$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: KO/YGVqsfdcHCrFauzJVnIi5kft4x3AYjhw3xBWNANw= Subject key identifier: C5:3F:FD:68:30:9E:12:89:76:DA:9B:EE:75:1C:32:64:62:9A:9A:FA Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 2FCCBC0C018C3513616503CF18EF07AD73FC3A37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: A9 Signing time: Thu 08 Oct 2026 04:42:17 +0000 Manifest this update: Thu 08 Oct 2026 04:37:17 +0000 Manifest next update: Sun 11 Oct 2026 14:29:17 +0000 Files and hashes: 1: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 2: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 3: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) 4: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: WeqZkcRAZ1vX7nLJRoXU6jKkNIbfCntnjaEbMfMX5dY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cc:bc:0c:01:8c:35:13:61:65:03:cf:18:ef:07:ad:73:fc:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Oct 8 04:37:17 2026 GMT Not After : Oct 11 14:29:17 2026 GMT Subject: CN=C53FFD68309E128976DA9BEE751C3264629A9AFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:00:b1:db:a5:1d:10:f2:23:d4:ac:6e:9a: 8f:a0:94:fa:37:ed:08:3f:59:4b:81:cb:c0:a5:2e: a2:e3:ee:71:c0:d7:c5:bc:71:99:0d:e0:5a:fe:1f: 23:7c:bd:47:8d:67:6a:cf:b7:4f:62:2e:03:0c:56: 5c:f8:cb:ba:b4:55:9b:3f:9b:9b:e7:86:5b:b4:24: 01:68:83:f5:b3:13:0d:5a:be:5f:e0:f3:1d:5f:98: ec:40:33:f3:97:37:dd:47:d3:a0:47:78:64:25:33: 2b:95:7b:6f:e6:6e:c3:a6:c5:07:21:83:be:a5:92: 7c:30:01:61:d5:ab:2a:41:41:7b:06:28:e4:39:05: 78:2b:8e:cf:a3:2d:e3:5f:cc:c7:71:be:6b:62:64: 4b:66:b7:53:a1:fa:0b:fc:09:07:9d:44:37:ef:79: 0e:a9:2b:da:9c:b5:55:7c:ea:1f:a6:fc:52:38:bd: f6:75:7f:c4:92:f4:38:80:26:31:8a:8e:0d:43:b6: e6:de:6d:fa:b5:e8:4c:9b:2f:fc:0d:1a:64:02:8b: 04:55:6f:02:49:af:9f:b9:12:b9:3a:46:47:9b:6e: c9:73:da:31:56:c5:61:3f:26:85:cf:03:85:58:f8: 12:48:4e:ac:05:bf:5a:2a:98:95:51:16:b7:8c:82: ed:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:FD:68:30:9E:12:89:76:DA:9B:EE:75:1C:32:64:62:9A:9A:FA X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:4a:d5:29:94:47:3a:7c:40:40:92:dc:a1:b6:6b:6e:f4:7d: e1:76:2a:b4:d0:f7:a4:87:31:a0:e6:d8:f6:c8:48:e9:74:8a: 13:53:89:62:d9:2b:56:8c:a7:d0:ab:60:d3:3b:29:4b:68:30: 3c:b7:52:0f:50:86:b9:a0:a4:e7:4f:24:84:8c:bd:72:ec:c7: 0b:d2:61:99:96:be:a5:b9:ce:fb:aa:b1:7c:90:29:b1:8d:08: 10:bb:e0:45:46:0a:fc:7b:e5:16:28:23:93:02:d9:8f:d7:63: 62:35:75:e5:0d:98:1f:60:0c:75:9b:ce:6a:94:53:c4:7e:75: 53:d7:84:11:16:6b:22:b7:6d:aa:7e:d2:bd:39:8e:d2:6f:7a: 9e:86:fc:7e:ed:c0:26:d3:a0:8d:56:e1:ec:3c:28:6e:a2:1d: 46:46:c6:e5:4a:85:f0:9a:a5:2d:6b:ea:08:96:c6:70:71:54: a6:51:27:72:58:2f:ee:73:4f:dc:e7:2f:5a:f1:6d:6c:8e:ad: 10:df:42:89:07:31:74:7c:fd:98:57:2b:d8:69:40:22:4a:82: f4:ad:84:6e:58:02:45:0a:c1:9a:4d:e5:b2:d7:42:d3:6a:60: 60:85:08:fc:bd:71:2a:2f:3b:a9:e4:e7:03:b4:0a:ea:13:bc: f3:9f:15:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL8y8DAGMNRNhZQPPGO8HrXP8OjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjEwMDgwNDM3MTdaFw0yNjEwMTExNDI5MTdaMDMxMTAvBgNV BAMTKEM1M0ZGRDY4MzA5RTEyODk3NkRBOUJFRTc1MUMzMjY0NjI5QTlBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOgCx26UdEPIj1Kxumo+glPo3 7Qg/WUuBy8ClLqLj7nHA18W8cZkN4Fr+HyN8vUeNZ2rPt09iLgMMVlz4y7q0VZs/ m5vnhlu0JAFog/WzEw1avl/g8x1fmOxAM/OXN91H06BHeGQlMyuVe2/mbsOmxQch g76lknwwAWHVqypBQXsGKOQ5BXgrjs+jLeNfzMdxvmtiZEtmt1Oh+gv8CQedRDfv eQ6pK9qctVV86h+m/FI4vfZ1f8SS9DiAJjGKjg1Dtubebfq16EybL/wNGmQCiwRV bwJJr5+5Erk6Rkebbslz2jFWxWE/JoXPA4VY+BJITqwFv1oqmJVRFreMgu2rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxT/9aDCeEol22pvudRwyZGKamvowHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzErVKZRHOnxA QJLcobZrbvR94XYqtND3pIcxoObY9shI6XSKE1OJYtkrVoyn0Ktg0zspS2gwPLdS D1CGuaCk508khIy9cuzHC9JhmZa+pbnO+6qxfJApsY0IELvgRUYK/HvlFigjkwLZ j9djYjV15Q2YH2AMdZvOapRTxH51U9eEERZrIrdtqn7SvTmO0m96nob8fu3AJtOg jVbh7DwobqIdRkbG5UqF8JqlLWvqCJbGcHFUplEnclgv7nNP3OcvWvFtbI6tEN9C iQcxdHz9mFcr2GlAIkqC9K2EblgCRQrBmk3lstdC02pgYIUI/L1xKi87qeTnA7QK 6hO8858VbA== -----END CERTIFICATE-----Generated at Thu Oct 8 10:44:08 2026 by rpki-client