$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: JMieltc98///BJMwn4VizBzR5kwtjD4/v44CPwLiYd0= Subject key identifier: D5:A3:D6:FB:A2:85:2E:49:01:60:40:06:DC:DE:52:0E:C8:01:87:15 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 2A99C7A3F88E5DED612988FAD3048306447A3A31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 55 Signing time: Sat 13 Jun 2026 21:22:14 +0000 Manifest this update: Sat 13 Jun 2026 21:17:14 +0000 Manifest next update: Mon 15 Jun 2026 01:15:14 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: ZCbkXJMF1bfZ5rK+YHQwI4Dcf3kLDXAjylwGPKqE4RY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:c7:a3:f8:8e:5d:ed:61:29:88:fa:d3:04:83:06:44:7a:3a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Jun 13 21:17:14 2026 GMT Not After : Jun 15 01:15:14 2026 GMT Subject: CN=D5A3D6FBA2852E4901604006DCDE520EC8018715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:59:98:0c:1f:8f:85:ca:0c:03:69:ac:31: 17:c7:a6:7a:e6:5b:26:ab:a5:df:2e:64:b4:66:1c: c0:2e:11:a7:9c:0b:d3:ed:35:93:6c:50:6b:02:37: 9a:bf:03:e2:44:22:18:30:a2:17:c5:cc:0a:e4:09: 0b:c1:88:c2:7d:40:2d:1a:8c:35:e2:18:d1:49:66: fa:eb:01:ab:c1:27:66:7f:11:f9:58:81:c6:34:38: 01:ff:18:13:d6:02:98:65:6b:ff:07:db:d5:19:a8: 4a:a1:37:79:14:84:43:0d:79:8b:d2:86:7d:f8:d2: 56:6a:7e:54:b2:89:47:11:77:57:b0:e0:56:62:8c: 59:aa:d6:f6:c0:19:a6:af:c9:c2:c1:18:0d:b0:6a: a0:c4:2f:b8:b7:62:a9:ef:26:39:83:ef:91:c8:1d: ff:59:37:d6:36:c3:75:62:d3:26:68:61:bc:d5:d7: 44:83:d4:a0:4c:5a:54:14:fa:10:cd:53:91:8f:ea: 08:d9:44:ee:bd:7e:1e:4d:4c:fb:fc:76:e9:2c:0d: ef:b8:e6:7f:6c:90:17:9e:2b:9b:2b:72:6a:7f:65: 02:d9:fb:45:69:77:39:84:ce:49:4c:d7:c6:11:90: 39:9f:50:41:00:4c:ca:40:93:3f:87:c7:86:14:7a: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A3:D6:FB:A2:85:2E:49:01:60:40:06:DC:DE:52:0E:C8:01:87:15 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3b:ec:fb:ac:38:5f:25:a2:7d:45:e6:e8:88:02:b7:c7:1a: f8:ed:11:44:57:b3:c3:ae:e6:ff:38:f7:28:62:d5:c6:c9:93: fa:8c:a2:23:f5:fb:4a:86:33:26:f7:d9:2f:03:a3:98:11:85: 51:19:82:13:76:da:9d:8a:7d:10:90:92:2f:a0:7a:fb:65:76: 52:8c:19:35:ba:5f:2c:ef:73:6f:d4:e7:23:dc:50:63:13:f8: 68:30:63:93:66:0b:cf:68:27:9d:b6:df:67:a0:bb:e5:fd:53: 1b:88:b7:5a:9c:c0:bc:b8:f5:53:fe:4d:2b:01:9f:97:9b:0e: 89:28:aa:9a:0c:e0:0e:9e:5a:fc:86:65:b4:63:11:24:e0:53: c5:3c:ea:1d:18:6e:e2:45:59:86:23:c1:18:ae:67:81:94:59: 29:70:2c:e9:dd:c5:56:09:08:0b:00:f3:89:7a:08:52:5a:06: 6b:09:f4:85:79:09:8f:9e:5a:bf:78:40:db:c0:d7:aa:db:61: 9c:ff:9e:bc:d6:49:f1:c5:82:f0:6c:26:2d:83:e7:dc:95:83: 77:ab:a9:de:06:92:80:44:43:61:67:87:b2:9a:16:58:71:54: 19:07:80:6b:df:f6:19:db:5a:00:54:5b:dc:37:5e:fc:49:b4: 24:ea:bd:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKpnHo/iOXe1hKYj60wSDBkR6OjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA2MTMyMTE3MTRaFw0yNjA2MTUwMTE1MTRaMDMxMTAvBgNV BAMTKEQ1QTNENkZCQTI4NTJFNDkwMTYwNDAwNkRDREU1MjBFQzgwMTg3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzI1mYDB+PhcoMA2msMRfHpnrm Wyarpd8uZLRmHMAuEaecC9PtNZNsUGsCN5q/A+JEIhgwohfFzArkCQvBiMJ9QC0a jDXiGNFJZvrrAavBJ2Z/EflYgcY0OAH/GBPWAphla/8H29UZqEqhN3kUhEMNeYvS hn340lZqflSyiUcRd1ew4FZijFmq1vbAGaavycLBGA2waqDEL7i3YqnvJjmD75HI Hf9ZN9Y2w3Vi0yZoYbzV10SD1KBMWlQU+hDNU5GP6gjZRO69fh5NTPv8duksDe+4 5n9skBeeK5srcmp/ZQLZ+0VpdzmEzklM18YRkDmfUEEATMpAkz+Hx4YUetltAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1aPW+6KFLkkBYEAG3N5SDsgBhxUwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTvs+6w4XyWi fUXm6IgCt8ca+O0RRFezw67m/zj3KGLVxsmT+oyiI/X7SoYzJvfZLwOjmBGFURmC E3banYp9EJCSL6B6+2V2UowZNbpfLO9zb9TnI9xQYxP4aDBjk2YLz2gnnbbfZ6C7 5f1TG4i3WpzAvLj1U/5NKwGfl5sOiSiqmgzgDp5a/IZltGMRJOBTxTzqHRhu4kVZ hiPBGK5ngZRZKXAs6d3FVgkICwDziXoIUloGawn0hXkJj55av3hA28DXqtthnP+e vNZJ8cWC8GwmLYPn3JWDd6up3gaSgERDYWeHspoWWHFUGQeAa9/2GdtaAFRb3Dde /Em0JOq9cw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:34 2026 by rpki-client