$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: suEt05Qbk3Hms55LKDFRiCNDUA8y4+4zQQr3NLkXvGc= Subject key identifier: 12:42:DD:4E:AB:53:50:9A:BD:EE:D3:F3:B9:D2:73:AA:2C:9C:DE:EE Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 6D27AE7E89121A18130272EBD576F6DB133D021E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 8F Signing time: Wed 29 Jul 2026 17:04:50 +0000 Manifest this update: Wed 29 Jul 2026 16:59:50 +0000 Manifest next update: Thu 30 Jul 2026 17:45:50 +0000 Files and hashes: 1: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 2: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) 3: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: P/XRFld8Vgq+rgsiYfGCaYP74URXC5AwnwXeZ/mi1kc=) 4: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:27:ae:7e:89:12:1a:18:13:02:72:eb:d5:76:f6:db:13:3d:02:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Jul 29 16:59:50 2026 GMT Not After : Jul 30 17:45:50 2026 GMT Subject: CN=1242DD4EAB53509ABDEED3F3B9D273AA2C9CDEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:65:ba:6e:06:4b:4e:87:14:93:ad:8b:47: f9:53:3e:c8:bc:2f:28:b5:2c:89:3f:4c:b1:c2:fa: 80:58:b3:6e:67:0a:fa:95:83:af:a1:1a:95:80:31: 6b:67:d6:76:e7:9a:3f:d2:c9:3e:85:bc:4a:83:fc: 91:2d:89:28:14:0a:13:80:99:b8:79:c6:04:ad:b5: 92:fb:8b:3d:4f:fa:4b:b4:67:e5:a7:e6:ee:19:cb: 14:d2:bc:1c:6c:39:69:87:79:4c:55:a3:4e:a2:c9: a9:60:02:2f:47:3f:1f:75:a7:16:90:40:81:fe:53: 2e:49:fa:53:21:da:68:17:48:3e:c5:7c:66:19:95: 37:02:63:36:b0:dc:9a:2e:ab:20:a8:e2:80:64:a0: b9:4f:26:2a:ff:cc:88:62:e5:75:ac:63:db:ce:b6: d6:ce:82:2f:7a:c0:12:01:6c:cc:33:9e:92:00:e1: c1:05:89:01:b6:dd:79:c6:7f:ea:02:9a:a6:be:15: 4a:81:d4:23:6a:75:2b:ef:52:bd:c3:c5:15:dc:1c: be:32:00:dd:5a:f9:58:2e:97:b5:6d:59:7f:38:17: f7:a8:11:27:c4:61:3f:59:21:3a:5a:0b:d8:58:d4: d4:24:26:01:fa:5d:3e:f7:f2:81:ed:c1:88:53:12: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:42:DD:4E:AB:53:50:9A:BD:EE:D3:F3:B9:D2:73:AA:2C:9C:DE:EE X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c5:6b:05:50:b5:f7:8d:b7:02:b6:9e:8e:fc:0b:e8:f8:ac: 53:1a:66:3b:79:5c:0d:a3:c8:db:78:dc:e1:51:9e:2d:a9:47: ae:04:25:d1:91:52:18:11:72:71:fa:ea:23:a5:69:cb:28:b1: bc:fa:47:b2:a3:58:44:cb:82:2c:36:ff:4b:80:2f:8b:dd:4f: c0:fd:9f:3d:d3:8f:0d:83:fa:d9:68:e8:69:dd:5d:f4:74:0d: 36:a9:fd:eb:d6:36:70:8d:5b:a7:3f:d0:fc:a4:cb:5a:71:98: a4:dc:02:a2:8c:4d:fe:ee:70:f5:68:dd:46:70:bf:5e:f9:75: e9:9c:17:ec:64:2c:3a:dd:bd:e0:87:28:61:f7:fc:a7:14:2c: f8:25:4c:d2:38:e5:29:68:93:b6:2e:0f:07:45:c9:6b:f4:9d: fa:4e:a5:a2:89:25:08:97:02:43:10:c8:3e:db:e9:44:52:a0: 2a:cc:65:c4:70:9f:b7:0c:f2:68:e6:7a:b5:9f:8e:24:e4:ee: a0:21:62:e3:bb:30:db:a0:12:f5:7a:9a:25:74:3b:b0:1d:d0: 6a:2f:e4:c5:c8:bc:2d:78:f1:f9:bd:ea:c0:0c:19:fb:ca:80: f7:96:8f:23:15:c0:15:20:38:cf:a3:a6:8b:f3:e0:62:56:5b: e6:20:ed:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbSeufokSGhgTAnLr1Xb22xM9Ah4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA3MjkxNjU5NTBaFw0yNjA3MzAxNzQ1NTBaMDMxMTAvBgNV BAMTKDEyNDJERDRFQUI1MzUwOUFCREVFRDNGM0I5RDI3M0FBMkM5Q0RFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHWW6bgZLTocUk62LR/lTPsi8 Lyi1LIk/TLHC+oBYs25nCvqVg6+hGpWAMWtn1nbnmj/SyT6FvEqD/JEtiSgUChOA mbh5xgSttZL7iz1P+ku0Z+Wn5u4ZyxTSvBxsOWmHeUxVo06iyalgAi9HPx91pxaQ QIH+Uy5J+lMh2mgXSD7FfGYZlTcCYzaw3JouqyCo4oBkoLlPJir/zIhi5XWsY9vO ttbOgi96wBIBbMwznpIA4cEFiQG23XnGf+oCmqa+FUqB1CNqdSvvUr3DxRXcHL4y AN1a+Vgul7VtWX84F/eoESfEYT9ZITpaC9hY1NQkJgH6XT738oHtwYhTEq1xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEkLdTqtTUJq97tPzudJzqiyc3u4wHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcVrBVC19423 AraejvwL6PisUxpmO3lcDaPI23jc4VGeLalHrgQl0ZFSGBFycfrqI6VpyyixvPpH sqNYRMuCLDb/S4Avi91PwP2fPdOPDYP62Wjoad1d9HQNNqn969Y2cI1bpz/Q/KTL WnGYpNwCooxN/u5w9WjdRnC/Xvl16ZwX7GQsOt294IcoYff8pxQs+CVM0jjlKWiT ti4PB0XJa/Sd+k6looklCJcCQxDIPtvpRFKgKsxlxHCftwzyaOZ6tZ+OJOTuoCFi 47sw26AS9XqaJXQ7sB3Qai/kxci8LXjx+b3qwAwZ+8qA95aPIxXAFSA4z6Omi/Pg YlZb5iDtvQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:01 2026 by rpki-client