$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: Ud/rZVENe+YYtKIexAS+LYD2IrVTpvZb0qlLV1OfoCY= Subject key identifier: 7A:C0:D1:5B:82:68:26:49:D1:45:F7:CC:C6:56:1B:01:B9:18:26:DD Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 1C35F05631F756C93FFD5A7942BE9449B3774B50 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 07 Signing time: Wed 13 May 2026 03:25:55 +0000 Manifest this update: Wed 13 May 2026 03:20:55 +0000 Manifest next update: Thu 14 May 2026 06:16:55 +0000 Files and hashes: 1: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: nkXNCMc8Qjh0RH/auB7lfQdLoO4ePbaL6aRGHWvb7AQ=) 2: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:35:f0:56:31:f7:56:c9:3f:fd:5a:79:42:be:94:49:b3:77:4b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: May 13 03:20:55 2026 GMT Not After : May 14 06:16:55 2026 GMT Subject: CN=7AC0D15B82682649D145F7CCC6561B01B91826DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:d8:d6:fe:ec:d5:18:2a:9f:4a:a6:fc:6e: ca:0d:58:ab:b8:7f:74:c4:0f:87:fa:3b:1f:7d:91: 15:65:97:2b:5f:6d:8d:f2:04:e4:70:3c:c2:c2:83: fc:a6:fe:88:8b:d2:05:cf:2b:d5:e4:ea:9e:cf:58: a1:d8:8e:93:9c:0d:38:c2:2a:1d:05:2c:b8:72:3a: 93:79:05:44:75:58:af:a4:d6:1e:b6:52:5f:97:d0: 31:43:0f:56:40:3c:01:c8:6f:b4:12:a1:6e:73:67: 8b:b2:db:0a:7b:94:93:d8:c6:bc:29:0f:9a:c1:d8: e7:99:bb:d3:0a:6b:d0:8c:f6:cf:2f:00:40:f5:d4: 01:cb:c7:1e:77:b0:5d:56:5e:0c:a1:23:5f:5f:40: 9f:82:f2:b3:83:45:9d:f9:54:a7:27:7c:8b:26:4d: 44:85:1f:56:2a:a2:d1:23:3a:8e:f2:a5:b0:05:86: d5:bf:8c:a3:93:2a:fe:2b:2c:09:29:21:3d:22:ba: 60:54:0c:8a:f8:e3:fd:9d:b5:44:84:3e:40:d0:60: 81:2c:0b:d7:b4:79:7b:c1:06:79:03:f6:4b:bb:2f: a1:cc:ac:cf:48:c3:20:f3:b8:94:74:a1:55:94:3d: da:e6:38:5c:ea:e7:01:c0:a9:90:d0:e9:a7:3a:5d: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:D1:5B:82:68:26:49:D1:45:F7:CC:C6:56:1B:01:B9:18:26:DD X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:77:52:f5:0d:28:08:b5:4e:e2:f7:55:31:15:09:ac:65:99: cd:a7:a8:15:0b:f8:79:d9:1e:57:67:58:9a:cc:8b:fc:28:2d: 36:b4:9c:b3:c8:1e:14:2c:8c:e3:71:4f:1e:b4:15:59:32:d4: 08:28:fd:15:2c:16:33:ee:e1:2e:8a:c9:b7:a3:91:07:f3:3f: ec:5d:f8:51:58:68:e3:98:a5:6d:f5:fa:86:4c:13:2b:8c:5d: a4:ba:6d:ce:36:8e:78:9e:14:4a:41:96:6c:93:b9:7a:d1:d3: dc:0b:6d:f0:59:48:b4:ce:34:21:37:f1:20:28:13:52:88:d1: 3f:c6:e1:cd:39:23:24:30:b8:0b:04:00:32:9c:e7:3d:34:ca: 6e:9e:75:2d:19:2c:24:44:34:f5:e8:f4:22:c3:63:68:38:55: 01:d6:ae:13:d8:5e:b7:f8:84:9e:47:00:85:2e:d7:c0:82:6d: fd:22:c0:e2:23:c4:3d:c0:5f:41:85:29:20:69:cd:3f:cd:eb: 79:8f:6d:9f:9f:68:1e:5f:5e:6a:04:f5:aa:68:d4:80:2c:c2: d7:5b:0d:66:3e:30:bf:9d:89:49:07:09:35:50:c9:f4:c8:16: af:00:e8:ea:ca:6a:61:4a:25:99:7b:55:f2:f3:63:50:94:6d: ea:28:c3:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHDXwVjH3Vsk//Vp5Qr6USbN3S1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA1MTMwMzIwNTVaFw0yNjA1MTQwNjE2NTVaMDMxMTAvBgNV BAMTKDdBQzBEMTVCODI2ODI2NDlEMTQ1RjdDQ0M2NTYxQjAxQjkxODI2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmdjW/uzVGCqfSqb8bsoNWKu4 f3TED4f6Ox99kRVllytfbY3yBORwPMLCg/ym/oiL0gXPK9Xk6p7PWKHYjpOcDTjC Kh0FLLhyOpN5BUR1WK+k1h62Ul+X0DFDD1ZAPAHIb7QSoW5zZ4uy2wp7lJPYxrwp D5rB2OeZu9MKa9CM9s8vAED11AHLxx53sF1WXgyhI19fQJ+C8rODRZ35VKcnfIsm TUSFH1YqotEjOo7ypbAFhtW/jKOTKv4rLAkpIT0iumBUDIr44/2dtUSEPkDQYIEs C9e0eXvBBnkD9ku7L6HMrM9IwyDzuJR0oVWUPdrmOFzq5wHAqZDQ6ac6XYCLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUesDRW4JoJknRRffMxlYbAbkYJt0wHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADndS9Q0oCLVO 4vdVMRUJrGWZzaeoFQv4edkeV2dYmsyL/CgtNrScs8geFCyM43FPHrQVWTLUCCj9 FSwWM+7hLorJt6ORB/M/7F34UVho45ilbfX6hkwTK4xdpLptzjaOeJ4USkGWbJO5 etHT3Att8FlItM40ITfxICgTUojRP8bhzTkjJDC4CwQAMpznPTTKbp51LRksJEQ0 9ej0IsNjaDhVAdauE9het/iEnkcAhS7XwIJt/SLA4iPEPcBfQYUpIGnNP83reY9t n59oHl9eagT1qmjUgCzC11sNZj4wv52JSQcJNVDJ9MgWrwDo6spqYUolmXtV8vNj UJRt6ijD3w== -----END CERTIFICATE-----Generated at Wed May 13 13:31:20 2026 by rpki-client