$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: 1cdxF4rZw2h1/my9Lt0GTFnKjB/cbU1thOKkPQ8yiK8= Subject key identifier: 5F:5A:82:7D:78:7A:CC:A8:94:EF:72:D9:9A:9A:0C:E1:5D:F5:18:1F Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 288A29CC0FB74FAACF797F448244824F296A57A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: D4 Signing time: Tue 13 Oct 2026 10:32:55 +0000 Manifest this update: Tue 13 Oct 2026 10:27:55 +0000 Manifest next update: Fri 16 Oct 2026 17:01:55 +0000 Files and hashes: 1: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 2: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) 3: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) 4: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 5: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=) 6: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: Cq4Nlcfq6lTg6ltfAsUKi1VY4G+4ycEZZgrRMEnY4VQ=) 7: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 8: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) 9: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) 10: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 11: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 12: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 13: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 14: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8a:29:cc:0f:b7:4f:aa:cf:79:7f:44:82:44:82:4f:29:6a:57:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Oct 13 10:27:55 2026 GMT Not After : Oct 16 17:01:55 2026 GMT Subject: CN=5F5A827D787ACCA894EF72D99A9A0CE15DF5181F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:6e:f9:0a:2a:cd:d7:57:c0:79:b1:4a:1a: ab:fd:92:52:16:19:ff:b9:c4:bd:69:8b:4a:ec:3a: 9a:b3:b2:49:d6:09:b8:43:31:ba:a4:c8:39:ff:02: eb:1b:c3:16:16:27:40:fe:b2:3d:b2:07:62:5b:4b: 95:2e:1f:57:c9:81:14:b2:16:ea:ae:9d:dc:bf:a5: b8:90:bc:32:ec:60:05:7d:77:30:db:95:92:f8:ec: 79:82:61:18:24:83:97:cb:a0:f7:cf:30:20:7f:b3: a1:13:e2:36:f0:a1:55:37:cf:5c:c2:12:9a:f9:12: d1:11:23:75:b6:60:15:0b:7b:f8:9d:1a:bf:18:68: 5b:26:3f:ed:24:63:1d:6f:fd:71:20:7c:e8:45:28: 29:3b:71:f6:f4:33:2a:c8:8e:22:1a:f3:4d:af:b7: 85:c2:d3:c7:ab:6a:95:60:50:0d:af:3b:9f:3b:08: e3:b2:d6:1d:af:0d:bb:91:fc:fb:d1:68:91:2f:80: 3f:cb:d3:29:b4:0b:69:34:d5:0c:4d:49:c7:ea:25: f5:c8:c9:6d:a3:42:47:fb:d3:51:c0:ba:95:dc:a8: 54:c4:28:d3:88:da:1f:38:b0:f5:bb:c8:36:f5:6e: ce:62:ec:12:a8:30:8a:54:e4:78:5a:16:f4:c2:cc: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:82:7D:78:7A:CC:A8:94:EF:72:D9:9A:9A:0C:E1:5D:F5:18:1F X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6f:35:d9:ea:f9:ed:d8:96:83:ae:74:1b:1c:f1:9b:86:9b: af:2a:e2:8c:42:7a:f0:d7:cc:ae:79:8a:8e:2b:5d:0a:7b:2f: 15:c2:1a:ab:95:d8:0b:4e:d0:39:09:19:10:f9:5b:5b:81:c0: eb:be:ee:f0:57:32:35:d8:ac:67:ca:6a:7e:a4:30:fd:39:5a: fb:ec:3a:d2:08:65:4e:1a:49:8a:05:c1:e6:2a:8a:48:44:5c: dc:d9:a6:5c:cc:90:c1:a4:69:c8:90:1f:99:e9:ff:11:64:3f: b1:f6:dd:d0:b4:cb:4c:1a:7c:ca:02:4d:0a:8c:dc:33:7f:88: a7:24:1a:55:72:85:8d:48:b5:56:41:66:6a:df:d8:87:7d:93: e7:83:58:2d:cd:35:92:f2:3d:ab:1c:32:d4:65:64:fc:a7:e7: 16:e9:a0:01:cd:8b:6e:4d:ef:8b:d3:71:8a:2f:8c:34:55:a3: ff:ee:50:c2:43:08:92:6a:c0:c4:b5:fa:68:b6:28:22:98:ab: b9:79:eb:bd:29:ed:46:a0:f6:84:00:1c:29:3c:17:75:c2:34: 2f:e7:e3:1c:c7:5d:c9:c7:55:0c:bb:d4:02:d2:24:5b:80:70: 57:74:d8:68:5b:c6:68:a5:97:bf:1d:0e:6f:0a:53:59:f5:f9: f1:a8:f4:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKIopzA+3T6rPeX9EgkSCTylqV6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjEwMTMxMDI3NTVaFw0yNjEwMTYxNzAxNTVaMDMxMTAvBgNV BAMTKDVGNUE4MjdENzg3QUNDQTg5NEVGNzJEOTlBOUEwQ0UxNURGNTE4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jG75CirN11fAebFKGqv9klIW Gf+5xL1pi0rsOpqzsknWCbhDMbqkyDn/AusbwxYWJ0D+sj2yB2JbS5UuH1fJgRSy Fuqundy/pbiQvDLsYAV9dzDblZL47HmCYRgkg5fLoPfPMCB/s6ET4jbwoVU3z1zC Epr5EtERI3W2YBULe/idGr8YaFsmP+0kYx1v/XEgfOhFKCk7cfb0MyrIjiIa802v t4XC08erapVgUA2vO587COOy1h2vDbuR/PvRaJEvgD/L0ym0C2k01QxNScfqJfXI yW2jQkf701HAupXcqFTEKNOI2h84sPW7yDb1bs5i7BKoMIpU5HhaFvTCzIrPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUX1qCfXh6zKiU73LZmpoM4V31GB8wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZW812er57diW g650Gxzxm4abryrijEJ68NfMrnmKjitdCnsvFcIaq5XYC07QOQkZEPlbW4HA677u 8FcyNdisZ8pqfqQw/Tla++w60ghlThpJigXB5iqKSERc3NmmXMyQwaRpyJAfmen/ EWQ/sfbd0LTLTBp8ygJNCozcM3+IpyQaVXKFjUi1VkFmat/Yh32T54NYLc01kvI9 qxwy1GVk/KfnFumgAc2Lbk3vi9Nxii+MNFWj/+5QwkMIkmrAxLX6aLYoIpiruXnr vSntRqD2hAAcKTwXdcI0L+fjHMddycdVDLvUAtIkW4BwV3TYaFvGaKWXvx0ObwpT WfX58aj0Ag== -----END CERTIFICATE-----Generated at Tue Oct 13 23:41:29 2026 by rpki-client