$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: 8erj1kavWfIPY3s7gunsfAs/uou/8AHdu1jteL+Kuqc= Subject key identifier: 3F:CF:45:EB:78:D9:EF:46:9B:23:29:09:51:98:7C:EB:D1:F3:9C:7E Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: DBDF8C865642C734E9B6C43AE3CCF7443D4043 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 10:24:42 +0000 Manifest this update: Fri 17 Apr 2026 10:19:42 +0000 Manifest next update: Sat 18 Apr 2026 13:38:42 +0000 Files and hashes: 1: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) 2: 3132322e3230302e39322e302f32342d3234203d3e203338333634.roa (hash: gmVFIPgWkhBs3waNltLc8JgOEZjeZ085iQ9TZxBWt1k=) 3: 3132322e3230302e37382e302f32342d3234203d3e203338333634.roa (hash: 9fJKYs4MqOnlMsQZVCVjySz00PIbDp78r6bTuookxck=) 4: 3132322e3230302e38362e302f32342d3234203d3e203338333634.roa (hash: VmnV9qTln4R8CzW4bUbuqwVwAstv+OVLCVhmBzWsh3w=) 5: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) 6: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 7: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 8: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 9: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 10: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 11: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 12: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) 13: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: FbhjMJgpjFpJpQDqhs2biP80vPdAd28qFivtyuYOrtE=) 14: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 15: 3132322e3230302e38322e302f32342d3234203d3e203338333634.roa (hash: /BE+yLhAj5EFTDuoItCh83cSKkSTVFwE4IWwCyZ2I+8=) 16: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) 17: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: db:df:8c:86:56:42:c7:34:e9:b6:c4:3a:e3:cc:f7:44:3d:40:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Apr 17 10:19:42 2026 GMT Not After : Apr 18 13:38:42 2026 GMT Subject: CN=3FCF45EB78D9EF469B23290951987CEBD1F39C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:3d:39:57:34:15:d8:bf:2c:0c:ad:e2:a1: 36:cd:ad:d8:ae:1e:b0:7b:e2:7a:32:61:8b:9e:e1: 6a:03:e0:2c:dd:e3:2b:b9:72:6d:12:9b:8d:3e:5b: 70:ee:f4:0c:e9:3c:21:85:53:54:9d:62:0a:72:ec: f7:ea:c6:23:15:cf:f4:f2:90:c0:49:78:e6:92:4d: a8:67:f7:76:69:60:91:2f:54:2e:4f:76:18:57:4c: c5:a7:c2:ce:40:3d:80:c1:1c:01:8d:84:08:f3:6c: 30:54:48:c8:42:b9:77:b1:35:1a:bd:c9:9e:3d:82: 06:91:25:2d:19:3d:51:4c:bd:dd:da:c1:30:29:bd: 60:98:67:39:35:83:04:be:e0:0d:49:78:cd:01:d6: ac:ad:5e:f8:22:8d:aa:c1:41:6b:8c:8a:dd:29:ad: 1a:95:c5:05:28:e4:8c:50:0c:c3:be:0e:fd:13:37: f4:d6:03:f6:90:99:e8:d0:6f:27:31:4b:af:e2:26: 00:23:96:bb:3b:1a:7b:be:ad:30:76:80:37:1d:9d: 17:58:10:ea:00:f0:8e:b9:45:bb:78:a3:4b:2a:9d: f3:4b:2f:d0:c0:7b:37:23:0f:87:7c:eb:44:bc:a4: 02:53:44:be:78:e0:bb:f0:86:26:a4:97:1a:2e:0d: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:45:EB:78:D9:EF:46:9B:23:29:09:51:98:7C:EB:D1:F3:9C:7E X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a9:af:ba:bc:f3:14:ea:11:5e:e3:4a:b1:4c:b3:82:d7:b1: 30:22:35:88:d1:6b:f7:54:67:ba:1d:74:ed:66:75:8c:1c:33: 07:b2:6f:59:76:f9:59:1d:19:37:c0:9f:38:26:3e:95:38:e2: 22:2a:31:df:94:08:82:33:9f:f3:ad:f5:4b:47:90:11:e3:74: 89:31:fc:f9:53:7d:c4:3c:64:fa:c5:e6:33:fb:76:f0:da:52: 2c:49:40:16:cb:fd:d7:a2:2d:a5:68:7f:16:2e:3d:8a:a7:f8: 3f:82:20:b7:47:48:79:68:9b:af:95:4f:c7:8c:a9:1c:39:d9: 9c:0c:b3:60:90:37:4e:b8:1c:ce:6a:9f:dd:8d:03:12:0a:d1: 0a:cd:7d:34:4d:c3:0c:82:1f:f9:29:54:47:b6:37:c9:cd:5e: 8c:c2:35:b7:cc:6f:a8:d8:ad:29:af:d5:7a:e2:20:f9:60:48: ae:f6:fe:63:9d:14:a6:2d:1f:f0:34:d7:83:dd:7f:c1:d5:e0: 56:80:5c:12:f9:12:41:fb:32:74:c6:59:d7:c9:ec:65:d2:89: 38:03:8f:9b:a2:04:53:99:73:26:51:bd:1d:92:ff:95:72:37: f1:20:5e:31:de:b9:49:b3:d8:99:ca:d0:b4:43:fa:a7:26:17: 55:0f:9b:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUANvfjIZWQsc06bbEOuPM90Q9QEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjA0MTcxMDE5NDJaFw0yNjA0MTgxMzM4NDJaMDMxMTAvBgNV BAMTKDNGQ0Y0NUVCNzhEOUVGNDY5QjIzMjkwOTUxOTg3Q0VCRDFGMzlDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IT05VzQV2L8sDK3ioTbNrdiu HrB74noyYYue4WoD4Czd4yu5cm0Sm40+W3Du9AzpPCGFU1SdYgpy7PfqxiMVz/Ty kMBJeOaSTahn93ZpYJEvVC5PdhhXTMWnws5APYDBHAGNhAjzbDBUSMhCuXexNRq9 yZ49ggaRJS0ZPVFMvd3awTApvWCYZzk1gwS+4A1JeM0B1qytXvgijarBQWuMit0p rRqVxQUo5IxQDMO+Dv0TN/TWA/aQmejQbycxS6/iJgAjlrs7Gnu+rTB2gDcdnRdY EOoA8I65Rbt4o0sqnfNLL9DAezcjD4d860S8pAJTRL544LvwhiaklxouDT0TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP89F63jZ70abIykJUZh869HznH4wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKmvurzzFOoR XuNKsUyzgtexMCI1iNFr91Rnuh107WZ1jBwzB7JvWXb5WR0ZN8CfOCY+lTjiIiox 35QIgjOf8631S0eQEeN0iTH8+VN9xDxk+sXmM/t28NpSLElAFsv916ItpWh/Fi49 iqf4P4Igt0dIeWibr5VPx4ypHDnZnAyzYJA3Trgczmqf3Y0DEgrRCs19NE3DDIIf +SlUR7Y3yc1ejMI1t8xvqNitKa/VeuIg+WBIrvb+Y50Upi0f8DTXg91/wdXgVoBc EvkSQfsydMZZ18nsZdKJOAOPm6IEU5lzJlG9HZL/lXI38SBeMd65SbPYmcrQtEP6 pyYXVQ+b9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 18:35:34 2026 by rpki-client