$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: nV5EURyjhmZSSb5iKRIi8piEtRFzzJCvlsnufMQ1j3E= Subject key identifier: 49:B0:87:60:72:92:F1:38:63:4A:4A:FE:7D:85:8B:2E:44:B7:1F:E4 Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 3C3A9B2DC59CAB71855DA6B5B70D5D42FD293587 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: C5 Signing time: Mon 28 Sep 2026 21:41:35 +0000 Manifest this update: Mon 28 Sep 2026 21:36:35 +0000 Manifest next update: Fri 02 Oct 2026 02:36:35 +0000 Files and hashes: 1: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) 2: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: ct4oreJ+uCSAri76mIHn2obUmFUhdo2McB7hCUSvXP4=) 3: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 4: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3a:9b:2d:c5:9c:ab:71:85:5d:a6:b5:b7:0d:5d:42:fd:29:35:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Sep 28 21:36:35 2026 GMT Not After : Oct 2 02:36:35 2026 GMT Subject: CN=49B087607292F138634A4AFE7D858B2E44B71FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:fb:ea:03:ef:39:61:fa:a3:c4:db:d5:2f: d6:3f:7f:5c:91:ef:81:35:0f:d3:dd:8b:81:9f:cb: 16:90:7d:8d:f7:c1:3a:4c:db:ae:e2:c6:26:4c:07: 11:86:68:17:5a:d5:a3:6d:15:bf:b2:7d:19:dc:f3: 83:ad:2b:09:70:d8:36:6c:b1:03:7c:2b:bc:cb:a4: aa:ba:6c:ee:78:2b:da:a5:1a:01:cb:d0:32:8b:e4: f6:b4:b5:15:fb:45:d9:7b:36:f1:df:36:ab:f3:7d: b1:31:89:ca:f5:0b:31:f5:c3:fa:37:ea:a4:4d:86: c1:f4:32:03:26:d3:27:bc:74:bb:d9:29:e9:74:85: da:85:71:a3:29:06:2b:dc:25:5a:e0:58:8d:3e:62: 04:e0:45:ff:43:90:22:d5:82:db:29:05:4a:fa:aa: 0e:7d:cd:4f:42:9c:c1:4e:25:19:53:68:67:e7:bd: 35:00:7a:f0:14:44:2a:b9:ee:e4:38:cb:ff:d0:9b: 45:f1:a9:f9:85:bc:f5:91:ea:b0:52:0e:4f:35:bc: 70:75:db:d6:4a:04:94:7e:6c:4a:60:c6:dc:56:44: fd:ad:a7:e2:79:f0:6f:e1:ff:e7:d1:6c:0d:f6:35: 35:78:d1:cc:fc:69:68:cd:89:2e:7a:c4:44:39:89: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B0:87:60:72:92:F1:38:63:4A:4A:FE:7D:85:8B:2E:44:B7:1F:E4 X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:44:2a:54:c1:a5:50:a5:28:c7:66:2b:66:de:e9:18:1e:47: 5d:bc:20:39:10:ff:5f:02:d6:97:f2:a1:28:9e:58:6d:2b:d1: 0b:83:37:ce:31:4f:07:83:0d:f4:67:79:ae:03:17:1d:0f:c3: 1b:6c:c1:09:9a:32:b3:7c:41:68:8d:4e:3b:f8:37:e4:f3:76: 53:90:2b:2c:46:c4:93:04:8c:74:38:b4:3a:56:75:41:b3:cb: a5:81:78:f9:56:c3:87:40:de:3a:71:06:08:3f:f5:a2:45:c3: e9:84:d2:eb:6d:95:d0:98:6c:65:0f:91:c9:52:80:df:05:74: eb:a0:0e:fa:2c:bd:06:83:cf:5a:3d:fc:15:d0:c3:84:a3:96: 71:78:9d:1f:43:af:85:b3:11:b6:57:22:e1:bb:77:b3:f4:9a: 1e:72:a9:90:c7:3d:0e:2b:50:2c:59:f4:21:a7:29:82:cc:6d: d8:bf:b6:ae:18:cb:32:d5:ee:9a:ae:26:34:74:70:70:d1:b8: f4:56:a2:43:1c:e4:5a:a3:22:f8:45:7f:5a:76:d0:0d:39:22: 4d:99:47:c6:db:60:dc:5c:17:5c:84:0b:b0:d3:8e:d7:14:23: 99:fe:af:48:78:19:ee:e0:c0:14:7c:75:14:c0:4a:e4:07:32: 35:1d:3f:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPDqbLcWcq3GFXaa1tw1dQv0pNYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA5MjgyMTM2MzVaFw0yNjEwMDIwMjM2MzVaMDMxMTAvBgNV BAMTKDQ5QjA4NzYwNzI5MkYxMzg2MzRBNEFGRTdEODU4QjJFNDRCNzFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaF/vqA+85YfqjxNvVL9Y/f1yR 74E1D9Pdi4GfyxaQfY33wTpM267ixiZMBxGGaBda1aNtFb+yfRnc84OtKwlw2DZs sQN8K7zLpKq6bO54K9qlGgHL0DKL5Pa0tRX7Rdl7NvHfNqvzfbExicr1CzH1w/o3 6qRNhsH0MgMm0ye8dLvZKel0hdqFcaMpBivcJVrgWI0+YgTgRf9DkCLVgtspBUr6 qg59zU9CnMFOJRlTaGfnvTUAevAURCq57uQ4y//Qm0XxqfmFvPWR6rBSDk81vHB1 29ZKBJR+bEpgxtxWRP2tp+J58G/h/+fRbA32NTV40cz8aWjNiS56xEQ5iYrxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSbCHYHKS8ThjSkr+fYWLLkS3H+QwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUQqVMGlUKUo x2YrZt7pGB5HXbwgORD/XwLWl/KhKJ5YbSvRC4M3zjFPB4MN9Gd5rgMXHQ/DG2zB CZoys3xBaI1OO/g35PN2U5ArLEbEkwSMdDi0OlZ1QbPLpYF4+VbDh0DeOnEGCD/1 okXD6YTS622V0JhsZQ+RyVKA3wV066AO+iy9BoPPWj38FdDDhKOWcXidH0OvhbMR tlci4bt3s/SaHnKpkMc9DitQLFn0Iacpgsxt2L+2rhjLMtXumq4mNHRwcNG49Fai QxzkWqMi+EV/WnbQDTkiTZlHxttg3FwXXIQLsNOO1xQjmf6vSHgZ7uDAFHx1FMBK 5AcyNR0/XQ== -----END CERTIFICATE-----Generated at Tue Sep 29 04:57:08 2026 by rpki-client