$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: JtvEfNDgeUgmGDaww4iFhyuLVMXpdXxeObqb/Q8sPYo= Subject key identifier: C3:64:F7:78:CE:2A:C2:1C:67:0E:8F:C6:EA:ED:82:33:AC:98:21:01 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 6640E1F6756660B3DD27CAC4489AFD82CE6D2720 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: A7 Signing time: Sat 10 Oct 2026 16:09:46 +0000 Manifest this update: Sat 10 Oct 2026 16:04:46 +0000 Manifest next update: Tue 13 Oct 2026 20:10:46 +0000 Files and hashes: 1: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) 2: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: ajPj51m0qRlynj/lxxQ42VrRvLhaPrFNsTTl0J0qKjc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:40:e1:f6:75:66:60:b3:dd:27:ca:c4:48:9a:fd:82:ce:6d:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Oct 10 16:04:46 2026 GMT Not After : Oct 13 20:10:46 2026 GMT Subject: CN=C364F778CE2AC21C670E8FC6EAED8233AC982101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:4c:4c:d0:c6:3a:a7:1c:bd:02:30:3f:e7: 82:b4:50:6d:bc:27:9f:df:b0:04:8f:0b:9a:3f:46: d0:c7:10:4b:0b:d8:05:04:a1:0a:69:65:a7:37:76: 21:72:6c:0e:bf:85:b8:f4:75:9e:f3:8e:6e:18:f1: 51:d3:08:17:92:e9:ff:e4:f4:51:1a:5d:dd:cc:86: 42:80:23:0f:73:44:dd:fb:e7:70:9b:1a:5b:80:f6: 6f:d0:6b:d9:0f:97:33:b2:c4:e4:1d:04:7c:5b:a8: a0:4b:cd:11:f1:c6:a5:0d:c6:93:68:9c:bc:79:02: 0a:d1:6a:0e:28:76:3e:e3:10:b4:05:44:de:49:1e: cd:07:d3:56:39:66:05:ea:a8:a9:1d:e9:d5:8a:02: 78:23:59:88:da:ac:5c:a5:80:00:72:93:04:74:eb: 74:d9:a8:59:98:f0:42:62:fd:45:1f:8a:33:3b:b7: 6c:15:41:06:3d:51:3b:ea:2e:39:b9:8c:4a:6a:70: 16:bd:84:cb:9a:e1:7b:62:ed:07:20:01:9c:4a:a8: 18:cb:33:07:01:d0:6f:19:1c:4e:fb:16:84:3d:bb: aa:4f:aa:dc:55:bf:5d:a3:ef:d7:38:ee:82:00:60: bf:db:8d:34:02:e4:58:82:3e:a6:f3:ff:64:bd:b9: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:F7:78:CE:2A:C2:1C:67:0E:8F:C6:EA:ED:82:33:AC:98:21:01 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:57:d4:f0:2f:3e:b2:c8:41:83:ab:dc:30:3a:37:09:17:88: 1f:ff:dc:e4:31:46:e7:1e:eb:3c:1d:53:df:40:c6:e6:6b:a8: 9d:60:cd:e8:e0:9b:41:94:3e:5d:30:78:f0:cd:0f:74:0f:9f: 54:97:b2:30:e0:54:ac:e5:0a:86:1f:30:99:e6:75:dd:f8:7a: 86:da:26:d4:89:c2:7b:5a:86:dc:81:d9:2b:d3:2a:e3:54:8d: ad:27:81:18:77:48:fb:32:83:f4:7f:f5:78:56:20:ae:3b:21: 76:cf:63:e9:fb:d6:3a:5f:f2:70:e2:80:5f:bc:69:a4:43:7e: e1:12:dd:42:f8:e0:55:de:ea:bd:5d:f6:ea:03:c8:fe:6e:9d: 7c:bd:10:e7:9c:6c:fb:25:07:ef:be:b8:bc:95:ae:c1:7f:ab: 5b:4a:3e:de:63:09:09:dd:78:80:28:9b:8d:f4:e1:56:ba:40: 40:54:58:37:04:f7:a3:28:fb:52:d4:47:b3:2b:0f:ea:e5:26: b2:8e:16:e7:82:75:2b:70:30:6a:b5:6b:1f:73:0f:e6:49:05: 8b:75:07:3a:74:4a:a8:24:0c:52:42:59:27:3f:2b:ca:95:8a: 26:db:50:8b:d7:0a:e0:3a:a7:66:bd:50:8b:5f:9c:6a:88:34: cb:1c:37:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZkDh9nVmYLPdJ8rESJr9gs5tJyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjEwMTAxNjA0NDZaFw0yNjEwMTMyMDEwNDZaMDMxMTAvBgNV BAMTKEMzNjRGNzc4Q0UyQUMyMUM2NzBFOEZDNkVBRUQ4MjMzQUM5ODIxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMFkxM0MY6pxy9AjA/54K0UG28 J5/fsASPC5o/RtDHEEsL2AUEoQppZac3diFybA6/hbj0dZ7zjm4Y8VHTCBeS6f/k 9FEaXd3MhkKAIw9zRN3753CbGluA9m/Qa9kPlzOyxOQdBHxbqKBLzRHxxqUNxpNo nLx5AgrRag4odj7jELQFRN5JHs0H01Y5ZgXqqKkd6dWKAngjWYjarFylgABykwR0 63TZqFmY8EJi/UUfijM7t2wVQQY9UTvqLjm5jEpqcBa9hMua4Xti7QcgAZxKqBjL MwcB0G8ZHE77FoQ9u6pPqtxVv12j79c47oIAYL/bjTQC5FiCPqbz/2S9ueQRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw2T3eM4qwhxnDo/G6u2CM6yYIQEwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1fU8C8+sshB g6vcMDo3CReIH//c5DFG5x7rPB1T30DG5muonWDN6OCbQZQ+XTB48M0PdA+fVJey MOBUrOUKhh8wmeZ13fh6htom1InCe1qG3IHZK9Mq41SNrSeBGHdI+zKD9H/1eFYg rjshds9j6fvWOl/ycOKAX7xppEN+4RLdQvjgVd7qvV326gPI/m6dfL0Q55xs+yUH 7764vJWuwX+rW0o+3mMJCd14gCibjfThVrpAQFRYNwT3oyj7UtRHsysP6uUmso4W 54J1K3AwarVrH3MP5kkFi3UHOnRKqCQMUkJZJz8rypWKJttQi9cK4DqnZr1Qi1+c aog0yxw3Yw== -----END CERTIFICATE-----Generated at Sun Oct 11 10:50:40 2026 by rpki-client