$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: PweL4UYQ9R45z+bNOXjHoXQqka4IRmVjNKHZ6jRsfg4= Subject key identifier: 4F:FC:5C:A1:67:E8:43:A2:92:C2:B6:98:F1:2D:FA:D8:53:F0:F5:75 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 75519E219AD707D31E1C419C5B1674807BBF121A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 14:01:21 +0000 Manifest this update: Fri 24 Jul 2026 13:56:21 +0000 Manifest next update: Sat 25 Jul 2026 16:38:21 +0000 Files and hashes: 1: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) 2: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: iTDrkVCIYDxfiXKfry1Mppn0oFBv9M6QzEsFcjyrf0Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:51:9e:21:9a:d7:07:d3:1e:1c:41:9c:5b:16:74:80:7b:bf:12:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Jul 24 13:56:21 2026 GMT Not After : Jul 25 16:38:21 2026 GMT Subject: CN=4FFC5CA167E843A292C2B698F12DFAD853F0F575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:80:6c:98:fd:0a:61:df:6e:ea:b3:9a:f1: 65:7b:cf:08:01:36:9d:9a:9e:c1:f7:6e:72:ee:9e: 88:60:bb:78:5f:a3:46:1f:71:4c:63:5b:e3:fa:3b: 45:0f:93:21:bd:91:42:c2:3b:0d:6f:2f:c2:44:82: 48:1f:69:52:15:e3:ec:a9:77:84:7c:75:3d:de:a3: 27:30:f8:41:8e:95:cb:de:de:cb:34:5a:b4:fe:7d: b7:02:57:37:24:9f:95:08:47:f4:20:3b:97:59:31: b6:60:12:b9:5b:66:c4:9c:d2:64:17:4e:6c:03:33: 78:a6:f8:40:18:16:62:a3:6e:99:8c:21:97:0d:2d: d5:e5:50:85:3c:69:dd:a1:7a:09:76:2c:b2:5b:c6: ba:f7:f7:3f:db:3c:a6:05:a5:23:10:ce:94:5c:ca: 09:59:fe:fa:e0:f0:47:29:aa:12:e9:13:f8:a1:fd: 0c:a5:d8:0c:dd:59:3d:7c:6c:e3:73:ef:91:6b:91: af:61:63:2d:1a:82:5e:a0:18:06:e3:b3:44:13:22: 7d:73:c1:cc:4d:9e:8c:db:8f:8c:4a:46:4e:75:8a: 32:35:a1:cf:11:43:a8:b3:79:51:59:f9:f2:fc:c1: 2b:1a:0f:0b:32:86:16:9c:af:ac:db:a0:39:ff:e4: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:5C:A1:67:E8:43:A2:92:C2:B6:98:F1:2D:FA:D8:53:F0:F5:75 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:42:54:20:35:3c:76:50:67:3a:de:fc:40:bf:0d:bd:b6:b4: 5e:83:22:e9:bb:4e:5a:98:cb:40:24:46:23:a4:b5:5e:81:0a: 2d:ce:93:e9:e1:6f:ab:1e:33:13:5b:ed:21:93:14:05:5d:c6: bc:83:bd:36:7f:42:f2:df:b3:3c:9b:f9:2f:8d:55:53:8a:50: ca:7e:9f:32:ab:05:18:48:fc:0b:f4:79:77:ab:1a:44:99:97: bf:6c:12:b5:b3:fe:7b:28:e6:c0:ce:18:9c:00:f3:d9:f5:28: 26:9c:a2:7c:18:54:ca:fd:87:3c:86:78:d9:5e:e6:c3:c5:fb: d7:71:47:b3:f9:04:6a:9a:71:11:9a:9b:3e:33:ac:8d:6b:26: c5:52:48:34:12:2f:65:e0:63:9a:94:dc:9e:ff:ad:c0:d5:c0: 1b:81:9a:3a:28:07:b5:76:6b:f0:ce:13:78:0e:eb:0c:a5:44: 06:16:9c:d4:4f:7a:26:06:9a:bf:de:8b:76:c8:3a:cb:59:1b: 4b:10:64:4f:93:c8:2d:3f:c7:bb:dd:c4:a0:05:d3:95:98:88: 6a:04:20:07:b7:1d:89:d0:1c:b1:6d:b7:87:f6:82:77:7d:8c: f2:b9:3c:30:7e:b9:bf:11:e8:49:6b:57:8e:fe:d7:7e:c2:0e: 86:9c:19:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdVGeIZrXB9MeHEGcWxZ0gHu/EhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA3MjQxMzU2MjFaFw0yNjA3MjUxNjM4MjFaMDMxMTAvBgNV BAMTKDRGRkM1Q0ExNjdFODQzQTI5MkMyQjY5OEYxMkRGQUQ4NTNGMEY1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaYBsmP0KYd9u6rOa8WV7zwgB Np2ansH3bnLunohgu3hfo0YfcUxjW+P6O0UPkyG9kULCOw1vL8JEgkgfaVIV4+yp d4R8dT3eoycw+EGOlcve3ss0WrT+fbcCVzckn5UIR/QgO5dZMbZgErlbZsSc0mQX TmwDM3im+EAYFmKjbpmMIZcNLdXlUIU8ad2hegl2LLJbxrr39z/bPKYFpSMQzpRc yglZ/vrg8EcpqhLpE/ih/Qyl2AzdWT18bONz75Frka9hYy0agl6gGAbjs0QTIn1z wcxNnozbj4xKRk51ijI1oc8RQ6izeVFZ+fL8wSsaDwsyhhacr6zboDn/5LhrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT/xcoWfoQ6KSwraY8S362FPw9XUwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEJUIDU8dlBn Ot78QL8Nvba0XoMi6btOWpjLQCRGI6S1XoEKLc6T6eFvqx4zE1vtIZMUBV3GvIO9 Nn9C8t+zPJv5L41VU4pQyn6fMqsFGEj8C/R5d6saRJmXv2wStbP+eyjmwM4YnADz 2fUoJpyifBhUyv2HPIZ42V7mw8X713FHs/kEappxEZqbPjOsjWsmxVJINBIvZeBj mpTcnv+twNXAG4GaOigHtXZr8M4TeA7rDKVEBhac1E96Jgaav96Ldsg6y1kbSxBk T5PILT/Hu93EoAXTlZiIagQgB7cdidAcsW23h/aCd32M8rk8MH65vxHoSWtXjv7X fsIOhpwZvQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:19 2026 by rpki-client