$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: 1tTLfKUsXel9zg5s/mYUdWKOtYtj83hlumMiAWwh3pI= Subject key identifier: 84:51:3D:CB:61:68:7F:77:A6:D3:97:82:8A:F4:90:1F:7F:CF:DC:EE Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 236BDDC9BC0C05189651DD8D32AD1EAD69ABCE34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 27 Signing time: Wed 13 May 2026 08:46:03 +0000 Manifest this update: Wed 13 May 2026 08:41:03 +0000 Manifest next update: Thu 14 May 2026 09:04:03 +0000 Files and hashes: 1: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: o/hiEU36Sm/QHWoSTt4TUhUtj6ygDDoPl2LYb9dVLFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6b:dd:c9:bc:0c:05:18:96:51:dd:8d:32:ad:1e:ad:69:ab:ce:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: May 13 08:41:03 2026 GMT Not After : May 14 09:04:03 2026 GMT Subject: CN=84513DCB61687F77A6D397828AF4901F7FCFDCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:6f:b0:83:dd:46:e8:78:32:65:96:9b:c1: c4:11:5b:2d:7d:9c:38:92:73:6a:bd:e9:67:7f:ca: a0:ad:32:19:1e:53:cd:31:3a:94:06:a0:9e:a8:ae: 95:b6:e3:02:88:d2:fe:58:97:4c:4d:57:bb:2f:b5: 3a:61:47:98:46:dc:7a:bc:3f:9f:6f:59:55:6a:d1: e7:f4:19:dd:25:fa:28:92:b4:09:8e:63:59:63:69: 5d:e8:f8:a1:87:89:2d:a7:df:f6:85:55:c6:fc:22: 3d:b4:04:a4:d0:41:a1:b6:1a:02:f8:d4:77:d8:e8: 1d:5c:18:31:58:7e:b8:aa:fd:70:e3:76:02:38:b4: 4d:3f:3a:d9:2f:06:84:be:cf:03:77:1b:46:95:8c: c4:63:74:6d:5a:9d:da:62:62:8d:7c:b5:1a:c5:ee: 8e:d1:d9:a7:16:93:b9:d4:ed:67:fa:e7:97:93:0d: b4:9e:8c:fc:ff:44:3b:4f:c3:df:77:52:94:68:9f: c7:5c:59:21:02:d0:49:d8:23:d7:28:d2:1e:ac:d6: 70:56:98:6c:10:44:f7:2d:dd:1a:2c:a7:6f:e2:dd: 42:9a:0e:69:e9:68:a0:f0:14:86:7a:bc:82:68:f1: 53:6f:50:d9:a3:40:8e:b5:55:44:1d:0e:c9:81:f8: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:51:3D:CB:61:68:7F:77:A6:D3:97:82:8A:F4:90:1F:7F:CF:DC:EE X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:db:eb:43:e1:d2:0c:39:f9:dd:10:ab:69:ef:a7:b8:67:b7: 33:4b:60:28:75:81:9c:c3:51:56:60:68:0e:00:71:cd:14:e9: b0:6b:ba:d1:82:a4:fd:18:65:d3:f0:de:d4:d5:5a:bf:63:07: e1:b0:27:be:ac:b9:77:bc:2d:a9:29:b3:3a:43:c5:b2:9c:f6: 2d:4b:a3:19:89:bd:a8:ec:c1:04:ae:16:c1:1c:48:04:fb:93: 40:40:cd:3d:c2:95:38:32:bb:02:27:94:a2:6a:73:b3:72:e5: 4b:cc:02:d0:06:42:47:e5:75:fa:b5:36:6c:70:56:98:ad:40: 2a:ee:46:72:0e:bb:0f:6f:40:32:aa:d6:c2:36:66:37:22:52: 97:24:d0:f7:58:78:51:f3:73:1b:96:e8:f8:43:3c:44:9a:a2: 42:03:7f:97:00:b5:03:30:2d:80:52:45:dd:91:19:c3:1b:ee: 50:6c:32:b8:03:74:73:b2:e8:31:7c:1c:cf:46:b9:91:88:bb: d7:c2:f7:ed:22:12:45:5e:76:59:69:01:df:46:c4:76:2b:a2: c1:44:ca:6d:7d:2f:6c:bb:71:89:93:20:b0:f8:fa:40:5a:d7: 77:c2:97:eb:d3:42:e1:e4:e4:2c:68:06:e3:9e:c9:89:bf:e5: 92:7b:aa:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI2vdybwMBRiWUd2NMq0erWmrzjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA1MTMwODQxMDNaFw0yNjA1MTQwOTA0MDNaMDMxMTAvBgNV BAMTKDg0NTEzRENCNjE2ODdGNzdBNkQzOTc4MjhBRjQ5MDFGN0ZDRkRDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XW+wg91G6HgyZZabwcQRWy19 nDiSc2q96Wd/yqCtMhkeU80xOpQGoJ6orpW24wKI0v5Yl0xNV7svtTphR5hG3Hq8 P59vWVVq0ef0Gd0l+iiStAmOY1ljaV3o+KGHiS2n3/aFVcb8Ij20BKTQQaG2GgL4 1HfY6B1cGDFYfriq/XDjdgI4tE0/OtkvBoS+zwN3G0aVjMRjdG1andpiYo18tRrF 7o7R2acWk7nU7Wf655eTDbSejPz/RDtPw993UpRon8dcWSEC0EnYI9co0h6s1nBW mGwQRPct3Rosp2/i3UKaDmnpaKDwFIZ6vIJo8VNvUNmjQI61VUQdDsmB+A7BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhFE9y2Fof3em05eCivSQH3/P3O4wHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtvrQ+HSDDn5 3RCrae+nuGe3M0tgKHWBnMNRVmBoDgBxzRTpsGu60YKk/Rhl0/De1NVav2MH4bAn vqy5d7wtqSmzOkPFspz2LUujGYm9qOzBBK4WwRxIBPuTQEDNPcKVODK7AieUompz s3LlS8wC0AZCR+V1+rU2bHBWmK1AKu5Gcg67D29AMqrWwjZmNyJSlyTQ91h4UfNz G5bo+EM8RJqiQgN/lwC1AzAtgFJF3ZEZwxvuUGwyuAN0c7LoMXwcz0a5kYi718L3 7SISRV52WWkB30bEdiuiwUTKbX0vbLtxiZMgsPj6QFrXd8KX69NC4eTkLGgG457J ib/lknuqDQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client