$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: Zt1R+t/YFL+HiQbss5K6wXgKZrG4xg/9Urlk1fdjEHg= Subject key identifier: 47:A0:CC:CC:D0:63:C4:74:17:EE:61:E0:56:8A:90:B5:FE:F0:32:FF Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 192A0823F583A0F8C7AB9C1ED031D7AF727D61B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: AC Signing time: Thu 15 Oct 2026 03:01:13 +0000 Manifest this update: Thu 15 Oct 2026 02:56:13 +0000 Manifest next update: Sun 18 Oct 2026 03:17:13 +0000 Files and hashes: 1: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 2: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) 3: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 4: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: rCWVoLBZIJTcrAyHcBUUsKhUuBdY79USZV4cQj8RrVs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2a:08:23:f5:83:a0:f8:c7:ab:9c:1e:d0:31:d7:af:72:7d:61:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Oct 15 02:56:13 2026 GMT Not After : Oct 18 03:17:13 2026 GMT Subject: CN=47A0CCCCD063C47417EE61E0568A90B5FEF032FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:6f:20:9d:9c:50:e3:19:ab:c9:61:a1:82: 58:10:54:04:c2:42:f8:33:78:22:87:f1:fb:68:6c: e2:4d:72:77:a9:78:8a:3f:92:62:15:99:43:eb:86: ad:8b:00:0a:87:d9:10:13:c2:37:49:09:27:b9:e9: 09:63:56:cf:d0:dd:3e:5b:cc:a0:87:3c:70:86:bf: 1c:18:6e:b9:cd:d2:f4:71:45:e8:03:be:86:da:25: 13:10:a7:15:76:6d:31:e0:d4:d9:60:51:a3:cd:03: 33:50:04:4c:50:cb:2f:f7:37:57:52:57:8b:1c:67: bd:ff:1a:30:23:f7:1c:71:c1:ce:5d:7e:d4:f1:55: 6c:ff:ac:74:85:90:e3:cc:02:01:04:f3:55:24:cb: 33:dc:9c:fb:4d:e1:52:e0:dc:17:54:67:98:69:d3: 15:92:db:b6:fb:8b:05:cc:e3:87:e8:0d:23:90:be: a6:bc:bf:70:a2:8e:d7:38:13:cb:32:4b:1c:19:69: af:2e:46:6a:1f:88:36:59:c1:57:9e:f3:17:64:c9: 55:d2:d7:4f:a9:30:53:22:81:3f:fb:94:d1:fd:1e: 09:f6:03:fa:be:ef:a1:16:17:2d:5a:da:e3:03:77: 62:fe:47:44:3b:8c:31:b8:31:e7:ae:46:f2:b8:61: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A0:CC:CC:D0:63:C4:74:17:EE:61:E0:56:8A:90:B5:FE:F0:32:FF X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ed:ab:f7:e8:d3:05:ff:0b:3a:68:c2:a0:eb:e2:36:cb:7a: 10:6a:c1:c9:fa:d5:06:70:9e:0c:a2:c1:8b:56:f8:7a:6e:92: e5:64:c2:c7:45:10:35:b7:36:2f:a5:89:f0:ae:d0:d3:6c:34: 4b:15:75:cb:77:38:c9:23:4a:2b:ba:0e:96:fa:1e:e4:36:44: 0b:7a:2e:ee:5d:2f:ec:6b:79:c1:77:1c:4a:f8:87:0c:a9:ae: 04:ea:d3:5c:8b:d2:60:2b:43:6f:66:65:5e:b6:78:66:25:ef: 49:b6:3f:c1:00:07:59:57:01:78:26:54:25:a8:0e:4b:0c:18: 7e:b8:0e:69:ac:4c:e3:48:34:39:0b:41:cf:e1:73:54:93:4a: 6f:3a:e4:3b:7b:c1:26:bc:16:f1:62:13:35:48:8e:a7:64:92: 49:34:62:63:8f:be:9b:ff:86:bb:c5:1d:c8:b0:2b:59:e0:0b: 14:de:a1:8f:fe:7c:a3:9d:73:a5:27:fb:3e:eb:08:fe:02:10: 1b:b4:61:0d:50:d4:58:f0:43:6c:3b:fe:81:a8:6d:39:80:6f: 9e:5b:2d:96:da:d4:41:4f:51:81:82:51:e0:de:c9:a3:72:83: 92:8b:04:67:5c:d8:c2:5c:8c:70:13:03:41:f1:2b:c1:ba:63: dd:e4:2b:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGSoII/WDoPjHq5we0DHXr3J9YbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjEwMTUwMjU2MTNaFw0yNjEwMTgwMzE3MTNaMDMxMTAvBgNV BAMTKDQ3QTBDQ0NDRDA2M0M0NzQxN0VFNjFFMDU2OEE5MEI1RkVGMDMyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGG8gnZxQ4xmryWGhglgQVATC QvgzeCKH8ftobOJNcnepeIo/kmIVmUPrhq2LAAqH2RATwjdJCSe56QljVs/Q3T5b zKCHPHCGvxwYbrnN0vRxRegDvobaJRMQpxV2bTHg1NlgUaPNAzNQBExQyy/3N1dS V4scZ73/GjAj9xxxwc5dftTxVWz/rHSFkOPMAgEE81UkyzPcnPtN4VLg3BdUZ5hp 0xWS27b7iwXM44foDSOQvqa8v3Cijtc4E8sySxwZaa8uRmofiDZZwVee8xdkyVXS 10+pMFMigT/7lNH9Hgn2A/q+76EWFy1a2uMDd2L+R0Q7jDG4MeeuRvK4YXZjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR6DMzNBjxHQX7mHgVoqQtf7wMv8wHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqO2r9+jTBf8L OmjCoOviNst6EGrByfrVBnCeDKLBi1b4em6S5WTCx0UQNbc2L6WJ8K7Q02w0SxV1 y3c4ySNKK7oOlvoe5DZEC3ou7l0v7Gt5wXccSviHDKmuBOrTXIvSYCtDb2ZlXrZ4 ZiXvSbY/wQAHWVcBeCZUJagOSwwYfrgOaaxM40g0OQtBz+FzVJNKbzrkO3vBJrwW 8WITNUiOp2SSSTRiY4++m/+Gu8UdyLArWeALFN6hj/58o51zpSf7PusI/gIQG7Rh DVDUWPBDbDv+gahtOYBvnlstltrUQU9RgYJR4N7Jo3KDkosEZ1zYwlyMcBMDQfEr wbpj3eQr5g== -----END CERTIFICATE-----Generated at Thu Oct 15 13:29:10 2026 by rpki-client