$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: 0+bv4/k7Epd3u9PxP+X66vFwnobLJX1fMLKwpVCCHAY= Subject key identifier: 84:8D:2F:84:F6:AC:59:7C:30:B5:2B:C2:29:D8:E9:AD:B9:D6:DD:75 Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 5E84F9FD1C64E8FF378AE21A3E8FAB0BB4FDE49D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 7B Signing time: Tue 14 Jul 2026 14:11:27 +0000 Manifest this update: Tue 14 Jul 2026 14:06:27 +0000 Manifest next update: Wed 15 Jul 2026 16:25:27 +0000 Files and hashes: 1: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 2: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: Pu3+pQOqSsoTFuc+a9eLC+qWrIzrwP4MgO7UYeYKfhY=) 3: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 4: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 16:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:84:f9:fd:1c:64:e8:ff:37:8a:e2:1a:3e:8f:ab:0b:b4:fd:e4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Jul 14 14:06:27 2026 GMT Not After : Jul 15 16:25:27 2026 GMT Subject: CN=848D2F84F6AC597C30B52BC229D8E9ADB9D6DD75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:03:b0:7b:40:0b:b9:8d:bd:21:bf:0f:8f: 2a:58:e6:39:95:fb:ea:85:23:80:7d:fd:c7:b3:eb: b9:a0:a4:6f:a1:d4:65:bc:71:b1:09:09:a3:32:94: 34:70:bb:f2:3b:31:03:08:fc:8e:2b:74:85:51:71: c6:aa:85:d9:8a:2d:22:36:c4:4f:1d:19:03:fd:e1: bb:c5:4c:ee:57:49:09:f9:8b:fc:95:4a:2b:b2:11: 4a:69:53:c9:77:3f:85:06:29:5c:4c:26:e2:a5:26: f1:59:11:fa:54:af:e7:70:71:b3:0e:53:4a:d5:00: 1f:42:3c:a0:b5:c9:5c:87:8e:36:6d:16:a7:d9:da: 21:47:3c:35:de:29:0a:cc:7b:0c:db:81:9f:a1:e3: 81:15:a9:c0:35:7a:1c:11:7b:6b:95:33:31:b9:ea: 95:53:ea:eb:47:99:0f:ef:30:6f:1e:1e:81:e8:fa: b6:b9:57:26:18:76:43:b0:88:cf:8e:84:d7:a2:ff: 2a:0d:23:88:f7:19:96:40:c1:4d:df:a0:4e:9c:9b: ca:7d:a5:7c:bb:50:f9:06:44:02:1f:e8:b8:89:df: 49:4c:88:1e:e7:8f:35:9d:0f:4c:0f:73:8c:f6:b1: 5e:fa:56:33:ff:f2:ef:9b:b8:bf:91:cd:1a:7b:6e: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:2F:84:F6:AC:59:7C:30:B5:2B:C2:29:D8:E9:AD:B9:D6:DD:75 X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:66:90:0a:8f:25:5e:f9:25:7d:8f:70:23:f6:e8:30:ba:25: 9b:1c:11:22:94:02:7d:ea:fc:6c:1a:fb:9b:88:a3:f2:d7:c4: 2b:bf:33:66:6f:49:1e:ce:26:6b:4c:71:54:ad:8a:66:6c:08: b5:bc:7e:34:9a:5e:5b:0f:7c:24:74:21:82:f5:21:92:94:9a: 47:2b:c9:44:43:7a:0e:dc:ee:9a:5f:56:bf:64:9a:cb:eb:56: f8:b6:6d:e5:02:49:70:3c:f4:50:e9:88:fb:58:8b:ac:06:ae: ca:00:b8:4d:f6:c9:13:c8:1b:d5:64:da:8d:7d:36:b3:40:cc: d5:4a:2b:01:a5:54:77:56:15:43:7d:61:b9:69:c0:c5:7c:e3: 66:9c:b1:6b:50:c2:01:a9:0c:d0:eb:fb:45:0a:32:03:8a:cc: a6:ca:fe:67:61:82:f7:b9:73:dd:01:39:0f:24:1f:24:9e:d8: 1a:ed:86:90:40:b6:78:2d:05:8d:2b:6d:a9:07:33:25:b1:93: 69:56:49:73:48:43:1a:ba:bb:ee:8a:c5:95:0e:c5:23:9d:f9: a3:f2:0e:e2:33:b8:43:11:6f:d3:b3:1d:0e:bb:9e:80:58:88: ac:7f:a9:12:67:59:4f:c0:fd:a6:de:d4:f9:f3:06:de:ba:9c: a1:01:82:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXoT5/Rxk6P83iuIaPo+rC7T95J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA3MTQxNDA2MjdaFw0yNjA3MTUxNjI1MjdaMDMxMTAvBgNV BAMTKDg0OEQyRjg0RjZBQzU5N0MzMEI1MkJDMjI5RDhFOUFEQjlENkRENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI0gOwe0ALuY29Ib8PjypY5jmV ++qFI4B9/cez67mgpG+h1GW8cbEJCaMylDRwu/I7MQMI/I4rdIVRccaqhdmKLSI2 xE8dGQP94bvFTO5XSQn5i/yVSiuyEUppU8l3P4UGKVxMJuKlJvFZEfpUr+dwcbMO U0rVAB9CPKC1yVyHjjZtFqfZ2iFHPDXeKQrMewzbgZ+h44EVqcA1ehwRe2uVMzG5 6pVT6utHmQ/vMG8eHoHo+ra5VyYYdkOwiM+OhNei/yoNI4j3GZZAwU3foE6cm8p9 pXy7UPkGRAIf6LiJ30lMiB7njzWdD0wPc4z2sV76VjP/8u+buL+RzRp7bhaPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhI0vhPasWXwwtSvCKdjprbnW3XUwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGaQCo8lXvkl fY9wI/boMLolmxwRIpQCfer8bBr7m4ij8tfEK78zZm9JHs4ma0xxVK2KZmwItbx+ NJpeWw98JHQhgvUhkpSaRyvJREN6Dtzuml9Wv2Say+tW+LZt5QJJcDz0UOmI+1iL rAauygC4TfbJE8gb1WTajX02s0DM1UorAaVUd1YVQ31huWnAxXzjZpyxa1DCAakM 0Ov7RQoyA4rMpsr+Z2GC97lz3QE5DyQfJJ7YGu2GkEC2eC0FjSttqQczJbGTaVZJ c0hDGrq77orFlQ7FI535o/IO4jO4QxFv07MdDruegFiIrH+pEmdZT8D9pt7U+fMG 3rqcoQGCTg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:12:43 2026 by rpki-client