
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier: /5IG9JsDkSZF49tn1uk2kYHR2wrnFpeT3NFIgVlDR6w=
Subject key identifier: 06:FC:11:9A:F5:56:C6:17:9D:EF:4D:25:EE:F1:C9:2F:0E:B0:D4:BB
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 04E56889D00D4A7E336A814E87818A07013B66EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number: 91
Signing time: Fri 24 Jul 2026 05:55:31 +0000
Manifest this update: Fri 24 Jul 2026 05:50:31 +0000
Manifest next update: Sat 25 Jul 2026 07:12:31 +0000
Files and hashes: 1: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
2: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
3: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
4: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
5: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=)
6: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
7: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
8: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
9: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
10: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
11: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: VDp167NkkSsFAqaEG4zPBPNDiEzphjWZq6gg46y8vvY=)
12: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
13: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
14: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e5:68:89:d0:0d:4a:7e:33:6a:81:4e:87:81:8a:07:01:3b:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Jul 24 05:50:31 2026 GMT
Not After : Jul 25 07:12:31 2026 GMT
Subject: CN=06FC119AF556C6179DEF4D25EEF1C92F0EB0D4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:2e:89:b9:0f:60:43:ae:29:ac:ed:35:c0:
cc:94:d8:df:df:e4:5d:ce:21:f6:84:c7:91:1f:78:
ca:f7:b3:d1:6e:c3:f9:43:52:7f:38:d3:cf:d9:c2:
ce:e6:50:fd:35:38:f3:13:18:b0:cf:27:a2:60:fc:
e9:2f:f9:24:45:4d:76:4a:65:62:6b:57:48:4c:aa:
53:d3:b8:dd:9a:54:c7:ed:b2:02:9d:14:08:28:8c:
f1:6d:7c:52:ca:b4:df:e8:5c:b4:85:c6:4e:2f:46:
55:b3:b6:00:72:ce:a4:cc:d4:b5:0e:3d:1d:11:cf:
56:8c:9c:b8:3e:63:ce:68:a4:10:27:cf:aa:38:62:
25:46:f8:78:c4:95:68:e1:f4:6d:2c:cd:b9:0d:a6:
ad:77:4a:8d:9c:8d:84:3e:8e:7d:60:fa:9a:f7:37:
ef:23:44:af:dd:83:6d:c0:0f:82:40:9e:1b:dd:85:
3f:94:82:d4:47:1a:71:0c:b5:7e:01:39:d7:29:67:
d4:c6:42:45:3a:b9:67:e6:0c:3c:f1:d6:fb:c3:0a:
9c:ad:23:05:7c:29:ea:76:80:04:55:1a:dc:33:8a:
ff:d0:2f:e3:bd:d8:cc:cb:b6:f2:d2:72:2e:09:68:
18:d5:18:55:13:dd:16:6e:72:a5:c6:f1:b1:02:ec:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FC:11:9A:F5:56:C6:17:9D:EF:4D:25:EE:F1:C9:2F:0E:B0:D4:BB
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:37:58:e7:4a:76:c4:9a:5b:11:ff:3f:17:6b:09:1f:75:34:
ac:b8:76:35:ba:cb:78:15:10:2f:7a:d4:7e:c8:c1:3f:d8:ef:
38:4c:2f:ec:5d:58:87:00:94:32:8e:95:c1:e8:4b:a8:f6:95:
81:67:44:2a:6c:00:34:da:5a:68:7a:23:29:c3:b9:a1:a0:4e:
a8:69:3b:02:2b:b8:64:82:17:17:db:f3:21:17:eb:61:ae:0a:
e5:01:9a:85:d4:a4:24:69:8a:c5:4c:83:d6:48:ee:32:c3:c6:
4d:db:71:b4:89:02:8e:19:ee:2c:c0:5d:cf:28:da:54:fb:da:
86:73:34:1d:e3:46:4f:34:8c:10:76:3e:f9:fe:b5:72:51:a1:
bf:f9:2a:ba:69:30:ca:16:4a:c1:69:9e:78:1f:1e:51:72:c0:
b2:80:cc:31:c1:48:e2:6c:1f:7f:6a:a6:71:63:3d:93:90:e1:
7f:4f:0f:50:39:93:ef:d1:c8:a8:d4:6a:8b:f3:65:2d:15:b1:
86:fc:49:09:85:cc:d0:b6:38:36:7f:0c:fe:a3:82:d6:ab:8a:
2c:a7:1a:7b:c6:10:85:05:63:3e:6a:be:11:e7:19:2a:4b:7a:
7b:d7:f6:c0:e2:72:3b:4a:e0:8f:eb:99:7a:e7:e3:c2:a4:7a:
25:fe:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:48 2026 by rpki-client