$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft (raw, json) Hash identifier: F8N3GHBdWlHLELR6zqiLYh9Cd4VTsgmc+bfZqI+7ui8= Subject key identifier: B0:16:22:33:FF:B1:80:75:CD:AF:9C:ED:0E:98:F6:08:81:E0:F0:11 Authority key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Certificate issuer: /CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Certificate serial: 22E6FD71A6512A758454AE292995ADEF4FA59136 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft Manifest number: 03 Signing time: Fri 24 Jul 2026 22:37:19 +0000 Manifest this update: Fri 24 Jul 2026 22:32:19 +0000 Manifest next update: Sat 25 Jul 2026 23:30:19 +0000 Files and hashes: 1: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl (hash: rNmc/Fv5nd6eiWhLPztrokZij/brpboYJ21BwLdPtMc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e6:fd:71:a6:51:2a:75:84:54:ae:29:29:95:ad:ef:4f:a5:91:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Validity Not Before: Jul 24 22:32:19 2026 GMT Not After : Jul 25 23:30:19 2026 GMT Subject: CN=B0162233FFB18075CDAF9CED0E98F60881E0F011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:64:ca:36:a6:df:89:79:d4:19:85:ad:1c: d5:99:40:be:eb:80:40:9a:a1:b9:89:32:2f:ee:62: d8:e6:13:5d:cc:80:4a:82:d5:ed:2e:c1:2e:57:91: f3:e5:cf:cf:90:8e:33:fd:fc:7f:ad:23:91:9b:9d: af:8e:7e:eb:17:a0:cd:8c:82:52:44:21:64:69:75: 6b:6d:6d:4f:13:ce:d3:c1:88:ec:47:e4:f4:12:63: c1:9a:90:f6:97:86:86:51:a6:e4:5d:53:26:47:af: ae:7c:72:94:8d:4a:da:0a:8d:17:67:68:16:5e:b0: 0b:ac:6d:f1:63:93:ad:4c:a5:19:4d:26:53:32:41: 80:61:11:05:60:50:20:c7:41:6d:77:af:94:90:0e: 5c:89:c4:26:f4:5a:d6:4b:a3:45:a8:a9:d7:97:c0: ee:fb:c4:88:26:d5:d1:2f:61:ea:bb:91:97:2b:1b: 62:07:d2:73:8f:9a:e8:2d:11:f2:54:00:43:16:c0: d8:b6:e9:72:ef:bd:fc:a2:23:ba:08:06:08:44:b0: af:a6:fb:91:87:3c:ab:6c:cb:5c:eb:f5:5f:8b:ee: fe:b5:4c:a1:e9:be:bb:50:74:f1:94:b5:a0:79:ce: 34:a8:88:4d:7f:dd:2c:d4:6b:6d:36:e6:6c:c7:0b: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:16:22:33:FF:B1:80:75:CD:AF:9C:ED:0E:98:F6:08:81:E0:F0:11 X509v3 Authority Key Identifier: keyid:29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:39:40:52:5b:40:ec:34:07:75:e7:e9:97:90:7e:83:27:60: 2f:e3:3a:8a:8d:7d:8c:81:05:05:1d:a2:21:98:cd:a5:b1:ce: f7:a3:40:c0:97:77:ef:49:25:99:7b:7c:ce:41:51:eb:10:95: 36:ec:4b:ab:72:81:2d:a2:8a:70:73:01:0c:63:0c:e6:4b:58: b9:c2:b4:16:09:0b:b7:22:4a:0a:fb:fb:13:ac:e5:2e:4c:d2: af:14:10:40:74:e1:34:6d:0b:72:73:43:a4:d6:29:5f:d4:26: 21:27:9a:85:e5:e5:8d:82:ec:61:d6:18:86:15:8b:43:81:a5: 70:9b:4b:9d:0f:09:cb:e6:b0:be:1c:4c:58:53:5c:bf:3a:99: 84:1d:b7:2b:89:ae:57:29:44:47:d8:a4:a0:4a:df:26:a6:f8: 39:df:c4:28:95:6e:02:ae:0e:99:cf:0c:d7:fb:ba:47:09:b2: c8:d7:a9:d3:99:d9:cb:5a:64:23:78:23:fc:b1:bb:54:83:78: ce:0d:37:94:2e:3b:1e:12:0b:30:27:7a:7e:36:81:86:48:61: 9c:76:b4:cc:bb:85:b2:a2:0e:b2:32:87:26:0f:de:48:e8:f2: fb:0c:6a:04:90:91:fb:95:ab:25:58:bd:14:e5:98:25:97:21: ad:7c:0e:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIub9caZRKnWEVK4pKZWt70+lkTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5 QzJFNTkyMzAeFw0yNjA3MjQyMjMyMTlaFw0yNjA3MjUyMzMwMTlaMDMxMTAvBgNV BAMTKEIwMTYyMjMzRkZCMTgwNzVDREFGOUNFRDBFOThGNjA4ODFFMEYwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYGTKNqbfiXnUGYWtHNWZQL7r gECaobmJMi/uYtjmE13MgEqC1e0uwS5XkfPlz8+QjjP9/H+tI5Gbna+OfusXoM2M glJEIWRpdWttbU8TztPBiOxH5PQSY8GakPaXhoZRpuRdUyZHr658cpSNStoKjRdn aBZesAusbfFjk61MpRlNJlMyQYBhEQVgUCDHQW13r5SQDlyJxCb0WtZLo0WoqdeX wO77xIgm1dEvYeq7kZcrG2IH0nOPmugtEfJUAEMWwNi26XLvvfyiI7oIBghEsK+m +5GHPKtsy1zr9V+L7v61TKHpvrtQdPGUtaB5zjSoiE1/3SzUa2025mzHCw0FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsBYiM/+xgHXNr5ztDpj2CIHg8BEwHwYDVR0j BBgwFoAUKbix/1Y0OlME/76lJP6bc5wuWSMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MjU5NTA5NDU0MTU2NTk5Ny8wLzI5QjhCMUZGNTYzNDNBNTMwNEZGQkVBNTI0RkU5 QjczOUMyRTU5MjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMC8yOUI4QjFGRjU2MzQz QTUzMDRGRkJFQTUyNEZFOUI3MzlDMkU1OTIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDlAUltA7DQH defpl5B+gydgL+M6io19jIEFBR2iIZjNpbHO96NAwJd370klmXt8zkFR6xCVNuxL q3KBLaKKcHMBDGMM5ktYucK0FgkLtyJKCvv7E6zlLkzSrxQQQHThNG0LcnNDpNYp X9QmISeaheXljYLsYdYYhhWLQ4GlcJtLnQ8Jy+awvhxMWFNcvzqZhB23K4muVylE R9ikoErfJqb4Od/EKJVuAq4Omc8M1/u6RwmyyNep05nZy1pkI3gj/LG7VIN4zg03 lC47HhILMCd6fjaBhkhhnHa0zLuFsqIOsjKHJg/eSOjy+wxqBJCR+5WrJVi9FOWY JZchrXwOlA== -----END CERTIFICATE-----Generated at Sat Jul 25 01:01:07 2026 by rpki-client