$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: RabIhaFlT/eeWEEzL/L+IBfxjEP2Ff+7lsHk7TCY9zw= Subject key identifier: 97:1C:92:6C:35:F5:C4:87:06:A4:A9:2B:E7:C6:69:FD:97:84:92:33 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 112BFF178BEC559EDC98D5B211D0FC3EFDD9B428 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 2B Signing time: Wed 13 May 2026 05:25:58 +0000 Manifest this update: Wed 13 May 2026 05:20:58 +0000 Manifest next update: Thu 14 May 2026 05:49:58 +0000 Files and hashes: 1: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: fzCx8PWPW6JLSxfkpfwq8ejsZnWahE2xhI+3Lxf3QIo=) 2: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2b:ff:17:8b:ec:55:9e:dc:98:d5:b2:11:d0:fc:3e:fd:d9:b4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: May 13 05:20:58 2026 GMT Not After : May 14 05:49:58 2026 GMT Subject: CN=971C926C35F5C48706A4A92BE7C669FD97849233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:e2:65:d2:5a:0c:aa:fc:3d:d8:31:d3:fb: 62:6f:25:f1:77:1c:a8:b9:1f:c4:82:b4:25:ff:9b: 9e:e5:c4:f1:42:39:dd:a4:2c:a5:01:78:17:ee:b6: fa:2f:51:1b:ea:41:c8:96:89:52:3e:72:71:4f:db: 5a:bf:5d:65:26:70:37:e9:39:89:9d:f5:6b:c7:83: 25:a3:22:61:1e:a6:ee:d4:56:63:c5:9b:a5:ca:53: 0b:7e:0c:3b:a1:54:23:ec:96:32:49:e8:d6:8f:e6: f6:10:50:01:9b:f0:c7:f1:5b:9b:26:e0:6f:a5:f7: ae:2a:6d:f2:35:d0:4f:70:ab:0f:3f:5a:29:ea:e8: 95:b3:b1:5c:c9:25:a7:c7:24:0e:dc:ef:85:8e:39: 3b:a7:81:c3:95:42:43:8a:d7:7c:d3:db:88:26:b7: fc:e8:a5:57:64:16:e1:a4:2f:94:99:25:72:6f:14: 41:28:4e:dc:66:64:e0:b8:99:b8:98:f4:cf:25:83: 1e:61:6c:be:06:ac:16:7b:8c:8a:4e:ca:7c:a1:88: b8:84:7e:c1:71:5c:d9:9f:87:02:2e:81:5a:55:c8: 27:2b:0e:28:64:24:91:93:f3:0a:fa:cf:1d:09:2f: cd:0b:0a:e9:8c:a4:4c:7b:5a:83:48:22:95:d1:20: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1C:92:6C:35:F5:C4:87:06:A4:A9:2B:E7:C6:69:FD:97:84:92:33 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:94:19:5f:a4:93:c5:4a:b7:7c:8a:04:8a:73:dd:7c:84: 70:6b:6a:14:3d:8d:4a:7c:85:54:34:4a:63:a0:48:62:e5:42: 0a:16:df:f6:5a:b0:be:51:34:ea:b2:c5:49:66:2b:73:13:5c: 4f:d3:c9:3c:5f:ef:e6:07:a2:a6:4c:e1:94:56:a1:75:a1:b9: df:59:44:1b:d4:15:7d:c1:c5:b8:44:42:8b:0a:e2:bb:2b:73: 76:2c:b9:02:f2:a7:fe:75:c6:11:4d:12:1d:94:b6:e1:8c:4a: 67:cb:e9:53:b3:68:d1:93:0b:84:a9:37:9d:a5:39:28:09:33: 52:03:2c:e5:73:2c:1f:f0:fd:bc:86:b0:67:a5:bc:fc:57:7b: e1:7f:7b:52:1c:2f:fa:5a:c0:5e:18:a1:e4:fc:db:59:4e:19: 11:61:c8:17:d0:a8:3c:af:a1:2d:04:66:2b:07:07:17:8d:34: 75:5c:6a:fe:37:68:c3:0c:6b:b2:cc:6e:92:a1:9f:11:7a:e9: a1:09:ce:7e:e4:a4:ed:ab:b0:4f:ae:a2:cb:bd:fa:dc:7a:c6: f6:d5:71:68:74:95:a6:69:28:a6:43:5e:c0:fb:5e:d7:b9:c9: cb:06:31:f4:e6:e0:1c:e5:e4:2f:05:d5:ee:f2:60:27:75:d1: 74:2b:42:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUESv/F4vsVZ7cmNWyEdD8Pv3ZtCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA1MTMwNTIwNThaFw0yNjA1MTQwNTQ5NThaMDMxMTAvBgNV BAMTKDk3MUM5MjZDMzVGNUM0ODcwNkE0QTkyQkU3QzY2OUZEOTc4NDkyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUOJl0loMqvw92DHT+2JvJfF3 HKi5H8SCtCX/m57lxPFCOd2kLKUBeBfutvovURvqQciWiVI+cnFP21q/XWUmcDfp OYmd9WvHgyWjImEepu7UVmPFm6XKUwt+DDuhVCPsljJJ6NaP5vYQUAGb8MfxW5sm 4G+l964qbfI10E9wqw8/Winq6JWzsVzJJafHJA7c74WOOTungcOVQkOK13zT24gm t/zopVdkFuGkL5SZJXJvFEEoTtxmZOC4mbiY9M8lgx5hbL4GrBZ7jIpOynyhiLiE fsFxXNmfhwIugVpVyCcrDihkJJGT8wr6zx0JL80LCumMpEx7WoNIIpXRIIp1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlxySbDX1xIcGpKkr58Zp/ZeEkjMwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqyUGV+kk8VK t3yKBIpz3XyEcGtqFD2NSnyFVDRKY6BIYuVCChbf9lqwvlE06rLFSWYrcxNcT9PJ PF/v5geipkzhlFahdaG531lEG9QVfcHFuERCiwriuytzdiy5AvKn/nXGEU0SHZS2 4YxKZ8vpU7No0ZMLhKk3naU5KAkzUgMs5XMsH/D9vIawZ6W8/Fd74X97Uhwv+lrA Xhih5PzbWU4ZEWHIF9CoPK+hLQRmKwcHF400dVxq/jdowwxrssxukqGfEXrpoQnO fuSk7auwT66iy7363HrG9tVxaHSVpmkopkNewPte17nJywYx9ObgHOXkLwXV7vJg J3XRdCtCzw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client