
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft
File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json)
Hash identifier: /B3l8TN4tBSoSOfD4eiqElmpPw1aZs/P5G5wNxtsgQQ=
Subject key identifier: 49:CA:80:B3:FD:1E:6C:80:6E:5E:0A:8A:C4:9B:F0:2B:FB:5C:08:B2
Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE
Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE
Certificate serial: 33970D0969FC42491387E9F7D519B369512C0F8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft
Manifest number: 4F
Signing time: Sun 14 Jun 2026 02:52:37 +0000
Manifest this update: Sun 14 Jun 2026 02:47:37 +0000
Manifest next update: Mon 15 Jun 2026 03:03:37 +0000
Files and hashes: 1: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: XT2ktkVSEb4+mDkqeMQ+XG/V9lt6GaNLN1SyVqQGlCU=)
2: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=)
3: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:97:0d:09:69:fc:42:49:13:87:e9:f7:d5:19:b3:69:51:2c:0f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE
Validity
Not Before: Jun 14 02:47:37 2026 GMT
Not After : Jun 15 03:03:37 2026 GMT
Subject: CN=49CA80B3FD1E6C806E5E0A8AC49BF02BFB5C08B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:e5:f2:00:a4:f0:5b:98:cf:dd:ae:bf:d3:
0c:c9:42:a9:1c:4b:db:22:3c:a4:42:0a:54:8a:9b:
1c:53:c1:c1:2d:2b:d6:0a:29:a0:a1:f4:63:a7:67:
66:af:b7:61:00:73:ac:b0:d4:c8:94:06:07:ba:37:
da:48:f9:bd:cb:1f:8f:9c:cc:2f:a5:25:57:cd:a1:
36:15:86:e9:73:08:38:05:50:4b:eb:71:ab:b8:ec:
24:24:f8:c4:00:38:7c:93:f9:0e:9d:b4:78:ec:15:
f1:11:0e:09:32:4a:cd:5d:e6:37:05:cd:b7:5e:b5:
01:d0:12:8d:e2:3c:14:c8:95:f4:58:27:fe:cd:dd:
ed:70:0c:55:5a:64:be:96:1e:78:04:76:5b:24:c5:
f7:0c:ec:99:ec:31:c7:ad:a1:0f:d9:12:44:05:68:
cd:5f:9b:4e:d6:69:b7:b2:58:04:79:6b:ff:2d:65:
99:30:ae:11:8f:a9:28:b0:73:31:2e:e1:67:a4:2b:
bc:9b:bf:f0:23:23:0f:47:2d:48:18:96:1b:6a:a3:
d0:af:5f:3e:2d:d3:31:c5:15:ac:0b:68:6e:3e:70:
b6:b0:12:92:a5:35:09:99:05:8d:ad:f2:e0:33:41:
81:15:15:67:55:4f:2d:58:ea:8f:b0:d0:02:90:35:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CA:80:B3:FD:1E:6C:80:6E:5E:0A:8A:C4:9B:F0:2B:FB:5C:08:B2
X509v3 Authority Key Identifier:
keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:af:e6:ac:79:c8:e8:15:9e:6f:0c:8b:3d:f4:14:51:6c:76:
39:4b:4d:f8:1e:7d:31:cf:ea:03:5a:41:d4:a4:c8:1d:04:ba:
e9:b2:50:56:be:83:20:b0:90:82:1c:13:d2:c0:2c:40:7b:a1:
2c:2f:8e:72:e0:29:cd:b7:af:44:e4:1c:60:ca:f2:5b:e0:eb:
5c:36:da:cb:d4:24:4e:ae:ee:7a:80:72:6e:39:96:bb:db:dc:
36:ad:20:3f:4a:33:92:dc:29:c7:6c:48:57:1c:15:ef:8e:18:
71:d6:eb:7c:6c:54:69:71:bc:1c:ff:4c:ef:24:98:72:37:63:
45:1d:f3:36:53:47:9f:c1:dd:e5:8a:d9:6a:66:69:6c:71:ab:
37:2b:a2:52:d9:12:9c:48:2c:12:1c:86:da:0d:a7:fe:c5:e1:
ed:6c:d0:ae:a6:b5:4d:1e:ff:cc:34:08:52:a5:c5:d3:51:30:
47:38:d3:ae:4a:b4:c4:64:4e:48:f0:56:83:a5:9e:0b:db:bf:
84:f6:6b:7b:d6:43:35:9b:a6:4d:53:5f:1b:e9:27:00:9b:01:
df:ef:4a:9a:e1:d5:97:93:cb:62:5f:e4:b9:c1:1f:5e:f2:fb:
76:9c:67:4f:3e:96:79:18:97:37:80:9e:b0:a3:66:dd:17:48:
01:68:fa:ae
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUM5cNCWn8QkkTh+n31RmzaVEsD44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0
MTZDNjFDRTAeFw0yNjA2MTQwMjQ3MzdaFw0yNjA2MTUwMzAzMzdaMDMxMTAvBgNV
BAMTKDQ5Q0E4MEIzRkQxRTZDODA2RTVFMEE4QUM0OUJGMDJCRkI1QzA4QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdx+XyAKTwW5jP3a6/0wzJQqkc
S9siPKRCClSKmxxTwcEtK9YKKaCh9GOnZ2avt2EAc6yw1MiUBge6N9pI+b3LH4+c
zC+lJVfNoTYVhulzCDgFUEvrcau47CQk+MQAOHyT+Q6dtHjsFfERDgkySs1d5jcF
zbdetQHQEo3iPBTIlfRYJ/7N3e1wDFVaZL6WHngEdlskxfcM7JnsMcetoQ/ZEkQF
aM1fm07WabeyWAR5a/8tZZkwrhGPqSiwczEu4WekK7ybv/AjIw9HLUgYlhtqo9Cv
Xz4t0zHFFawLaG4+cLawEpKlNQmZBY2t8uAzQYEVFWdVTy1Y6o+w0AKQNT7ZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUScqAs/0ebIBuXgqKxJvwK/tcCLIwHwYDVR0j
BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4
RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB
N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda/mrHnI6BWe
bwyLPfQUUWx2OUtN+B59Mc/qA1pB1KTIHQS66bJQVr6DILCQghwT0sAsQHuhLC+O
cuApzbevROQcYMryW+DrXDbay9QkTq7ueoBybjmWu9vcNq0gP0ozktwpx2xIVxwV
744YcdbrfGxUaXG8HP9M7ySYcjdjRR3zNlNHn8Hd5YrZamZpbHGrNyuiUtkSnEgs
EhyG2g2n/sXh7WzQrqa1TR7/zDQIUqXF01EwRzjTrkq0xGROSPBWg6WeC9u/hPZr
e9ZDNZumTVNfG+knAJsB3+9KmuHVl5PLYl/kucEfXvL7dpxnTz6WeRiXN4CesKNm
3RdIAWj6rg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:12 2026 by rpki-client