$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: zlG0exoAZuJslfUJwivvVXHLIwT3f0P1RLTawMSfkiA= Subject key identifier: 61:E5:65:18:EC:14:C0:2D:CF:D8:EE:B4:BE:CD:BF:61:BE:8A:AD:72 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 54C7338BB4B6C40C88CB99173556F5D0ECDB7A77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: D0 Signing time: Thu 15 Oct 2026 11:41:47 +0000 Manifest this update: Thu 15 Oct 2026 11:36:47 +0000 Manifest next update: Sun 18 Oct 2026 21:35:47 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: Axj6lCHlTZw5x++G9QHLoA1raoC0DJ5U+z55cyazmlw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c7:33:8b:b4:b6:c4:0c:88:cb:99:17:35:56:f5:d0:ec:db:7a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Oct 15 11:36:47 2026 GMT Not After : Oct 18 21:35:47 2026 GMT Subject: CN=61E56518EC14C02DCFD8EEB4BECDBF61BE8AAD72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:22:64:56:da:b0:90:46:46:c1:27:20:b3: 1c:dd:aa:bc:42:81:32:1c:d1:36:7f:61:c5:b8:34: db:89:c7:4c:9f:04:ba:09:ff:81:18:7c:8e:78:b0: b2:f3:17:8d:55:d2:a3:ce:83:e0:d3:93:05:0c:63: 3e:d2:98:41:40:ff:47:e7:f8:cb:12:f4:26:6f:b2: 64:ba:e4:ef:e2:2a:39:43:c3:a2:bb:62:5d:45:20: b5:f0:40:0b:16:0f:1e:a0:47:39:21:45:a5:b5:d4: 88:7b:52:87:b3:66:e1:bc:f9:80:2f:ed:74:6f:8a: 9b:54:43:65:e9:80:50:49:f9:f5:a0:c5:37:6f:a6: 5d:8d:d6:a2:e8:8f:d6:bc:27:95:f6:11:f3:af:c8: 57:ff:cc:cf:67:ee:36:a3:9a:66:d7:55:4e:74:c4: 28:bb:0a:76:d4:18:d6:b7:4d:64:ea:c3:20:0a:74: 2c:52:93:4f:4f:23:af:5f:11:ee:85:bc:10:e3:83: f8:56:1b:42:92:cf:60:e4:18:d8:6c:60:26:be:c7: a2:66:9c:0e:ea:55:d1:5e:22:e9:cb:57:63:85:d8: cf:de:24:84:16:8c:54:5d:24:79:29:26:98:89:12: 35:10:b6:9a:fc:b6:26:ab:67:db:a9:b9:db:bc:49: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E5:65:18:EC:14:C0:2D:CF:D8:EE:B4:BE:CD:BF:61:BE:8A:AD:72 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:25:16:4d:1c:17:1b:48:e5:bb:c3:9a:c2:b7:0d:97:49:97: 15:c8:b9:61:25:5e:1a:56:2f:e6:6a:cc:13:8f:ec:cb:b8:85: d3:cb:54:ce:03:13:a0:c7:72:81:78:05:6d:4e:1a:fe:97:d6: df:c8:2a:3c:ab:cf:0b:f6:08:0b:35:3c:79:b6:76:ed:c8:a1: 7e:7e:95:6c:2a:17:99:b9:37:fa:20:c1:c2:2d:0b:11:d7:2c: da:a2:2a:98:13:68:e2:b1:d5:39:8e:37:e1:61:55:43:f3:a0: 4e:54:61:67:53:b9:50:ca:cc:e1:01:15:43:4c:57:7b:01:5b: fa:20:dc:d2:61:64:95:f9:9a:91:2b:a7:de:08:9c:30:28:4a: bc:a9:ca:8d:3a:74:14:34:55:40:8c:e9:55:b5:dd:b0:71:2d: 3c:af:df:04:55:8c:31:4f:ce:7a:da:90:83:84:bf:a9:41:97: 11:1f:4c:90:fb:64:a8:ce:39:27:fe:85:2a:4f:8f:22:ac:1b: 1f:83:13:ce:95:5f:39:2a:d3:37:11:db:f1:a1:d9:c9:8c:89: 3b:35:12:51:09:6b:ea:f9:2b:ad:53:7c:d0:c4:36:31:b8:c2: 5b:36:41:fc:1c:9b:fa:1c:cd:c5:02:9b:70:7f:34:e0:85:c7: 66:0d:92:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVMczi7S2xAyIy5kXNVb10OzbencwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjEwMTUxMTM2NDdaFw0yNjEwMTgyMTM1NDdaMDMxMTAvBgNV BAMTKDYxRTU2NTE4RUMxNEMwMkRDRkQ4RUVCNEJFQ0RCRjYxQkU4QUFENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2SJkVtqwkEZGwScgsxzdqrxC gTIc0TZ/YcW4NNuJx0yfBLoJ/4EYfI54sLLzF41V0qPOg+DTkwUMYz7SmEFA/0fn +MsS9CZvsmS65O/iKjlDw6K7Yl1FILXwQAsWDx6gRzkhRaW11Ih7UoezZuG8+YAv 7XRviptUQ2XpgFBJ+fWgxTdvpl2N1qLoj9a8J5X2EfOvyFf/zM9n7jajmmbXVU50 xCi7CnbUGNa3TWTqwyAKdCxSk09PI69fEe6FvBDjg/hWG0KSz2DkGNhsYCa+x6Jm nA7qVdFeIunLV2OF2M/eJIQWjFRdJHkpJpiJEjUQtpr8tiarZ9upudu8SYB1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYeVlGOwUwC3P2O60vs2/Yb6KrXIwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryUWTRwXG0jl u8OawrcNl0mXFci5YSVeGlYv5mrME4/sy7iF08tUzgMToMdygXgFbU4a/pfW38gq PKvPC/YICzU8ebZ27cihfn6VbCoXmbk3+iDBwi0LEdcs2qIqmBNo4rHVOY434WFV Q/OgTlRhZ1O5UMrM4QEVQ0xXewFb+iDc0mFklfmakSun3gicMChKvKnKjTp0FDRV QIzpVbXdsHEtPK/fBFWMMU/OetqQg4S/qUGXER9MkPtkqM45J/6FKk+PIqwbH4MT zpVfOSrTNxHb8aHZyYyJOzUSUQlr6vkrrVN80MQ2MbjCWzZB/Byb+hzNxQKbcH80 4IXHZg2SlQ== -----END CERTIFICATE-----Generated at Fri Oct 16 00:37:08 2026 by rpki-client