$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: NLlhQQolxdO6aDQeiq0ats0AlYMHtLcUxBuPRw2ADUU= Subject key identifier: C0:28:0A:19:4C:A7:2B:D3:DB:61:3E:7D:7D:F0:50:40:8F:75:5B:FC Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 5CD92D9CDA61F81056EEA0FB574DC44725036E0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 38 Signing time: Fri 24 Jul 2026 18:06:50 +0000 Manifest this update: Fri 24 Jul 2026 18:01:50 +0000 Manifest next update: Sat 25 Jul 2026 21:27:50 +0000 Files and hashes: 1: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 2: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 3: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 4: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 5: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 6: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) 7: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 8: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 9: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) 10: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) 11: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) 12: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 13: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 14: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 15: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: x3SbCET2cdHu6o3Aip+ISdpwsjKW7CGJ1g0CxVCQ3SQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 21:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d9:2d:9c:da:61:f8:10:56:ee:a0:fb:57:4d:c4:47:25:03:6e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jul 24 18:01:50 2026 GMT Not After : Jul 25 21:27:50 2026 GMT Subject: CN=C0280A194CA72BD3DB613E7D7DF050408F755BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:3d:3f:53:4c:65:06:d9:f8:d1:34:ea:1a: 0b:7b:50:9e:be:b6:4f:69:cc:af:19:bf:d3:26:9d: 34:4f:80:3f:a9:78:c9:6b:87:7a:b8:b6:86:2c:88: 33:91:e1:44:bf:99:1d:49:23:fa:90:02:90:b6:f3: 17:1f:5c:d5:11:c5:a4:0c:52:e3:46:97:0a:aa:58: 72:fb:44:a4:97:d8:53:a6:f3:b4:4a:91:1d:b1:43: 01:99:85:b6:d5:a9:0c:c8:76:a5:ce:bc:ca:a2:ea: 28:6a:cd:a5:62:6f:6a:c2:17:12:cb:60:d9:33:c3: f7:22:24:cf:b3:40:5b:16:67:da:00:39:ae:2f:a2: 11:2e:6a:37:74:66:b7:c6:ac:6e:bf:79:8d:c9:eb: c1:d7:cd:3c:35:12:f5:75:d8:2e:3d:d9:ae:4e:2d: af:76:03:14:9a:3a:50:90:69:14:99:73:c1:be:46: 66:ed:75:15:7c:28:ed:12:87:e9:aa:35:ec:cc:e0: 20:8f:cd:94:49:74:e2:97:0a:1a:9e:77:ee:e1:2f: ec:83:3c:00:2f:79:ac:a5:51:32:4e:26:88:d3:c1: 4e:32:be:a0:ae:99:76:aa:ff:c4:1a:02:24:19:f1: 85:e9:d7:e7:11:d2:cd:70:a8:1b:5c:6b:f1:b2:22: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:28:0A:19:4C:A7:2B:D3:DB:61:3E:7D:7D:F0:50:40:8F:75:5B:FC X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:65:e9:51:b6:86:1a:0b:54:47:cf:5a:c0:3e:17:b8:da:43: 36:9a:a1:79:a4:c1:0f:ef:23:c2:47:ab:a8:65:d1:1d:7f:d6: 59:a7:ca:c0:2a:3c:63:be:11:5f:d6:05:05:8b:3f:0f:b2:4e: 8b:9b:47:74:9d:3d:cd:64:61:2c:d0:de:4a:ca:b5:96:a8:30: b2:aa:f9:71:60:25:b8:b0:0b:fe:11:30:ea:31:a6:82:00:f8: 80:c1:68:74:fb:6e:af:47:95:9e:ee:60:dc:71:3e:cf:3c:ca: 58:03:33:97:0a:d6:98:68:45:de:5e:33:c5:e1:76:33:7b:58: 97:0e:83:23:99:41:11:14:aa:17:fd:3d:2f:4a:a3:aa:54:7b: 59:97:6e:db:be:a5:ae:80:bb:33:43:0c:02:bb:df:00:74:2c: 3f:24:c7:7e:a2:5f:41:5c:e3:6a:63:3c:56:d6:6c:40:06:a8: 0c:8a:2d:1c:e8:d8:0d:03:c8:d8:56:3a:16:5c:1b:e3:40:62: 48:30:89:06:07:6f:06:d9:61:fe:50:ec:2d:d9:1c:96:18:22: e1:77:33:16:b0:f8:71:bd:80:04:4c:73:46:cf:8c:e7:e9:1f: 7d:0b:dc:1a:b2:97:8f:64:60:3a:e8:d5:77:45:14:8a:1d:33: 25:f1:37:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXNktnNph+BBW7qD7V03ERyUDbgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA3MjQxODAxNTBaFw0yNjA3MjUyMTI3NTBaMDMxMTAvBgNV BAMTKEMwMjgwQTE5NENBNzJCRDNEQjYxM0U3RDdERjA1MDQwOEY3NTVCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cj0/U0xlBtn40TTqGgt7UJ6+ tk9pzK8Zv9MmnTRPgD+peMlrh3q4toYsiDOR4US/mR1JI/qQApC28xcfXNURxaQM UuNGlwqqWHL7RKSX2FOm87RKkR2xQwGZhbbVqQzIdqXOvMqi6ihqzaVib2rCFxLL YNkzw/ciJM+zQFsWZ9oAOa4vohEuajd0ZrfGrG6/eY3J68HXzTw1EvV12C492a5O La92AxSaOlCQaRSZc8G+RmbtdRV8KO0Sh+mqNezM4CCPzZRJdOKXChqed+7hL+yD PAAveaylUTJOJojTwU4yvqCumXaq/8QaAiQZ8YXp1+cR0s1wqBtca/GyImULAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwCgKGUynK9PbYT59ffBQQI91W/wwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmXpUbaGGgtU R89awD4XuNpDNpqheaTBD+8jwkerqGXRHX/WWafKwCo8Y74RX9YFBYs/D7JOi5tH dJ09zWRhLNDeSsq1lqgwsqr5cWAluLAL/hEw6jGmggD4gMFodPtur0eVnu5g3HE+ zzzKWAMzlwrWmGhF3l4zxeF2M3tYlw6DI5lBERSqF/09L0qjqlR7WZdu276lroC7 M0MMArvfAHQsPyTHfqJfQVzjamM8VtZsQAaoDIotHOjYDQPI2FY6Flwb40BiSDCJ BgdvBtlh/lDsLdkclhgi4XczFrD4cb2ABExzRs+M5+kffQvcGrKXj2RgOujVd0UU ih0zJfE3sg== -----END CERTIFICATE-----Generated at Fri Jul 24 23:08:11 2026 by rpki-client