$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: rRF5D4uESIE+xm1Glrtw34Vxm1CuWOUzcN3yMT3Vi90= Subject key identifier: 7C:AB:C2:90:BF:47:6F:3F:5A:70:48:0E:BA:A5:A2:19:1C:30:F8:C9 Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 1F274ED02D72A9815D167520A884B08AD2950562 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 12:34:43 +0000 Manifest this update: Fri 17 Apr 2026 12:29:43 +0000 Manifest next update: Sat 18 Apr 2026 16:15:43 +0000 Files and hashes: 1: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: K4FaWsqHo2UGk9UzbmGsJWTYGxEDHxmsPPnrbSCCuKc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:27:4e:d0:2d:72:a9:81:5d:16:75:20:a8:84:b0:8a:d2:95:05:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Apr 17 12:29:43 2026 GMT Not After : Apr 18 16:15:43 2026 GMT Subject: CN=7CABC290BF476F3F5A70480EBAA5A2191C30F8C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:ca:fe:7f:5e:65:da:69:bd:c8:23:43:b0: 80:34:75:8e:ba:e2:90:76:98:36:1a:86:bb:66:07: 7b:d4:ad:25:96:4b:df:e3:79:52:41:1f:a7:b6:79: 75:64:7d:25:90:df:97:be:82:c1:37:26:fb:03:11: 5d:60:13:ca:55:5b:38:71:ef:3c:b8:d8:68:88:43: ee:fa:9a:27:77:db:9c:59:da:54:3f:88:d6:ad:68: de:8c:e3:f5:cb:76:fc:a1:a5:04:be:a3:63:f5:8a: 66:c9:6c:56:48:49:54:07:35:93:b3:62:e0:2d:b0: b7:9d:06:a7:3c:52:45:1f:70:85:2f:a9:0c:0b:1c: f2:5b:7c:0d:2b:69:c3:d9:39:e4:4c:0b:25:d3:c7: c3:49:00:ea:87:03:13:b7:5d:65:06:d5:f7:5a:86: b5:78:63:67:67:0a:8b:b2:b9:bc:9e:a6:11:a6:52: eb:fd:af:0c:79:4e:25:3d:cb:51:46:5c:7b:60:c5: dd:20:fe:28:70:ed:c4:bf:ca:ce:a3:f3:0d:86:c1: 85:22:57:ef:c1:a0:9f:a6:81:e5:26:0a:4e:a0:3e: 76:92:fd:96:27:a1:79:fe:e3:e7:77:b8:91:c4:93: 2f:8c:e4:80:a8:37:27:59:15:3b:70:54:67:89:49: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:C2:90:BF:47:6F:3F:5A:70:48:0E:BA:A5:A2:19:1C:30:F8:C9 X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:bc:8b:18:80:7b:81:30:c1:57:34:32:b8:d3:6d:d2:19: 27:98:4a:e7:eb:23:81:a2:8d:ea:5b:0d:48:d3:01:d8:b1:90: 1d:e9:82:95:77:aa:93:37:c5:44:86:2f:66:cd:bb:0e:15:da: e1:63:2f:07:c2:7f:32:7f:5e:d6:73:7d:bc:f3:cc:9f:14:22: 06:5c:c2:ca:ee:54:d3:43:e1:04:8b:bb:f2:0a:de:69:9a:ca: 8a:86:d8:1c:e3:74:28:74:a0:52:bd:d4:62:99:8e:7d:ca:d1: 50:91:67:a2:62:97:5a:9e:6c:09:1d:4b:e5:45:e7:54:cc:e2: 2a:52:28:5a:38:49:d2:b3:f9:30:5e:e8:f1:a2:6a:50:96:86: ac:44:c5:d3:de:51:66:a0:14:ab:35:5b:91:34:ce:68:e1:b3: 39:57:7e:47:32:2d:5c:0d:7c:d6:c0:d9:84:27:30:f9:e4:76: a1:e4:99:57:c7:02:02:db:88:6d:eb:12:e5:87:e0:5b:c1:94: f2:c8:b1:a0:26:2d:f9:67:f2:99:50:bc:d3:23:d1:7b:9f:b8: 27:56:10:55:89:37:b3:83:35:67:1e:f9:21:0d:c9:23:15:65: f9:af:22:ec:ae:bd:28:c4:db:3b:ed:31:43:98:bd:d6:a2:a7: f8:d6:b3:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHydO0C1yqYFdFnUgqISwitKVBWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA0MTcxMjI5NDNaFw0yNjA0MTgxNjE1NDNaMDMxMTAvBgNV BAMTKDdDQUJDMjkwQkY0NzZGM0Y1QTcwNDgwRUJBQTVBMjE5MUMzMEY4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Dsr+f15l2mm9yCNDsIA0dY66 4pB2mDYahrtmB3vUrSWWS9/jeVJBH6e2eXVkfSWQ35e+gsE3JvsDEV1gE8pVWzhx 7zy42GiIQ+76mid325xZ2lQ/iNataN6M4/XLdvyhpQS+o2P1imbJbFZISVQHNZOz YuAtsLedBqc8UkUfcIUvqQwLHPJbfA0racPZOeRMCyXTx8NJAOqHAxO3XWUG1fda hrV4Y2dnCouyubyephGmUuv9rwx5TiU9y1FGXHtgxd0g/ihw7cS/ys6j8w2GwYUi V+/BoJ+mgeUmCk6gPnaS/ZYnoXn+4+d3uJHEky+M5ICoNydZFTtwVGeJSQI9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfKvCkL9Hbz9acEgOuqWiGRww+MkwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLm8ixiAe4Ew wVc0MrjTbdIZJ5hK5+sjgaKN6lsNSNMB2LGQHemClXeqkzfFRIYvZs27DhXa4WMv B8J/Mn9e1nN9vPPMnxQiBlzCyu5U00PhBIu78greaZrKiobYHON0KHSgUr3UYpmO fcrRUJFnomKXWp5sCR1L5UXnVMziKlIoWjhJ0rP5MF7o8aJqUJaGrETF095RZqAU qzVbkTTOaOGzOVd+RzItXA181sDZhCcw+eR2oeSZV8cCAtuIbesS5YfgW8GU8six oCYt+WfymVC80yPRe5+4J1YQVYk3s4M1Zx75IQ3JIxVl+a8i7K69KMTbO+0xQ5i9 1qKn+NazhQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:23:13 2026 by rpki-client