$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: vznBhUNtjVf3rV4YgXEeQSFYOwUnn++96F1LdKKAdRM= Subject key identifier: 29:3F:7D:21:D3:31:CA:37:AB:5E:55:E9:C6:E2:27:67:3D:34:A6:97 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 02581F1ED45A20DCB150D96B4FC7371047D8F001 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 92 Signing time: Wed 29 Jul 2026 05:13:31 +0000 Manifest this update: Wed 29 Jul 2026 05:08:31 +0000 Manifest next update: Thu 30 Jul 2026 06:34:31 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: W9/QLOL0lmVM34QT4L9n0SloYm5z0uGc/Vp9f+GR7dA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:58:1f:1e:d4:5a:20:dc:b1:50:d9:6b:4f:c7:37:10:47:d8:f0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Jul 29 05:08:31 2026 GMT Not After : Jul 30 06:34:31 2026 GMT Subject: CN=293F7D21D331CA37AB5E55E9C6E227673D34A697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:75:40:da:a9:ca:2d:96:76:59:2f:82:7b: 64:43:11:eb:20:c6:b2:b0:6f:9a:02:b0:c0:8c:93: a3:34:40:9e:f9:40:8f:4b:79:f3:93:9b:27:b6:35: e0:f7:1b:39:a8:7f:34:0d:5c:dc:e4:fb:66:b2:3e: 59:be:34:f7:a6:a4:f9:1f:26:2b:f3:c0:b1:dd:5f: fc:a5:af:15:59:0a:86:82:cf:d4:25:7c:2e:ef:f3: 39:e9:fb:80:03:83:7b:35:6c:2d:47:f4:2d:bb:5d: 6f:67:ea:fb:75:01:27:eb:de:37:24:7a:74:e3:c3: 94:8f:5a:11:de:3f:9f:15:0a:07:c6:e6:2b:85:ef: aa:55:b0:ff:69:db:1e:a7:65:b1:ee:49:01:c0:01: 09:1a:6a:09:fe:20:c4:4a:99:ca:f4:c6:c3:52:76: 80:e1:6d:b6:3e:19:5b:c2:89:86:b6:70:af:87:a3: 10:72:30:83:94:6a:b0:47:0c:d0:cd:3c:76:ce:00: c3:02:11:c3:a7:0d:c1:d8:32:1a:45:09:fc:0b:7d: 87:f9:9b:bd:f2:1b:c0:8f:8f:bd:9a:cf:f9:e8:01: 3b:1e:7b:8e:4b:47:13:d6:59:fd:1f:49:44:03:51: 44:59:6f:8f:90:d0:ad:77:32:d6:5b:48:ff:6a:38: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3F:7D:21:D3:31:CA:37:AB:5E:55:E9:C6:E2:27:67:3D:34:A6:97 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f4:42:eb:eb:51:a5:4a:de:b2:ab:df:4b:ce:8a:5e:26:ff: 04:8a:10:94:01:7e:56:d1:fc:78:fd:b0:aa:75:65:63:a8:61: 8f:1f:10:38:04:79:8f:00:5f:78:5b:76:65:ae:fa:11:d0:4c: 9d:db:df:a9:0e:b1:d8:d0:4c:73:b5:a5:10:39:8e:30:2e:68: ca:5c:c6:23:32:46:ed:d4:ff:bd:4b:c9:ed:49:95:7c:4a:e5: ee:17:4b:fd:a2:49:29:f1:9c:98:24:cc:ad:80:15:a6:3c:c6: 47:65:7a:75:17:37:36:6f:20:ec:44:af:f4:06:1e:e2:bb:59: be:98:b9:63:fc:58:3c:62:25:3b:e5:4d:49:fc:89:29:1a:65: 20:7b:eb:42:7d:e6:25:a5:7b:4b:be:16:b4:ca:41:33:b7:84: 90:af:0b:86:34:74:f5:b0:48:46:e7:b3:a4:66:d7:36:1f:0a: a8:01:02:37:dc:ba:b8:6f:88:17:ac:6e:22:6e:4d:40:2a:0f: 0d:2e:30:14:6b:b5:eb:ea:32:1c:32:76:c6:a6:c4:19:71:ef: 18:b0:f6:f6:4a:17:78:50:84:f3:66:ee:7f:be:55:9b:d1:15: 81:94:26:31:45:ea:f0:8d:91:e8:24:d0:a4:e5:39:a5:80:f7: 60:50:40:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAlgfHtRaINyxUNlrT8c3EEfY8AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA3MjkwNTA4MzFaFw0yNjA3MzAwNjM0MzFaMDMxMTAvBgNV BAMTKDI5M0Y3RDIxRDMzMUNBMzdBQjVFNTVFOUM2RTIyNzY3M0QzNEE2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgnVA2qnKLZZ2WS+Ce2RDEesg xrKwb5oCsMCMk6M0QJ75QI9LefOTmye2NeD3GzmofzQNXNzk+2ayPlm+NPempPkf JivzwLHdX/ylrxVZCoaCz9QlfC7v8znp+4ADg3s1bC1H9C27XW9n6vt1ASfr3jck enTjw5SPWhHeP58VCgfG5iuF76pVsP9p2x6nZbHuSQHAAQkaagn+IMRKmcr0xsNS doDhbbY+GVvCiYa2cK+HoxByMIOUarBHDNDNPHbOAMMCEcOnDcHYMhpFCfwLfYf5 m73yG8CPj72az/noATsee45LRxPWWf0fSUQDUURZb4+Q0K13MtZbSP9qOLtNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKT99IdMxyjerXlXpxuInZz00ppcwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/RC6+tRpUre sqvfS86KXib/BIoQlAF+VtH8eP2wqnVlY6hhjx8QOAR5jwBfeFt2Za76EdBMndvf qQ6x2NBMc7WlEDmOMC5oylzGIzJG7dT/vUvJ7UmVfErl7hdL/aJJKfGcmCTMrYAV pjzGR2V6dRc3Nm8g7ESv9AYe4rtZvpi5Y/xYPGIlO+VNSfyJKRplIHvrQn3mJaV7 S74WtMpBM7eEkK8LhjR09bBIRuezpGbXNh8KqAECN9y6uG+IF6xuIm5NQCoPDS4w FGu16+oyHDJ2xqbEGXHvGLD29koXeFCE82buf75Vm9EVgZQmMUXq8I2R6CTQpOU5 pYD3YFBA/w== -----END CERTIFICATE-----Generated at Wed Jul 29 17:02:08 2026 by rpki-client