$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: YMWMr6n0Nb8rVflmf7Qlaym7GjoyuwycYamzZmtR+9I= Subject key identifier: 67:78:C6:87:EA:5C:04:6C:92:60:68:D4:C1:2B:DA:C4:93:C1:87:D9 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 452F6C2CEAC539E5CCCE75214E9D8BA84DBD3423 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 01:29:37 +0000 Manifest this update: Fri 17 Apr 2026 01:24:37 +0000 Manifest next update: Sat 18 Apr 2026 04:23:37 +0000 Files and hashes: 1: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: FZI4Ox40rnu170Rg2fP0yUfOzU+986e37msJgONhpdg=) 2: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2f:6c:2c:ea:c5:39:e5:cc:ce:75:21:4e:9d:8b:a8:4d:bd:34:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Apr 17 01:24:37 2026 GMT Not After : Apr 18 04:23:37 2026 GMT Subject: CN=6778C687EA5C046C926068D4C12BDAC493C187D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:13:15:c5:2a:d2:ec:8b:1c:14:2f:21:1d: d6:10:fe:ae:8c:a0:74:29:84:09:00:a2:e1:87:74: 25:f7:a9:ce:76:21:8a:b4:73:27:e5:75:fc:aa:d8: 51:4b:1a:53:a9:15:fb:83:78:3a:90:e5:3b:92:8e: 0b:10:d8:b3:28:89:5e:9f:21:bd:b1:d5:f8:47:99: 0f:92:99:2e:54:40:58:0e:df:1c:29:2f:9f:c0:4a: 9d:6a:fe:a7:9b:8e:ec:59:2b:50:3a:7a:f5:85:66: e5:39:c6:76:6e:5c:66:e5:bb:fd:c8:22:45:88:1d: 62:48:1c:96:14:21:e3:fb:f9:3d:9a:35:cf:d4:b7: 2d:78:d2:37:4f:eb:2f:6c:3a:bf:87:d7:56:d9:6b: e0:4f:32:f5:2c:3d:5b:d6:c5:92:4e:87:76:eb:c2: 16:91:ce:4e:78:79:7f:d1:09:1d:65:de:db:46:b6: f9:da:9a:db:08:57:64:c1:08:b5:8f:8f:cf:34:95: 28:fb:7b:b7:c2:05:b3:f4:e7:84:b7:72:8c:c1:3e: 41:77:60:29:fa:ba:1f:33:42:7f:26:81:ec:a0:7a: 3c:fd:ed:6a:d5:1a:08:5d:56:8d:62:0a:be:19:d3: 87:a3:54:07:cb:69:8e:07:4d:5c:62:55:d1:e6:0a: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:C6:87:EA:5C:04:6C:92:60:68:D4:C1:2B:DA:C4:93:C1:87:D9 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:36:1e:19:f1:74:28:f0:fb:1d:f2:6b:22:85:bc:e3:f4:ab: c6:0a:84:ba:9d:32:38:52:cf:4d:01:a9:5e:42:a4:cb:0e:da: 03:46:38:bd:3a:88:6b:83:ab:26:75:f9:18:4d:91:4f:33:d7: 3a:15:50:b4:fe:6f:7e:56:5f:e9:52:39:af:19:36:75:39:08: 9f:68:b6:e1:53:1c:6c:38:f7:42:d1:3c:a9:d7:78:78:31:5f: ce:b8:19:28:70:3b:44:16:19:73:0a:db:bb:1d:1c:df:88:27: 23:a6:76:5d:3d:30:25:9a:79:0c:97:9f:22:61:b8:1f:99:0a: f3:e6:c3:17:07:23:c2:db:4d:34:f1:61:5e:9d:9d:9c:eb:35: 72:f2:d7:17:08:c2:f0:a5:e5:12:f4:5b:81:b6:13:8e:ef:bf: ce:ce:1a:74:14:75:57:97:21:46:b4:42:e9:3b:5f:77:9d:34: 0f:28:5c:a5:be:80:3c:2d:dc:f1:22:c4:c4:3b:65:e8:bc:4e: d8:da:19:56:cc:f8:af:ff:a4:0e:f4:fc:fb:ca:5f:b3:a2:b9: b1:14:f7:11:fc:85:13:dd:43:bc:85:4f:bd:23:c8:8f:d1:58: ea:bd:0b:92:2d:c0:30:ed:4c:74:76:c1:06:5f:f7:ae:99:ac: 67:29:8b:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURS9sLOrFOeXMznUhTp2LqE29NCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA0MTcwMTI0MzdaFw0yNjA0MTgwNDIzMzdaMDMxMTAvBgNV BAMTKDY3NzhDNjg3RUE1QzA0NkM5MjYwNjhENEMxMkJEQUM0OTNDMTg3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIRMVxSrS7IscFC8hHdYQ/q6M oHQphAkAouGHdCX3qc52IYq0cyfldfyq2FFLGlOpFfuDeDqQ5TuSjgsQ2LMoiV6f Ib2x1fhHmQ+SmS5UQFgO3xwpL5/ASp1q/qebjuxZK1A6evWFZuU5xnZuXGblu/3I IkWIHWJIHJYUIeP7+T2aNc/Uty140jdP6y9sOr+H11bZa+BPMvUsPVvWxZJOh3br whaRzk54eX/RCR1l3ttGtvnamtsIV2TBCLWPj880lSj7e7fCBbP054S3cozBPkF3 YCn6uh8zQn8mgeygejz97WrVGghdVo1iCr4Z04ejVAfLaY4HTVxiVdHmCsvDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ3jGh+pcBGySYGjUwSvaxJPBh9kwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjYeGfF0KPD7 HfJrIoW84/SrxgqEup0yOFLPTQGpXkKkyw7aA0Y4vTqIa4OrJnX5GE2RTzPXOhVQ tP5vflZf6VI5rxk2dTkIn2i24VMcbDj3QtE8qdd4eDFfzrgZKHA7RBYZcwrbux0c 34gnI6Z2XT0wJZp5DJefImG4H5kK8+bDFwcjwttNNPFhXp2dnOs1cvLXFwjC8KXl EvRbgbYTju+/zs4adBR1V5chRrRC6Ttfd500Dyhcpb6APC3c8SLExDtl6LxO2NoZ Vsz4r/+kDvT8+8pfs6K5sRT3EfyFE91DvIVPvSPIj9FY6r0Lki3AMO1MdHbBBl/3 rpmsZymLGw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:40:05 2026 by rpki-client