$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: Pv63sl9+NVlOP9XAaMR+1GU7Qq5rT3qBzZlbJ6FRnc4= Subject key identifier: F0:BB:5A:73:FC:6A:B7:7A:83:24:53:78:D3:2A:C7:DA:F7:99:2C:DF Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 06127C296E3FE8AD9ACA23C8A69FF48627AFF4E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 87 Signing time: Thu 23 Jul 2026 21:24:35 +0000 Manifest this update: Thu 23 Jul 2026 21:19:35 +0000 Manifest next update: Fri 24 Jul 2026 23:58:35 +0000 Files and hashes: 1: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 2: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 3: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: E8ZHECwFxiFU6EFVhoUa62tkQUxeHrK5gDJfRhpb7Ws=) 4: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:12:7c:29:6e:3f:e8:ad:9a:ca:23:c8:a6:9f:f4:86:27:af:f4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Jul 23 21:19:35 2026 GMT Not After : Jul 24 23:58:35 2026 GMT Subject: CN=F0BB5A73FC6AB77A83245378D32AC7DAF7992CDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:32:33:87:03:83:7c:1a:8f:b8:68:c2:83: 4a:86:35:9e:64:94:85:1b:29:a8:3f:c0:a0:c2:6d: e8:39:12:19:cb:57:ff:a3:71:ee:a7:33:da:19:43: 2b:06:1e:04:f4:b6:c9:c9:06:65:32:d6:b6:af:11: 2d:bf:b6:b4:5c:9f:a4:75:be:94:c4:da:cb:4c:85: 18:16:1c:41:5d:07:aa:ca:09:8e:fb:4a:53:3f:bc: 57:1d:2c:bb:a8:5e:e5:dc:6b:46:02:b7:71:81:45: 92:74:06:20:cb:0c:e9:00:7d:85:fb:7d:54:d5:d3: 97:a8:cf:cc:31:bb:1d:7f:eb:38:ce:32:f2:2e:36: 15:58:86:88:64:c2:73:68:9e:ae:01:84:32:70:5f: ec:bd:43:f2:f3:2f:ce:8f:81:58:45:ee:f5:e7:0a: e6:74:cd:89:8f:c0:b5:6f:cc:1e:f8:6d:70:9b:57: 73:89:27:1a:69:21:64:1a:33:82:2c:4d:5a:8e:07: 8b:43:81:43:f5:4f:f7:0f:bc:87:f4:64:d7:6b:02: 54:40:d9:04:33:8d:5c:a7:f2:9c:c5:3d:da:8f:9e: 7b:49:8c:8e:b5:67:b0:03:4a:ea:5f:19:ae:26:ea: 56:b8:dc:aa:c5:d2:86:20:91:94:85:9f:08:9b:74: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:5A:73:FC:6A:B7:7A:83:24:53:78:D3:2A:C7:DA:F7:99:2C:DF X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c1:b3:8f:8d:31:1f:c9:23:6d:72:94:b6:b8:56:d6:8e:53: fe:81:01:6d:c4:d9:70:42:ef:db:40:5d:03:49:36:99:da:a7: 8d:5d:7c:2e:5d:28:ce:0a:c0:ad:3c:9f:28:af:c0:01:ca:5c: 5b:fe:a9:ec:be:99:5d:b5:ed:9e:a1:2f:0e:72:44:bc:18:cb: 3d:7b:63:d5:a9:95:ef:46:6b:bf:91:3b:0a:96:42:e7:d9:25: bf:02:6b:4f:6e:93:59:fa:73:0c:25:7c:8d:c2:6b:87:b8:d7: cf:59:aa:79:ca:0b:35:01:5d:27:1f:39:de:3b:86:3a:da:42: 6d:22:9e:4d:b7:b2:9d:14:27:8c:5c:92:03:92:89:cb:85:31: fa:fb:48:88:21:b7:f9:b4:6b:68:b0:f7:51:da:77:76:88:13: 44:22:72:11:5d:6b:38:aa:19:c0:bf:b0:8d:40:60:40:4e:7d: 48:03:37:43:9c:f2:d3:1c:9e:15:d0:a3:f3:f2:13:69:d8:9f: f1:cc:9d:f3:ee:e8:cc:2b:1d:bb:0e:fa:6f:0a:9e:12:ca:06: f9:ce:13:d3:02:84:25:9c:b3:ee:77:02:e3:6b:f4:5c:43:c8: 7a:2a:40:7e:2c:38:da:a5:c3:61:21:f2:eb:8d:c1:18:ae:4b: ae:51:7d:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBhJ8KW4/6K2ayiPIpp/0hiev9OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA3MjMyMTE5MzVaFw0yNjA3MjQyMzU4MzVaMDMxMTAvBgNV BAMTKEYwQkI1QTczRkM2QUI3N0E4MzI0NTM3OEQzMkFDN0RBRjc5OTJDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8jIzhwODfBqPuGjCg0qGNZ5k lIUbKag/wKDCbeg5EhnLV/+jce6nM9oZQysGHgT0tsnJBmUy1ravES2/trRcn6R1 vpTE2stMhRgWHEFdB6rKCY77SlM/vFcdLLuoXuXca0YCt3GBRZJ0BiDLDOkAfYX7 fVTV05eoz8wxux1/6zjOMvIuNhVYhohkwnNonq4BhDJwX+y9Q/LzL86PgVhF7vXn CuZ0zYmPwLVvzB74bXCbV3OJJxppIWQaM4IsTVqOB4tDgUP1T/cPvIf0ZNdrAlRA 2QQzjVyn8pzFPdqPnntJjI61Z7ADSupfGa4m6la43KrF0oYgkZSFnwibdHtrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8Ltac/xqt3qDJFN40yrH2veZLN8wHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcGzj40xH8kj bXKUtrhW1o5T/oEBbcTZcELv20BdA0k2mdqnjV18Ll0ozgrArTyfKK/AAcpcW/6p 7L6ZXbXtnqEvDnJEvBjLPXtj1amV70Zrv5E7CpZC59klvwJrT26TWfpzDCV8jcJr h7jXz1mqecoLNQFdJx853juGOtpCbSKeTbeynRQnjFySA5KJy4Ux+vtIiCG3+bRr aLD3Udp3dogTRCJyEV1rOKoZwL+wjUBgQE59SAM3Q5zy0xyeFdCj8/ITadif8cyd 8+7ozCsduw76bwqeEsoG+c4T0wKEJZyz7ncC42v0XEPIeipAfiw42qXDYSHy643B GK5LrlF9Yg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:33 2026 by rpki-client