$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: augpGcI2JhrKR3dBJS6SAgDAIhsjjdnNYiBWf/EzelA= Subject key identifier: E0:86:E4:E3:C7:5F:F3:17:85:0F:E0:1E:7C:EC:FE:C9:8D:E3:61:63 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 6FFE5380BBCB3B50D267F8CB9B929DEEE44905F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: CE Signing time: Sun 11 Oct 2026 02:05:08 +0000 Manifest this update: Sun 11 Oct 2026 02:00:08 +0000 Manifest next update: Wed 14 Oct 2026 02:23:08 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: WwDCdhvGo4g1+vLeo/+qN06teT9IjrRwvxA3bguWYzA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 02:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:fe:53:80:bb:cb:3b:50:d2:67:f8:cb:9b:92:9d:ee:e4:49:05:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Oct 11 02:00:08 2026 GMT Not After : Oct 14 02:23:08 2026 GMT Subject: CN=E086E4E3C75FF317850FE01E7CECFEC98DE36163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:cc:66:be:29:32:8f:25:b7:e6:44:21:4e: cb:3b:80:8f:fa:b6:37:ad:f7:a4:fb:8d:84:ea:22: 68:c4:e8:78:cf:ee:6e:3f:0e:1c:8a:48:54:f8:09: 9e:b9:d7:68:41:9e:5b:44:bc:2c:be:bc:66:53:3d: 77:8f:7c:64:4e:45:9a:c3:d6:52:24:50:2d:e4:9e: 94:9c:46:c4:ad:e8:cf:df:83:e1:5a:3a:cf:44:0b: 07:65:77:79:39:71:e0:e9:ad:d2:40:10:1f:34:e7: f3:cc:88:0d:5a:61:78:67:f1:27:59:1a:a7:13:dc: eb:83:b0:6f:b2:59:ff:4c:72:77:3a:58:ab:a1:13: fa:9a:89:05:b8:30:32:1d:22:86:ca:f6:d5:dd:b1: dc:41:50:01:d9:7e:94:a2:41:7c:b3:13:24:6c:05: db:12:bf:f0:ab:81:61:9b:e3:76:bc:10:6d:84:fa: 45:a2:f3:be:50:f0:e7:1d:fa:3d:1a:a9:0c:bc:e2: f0:fb:ac:d6:6b:a5:9a:48:4f:8e:94:24:10:b3:83: 78:ca:ea:b6:1f:e6:6e:3a:af:d4:dc:15:03:aa:91: 20:e2:0f:40:6b:f3:88:da:0e:a9:e4:57:d7:e0:88: ec:9f:c5:b1:88:3f:36:96:f2:56:85:e2:2d:0a:7e: 46:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:86:E4:E3:C7:5F:F3:17:85:0F:E0:1E:7C:EC:FE:C9:8D:E3:61:63 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:b9:6a:4f:4a:b7:c9:36:7a:95:25:3a:92:04:a5:0a:ff: fe:ea:45:3e:6e:72:ae:a1:cc:61:b9:53:32:69:17:90:55:d4: 24:25:c6:94:47:9f:48:2a:9a:4c:fc:f5:9b:03:34:fe:a5:16: e7:21:d6:09:a2:6b:d5:c5:90:bf:ba:b1:68:4e:69:ca:cb:dc: eb:5e:aa:b8:eb:e8:88:7d:b8:c8:dd:48:ba:07:c2:7e:76:9e: b3:db:b0:de:cb:68:f1:57:84:a6:73:be:08:72:74:0e:be:10: b0:af:3e:0f:99:73:36:69:7b:fd:19:43:7c:45:44:b2:70:29: 0b:b6:72:51:b2:f7:7c:aa:bc:59:4b:d6:29:04:27:6b:a2:1c: 79:3c:58:4b:15:67:0f:ab:11:93:be:d4:5d:a3:6a:5a:78:8f: 37:eb:33:8e:4f:33:b9:3d:06:2f:2a:17:dc:bb:c2:6b:52:56: 70:da:cd:13:94:82:6f:35:2e:55:95:13:77:a5:11:df:7b:45: ab:fc:fe:83:dd:cc:fd:ed:7e:c8:33:2e:a2:e0:81:ba:b0:e7: 0f:7b:5d:5c:c5:82:20:6b:c9:b9:d3:f4:a4:eb:dc:68:71:44: 4e:26:dd:a7:f2:ab:97:ab:d9:f1:7e:86:a9:2f:90:37:5f:cb: 29:04:da:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb/5TgLvLO1DSZ/jLm5Kd7uRJBfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjEwMTEwMjAwMDhaFw0yNjEwMTQwMjIzMDhaMDMxMTAvBgNV BAMTKEUwODZFNEUzQzc1RkYzMTc4NTBGRTAxRTdDRUNGRUM5OERFMzYxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GcxmvikyjyW35kQhTss7gI/6 tjet96T7jYTqImjE6HjP7m4/DhyKSFT4CZ6512hBnltEvCy+vGZTPXePfGRORZrD 1lIkUC3knpScRsSt6M/fg+FaOs9ECwdld3k5ceDprdJAEB805/PMiA1aYXhn8SdZ GqcT3OuDsG+yWf9Mcnc6WKuhE/qaiQW4MDIdIobK9tXdsdxBUAHZfpSiQXyzEyRs BdsSv/CrgWGb43a8EG2E+kWi875Q8Ocd+j0aqQy84vD7rNZrpZpIT46UJBCzg3jK 6rYf5m46r9TcFQOqkSDiD0Br84jaDqnkV9fgiOyfxbGIPzaW8laF4i0KfkbZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4Ibk48df8xeFD+AefOz+yY3jYWMwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdu5ak9Kt8k2 epUlOpIEpQr//upFPm5yrqHMYblTMmkXkFXUJCXGlEefSCqaTPz1mwM0/qUW5yHW CaJr1cWQv7qxaE5pysvc616quOvoiH24yN1IugfCfnaes9uw3sto8VeEpnO+CHJ0 Dr4QsK8+D5lzNml7/RlDfEVEsnApC7ZyUbL3fKq8WUvWKQQna6IceTxYSxVnD6sR k77UXaNqWniPN+szjk8zuT0GLyoX3LvCa1JWcNrNE5SCbzUuVZUTd6UR33tFq/z+ g93M/e1+yDMuouCBurDnD3tdXMWCIGvJudP0pOvcaHFETibdp/Krl6vZ8X6GqS+Q N1/LKQTaEQ== -----END CERTIFICATE-----Generated at Mon Oct 12 07:11:17 2026 by rpki-client