
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier: MTw2PDiRAWWgNm2ltjZ+8p7GSxHt3aMYGcruaY0LSlQ=
Subject key identifier: 7C:60:78:B1:7F:C6:D9:0E:1F:6C:FD:DA:E0:7B:F7:AA:5B:3A:DC:D6
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 492FFFE06D1D4ADC822C9A08D4EDF09BB212311B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number: 5A
Signing time: Sat 13 Jun 2026 08:26:34 +0000
Manifest this update: Sat 13 Jun 2026 08:21:34 +0000
Manifest next update: Sun 14 Jun 2026 12:01:34 +0000
Files and hashes: 1: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=)
2: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
3: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
4: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
5: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
6: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
7: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
8: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: BnIjnmTwzDw8Ft9Jf342smlaWQo7C6X0ldRT1bcmKC4=)
9: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
10: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
11: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
12: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
13: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
14: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2f:ff:e0:6d:1d:4a:dc:82:2c:9a:08:d4:ed:f0:9b:b2:12:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Jun 13 08:21:34 2026 GMT
Not After : Jun 14 12:01:34 2026 GMT
Subject: CN=7C6078B17FC6D90E1F6CFDDAE07BF7AA5B3ADCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:40:ce:02:7a:5d:a3:8a:7e:14:bd:3b:19:
ee:a7:53:7a:fe:3b:17:a8:cf:7c:b5:e7:b5:18:4e:
e6:21:57:9a:91:0d:30:24:81:b6:a8:6a:e3:da:5f:
16:45:02:c4:f0:d1:c2:a6:96:63:07:16:4d:49:15:
16:3c:e3:78:b5:6c:2e:83:95:33:d7:90:d4:7a:04:
8a:01:7d:57:3c:68:02:7e:59:7a:e4:f2:6e:e8:27:
a2:67:82:77:ea:64:22:df:50:dc:55:d7:53:d1:ed:
2f:10:fe:fb:24:71:0c:7a:14:94:b6:d0:43:ca:e0:
c7:4e:92:56:a7:6a:ac:32:a8:b8:30:09:95:73:ce:
52:63:f3:98:86:04:88:03:b2:43:ad:36:a3:f3:7c:
0b:fb:c4:f7:d9:97:d7:8a:c7:06:9a:94:e1:ae:06:
8a:8c:f5:6b:6c:dc:c3:e5:7c:75:69:ee:78:f6:32:
aa:5f:eb:45:1e:fa:b1:b4:8a:8f:3f:42:e9:c0:c8:
03:e5:55:b3:ae:f9:c1:0e:06:bd:3d:14:9b:86:14:
3a:55:05:b6:1a:ce:87:48:a0:8e:d1:db:54:3b:b5:
7b:0e:48:9e:ed:28:09:27:b0:22:91:ba:ba:73:ad:
54:48:ba:6f:51:34:91:f3:db:ce:2d:4e:99:c3:4b:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:78:B1:7F:C6:D9:0E:1F:6C:FD:DA:E0:7B:F7:AA:5B:3A:DC:D6
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:da:45:78:6a:5f:2c:33:9f:0b:60:8d:75:d7:ee:bb:a6:ca:
75:4e:c3:55:c5:b3:44:46:70:3c:37:84:55:53:63:58:f2:41:
45:99:4b:01:4c:9a:f6:9e:d8:ce:5f:55:d1:6f:86:c9:37:c0:
26:f2:c8:2b:88:d6:14:42:3a:72:d1:1c:cb:3a:63:0f:fc:4e:
a1:cd:f2:78:06:1f:be:7d:49:9e:66:94:39:d9:0b:8c:41:b5:
3c:e2:e3:46:eb:32:ef:ad:16:a4:87:06:f4:5b:d4:06:56:ed:
f9:4e:84:df:57:17:b0:33:1d:21:10:c1:f4:aa:6b:0a:44:62:
ca:f3:d9:eb:1a:9f:28:bf:b0:35:8a:72:da:31:26:f2:f8:d4:
a1:69:47:68:0d:c6:33:75:38:4c:30:9e:3b:22:43:d0:ad:85:
0b:ab:b7:9a:09:c9:7b:ae:92:66:b1:61:c3:20:d9:ca:ff:62:
c2:4e:32:42:f5:19:98:e2:b7:bb:3f:7e:a1:eb:e2:d0:9d:9b:
84:ee:e1:1c:f1:a4:27:71:a7:64:c3:db:04:80:c8:0b:f5:0e:
98:09:fc:dd:bc:5f:49:ec:76:07:8e:bf:41:09:d7:ff:58:3c:
24:e3:f8:ef:d1:d9:91:c8:e1:67:37:f4:76:08:54:cc:a8:d9:
0b:ba:59:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:10 2026 by rpki-client