$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: 6Kc9tzipbcLGwl8xvrxislhK3asjPO9byXCRcr6PToU= Subject key identifier: 8A:EE:6E:FF:DD:BF:1A:AC:7A:1F:C9:75:EB:A7:53:23:B9:4D:8A:7E Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 3039DDF744B1CD5777BAEFB334D2839F6BB304F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 3C Signing time: Fri 29 May 2026 01:32:25 +0000 Manifest this update: Fri 29 May 2026 01:27:25 +0000 Manifest next update: Sat 30 May 2026 05:04:25 +0000 Files and hashes: 1: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: hh3DV5YANV8IfROt4aihFXRSXuyrnld3hommlpbR1FA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:dd:f7:44:b1:cd:57:77:ba:ef:b3:34:d2:83:9f:6b:b3:04:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: May 29 01:27:25 2026 GMT Not After : May 30 05:04:25 2026 GMT Subject: CN=8AEE6EFFDDBF1AAC7A1FC975EBA75323B94D8A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:5a:06:89:25:e4:e9:b7:68:33:8e:7f:7f: 22:ae:3a:2c:8c:cb:26:7d:26:12:fd:f2:6e:26:50: 9d:b7:c0:bb:ae:50:30:b0:15:82:64:c6:0d:dc:c5: 7b:25:e7:d3:8a:a3:3d:cc:16:af:43:7a:aa:28:c9: df:66:54:02:e1:c4:c6:58:f4:e2:4a:da:48:af:85: 06:60:b0:21:43:c3:0f:17:7d:72:19:76:50:00:90: ee:04:64:f9:8c:00:6a:7e:a3:86:7c:a3:4d:da:17: a0:1c:29:5e:b1:bb:69:5a:42:70:d5:e7:7f:82:bc: 33:18:fb:74:81:ec:f3:de:e6:81:18:1e:d7:f9:9f: e0:81:1a:73:fe:37:16:df:4d:5c:34:54:e8:fe:68: b0:96:27:77:60:7d:a4:77:ba:3d:ad:c8:09:23:ef: 0b:08:53:02:6c:c9:24:c8:f3:4a:d3:cf:e7:2c:51: 01:81:e1:f0:b6:7a:4e:65:b4:7e:e9:59:35:f4:db: 41:46:ac:33:62:28:02:cc:5c:f6:d5:4c:9a:08:80: 43:61:f8:e3:ed:77:af:03:82:ac:50:1b:d2:e4:88: cf:6a:f6:70:d3:b2:4d:cb:e8:72:f6:7a:e7:fd:41: bc:2b:97:a1:52:61:fd:2e:e9:8d:74:9f:3d:a1:89: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EE:6E:FF:DD:BF:1A:AC:7A:1F:C9:75:EB:A7:53:23:B9:4D:8A:7E X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:dc:03:80:0a:3e:69:9f:8c:93:b4:f5:88:c0:72:c3:99:ee: 76:a1:be:1d:e3:8d:63:f4:f0:ff:b0:e0:07:89:a3:2c:1c:12: cf:f6:67:45:b4:51:a7:83:c5:2c:c8:0a:e5:e9:67:2f:3d:ce: c8:4a:d7:b7:01:99:1f:db:1c:47:a6:81:36:f8:5a:6a:ee:65: 86:7e:69:c9:14:ba:5e:8b:e9:58:4a:9c:1c:08:36:c8:b9:f6: 21:bd:00:73:bc:c9:f6:d1:d0:c2:0e:85:8c:12:a6:47:35:87: 3c:2a:4c:63:25:0a:7d:68:6c:ff:22:9d:dc:14:b9:61:a9:78: 72:57:93:35:57:30:7e:c2:50:19:60:9d:a8:0e:2a:82:3e:29: a4:06:2a:49:c0:86:06:6d:8e:33:90:33:eb:b9:6a:e4:9a:8f: bc:76:0c:72:c7:2f:ec:20:1d:8f:8d:38:7a:26:6a:0f:3c:a8: 58:61:03:3b:a9:c1:fd:0a:03:5a:39:75:ce:f5:d0:e6:ba:1d: ca:b6:3e:b7:f6:bd:cc:f3:13:04:a4:15:15:3f:9a:a2:3c:33: 55:65:2f:76:f4:21:8f:b3:8e:ab:b4:eb:14:93:57:a0:87:25: c7:eb:bb:37:04:5e:41:48:da:44:9a:be:61:db:4c:16:63:db: 3a:86:d1:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMDnd90SxzVd3uu+zNNKDn2uzBPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA1MjkwMTI3MjVaFw0yNjA1MzAwNTA0MjVaMDMxMTAvBgNV BAMTKDhBRUU2RUZGRERCRjFBQUM3QTFGQzk3NUVCQTc1MzIzQjk0RDhBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaloGiSXk6bdoM45/fyKuOiyM yyZ9JhL98m4mUJ23wLuuUDCwFYJkxg3cxXsl59OKoz3MFq9Deqooyd9mVALhxMZY 9OJK2kivhQZgsCFDww8XfXIZdlAAkO4EZPmMAGp+o4Z8o03aF6AcKV6xu2laQnDV 53+CvDMY+3SB7PPe5oEYHtf5n+CBGnP+NxbfTVw0VOj+aLCWJ3dgfaR3uj2tyAkj 7wsIUwJsySTI80rTz+csUQGB4fC2ek5ltH7pWTX020FGrDNiKALMXPbVTJoIgENh +OPtd68DgqxQG9LkiM9q9nDTsk3L6HL2euf9Qbwrl6FSYf0u6Y10nz2hiYbzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiu5u/92/Gqx6H8l166dTI7lNin4wHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNwDgAo+aZ+M k7T1iMByw5nudqG+HeONY/Tw/7DgB4mjLBwSz/ZnRbRRp4PFLMgK5elnLz3OyErX twGZH9scR6aBNvhaau5lhn5pyRS6XovpWEqcHAg2yLn2Ib0Ac7zJ9tHQwg6FjBKm RzWHPCpMYyUKfWhs/yKd3BS5Yal4cleTNVcwfsJQGWCdqA4qgj4ppAYqScCGBm2O M5Az67lq5JqPvHYMcscv7CAdj404eiZqDzyoWGEDO6nB/QoDWjl1zvXQ5rodyrY+ t/a9zPMTBKQVFT+aojwzVWUvdvQhj7OOq7TrFJNXoIclx+u7NwReQUjaRJq+YdtM FmPbOobRwQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:46 2026 by rpki-client