
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier: Fk9c/vp7C/OOU7BVo2tyvgFzlGhl43E8KJkktMld/GI=
Subject key identifier: 9E:C0:93:F4:4F:32:90:C9:50:D1:52:83:3D:E5:AF:D9:C6:FC:60:24
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 57D88E2FA89A86C8B3513048A6F1E24C028302F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number: 31
Signing time: Wed 13 May 2026 07:36:02 +0000
Manifest this update: Wed 13 May 2026 07:31:02 +0000
Manifest next update: Thu 14 May 2026 11:25:02 +0000
Files and hashes: 1: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: 6mUxuJR/FI8M7jz6+UEilp9GRMU4VSuS5HDLKiyHJRU=)
2: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
3: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
4: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
5: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
6: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
7: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
8: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
9: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
10: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
11: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
12: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
13: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d8:8e:2f:a8:9a:86:c8:b3:51:30:48:a6:f1:e2:4c:02:83:02:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: May 13 07:31:02 2026 GMT
Not After : May 14 11:25:02 2026 GMT
Subject: CN=9EC093F44F3290C950D152833DE5AFD9C6FC6024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:ae:45:6f:59:30:81:99:70:bf:6f:29:30:
b7:3b:c0:83:fc:68:b6:4a:50:0c:46:ff:f4:f8:44:
93:99:50:c8:db:5f:05:ec:7d:95:06:d0:8d:b0:ea:
bf:e6:65:38:2a:87:ef:a7:a4:f2:70:82:99:46:4f:
73:85:e8:91:00:85:2a:7d:28:36:47:fc:fc:8a:1b:
c9:fe:46:1e:e9:5a:db:4d:9f:73:c9:ea:f6:6f:fc:
57:14:22:c5:b2:4f:58:91:ec:4b:90:ab:6d:4a:95:
01:9f:ca:76:d1:c5:d0:f0:42:dc:40:e8:db:00:78:
98:62:63:b0:c3:35:58:c3:b3:a2:9d:6d:4b:9b:8a:
fc:96:ef:6d:3a:9b:82:6b:a0:25:91:66:73:52:b2:
6e:e0:19:71:3b:9f:35:26:83:f2:80:3e:e8:e7:39:
00:93:f9:34:20:46:96:0b:e0:3d:7a:e4:87:6f:44:
32:6c:e4:ed:99:3c:ff:91:97:2c:31:22:fd:35:d9:
85:3a:40:0a:39:15:90:d6:0a:83:54:23:24:cf:00:
d6:06:83:b7:b8:83:49:77:fb:cf:a7:a4:26:11:ae:
66:8f:ee:3b:62:a8:01:0f:c5:8a:79:50:9c:ad:1a:
f4:cd:0c:00:97:d0:fd:d8:d1:f8:3b:8c:82:de:5b:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:93:F4:4F:32:90:C9:50:D1:52:83:3D:E5:AF:D9:C6:FC:60:24
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:07:2e:7b:8d:cc:10:e5:93:18:86:4d:ea:5e:83:6a:58:e5:
0a:5a:b6:d3:35:5b:6b:34:20:50:65:5b:52:c5:e2:b5:f0:09:
17:0e:e8:2e:17:36:c5:90:5c:20:2d:27:f2:d5:86:a7:67:34:
03:54:6e:6b:2a:f2:d0:bb:89:a3:50:48:d9:44:f9:bb:db:92:
ef:1f:32:bb:0e:b6:d7:c3:ff:ed:70:e2:cb:91:d7:0c:71:64:
0b:d1:88:53:08:b1:1c:5b:68:b7:6e:0f:41:0c:84:3a:d8:2f:
a0:d9:be:ee:b5:be:68:90:7a:3f:75:45:ce:c1:fe:d2:68:ed:
c5:39:08:75:ea:b7:03:4f:e4:d1:9a:6c:19:b4:b4:29:b3:a2:
9e:ac:88:eb:2b:ef:98:20:df:cb:f4:7f:47:7e:4b:d6:07:d5:
b2:89:94:66:55:84:61:ae:85:4e:95:ff:fd:95:cd:8b:d4:2b:
d6:9a:74:65:ad:2b:82:67:cb:c1:44:f6:2e:1a:6d:5b:49:ec:
aa:29:a1:18:5c:9b:71:59:bb:c1:88:e9:69:ad:ab:9d:94:10:
a6:54:7b:2a:bf:5c:c1:e2:86:7b:4e:84:bd:84:58:a0:31:cb:
83:0e:1b:f3:10:8e:b9:cb:37:7e:c5:1a:b6:ec:ce:70:2e:58:
f7:89:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:58 2026 by rpki-client