:96:a3:ee:0a:d9:d1:6a:28:86:59:af:3f:d9:c7:26: f4:62:68:6a:b7:69:51:22:37:b7:3a:dc:65:9d:eb:c2:74:ca: 22:97:10:ea:89:4f:22:0d:b2:5d:f9:8b:f9:fc:e8:91:04:7d: 05:3f:82:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGJBYLRWAHlgfG+0fWLN9cfKq4n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjEwMTIwODQxNDlaFw0yNjEwMTUxNzI2NDlaMDMxMTAvBgNV BAMTKEVCNjdGRUUyRUZDODBFMENGQ0I0MDY4RTYxRjFBMzg1RTMxNDU2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQPqDKmO6TpI+4S+0BJ6cbLtH 4iWcsE6aC5QpSt+96P5Dd23iXq1/N3mOtU19eepYG9fLQ12Y7qb9+7I4tC6mqOsZ nxhg4F9UZJAu+jI1TuafXdidYO5Hpv/UjxR495ikY9Se6/w1cQaiuNEZcx/UfFmR 6HV/ZGgC6QnxHAPfg6tkB8xLZpMvmPr7rN1lkSVWUDT3KfV5Xv7Vvz1XEpiWEYZn gyFzt8AJX1zwl/jTeGWBJ/3/vOC/jKzt5wrP4V1i748jeoiHovbXBUiJaaNJrk6s 9ws8MsxLLMpqNv4zuUKTJmcHc0SPX2+XQMZ+24erlqHhfsY1z/2+j4FddsylAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU62f+4u/IDgz8tAaOYfGjheMUViwwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQMZyxhUv3kJ 5VJPMoK9Y2HzSCTkpdLpD/lS2ezM1rdmEjmZ0akzI4fG3ro3jvXG1PKMsjIIGDG7 yoFHjdIvk1sp3s8ip/voA1S4N8WQACmiJF4h8AuDebxD9b+s+5FtAREKRPsvMZV9 oqyfZOMTgz8Nx1VyrjfVj2c5qvxARSRGK3o/+Rz+pRY8BOSSjH4ONmlh03WfYxlX LRT8sbp6E+BOlA3pIIA+L1BefygAnGw3T/lzpViFmO8oSuiygyZsEcR83WgGDjQm lqPuCtnRaiiGWa8/2ccm9GJoardpUSI3tzrcZZ3rwnTKIpcQ6olPIg2yXfmL+fzo kQR9BT+CDA== -----END CERTIFICATE-----Generated at Tue Oct 13 21:30:47 2026 by rpki-client