$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: /XzGp17ls1YQ//Fj5yFhhg8xPGq4AmHPt6/ibQ3AeCc= Subject key identifier: 86:6C:37:98:E2:77:74:CE:E0:2A:45:03:E8:8F:BB:22:D3:9D:32:D9 Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 1F28E7D3F52B4057532A93A1FBFD9F74049F13EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: A7 Signing time: Sat 03 Oct 2026 22:57:28 +0000 Manifest this update: Sat 03 Oct 2026 22:52:28 +0000 Manifest next update: Tue 06 Oct 2026 23:16:28 +0000 Files and hashes: 1: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 2: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 3: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: 7zIjevoW1dOgiO2Fp7Mzk95VvaJEG2RsoFYLPDSZo8g=) 4: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 23:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:28:e7:d3:f5:2b:40:57:53:2a:93:a1:fb:fd:9f:74:04:9f:13:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Oct 3 22:52:28 2026 GMT Not After : Oct 6 23:16:28 2026 GMT Subject: CN=866C3798E27774CEE02A4503E88FBB22D39D32D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:90:04:7f:bd:d3:a6:0e:ae:01:46:5a:aa:46: bd:e7:8c:31:44:85:b8:df:4a:db:24:cc:e8:76:6d: ef:36:e4:3b:96:66:be:6f:da:1d:b6:79:3a:fe:b7: 0d:ee:3a:af:c7:f3:1b:7d:6f:c6:d6:d9:31:38:2c: b2:1a:dd:3b:c0:11:8f:8f:07:0d:ae:5e:ee:a5:be: ce:8e:c5:df:ef:5a:3c:d6:d0:4a:3d:fc:4d:c6:99: db:e3:df:e9:f6:ed:f5:a2:99:e0:55:84:54:38:bb: 27:d0:62:f1:b4:7d:16:db:a8:92:a0:6b:2f:8a:e9: 7c:7d:dd:36:13:bc:8b:2c:b0:1e:62:08:5f:fe:a1: 28:94:2d:47:52:5a:ab:5c:f8:7c:05:5f:8a:ca:d1: ff:c4:c5:19:8c:46:b4:d8:62:45:7c:8e:d8:6e:b8: 68:c6:a1:a5:83:6d:cc:95:4d:26:9f:ad:47:45:a8: 95:8e:61:5d:c9:d8:df:ff:47:87:a1:5e:8d:a8:f9: c2:4c:f7:33:2c:96:7c:66:f0:3d:59:c2:b1:d4:4a: 0f:95:cb:71:e1:83:0d:fe:da:56:49:ff:a9:a3:10: ff:c1:3c:4c:15:66:ec:93:cd:cf:36:94:1b:fa:15: fb:15:4e:7d:88:8f:4b:df:bf:16:58:e0:49:38:31: 70:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:37:98:E2:77:74:CE:E0:2A:45:03:E8:8F:BB:22:D3:9D:32:D9 X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8e:97:19:4c:b7:69:ae:c4:d7:ec:b0:fe:c6:cb:04:2d:17: f7:27:38:9b:0b:49:88:47:7e:6c:91:21:24:49:43:a2:93:ca: dd:65:91:ea:a7:8f:a3:bd:41:5c:c6:17:a9:fa:ba:25:51:e1: 71:c9:65:21:5d:ed:42:50:80:dd:57:c6:43:f4:ee:4f:2e:42: 16:34:a8:18:7f:45:c4:cd:b1:9c:18:60:64:d4:52:40:a3:9c: 27:5d:cc:d5:5e:d2:03:a9:c3:f7:9a:bf:1f:02:ac:0f:da:42: 22:92:fe:61:81:c8:b8:cb:af:dd:3a:6f:52:57:98:c1:7c:97: 1b:de:98:05:77:3c:e5:0f:57:c6:4c:c3:77:52:3e:a4:fc:eb: d2:95:56:a9:9e:cf:87:55:8d:07:62:e0:0f:0b:8c:f4:07:6f: 57:76:2d:ff:3d:1c:ed:e7:e8:56:32:69:d4:c6:f4:32:48:47: 0a:e4:31:c3:06:75:fb:99:c1:4a:33:e0:ab:1d:6b:af:a7:23: 4a:d5:f0:bf:2f:3d:d5:6c:f4:3d:2c:d2:6c:23:2d:17:5c:60: ac:9d:3e:a1:7d:41:2d:71:54:d8:c3:94:37:f9:de:eb:9f:e3: 50:d9:f4:ed:eb:1e:8a:2c:4c:d5:b9:21:61:93:7c:dc:1f:a0: ed:12:a8:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHyjn0/UrQFdTKpOh+/2fdASfE+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjEwMDMyMjUyMjhaFw0yNjEwMDYyMzE2MjhaMDMxMTAvBgNV BAMTKDg2NkMzNzk4RTI3Nzc0Q0VFMDJBNDUwM0U4OEZCQjIyRDM5RDMyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2kAR/vdOmDq4BRlqqRr3njDFE hbjfStskzOh2be825DuWZr5v2h22eTr+tw3uOq/H8xt9b8bW2TE4LLIa3TvAEY+P Bw2uXu6lvs6Oxd/vWjzW0Eo9/E3Gmdvj3+n27fWimeBVhFQ4uyfQYvG0fRbbqJKg ay+K6Xx93TYTvIsssB5iCF/+oSiULUdSWqtc+HwFX4rK0f/ExRmMRrTYYkV8jthu uGjGoaWDbcyVTSafrUdFqJWOYV3J2N//R4ehXo2o+cJM9zMslnxm8D1ZwrHUSg+V y3Hhgw3+2lZJ/6mjEP/BPEwVZuyTzc82lBv6FfsVTn2Ij0vfvxZY4Ek4MXAvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhmw3mOJ3dM7gKkUD6I+7ItOdMtkwHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI6XGUy3aa7E 1+yw/sbLBC0X9yc4mwtJiEd+bJEhJElDopPK3WWR6qePo71BXMYXqfq6JVHhccll IV3tQlCA3VfGQ/TuTy5CFjSoGH9FxM2xnBhgZNRSQKOcJ13M1V7SA6nD95q/HwKs D9pCIpL+YYHIuMuv3TpvUleYwXyXG96YBXc85Q9XxkzDd1I+pPzr0pVWqZ7Ph1WN B2LgDwuM9AdvV3Yt/z0c7efoVjJp1Mb0MkhHCuQxwwZ1+5nBSjPgqx1rr6cjStXw vy891Wz0PSzSbCMtF1xgrJ0+oX1BLXFU2MOUN/ne65/jUNn07eseiixM1bkhYZN8 3B+g7RKofA== -----END CERTIFICATE-----Generated at Mon Oct 5 05:43:21 2026 by rpki-client