$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: dFGaq5o9vP9YYVUwb3clZZxV66Q80yBWd7DHKzWaLoU= Subject key identifier: 89:73:7E:56:E4:FB:15:0C:0A:4A:B7:4E:47:CA:F8:5E:33:F5:62:40 Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 480D8934C3C2E2750B31702F2CAA14B0A4A3679B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: D3 Signing time: Sun 11 Oct 2026 06:35:21 +0000 Manifest this update: Sun 11 Oct 2026 06:30:21 +0000 Manifest next update: Wed 14 Oct 2026 10:31:21 +0000 Files and hashes: 1: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) 2: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) 3: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 4: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 5: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) 6: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) 7: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: Y8OF7ecBpJdY/iA0j1Sy70rVBFMZjdow62QT/kdTBE8=) 8: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=) 9: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 10: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 11: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 12: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 13: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 14: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:89:34:c3:c2:e2:75:0b:31:70:2f:2c:aa:14:b0:a4:a3:67:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Oct 11 06:30:21 2026 GMT Not After : Oct 14 10:31:21 2026 GMT Subject: CN=89737E56E4FB150C0A4AB74E47CAF85E33F56240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:48:f0:25:46:66:d2:5f:36:3c:31:8d:0a: 57:2c:ed:85:51:87:eb:50:3a:fe:8e:aa:b7:b4:42: 00:b9:e7:7b:c1:45:fc:53:09:f8:f5:98:e8:2b:4d: 17:06:fb:49:80:13:40:45:4f:34:f6:8e:c7:fd:8e: 0e:e7:26:1b:9d:8e:aa:e8:cb:2b:e0:75:1d:9a:b3: 3e:1a:0c:e1:25:ed:eb:ea:9a:a8:84:b7:7a:01:78: 3b:18:ce:de:14:b9:5a:30:61:78:38:1c:13:77:0d: 16:5a:7c:f0:4b:c5:9c:1e:6d:2a:96:37:a5:d2:31: fc:29:b7:fc:c2:dd:ac:d8:38:83:f0:ab:04:3e:cc: 9a:2a:50:62:59:6a:39:76:c7:9f:f6:b1:45:55:23: 57:28:4b:7c:6f:54:f6:4b:f1:64:a7:9e:08:df:b6: e5:5f:a7:84:b5:61:b4:60:eb:9d:22:64:bf:73:36: 01:1b:92:f9:c9:11:03:90:fe:02:1f:db:6c:5a:7d: 6a:1e:f4:a3:b5:68:9e:68:b2:53:9d:fd:84:6c:22: 1c:36:0a:87:e6:d5:5f:b1:28:9b:5e:82:ae:44:7b: 35:a7:44:f5:f0:77:52:7b:89:ae:3e:a2:f1:a7:6c: 2c:b8:3f:60:92:cc:4c:43:83:87:63:ec:50:c3:85: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:7E:56:E4:FB:15:0C:0A:4A:B7:4E:47:CA:F8:5E:33:F5:62:40 X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6c:5d:ca:18:75:66:61:a8:d2:e4:60:d5:05:b9:76:3e:d6: 22:a4:f0:d0:94:8f:5c:17:1c:6e:fe:7c:6d:87:44:09:70:fa: c2:c9:85:43:3a:54:d2:53:50:2c:bb:a6:10:a7:70:be:7f:01: 87:ac:05:29:4e:3d:43:73:e8:9d:0e:ab:4b:95:98:df:66:81: e3:dd:ec:cf:cb:36:7a:ff:ce:8a:7c:b9:74:cb:90:13:e9:38: 69:31:7f:55:3b:17:10:59:bd:ae:9c:3d:8d:0a:2c:1d:17:4c: e6:80:7c:fd:4d:8d:60:37:b9:1c:53:46:83:4b:55:7c:81:1b: af:dd:b5:f7:d3:6f:f1:b6:dd:3e:f9:d2:8c:01:ad:08:9b:42: 36:7f:fc:b4:1c:54:da:ac:d0:08:e9:f1:ad:2e:e5:77:cf:06: 26:53:c4:cc:95:8b:f4:0a:b8:ae:37:18:86:e0:22:14:a4:c2: 85:e1:46:52:67:77:79:f4:f2:d0:a3:5d:48:cf:0f:4a:d8:46: 23:02:d7:50:e3:6e:e2:fe:c3:ad:f2:25:2e:f5:ea:71:bc:26: 7b:45:fd:7f:a4:7a:54:74:3a:a8:f3:a4:40:69:6e:36:70:2b: 54:2a:c1:f1:e4:90:6f:97:85:17:af:ef:6a:7e:c1:22:28:39: 00:e3:f3:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSA2JNMPC4nULMXAvLKoUsKSjZ5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjEwMTEwNjMwMjFaFw0yNjEwMTQxMDMxMjFaMDMxMTAvBgNV BAMTKDg5NzM3RTU2RTRGQjE1MEMwQTRBQjc0RTQ3Q0FGODVFMzNGNTYyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzUjwJUZm0l82PDGNClcs7YVR h+tQOv6Oqre0QgC553vBRfxTCfj1mOgrTRcG+0mAE0BFTzT2jsf9jg7nJhudjqro yyvgdR2asz4aDOEl7evqmqiEt3oBeDsYzt4UuVowYXg4HBN3DRZafPBLxZwebSqW N6XSMfwpt/zC3azYOIPwqwQ+zJoqUGJZajl2x5/2sUVVI1coS3xvVPZL8WSnngjf tuVfp4S1YbRg650iZL9zNgEbkvnJEQOQ/gIf22xafWoe9KO1aJ5oslOd/YRsIhw2 Cofm1V+xKJtegq5EezWnRPXwd1J7ia4+ovGnbCy4P2CSzExDg4dj7FDDhRPFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiXN+VuT7FQwKSrdOR8r4XjP1YkAwHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGxdyhh1ZmGo 0uRg1QW5dj7WIqTw0JSPXBccbv58bYdECXD6wsmFQzpU0lNQLLumEKdwvn8Bh6wF KU49Q3PonQ6rS5WY32aB493sz8s2ev/Oiny5dMuQE+k4aTF/VTsXEFm9rpw9jQos HRdM5oB8/U2NYDe5HFNGg0tVfIEbr92199Nv8bbdPvnSjAGtCJtCNn/8tBxU2qzQ COnxrS7ld88GJlPEzJWL9Aq4rjcYhuAiFKTCheFGUmd3efTy0KNdSM8PSthGIwLX UONu4v7DrfIlLvXqcbwme0X9f6R6VHQ6qPOkQGluNnArVCrB8eSQb5eFF6/van7B Iig5AOPziQ== -----END CERTIFICATE-----Generated at Sun Oct 11 20:20:24 2026 by rpki-client