$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: g3tQspz4hhCLVgUgTOfd42Ajfb7w4YerWSVntj0dhCg= Subject key identifier: 5A:40:E3:25:03:22:F9:4F:F8:1C:34:FE:F1:42:BD:3F:A0:79:7D:2E Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 05EEB49DA2291CCAD5707DF2AB24858F3E33F063 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: D1 Signing time: Tue 06 Oct 2026 12:00:08 +0000 Manifest this update: Tue 06 Oct 2026 11:55:08 +0000 Manifest next update: Fri 09 Oct 2026 22:42:08 +0000 Files and hashes: 1: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) 2: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 3: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: WgWYSXGnJJ9uUPmG6Jww9mzpt0Mf/FpjCc6H07WnjIM=) 4: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 5: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 6: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=) 7: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 8: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 9: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) 10: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 11: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) 12: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 13: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) 14: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ee:b4:9d:a2:29:1c:ca:d5:70:7d:f2:ab:24:85:8f:3e:33:f0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Oct 6 11:55:08 2026 GMT Not After : Oct 9 22:42:08 2026 GMT Subject: CN=5A40E3250322F94FF81C34FEF142BD3FA0797D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:b9:71:79:43:98:26:4a:8c:29:91:9f:8e: 94:28:37:31:67:a0:af:c1:39:ab:80:ca:6c:05:53: 10:5e:7a:43:ab:ab:06:67:4d:b3:3f:b1:16:8f:13: 05:bb:a1:07:e2:9c:16:21:6b:5c:ee:e0:a1:88:33: a8:a8:f7:c2:c5:20:76:15:b3:11:6d:1a:76:f2:12: 3f:be:bf:ea:8a:22:f3:c5:dd:67:31:f9:7c:32:d2: d1:e5:07:b1:d6:79:6a:0d:ef:78:5b:b2:55:f1:28: 90:49:30:53:45:f6:97:39:44:bc:cc:3e:86:f2:07: f1:16:45:7f:ec:37:c8:1b:54:93:72:46:49:ee:47: 22:2d:9c:38:7d:2c:ae:0b:ed:d6:5e:06:a3:3d:44: 25:34:15:07:2d:21:54:ec:b5:e0:c3:e8:48:01:f4: 12:b6:b7:9e:f1:12:d1:bd:da:bf:d0:90:11:0e:e8: 84:e7:56:e0:ee:fe:cc:57:62:11:02:7f:6e:b9:bc: 85:53:36:1b:e0:23:18:1f:64:6e:58:27:7d:e9:1e: a7:fd:fb:e0:66:2b:4b:55:5a:05:59:55:bd:4b:6f: 4e:7b:ef:d4:1d:34:60:71:14:43:88:0d:34:2d:d9: 31:4e:d6:7d:9f:18:0d:6e:62:ab:75:21:ca:b4:1a: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:40:E3:25:03:22:F9:4F:F8:1C:34:FE:F1:42:BD:3F:A0:79:7D:2E X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e8:b4:8d:4b:a9:ab:f0:77:a1:93:f6:a8:84:7f:bb:a7:41: 4a:77:79:3c:31:d1:a3:75:30:52:5c:35:7e:ab:2b:45:ef:70: 4a:65:0f:f1:ab:08:ec:e8:74:b9:11:b0:05:cd:5e:51:0e:fc: 62:f4:75:e3:88:2a:48:a7:67:53:ca:fc:7e:6a:aa:a3:92:3e: bf:6c:06:5c:e5:13:1e:7f:cf:9d:25:b7:c4:8a:2a:b1:26:a5: de:27:4a:02:a9:37:d9:bc:b4:ff:f9:62:e1:f7:cb:db:ce:f3: 26:a7:6d:f9:00:99:28:0b:51:5d:89:50:df:59:de:05:02:75: d6:3b:fb:25:33:fc:7b:07:04:a3:6b:37:b0:90:03:7e:c8:76: 4d:2e:24:2f:61:83:90:72:fc:fd:bb:8a:21:35:fe:27:ee:53: 4e:12:97:b9:b8:ef:7d:1f:43:fc:d3:f9:b2:5a:94:6a:3f:0a: 15:07:fc:7e:31:bb:a9:d7:36:7b:d1:c1:61:bf:d1:6e:02:94: 86:2d:8c:b7:cd:96:04:24:81:c9:f5:25:39:8b:dc:08:28:d6: 5c:d9:6e:cd:fc:0b:9a:d4:bf:48:9c:a8:87:ee:d7:ab:a8:1c: f7:48:5c:bb:0d:15:3d:84:24:d4:1a:c8:01:8d:8b:50:16:55: 47:42:0c:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBe60naIpHMrVcH3yqySFjz4z8GMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjEwMDYxMTU1MDhaFw0yNjEwMDkyMjQyMDhaMDMxMTAvBgNV BAMTKDVBNDBFMzI1MDMyMkY5NEZGODFDMzRGRUYxNDJCRDNGQTA3OTdEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntblxeUOYJkqMKZGfjpQoNzFn oK/BOauAymwFUxBeekOrqwZnTbM/sRaPEwW7oQfinBYha1zu4KGIM6io98LFIHYV sxFtGnbyEj++v+qKIvPF3Wcx+Xwy0tHlB7HWeWoN73hbslXxKJBJMFNF9pc5RLzM PobyB/EWRX/sN8gbVJNyRknuRyItnDh9LK4L7dZeBqM9RCU0FQctIVTsteDD6EgB 9BK2t57xEtG92r/QkBEO6ITnVuDu/sxXYhECf265vIVTNhvgIxgfZG5YJ33pHqf9 ++BmK0tVWgVZVb1Lb05779QdNGBxFEOIDTQt2TFO1n2fGA1uYqt1Icq0GlKtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWkDjJQMi+U/4HDT+8UK9P6B5fS4wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXei0jUupq/B3 oZP2qIR/u6dBSnd5PDHRo3UwUlw1fqsrRe9wSmUP8asI7Oh0uRGwBc1eUQ78YvR1 44gqSKdnU8r8fmqqo5I+v2wGXOUTHn/PnSW3xIoqsSal3idKAqk32by0//li4ffL 287zJqdt+QCZKAtRXYlQ31neBQJ11jv7JTP8ewcEo2s3sJADfsh2TS4kL2GDkHL8 /buKITX+J+5TThKXubjvfR9D/NP5slqUaj8KFQf8fjG7qdc2e9HBYb/RbgKUhi2M t82WBCSByfUlOYvcCCjWXNluzfwLmtS/SJyoh+7Xq6gc90hcuw0VPYQk1BrIAY2L UBZVR0IMxQ== -----END CERTIFICATE-----Generated at Thu Oct 8 16:45:55 2026 by rpki-client