$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft (raw, json) Hash identifier: ePg+jkXgDE7O4nM2s9xrOAgdrJJgkSraNb8+Jro4aVk= Subject key identifier: 69:82:76:AD:DD:73:5E:F2:4D:36:38:90:43:03:78:D7:5C:48:72:FE Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 1B123FD87060CD78898F719AB563EDED6830D43F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft Manifest number: C9 Signing time: Wed 07 Oct 2026 23:37:00 +0000 Manifest this update: Wed 07 Oct 2026 23:32:00 +0000 Manifest next update: Sun 11 Oct 2026 04:20:00 +0000 Files and hashes: 1: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (hash: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8=) 2: 3130332e39382e34342e302f32332d3233203d3e2034383337.roa (hash: tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=) 3: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl (hash: K91PmoPTr/Tc+oCNK9Kj9jD5fFOBKD4C4vWfUiBxvHM=) 4: 3130332e39382e34372e302f32342d3234203d3e2034383337.roa (hash: zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:12:3f:d8:70:60:cd:78:89:8f:71:9a:b5:63:ed:ed:68:30:d4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: Oct 7 23:32:00 2026 GMT Not After : Oct 11 04:20:00 2026 GMT Subject: CN=698276ADDD735EF24D363890430378D75C4872FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:55:47:1f:74:a5:b1:24:6c:34:8f:29:19:69: cb:c1:e2:9d:95:a6:68:2c:c4:1d:d8:d6:4f:b4:a2: b6:c6:22:55:65:88:6b:d1:ca:e6:e2:ec:34:fc:b9: 45:06:30:b8:43:37:ad:4c:4b:1a:b2:5e:0b:24:83: 60:b9:f4:04:4a:36:89:a8:51:51:3f:01:ea:0f:15: 30:8a:d2:74:af:ca:61:79:2f:cb:61:82:3d:0a:47: 27:97:86:91:0c:29:4a:25:3f:d2:5a:aa:c6:2f:d2: e7:b8:ff:dd:3a:27:cc:26:9c:aa:be:a1:8a:e1:21: 9c:3f:a7:ee:57:f0:22:a0:f4:c7:3f:68:87:54:21: 8c:e3:50:7a:16:55:26:8e:5c:67:3d:2c:cb:53:ab: 50:c9:c5:3b:35:c0:aa:ca:82:b2:6c:cd:d9:ae:56: 3d:33:9e:f9:c7:16:80:66:20:db:c1:3d:6f:75:f7: 39:30:5c:68:cc:e4:e5:71:a6:98:a8:32:be:9b:52: b4:aa:15:3a:7e:e9:0f:37:8f:31:0b:cf:44:5a:c7: 61:92:fc:1f:16:fc:be:ca:92:c3:ed:e8:cc:2a:73: a0:99:ee:b3:b7:f4:82:18:88:62:b6:66:c8:10:52: e7:2a:f2:63:36:90:55:1b:e9:04:d6:cd:e0:9b:59: 64:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:82:76:AD:DD:73:5E:F2:4D:36:38:90:43:03:78:D7:5C:48:72:FE X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:46:2d:f0:a8:83:7f:17:2d:11:cb:53:36:08:46:df:80:9b: 60:a2:0b:a9:d7:42:75:67:06:bd:3d:3b:bd:7c:4e:32:37:25: f4:33:c3:b8:bc:aa:e2:9b:45:e4:40:b3:b8:4f:c9:ae:6a:b9: 98:aa:67:01:4d:64:c9:cf:fe:10:56:37:8d:97:ec:13:99:0b: 7a:f7:60:91:bd:75:ac:31:70:a8:19:e3:0d:7c:d1:2c:43:2d: 4b:0e:91:a1:08:7d:43:5d:72:23:a3:b1:79:c2:61:bc:41:52: b2:2e:f2:ea:59:99:0e:f1:a2:56:0e:1a:9a:3e:a6:9f:d0:a9: 1d:3f:5e:7c:b1:c1:c1:cd:29:24:99:91:3a:e3:52:46:61:b0: c5:a7:d7:e0:f7:61:10:86:21:70:ce:2e:a5:ac:48:17:b3:fd: 24:ed:4e:e6:25:21:c6:a5:de:49:42:91:24:4c:b1:51:7c:04: 71:04:5b:65:5b:cb:08:86:3e:b4:7a:f9:97:c8:61:32:4f:cb: 5d:da:b7:75:0a:b9:eb:79:8e:62:b4:dd:59:84:43:31:97:01: 84:e7:e0:0e:31:29:a4:c1:fe:ad:27:15:e5:8e:d0:2d:e9:29: b8:28:fe:0d:50:4d:03:de:8d:40:e0:54:58:0d:b2:c9:22:82: c9:2c:49:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGxI/2HBgzXiJj3GatWPt7Wgw1D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjEwMDcyMzMyMDBaFw0yNjEwMTEwNDIwMDBaMDMxMTAvBgNV BAMTKDY5ODI3NkFEREQ3MzVFRjI0RDM2Mzg5MDQzMDM3OEQ3NUM0ODcyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDVUcfdKWxJGw0jykZacvB4p2V pmgsxB3Y1k+0orbGIlVliGvRyubi7DT8uUUGMLhDN61MSxqyXgskg2C59ARKNomo UVE/AeoPFTCK0nSvymF5L8thgj0KRyeXhpEMKUolP9JaqsYv0ue4/906J8wmnKq+ oYrhIZw/p+5X8CKg9Mc/aIdUIYzjUHoWVSaOXGc9LMtTq1DJxTs1wKrKgrJszdmu Vj0znvnHFoBmINvBPW919zkwXGjM5OVxppioMr6bUrSqFTp+6Q83jzELz0Rax2GS /B8W/L7KksPt6Mwqc6CZ7rO39IIYiGK2ZsgQUucq8mM2kFUb6QTWzeCbWWT1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaYJ2rd1zXvJNNjiQQwN411xIcv4wHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY0MDg1OTQ0NzcyMTk4NDIvMC8zNDJCQTNCMEFGNEFE MzRGM0UwMTc4ODM0MjA1RjFBRkM1MzkxOTJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUYt8KiDfxct EctTNghG34CbYKILqddCdWcGvT07vXxOMjcl9DPDuLyq4ptF5ECzuE/Jrmq5mKpn AU1kyc/+EFY3jZfsE5kLevdgkb11rDFwqBnjDXzRLEMtSw6RoQh9Q11yI6OxecJh vEFSsi7y6lmZDvGiVg4amj6mn9CpHT9efLHBwc0pJJmROuNSRmGwxafX4PdhEIYh cM4upaxIF7P9JO1O5iUhxqXeSUKRJEyxUXwEcQRbZVvLCIY+tHr5l8hhMk/LXdq3 dQq563mOYrTdWYRDMZcBhOfgDjEppMH+rScV5Y7QLekpuCj+DVBNA96NQOBUWA2y ySKCySxJrg== -----END CERTIFICATE-----Generated at Thu Oct 8 17:55:22 2026 by rpki-client