$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: HgiMgo9N1lNIFfW4zZC5tv8RTQQRlPCq09B6GSj1ytQ= Subject key identifier: 8F:EF:84:0F:15:35:65:CA:B3:43:04:4B:FC:E3:CE:C6:FA:89:A1:4A Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 0A6A0949DC090AEDC275D95B678A9BDF5E87B0D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 68 Signing time: Fri 24 Jul 2026 02:25:08 +0000 Manifest this update: Fri 24 Jul 2026 02:20:08 +0000 Manifest next update: Sat 25 Jul 2026 06:22:08 +0000 Files and hashes: 1: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 2: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 3: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) 4: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: /usmxQMIN3ThGtoErwrvka5OboSa8eyOsvHyYu+1nRQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6a:09:49:dc:09:0a:ed:c2:75:d9:5b:67:8a:9b:df:5e:87:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Jul 24 02:20:08 2026 GMT Not After : Jul 25 06:22:08 2026 GMT Subject: CN=8FEF840F153565CAB343044BFCE3CEC6FA89A14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a0:51:ca:fa:3a:06:64:30:a0:03:06:98:47: c8:a8:86:dd:39:91:d6:d9:85:27:e6:64:9d:c1:11: b2:10:2b:94:23:3b:2b:c3:fe:a1:6b:86:66:79:1b: af:01:ae:a1:1c:25:cb:cb:c6:e2:42:65:99:fc:b9: e3:2a:7e:45:7d:b6:68:3c:b6:c3:f9:f2:5f:1c:b8: 99:fc:7c:c5:e4:2a:14:a6:ce:55:b7:78:64:13:24: 64:c6:da:d6:fd:60:fe:69:be:d4:ee:66:db:a0:05: ee:cb:db:cc:23:1d:f6:aa:cb:cd:9e:c0:f9:08:06: 04:ab:94:8f:a5:28:2e:d8:c6:8b:95:39:c0:17:9f: 48:18:72:04:f8:2f:bd:6c:49:8c:3a:97:47:6b:01: 0f:4f:d5:a5:af:7e:fb:c0:46:0a:90:64:84:d9:ac: 02:23:b4:4b:c9:e8:f3:7a:cb:42:2b:62:78:d6:59: db:82:bd:8e:70:1b:9a:93:7d:50:d8:9b:a9:4b:a5: 75:54:84:58:3e:21:4c:2c:d6:3d:25:a9:ad:d7:60: f0:e1:5d:3e:a4:c9:46:7b:de:57:e6:c5:62:92:4a: 89:3f:2b:f5:69:72:f1:2a:19:10:df:60:6f:35:fa: 4d:b5:7a:39:9b:67:e8:ae:55:82:2a:0c:b7:fe:0d: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EF:84:0F:15:35:65:CA:B3:43:04:4B:FC:E3:CE:C6:FA:89:A1:4A X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:99:61:89:9e:fc:be:1b:20:fb:72:c3:38:ac:b4:fd:82:a2: b8:9a:75:11:26:77:68:4a:27:a3:fb:e7:ef:87:80:60:03:c8: 83:6e:a4:9d:ab:b4:a5:1a:fd:9a:f3:90:f5:b4:5f:8a:00:82: 5a:65:5e:07:48:bb:c5:c4:59:55:66:63:66:9a:37:f1:49:1d: 73:69:eb:13:72:4f:6e:d6:b6:ea:e7:0d:3c:07:1f:b3:94:fb: a7:80:a2:18:da:d2:8c:69:e5:9f:f1:8d:b8:12:ff:38:04:01: b3:ae:09:a2:3f:59:8e:5b:0a:e1:a6:1c:3f:3e:b5:50:9b:8c: 34:10:a8:d8:37:51:d3:b8:b6:09:c1:24:38:38:8a:2a:6f:0d: 89:a4:92:ba:db:4c:76:3b:ab:ef:27:a1:9d:c2:1d:c4:16:c0: c6:fe:b2:e8:af:b1:80:8f:d6:35:a3:d7:2a:2e:5d:fc:ad:bc: 81:16:c7:3d:87:af:14:61:38:2e:f1:f4:8c:d6:46:85:9f:95: 13:36:f7:f7:ce:7b:61:b7:92:b4:58:12:a9:38:fa:86:ec:a1: 37:96:50:d9:82:30:5e:69:dd:35:cf:40:e3:38:c7:b1:6b:ad: e0:60:91:64:2d:39:4e:30:69:1a:ef:f1:27:6a:11:79:17:ee: e3:28:64:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCmoJSdwJCu3CddlbZ4qb316HsNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA3MjQwMjIwMDhaFw0yNjA3MjUwNjIyMDhaMDMxMTAvBgNV BAMTKDhGRUY4NDBGMTUzNTY1Q0FCMzQzMDQ0QkZDRTNDRUM2RkE4OUExNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoFHK+joGZDCgAwaYR8ioht05 kdbZhSfmZJ3BEbIQK5QjOyvD/qFrhmZ5G68BrqEcJcvLxuJCZZn8ueMqfkV9tmg8 tsP58l8cuJn8fMXkKhSmzlW3eGQTJGTG2tb9YP5pvtTuZtugBe7L28wjHfaqy82e wPkIBgSrlI+lKC7YxouVOcAXn0gYcgT4L71sSYw6l0drAQ9P1aWvfvvARgqQZITZ rAIjtEvJ6PN6y0IrYnjWWduCvY5wG5qTfVDYm6lLpXVUhFg+IUws1j0lqa3XYPDh XT6kyUZ73lfmxWKSSok/K/VpcvEqGRDfYG81+k21ejmbZ+iuVYIqDLf+DW6lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj++EDxU1ZcqzQwRL/OPOxvqJoUowHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZlhiZ78vhsg +3LDOKy0/YKiuJp1ESZ3aEono/vn74eAYAPIg26knau0pRr9mvOQ9bRfigCCWmVe B0i7xcRZVWZjZpo38Ukdc2nrE3JPbta26ucNPAcfs5T7p4CiGNrSjGnln/GNuBL/ OAQBs64Joj9ZjlsK4aYcPz61UJuMNBCo2DdR07i2CcEkODiKKm8NiaSSuttMdjur 7yehncIdxBbAxv6y6K+xgI/WNaPXKi5d/K28gRbHPYevFGE4LvH0jNZGhZ+VEzb3 9857YbeStFgSqTj6huyhN5ZQ2YIwXmndNc9A4zjHsWut4GCRZC05TjBpGu/xJ2oR eRfu4yhkzA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:41:55 2026 by rpki-client