$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: hBu1xxWYxypzQYCfqR0xIdWnR3Cxf//icp49U4YoNsY= Subject key identifier: 72:F7:DB:45:35:8E:20:34:00:32:98:01:18:EC:6E:0F:28:A3:F1:E8 Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 08A73413ECDE7B28273980A65D0EA94934996F39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 6F Signing time: Wed 29 Jul 2026 07:23:47 +0000 Manifest this update: Wed 29 Jul 2026 07:18:47 +0000 Manifest next update: Thu 30 Jul 2026 11:01:47 +0000 Files and hashes: 1: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 2: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) 3: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 4: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: VJL8ppwEtPZyyKWEB+hF4gt77yYg3VslX0woIEdVTxY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a7:34:13:ec:de:7b:28:27:39:80:a6:5d:0e:a9:49:34:99:6f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Jul 29 07:18:47 2026 GMT Not After : Jul 30 11:01:47 2026 GMT Subject: CN=72F7DB45358E20340032980118EC6E0F28A3F1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a6:61:a6:ec:aa:00:52:60:07:a8:7a:1e:4c: 65:63:6a:ae:5f:28:c6:7d:82:8e:cf:51:2f:89:c1: 62:85:d9:7c:aa:b0:59:42:e9:be:05:1b:05:d5:af: fb:21:0e:da:69:2d:bb:aa:23:22:e8:34:b9:b0:37: 50:b4:da:1d:d2:eb:64:1b:af:c9:3f:5e:24:f0:8c: 7b:43:eb:0c:d5:07:6c:5f:95:50:81:20:ef:b3:a5: 36:48:89:08:f7:a5:6e:84:a0:01:eb:9b:c6:30:c4: 13:39:99:44:b4:73:16:9b:90:f2:ab:66:54:55:02: 34:3c:05:10:56:ba:35:b6:b7:47:6d:58:97:73:86: 73:6f:eb:7c:da:e9:9c:af:d6:d5:d1:fd:7d:65:90: 42:c5:69:59:04:d1:10:59:e0:17:2a:19:fc:e6:85: ae:78:e5:7c:27:58:d5:55:75:d7:0e:36:ba:cc:1d: f8:12:d8:38:1d:b5:38:07:8c:72:da:ba:2a:00:5d: 56:6a:2e:0b:43:45:ff:0e:33:c4:c9:f1:f8:ca:9d: 7a:3d:93:9d:06:78:d5:32:c0:9e:d6:ba:f5:ed:66: d8:4a:40:8b:13:c1:d7:d3:8e:7a:8a:ef:22:1f:2e: d6:d8:b3:36:26:e8:82:05:e9:57:f6:51:e4:e6:5c: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:DB:45:35:8E:20:34:00:32:98:01:18:EC:6E:0F:28:A3:F1:E8 X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3d:6f:8b:14:86:1b:8a:c9:59:dc:09:bb:25:04:9f:95:c6: 08:37:82:52:e2:f7:ba:95:ee:20:b8:75:1c:4d:52:bd:c0:00: 20:21:69:03:e1:7a:a4:57:36:f5:27:09:5c:46:21:25:23:33: 6c:8b:9e:67:c6:95:dd:c8:28:cc:90:cd:22:ae:cb:82:b6:86: ad:59:a6:38:ee:28:6f:33:f4:a9:a5:42:30:93:44:09:3b:ce: fd:f1:cd:a0:10:b4:1b:26:75:79:07:66:2d:4d:29:ab:2c:78: 8b:48:f0:e2:78:a7:2a:d4:38:b3:a3:ec:93:4f:88:c0:2a:42: cf:ed:28:eb:56:e2:df:8f:b9:7d:3a:55:ed:b0:d6:06:21:ac: 82:65:9e:88:45:b1:87:d8:dc:51:50:34:14:fb:ee:5e:bc:7d: 6e:56:73:87:1f:6a:05:6d:37:7a:8b:4e:ef:d0:5c:17:c5:2d: 49:29:38:04:94:64:58:57:61:a1:e3:89:39:14:77:94:59:61: 5b:36:58:36:27:58:0c:91:08:33:40:0d:3a:46:9d:55:a6:ef: e6:5b:84:98:2b:4c:83:7f:f9:76:91:78:36:c8:0f:3f:e3:61: cd:83:c5:28:26:b4:66:86:ec:6d:8f:3e:e1:39:0c:1a:37:21: 44:5e:4c:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCKc0E+zeeygnOYCmXQ6pSTSZbzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA3MjkwNzE4NDdaFw0yNjA3MzAxMTAxNDdaMDMxMTAvBgNV BAMTKDcyRjdEQjQ1MzU4RTIwMzQwMDMyOTgwMTE4RUM2RTBGMjhBM0YxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpmGm7KoAUmAHqHoeTGVjaq5f KMZ9go7PUS+JwWKF2XyqsFlC6b4FGwXVr/shDtppLbuqIyLoNLmwN1C02h3S62Qb r8k/XiTwjHtD6wzVB2xflVCBIO+zpTZIiQj3pW6EoAHrm8YwxBM5mUS0cxabkPKr ZlRVAjQ8BRBWujW2t0dtWJdzhnNv63za6Zyv1tXR/X1lkELFaVkE0RBZ4BcqGfzm ha545XwnWNVVddcONrrMHfgS2DgdtTgHjHLauioAXVZqLgtDRf8OM8TJ8fjKnXo9 k50GeNUywJ7WuvXtZthKQIsTwdfTjnqK7yIfLtbYszYm6IIF6Vf2UeTmXK+xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcvfbRTWOIDQAMpgBGOxuDyij8egwHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnD1vixSGG4rJ WdwJuyUEn5XGCDeCUuL3upXuILh1HE1SvcAAICFpA+F6pFc29ScJXEYhJSMzbIue Z8aV3cgozJDNIq7LgraGrVmmOO4obzP0qaVCMJNECTvO/fHNoBC0GyZ1eQdmLU0p qyx4i0jw4ninKtQ4s6Psk0+IwCpCz+0o61bi34+5fTpV7bDWBiGsgmWeiEWxh9jc UVA0FPvuXrx9blZzhx9qBW03eotO79BcF8UtSSk4BJRkWFdhoeOJORR3lFlhWzZY NidYDJEIM0ANOkadVabv5luEmCtMg3/5dpF4NsgPP+NhzYPFKCa0ZobsbY8+4TkM GjchRF5MYw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:47 2026 by rpki-client