$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: XgmzdBh/rBZYa1WXmAUIh/SZnQQDSR6QFU/MvNgr7ik= Subject key identifier: 27:88:13:5F:24:84:AD:BD:4C:FF:2E:6E:E8:33:0C:F5:B0:CD:90:75 Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 42F14C38ED1B4EDDF4757375E4395244F16B26F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: B7 Signing time: Fri 28 Aug 2026 06:47:58 +0000 Manifest this update: Fri 28 Aug 2026 06:42:58 +0000 Manifest next update: Mon 31 Aug 2026 14:54:58 +0000 Files and hashes: 1: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 2: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) 3: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: 2E/ThKCt2NNvag/g3NG54SYlncj+D9seU6akAjSVMDU=) 4: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f1:4c:38:ed:1b:4e:dd:f4:75:73:75:e4:39:52:44:f1:6b:26:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Aug 28 06:42:58 2026 GMT Not After : Aug 31 14:54:58 2026 GMT Subject: CN=2788135F2484ADBD4CFF2E6EE8330CF5B0CD9075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:83:65:e3:5f:2f:c4:1c:2e:8b:5e:24:ef:70: d3:c1:e2:4a:ce:49:35:5c:bc:10:aa:45:c3:f0:8d: 71:55:d6:2c:48:79:1d:41:7f:04:d2:83:af:e2:fd: 0a:6a:21:6d:ac:78:80:76:34:31:71:a9:92:7c:d3: 5e:ff:ae:c6:8b:1f:f4:50:c3:fb:cc:40:83:aa:80: 9a:7d:c3:a6:ca:d4:d2:9e:9f:24:c8:d7:88:8f:8c: 0a:ce:9e:f3:16:17:b3:b0:1b:81:26:d9:c3:4b:a2: e0:0a:75:88:da:55:87:47:3c:64:23:e4:e9:71:ed: 29:aa:72:c9:f8:fd:79:3d:fd:5a:41:4a:7c:0a:23: d6:fb:ab:84:82:23:ce:7c:a8:83:a4:fd:54:1b:b9: 6f:45:7e:3d:b9:7e:b8:ab:f2:4f:a6:a9:61:b7:f5: 8b:2c:b1:28:c8:18:0a:90:ad:39:a8:35:de:2d:24: c5:28:54:fd:a8:54:c4:10:38:c9:47:49:8d:e1:1e: 0c:15:5f:02:6a:1b:d1:e3:fc:09:38:9d:7f:bb:f5: c8:dd:c0:78:4d:03:9f:67:d6:ce:8f:77:3d:71:ab: d4:7c:6a:02:a6:a6:fd:8e:a3:38:b1:e5:22:e1:5f: 26:74:0d:19:16:50:c8:e3:8f:47:37:59:c6:0a:70: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:13:5F:24:84:AD:BD:4C:FF:2E:6E:E8:33:0C:F5:B0:CD:90:75 X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2e:fa:0b:de:37:f6:2a:f7:8e:11:20:fd:e6:2f:e7:24:94: a4:8a:94:d0:cb:da:61:0f:40:62:11:b5:8a:d1:d7:29:f3:2c: 59:72:57:01:a1:44:66:34:4b:7b:e7:19:17:24:35:96:84:12: 54:86:17:88:16:65:cc:43:b8:82:a3:bf:e4:d0:4a:2b:8b:2e: 80:84:20:ec:bb:7c:b0:11:da:44:09:af:03:43:35:57:d8:a5: cd:a5:c9:57:02:19:b3:e3:90:8e:ac:87:8e:67:0a:f1:58:f3: 25:a5:08:ad:08:9e:07:1c:12:89:54:af:55:70:ea:ff:73:a9: 6f:bc:81:f8:77:b1:ee:b3:c4:ea:98:9f:d9:7e:60:c5:1c:62: 73:21:37:2d:ff:55:1b:77:3c:98:bc:c6:4a:df:7a:19:10:2e: 55:53:07:6a:0b:e0:d0:d2:da:dc:eb:29:fa:bb:44:7b:d9:9b: c3:c7:b4:ae:c3:ed:00:a7:c7:a0:ba:9e:54:fa:6d:3d:59:85: 76:b0:fd:df:4f:ba:b8:f3:b8:f2:fb:4c:b2:83:ca:3a:3a:7b: 5d:44:38:2b:9e:f3:20:41:9d:07:04:97:c6:dc:6f:a1:ac:13: 98:e6:39:10:a9:3c:a3:50:49:d6:68:5d:6b:fb:a2:9c:1e:cd: ca:07:14:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQvFMOO0bTt30dXN15DlSRPFrJvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA4MjgwNjQyNThaFw0yNjA4MzExNDU0NThaMDMxMTAvBgNV BAMTKDI3ODgxMzVGMjQ4NEFEQkQ0Q0ZGMkU2RUU4MzMwQ0Y1QjBDRDkwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7g2XjXy/EHC6LXiTvcNPB4krO STVcvBCqRcPwjXFV1ixIeR1BfwTSg6/i/QpqIW2seIB2NDFxqZJ8017/rsaLH/RQ w/vMQIOqgJp9w6bK1NKenyTI14iPjArOnvMWF7OwG4Em2cNLouAKdYjaVYdHPGQj 5Olx7Smqcsn4/Xk9/VpBSnwKI9b7q4SCI858qIOk/VQbuW9Ffj25frir8k+mqWG3 9YsssSjIGAqQrTmoNd4tJMUoVP2oVMQQOMlHSY3hHgwVXwJqG9Hj/Ak4nX+79cjd wHhNA59n1s6Pdz1xq9R8agKmpv2Oozix5SLhXyZ0DRkWUMjjj0c3WcYKcGXVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ4gTXySErb1M/y5u6DMM9bDNkHUwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy76C9439ir3 jhEg/eYv5ySUpIqU0MvaYQ9AYhG1itHXKfMsWXJXAaFEZjRLe+cZFyQ1loQSVIYX iBZlzEO4gqO/5NBKK4sugIQg7Lt8sBHaRAmvA0M1V9ilzaXJVwIZs+OQjqyHjmcK 8VjzJaUIrQieBxwSiVSvVXDq/3Opb7yB+Hex7rPE6pif2X5gxRxicyE3Lf9VG3c8 mLzGSt96GRAuVVMHagvg0NLa3Osp+rtEe9mbw8e0rsPtAKfHoLqeVPptPVmFdrD9 30+6uPO48vtMsoPKOjp7XUQ4K57zIEGdBwSXxtxvoawTmOY5EKk8o1BJ1mhda/ui nB7NygcUzQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:27 2026 by rpki-client