$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: /xk1bJ/H0XylmhGjMVJA7l4Vo7i1MIfKpCg0565jp6g= Subject key identifier: C3:D4:67:D8:DA:EA:2C:E6:88:35:FE:C3:D1:94:7A:4D:3E:C4:78:AB Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 1F395581E6DA25BD07C3452E1879F6DF2F74CA1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 8B Signing time: Fri 24 Jul 2026 03:20:14 +0000 Manifest this update: Fri 24 Jul 2026 03:15:14 +0000 Manifest next update: Sat 25 Jul 2026 03:42:14 +0000 Files and hashes: 1: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: AkABzFYeJLQZKTgyA4h4m2DZYKM6xFOcMlGNgBcm5FM=) 2: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:39:55:81:e6:da:25:bd:07:c3:45:2e:18:79:f6:df:2f:74:ca:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Jul 24 03:15:14 2026 GMT Not After : Jul 25 03:42:14 2026 GMT Subject: CN=C3D467D8DAEA2CE68835FEC3D1947A4D3EC478AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:87:62:5d:6a:8f:dd:fa:79:d2:50:4a:d5:2c: fd:53:48:86:b5:1e:ed:7c:5f:45:4c:33:67:08:a6: 93:c0:1a:a9:57:f2:ac:e5:5b:40:7a:1a:b3:44:03: 71:78:00:17:67:42:83:11:b0:bd:e1:39:c7:57:64: c2:55:9a:b3:d5:3c:44:54:69:a1:9f:39:b7:96:28: 60:a8:ff:ef:07:d2:9b:af:25:3b:fc:da:18:43:b7: cb:ce:1a:9a:1e:23:9e:f3:ad:a9:b2:7d:07:31:42: 0a:2b:2d:df:ac:e2:b3:e7:16:3f:95:19:d3:b4:0f: 5e:99:b8:07:c2:44:82:57:a4:53:24:2c:88:69:36: 1a:07:19:ba:dd:0f:10:fb:db:88:15:16:f1:41:b6: 70:a7:3e:8f:1b:15:6d:fc:b1:32:b7:a6:b1:1a:43: b4:1f:ed:2c:70:d1:7c:04:76:cd:4f:d2:fe:10:25: be:01:ae:9d:10:67:b4:f0:de:8a:10:b8:32:a7:a2: 6c:b9:e5:fd:32:04:fe:9a:27:84:fe:dd:c8:b0:90: c2:28:2d:1d:79:b5:15:7f:b2:d6:df:af:20:a5:49: 73:61:50:f5:fa:91:8f:7f:7d:d6:2e:84:73:83:bc: 5f:5b:e1:fd:18:27:d8:fe:d0:9d:6f:f9:5c:bb:98: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D4:67:D8:DA:EA:2C:E6:88:35:FE:C3:D1:94:7A:4D:3E:C4:78:AB X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ae:9d:f9:33:03:d8:03:60:07:58:4a:36:45:4a:50:93:15: 67:86:10:ae:37:29:32:93:b2:9d:a3:15:71:34:80:80:9f:c8: 2e:da:18:db:1a:07:3c:24:13:df:b8:b0:bc:73:31:c3:24:ea: ee:f7:95:ef:5c:10:82:b1:3f:0b:4c:9a:c6:a5:6b:f4:45:de: 5c:a5:64:e7:cc:a9:b2:be:dd:67:51:3d:bf:73:a5:e5:55:59: e1:ae:af:b5:7b:f9:33:06:6c:40:aa:1a:94:b1:d6:c6:5e:ee: ca:e0:0b:7f:04:ee:1d:2c:a8:06:7f:72:08:a9:7d:fb:42:94: 34:22:e6:7d:1b:ea:3d:ed:cb:00:40:66:cd:c1:32:ae:44:9e: b5:85:e9:6d:1b:9f:37:38:02:48:23:c4:23:69:6e:35:3d:86: 13:f1:79:93:5e:48:c6:4e:b1:62:13:c8:57:b5:5a:d0:99:54: 89:82:b7:77:b7:27:1c:c6:de:0b:33:c1:4b:cb:4e:4f:10:d9: 9d:25:d2:f5:5d:4a:db:57:8e:2d:cd:2a:d3:38:b7:3a:53:9b: b4:80:1e:3e:e5:31:5b:d9:37:f8:14:83:4c:86:6c:b6:6c:9a: b7:98:a0:ca:7c:d8:90:59:e9:22:3e:0f:90:42:08:3f:0c:63: d6:cc:16:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHzlVgebaJb0Hw0UuGHn23y90yhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA3MjQwMzE1MTRaFw0yNjA3MjUwMzQyMTRaMDMxMTAvBgNV BAMTKEMzRDQ2N0Q4REFFQTJDRTY4ODM1RkVDM0QxOTQ3QTREM0VDNDc4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWh2Jdao/d+nnSUErVLP1TSIa1 Hu18X0VMM2cIppPAGqlX8qzlW0B6GrNEA3F4ABdnQoMRsL3hOcdXZMJVmrPVPERU aaGfObeWKGCo/+8H0puvJTv82hhDt8vOGpoeI57zramyfQcxQgorLd+s4rPnFj+V GdO0D16ZuAfCRIJXpFMkLIhpNhoHGbrdDxD724gVFvFBtnCnPo8bFW38sTK3prEa Q7Qf7Sxw0XwEds1P0v4QJb4Brp0QZ7Tw3ooQuDKnomy55f0yBP6aJ4T+3ciwkMIo LR15tRV/stbfryClSXNhUPX6kY9/fdYuhHODvF9b4f0YJ9j+0J1v+Vy7mHTDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw9Rn2NrqLOaINf7D0ZR6TT7EeKswHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa6d+TMD2ANg B1hKNkVKUJMVZ4YQrjcpMpOynaMVcTSAgJ/ILtoY2xoHPCQT37iwvHMxwyTq7veV 71wQgrE/C0yaxqVr9EXeXKVk58ypsr7dZ1E9v3Ol5VVZ4a6vtXv5MwZsQKoalLHW xl7uyuALfwTuHSyoBn9yCKl9+0KUNCLmfRvqPe3LAEBmzcEyrkSetYXpbRufNzgC SCPEI2luNT2GE/F5k15Ixk6xYhPIV7Va0JlUiYK3d7cnHMbeCzPBS8tOTxDZnSXS 9V1K21eOLc0q0zi3OlObtIAePuUxW9k3+BSDTIZstmyat5igynzYkFnpIj4PkEII Pwxj1swWFQ== -----END CERTIFICATE-----Generated at Fri Jul 24 12:41:21 2026 by rpki-client