$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: bNMmr/+/HXWXqmrpFWa/IzOKp1lEvQX+hPcMUQMkM+w= Subject key identifier: 8F:C7:6F:18:00:33:F2:5C:22:9E:E2:7A:5E:C9:B4:3E:B6:90:5F:86 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 231A18F1FD50A148E777D7756D3307368A6AC57D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: 8B Signing time: Wed 29 Jul 2026 18:04:53 +0000 Manifest this update: Wed 29 Jul 2026 17:59:53 +0000 Manifest next update: Thu 30 Jul 2026 21:46:53 +0000 Files and hashes: 1: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) 2: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: mpbNYBOKg8hwGdyAqCnfw/3SmlSrKuUAuaMc13Qku2o=) 3: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 21:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1a:18:f1:fd:50:a1:48:e7:77:d7:75:6d:33:07:36:8a:6a:c5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Jul 29 17:59:53 2026 GMT Not After : Jul 30 21:46:53 2026 GMT Subject: CN=8FC76F180033F25C229EE27A5EC9B43EB6905F86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:e6:c7:41:5c:62:2d:63:eb:09:f9:ec:43: 7b:4e:6e:24:30:3a:ce:2d:af:40:88:da:42:33:13: 90:fb:ff:74:fb:aa:2b:18:62:ba:13:1d:bc:4f:44: 74:b0:75:29:9b:1d:fc:77:3a:b2:32:a3:cb:76:be: 2d:64:1f:42:b4:48:8c:5a:0c:6e:70:0a:ee:50:5e: ce:17:5c:18:38:05:fd:6d:0c:78:0a:92:d8:20:9d: 15:db:9f:19:55:fc:e1:5e:8c:20:89:ab:92:3f:ad: f2:03:4e:a6:34:a1:35:dc:cd:21:fe:b0:f6:5e:6f: 30:f2:37:6c:0e:52:0d:ea:31:c5:60:95:0e:0f:47: 9c:b1:bb:c4:f8:2a:df:15:d0:6b:76:97:63:5a:53: 9d:48:bc:47:2b:8a:2f:89:36:94:6f:ea:9e:6d:eb: 02:bc:89:c1:7c:34:ff:3a:99:d0:7a:af:aa:c7:77: be:e0:e0:b7:4b:c4:ea:21:fa:5a:8e:4f:a7:2f:38: 4e:11:5e:37:11:17:d5:21:28:4b:8c:42:51:38:a9: 7b:94:58:28:c5:e2:67:e9:05:22:ee:00:81:bb:3a: 41:f4:8d:38:99:32:a4:b8:c3:28:24:d1:3f:47:44: b1:67:94:80:c5:9a:b1:96:54:68:82:f2:e1:97:6a: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:6F:18:00:33:F2:5C:22:9E:E2:7A:5E:C9:B4:3E:B6:90:5F:86 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:10:d9:95:8a:0f:d0:66:cd:fa:b0:78:dd:63:89:9b:19:28: 7c:55:31:8c:a3:d2:d6:c0:87:fc:c6:f3:7c:04:9d:1a:2b:6e: ca:45:c2:26:74:91:35:fa:ce:32:f3:c4:10:61:26:14:b5:59: cc:c3:a9:cc:14:0d:eb:d5:04:b3:6d:39:14:9b:2b:e4:b8:fc: da:18:33:ab:89:6b:29:ac:aa:d7:e0:6a:e7:55:45:6a:f1:77: 1d:31:4d:b3:eb:c4:28:47:d8:a3:7a:ec:6d:70:a6:a1:4f:04: 7b:9d:71:6b:19:97:a1:c8:d1:fa:c1:86:31:55:90:77:55:d2: 3c:ea:28:1c:b0:8c:eb:29:ad:40:95:80:c9:7c:10:04:51:48: e3:73:9b:96:95:38:fc:2b:69:bc:ec:dc:fe:18:a7:02:93:40: 89:e7:99:5f:17:78:c0:5e:f4:f3:e2:38:2b:a8:1c:3e:29:db: 92:b9:01:6e:51:ac:1a:a9:ef:37:4e:ac:b5:3c:78:d6:cb:a2: 9a:9b:8d:bc:7a:5c:bc:ea:c0:0d:12:d0:cb:53:46:38:5c:4e: d4:61:41:e7:f2:ab:2f:cf:3b:0d:0e:c4:29:6d:39:ed:8f:82: de:e7:ab:8f:b4:08:ed:20:9a:f6:45:e9:da:01:8b:27:16:6d: f8:f6:c1:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIxoY8f1QoUjnd9d1bTMHNopqxX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA3MjkxNzU5NTNaFw0yNjA3MzAyMTQ2NTNaMDMxMTAvBgNV BAMTKDhGQzc2RjE4MDAzM0YyNUMyMjlFRTI3QTVFQzlCNDNFQjY5MDVGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1+bHQVxiLWPrCfnsQ3tObiQw Os4tr0CI2kIzE5D7/3T7qisYYroTHbxPRHSwdSmbHfx3OrIyo8t2vi1kH0K0SIxa DG5wCu5QXs4XXBg4Bf1tDHgKktggnRXbnxlV/OFejCCJq5I/rfIDTqY0oTXczSH+ sPZebzDyN2wOUg3qMcVglQ4PR5yxu8T4Kt8V0Gt2l2NaU51IvEcrii+JNpRv6p5t 6wK8icF8NP86mdB6r6rHd77g4LdLxOoh+lqOT6cvOE4RXjcRF9UhKEuMQlE4qXuU WCjF4mfpBSLuAIG7OkH0jTiZMqS4wygk0T9HRLFnlIDFmrGWVGiC8uGXav7tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj8dvGAAz8lwinuJ6Xsm0PraQX4YwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxDZlYoP0GbN +rB43WOJmxkofFUxjKPS1sCH/MbzfASdGituykXCJnSRNfrOMvPEEGEmFLVZzMOp zBQN69UEs205FJsr5Lj82hgzq4lrKayq1+Bq51VFavF3HTFNs+vEKEfYo3rsbXCm oU8Ee51xaxmXocjR+sGGMVWQd1XSPOooHLCM6ymtQJWAyXwQBFFI43OblpU4/Ctp vOzc/hinApNAieeZXxd4wF708+I4K6gcPinbkrkBblGsGqnvN06stTx41suimpuN vHpcvOrADRLQy1NGOFxO1GFB5/KrL887DQ7EKW057Y+C3uerj7QI7SCa9kXp2gGL JxZt+PbBxg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:41 2026 by rpki-client