$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: dyF+dIbYIumsVwcBi+IHKapk4N9Sd76FwS0qPFvC/1M= Subject key identifier: D1:BC:23:DA:7D:0F:A4:AA:DA:0B:99:E2:18:2D:00:39:EB:48:51:2A Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 6BFF16B2A4977AB5CD5A67C710FE587AA5375B3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 03:16:03 +0000 Manifest this update: Thu 24 Sep 2026 03:11:03 +0000 Manifest next update: Sun 27 Sep 2026 10:39:03 +0000 Files and hashes: 1: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 2: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: wORIKoUYi2rChVR7966l4ImXbvEhZClE/LQVWyUxse8=) 3: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 4: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ff:16:b2:a4:97:7a:b5:cd:5a:67:c7:10:fe:58:7a:a5:37:5b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Sep 24 03:11:03 2026 GMT Not After : Sep 27 10:39:03 2026 GMT Subject: CN=D1BC23DA7D0FA4AADA0B99E2182D0039EB48512A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:a2:f5:ca:e0:65:a3:f0:a0:96:1c:1b:a4: b0:ae:2a:7f:50:49:85:66:c3:54:de:0d:6d:f8:dd: e3:d7:90:f5:9c:8a:be:2f:47:36:db:f1:60:56:6c: 2b:ba:c4:be:67:1b:eb:5f:0f:d4:8a:bc:da:f9:08: 57:27:70:42:03:8f:c8:11:de:50:c0:1f:df:34:e1: 66:23:8b:7a:fc:b4:9b:f1:a7:4f:b9:67:61:03:84: 29:30:00:c0:2d:48:cd:bb:e9:a7:cb:39:0b:ed:b3: a0:da:dc:2a:3b:d6:fc:16:15:2b:d3:99:b8:00:3d: 99:7c:f4:d4:9b:33:78:aa:d7:4a:11:a1:01:49:88: ca:09:4b:c5:41:12:11:c0:db:ee:c1:9c:e1:d7:98: 26:f8:8e:96:06:e8:d9:59:56:11:a2:e9:c5:03:a3: 3e:a0:44:48:25:7a:ed:5c:eb:19:19:30:0a:03:8d: 6f:71:0c:84:71:d2:91:f1:df:b5:df:d8:76:bd:37: cc:97:1c:fb:e9:4f:cc:c9:1e:ba:84:dc:36:92:70: 21:e0:a6:23:d3:68:65:37:00:7e:36:f2:06:2b:48: 7a:c3:3a:d0:a2:ac:d6:96:af:71:38:13:ff:86:d1: 69:34:d7:32:86:fe:12:1c:d6:53:4c:79:d5:bc:00: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BC:23:DA:7D:0F:A4:AA:DA:0B:99:E2:18:2D:00:39:EB:48:51:2A X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:84:b6:07:9b:15:61:94:f2:9e:55:01:f1:8a:fc:98:12:e9: f8:cc:25:3c:bd:cb:b0:58:4a:dd:3c:9f:16:0e:3f:d4:83:8d: 3b:b1:9f:3e:e7:97:09:a9:9c:c7:5b:27:98:ef:2a:0f:ab:73: 0c:52:31:fd:84:ef:73:86:00:fb:d3:cc:a7:e2:06:31:5c:e4: d7:d0:b9:1c:71:83:c0:5f:ae:2d:70:f2:10:df:d6:ab:3c:88: 01:68:f3:35:6e:61:2a:1d:1b:13:ba:9c:93:21:ad:ce:3b:3e: 1f:7a:a5:c8:af:66:65:68:4f:5c:be:ac:e8:c6:4f:90:d7:15: c7:7b:12:11:46:ee:89:88:94:d5:0f:07:41:6c:83:6d:12:63: f0:e2:f1:5f:20:4b:16:9e:e7:75:fd:08:51:de:8a:c7:26:9b: e1:eb:11:95:2e:3f:ee:1e:99:f2:8b:ba:8d:37:69:f3:0e:dd: 36:77:29:ec:c4:b8:04:77:e2:76:75:4e:40:46:99:51:1d:ca: 4d:1e:78:aa:03:17:39:77:c2:86:24:f5:8e:d1:da:57:2e:4d: 1f:8a:c2:cd:75:af:8c:ff:6c:50:44:fc:06:19:c9:83:b4:12: 6d:ec:10:fe:e3:a1:31:d6:05:14:3d:86:42:4e:58:e6:41:cf: 24:4b:00:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa/8WsqSXerXNWmfHEP5YeqU3Wz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA5MjQwMzExMDNaFw0yNjA5MjcxMDM5MDNaMDMxMTAvBgNV BAMTKEQxQkMyM0RBN0QwRkE0QUFEQTBCOTlFMjE4MkQwMDM5RUI0ODUxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+KL1yuBlo/CglhwbpLCuKn9Q SYVmw1TeDW343ePXkPWcir4vRzbb8WBWbCu6xL5nG+tfD9SKvNr5CFcncEIDj8gR 3lDAH9804WYji3r8tJvxp0+5Z2EDhCkwAMAtSM276afLOQvts6Da3Co71vwWFSvT mbgAPZl89NSbM3iq10oRoQFJiMoJS8VBEhHA2+7BnOHXmCb4jpYG6NlZVhGi6cUD oz6gREgleu1c6xkZMAoDjW9xDIRx0pHx37Xf2Ha9N8yXHPvpT8zJHrqE3DaScCHg piPTaGU3AH428gYrSHrDOtCirNaWr3E4E/+G0Wk01zKG/hIc1lNMedW8AKfjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0bwj2n0PpKraC5niGC0AOetIUSowHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIS2B5sVYZTy nlUB8Yr8mBLp+MwlPL3LsFhK3TyfFg4/1IONO7GfPueXCamcx1snmO8qD6tzDFIx /YTvc4YA+9PMp+IGMVzk19C5HHGDwF+uLXDyEN/WqzyIAWjzNW5hKh0bE7qckyGt zjs+H3qlyK9mZWhPXL6s6MZPkNcVx3sSEUbuiYiU1Q8HQWyDbRJj8OLxXyBLFp7n df0IUd6Kxyab4esRlS4/7h6Z8ou6jTdp8w7dNncp7MS4BHfidnVOQEaZUR3KTR54 qgMXOXfChiT1jtHaVy5NH4rCzXWvjP9sUET8BhnJg7QSbewQ/uOhMdYFFD2GQk5Y 5kHPJEsA9Q== -----END CERTIFICATE-----Generated at Sat Sep 26 11:06:43 2026 by rpki-client