$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: Tn7YART6SnlD//Wz4EIX2QyAJhwLc5zp7Y790R19+Sw= Subject key identifier: B2:DB:CE:14:DE:5E:8D:0E:96:71:4F:C2:B5:1A:19:3B:8E:10:0A:D9 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 09368DD3BC2E04CA3888C079D2F6D266E6BE7A9A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 22:27:52 +0000 Manifest this update: Tue 28 Jul 2026 22:22:52 +0000 Manifest next update: Wed 29 Jul 2026 23:34:52 +0000 Files and hashes: 1: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) 2: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: 7pFpublK7ODZytndT5xmHGwzdrBQkS1k9OXI6pzxePE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:36:8d:d3:bc:2e:04:ca:38:88:c0:79:d2:f6:d2:66:e6:be:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Jul 28 22:22:52 2026 GMT Not After : Jul 29 23:34:52 2026 GMT Subject: CN=B2DBCE14DE5E8D0E96714FC2B51A193B8E100AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b3:bb:30:43:ae:c0:35:93:e4:0e:00:70:9d: d7:46:62:34:27:30:74:30:ee:72:94:b8:a4:92:53: b2:c3:fe:6f:5f:8c:84:c1:07:d0:8a:42:52:9f:5b: b0:88:76:c1:6f:83:4c:fe:a5:68:6c:0f:46:93:90: 93:18:88:2d:fc:07:25:c7:f4:ed:6a:50:c1:d2:53: 52:87:aa:48:f5:3c:d8:2c:ab:73:08:9a:64:af:b5: a1:0c:41:90:53:d6:22:c1:d8:c5:95:09:8e:80:19: 9c:3a:39:db:25:7d:da:4c:0c:ae:2f:6a:29:93:ab: 7c:68:37:91:90:d4:0f:52:a5:bc:53:30:b7:7f:66: d8:25:f4:81:ec:af:be:f5:79:b6:cb:65:6c:49:1a: 03:42:f2:e4:aa:8a:79:2f:67:95:5f:b0:f2:f0:54: b0:53:0f:1e:47:85:79:63:56:c5:a0:ca:f8:39:9c: c5:ca:79:6b:9f:74:05:5d:7a:da:6b:70:23:c6:f6: 46:77:2d:da:1a:3e:c9:f0:96:c5:01:2a:b2:95:9e: d5:66:91:dc:95:cb:3c:73:e3:50:49:93:26:47:83: 4f:c2:25:e9:fd:ff:b2:ea:71:70:79:33:e9:26:51: 1f:a7:e8:fe:f1:ee:b7:27:ac:94:8b:fa:c6:85:f7: 36:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DB:CE:14:DE:5E:8D:0E:96:71:4F:C2:B5:1A:19:3B:8E:10:0A:D9 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c2:e3:bd:9a:e6:4e:95:92:c2:ea:1f:9b:dc:38:9c:fb:7d: 89:7f:ea:3f:0e:d3:85:3c:ea:cf:8d:8b:6f:2c:68:ae:58:c7: 7a:0a:b1:a6:b5:e1:a1:7c:09:0f:5c:3f:fc:5a:d2:9b:e7:74: 55:0c:79:29:08:c0:b2:a5:f1:e9:c3:ef:17:83:bc:d6:0b:63: 2e:67:36:bd:a2:dd:27:9f:7a:ea:77:31:1f:cb:10:ea:20:e0: 4e:ff:1e:94:85:07:ba:c1:b4:63:39:a4:59:0f:bd:a3:d5:cf: 22:33:5c:fe:7a:15:30:9f:43:eb:38:a1:97:96:93:57:ee:6a: f9:f4:24:b8:2e:d0:97:81:ef:0f:8e:7e:1f:68:0c:a7:26:68: 4b:29:f5:c3:a0:97:39:24:aa:96:a6:9b:98:5f:26:69:f4:7a: ef:d3:75:45:08:81:a6:76:4e:18:2e:fe:66:53:95:e7:f0:23: 93:7d:d9:c5:ef:e9:66:1e:7e:e2:31:dc:20:35:c4:43:f3:e3: f7:a7:b5:b4:61:96:30:0f:6d:fa:f7:b3:d1:04:d9:01:4a:2a: 10:34:a7:ca:c7:d5:9d:24:40:eb:01:d4:92:8d:bb:c1:a6:88: 05:7c:9c:02:21:6e:5b:40:ce:a5:01:a3:94:8c:09:a5:c9:95: df:40:ea:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCTaN07wuBMo4iMB50vbSZua+epowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA3MjgyMjIyNTJaFw0yNjA3MjkyMzM0NTJaMDMxMTAvBgNV BAMTKEIyREJDRTE0REU1RThEMEU5NjcxNEZDMkI1MUExOTNCOEUxMDBBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDos7swQ67ANZPkDgBwnddGYjQn MHQw7nKUuKSSU7LD/m9fjITBB9CKQlKfW7CIdsFvg0z+pWhsD0aTkJMYiC38ByXH 9O1qUMHSU1KHqkj1PNgsq3MImmSvtaEMQZBT1iLB2MWVCY6AGZw6OdslfdpMDK4v aimTq3xoN5GQ1A9SpbxTMLd/Ztgl9IHsr771ebbLZWxJGgNC8uSqinkvZ5VfsPLw VLBTDx5HhXljVsWgyvg5nMXKeWufdAVdetprcCPG9kZ3LdoaPsnwlsUBKrKVntVm kdyVyzxz41BJkyZHg0/CJen9/7LqcXB5M+kmUR+n6P7x7rcnrJSL+saF9zarAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUstvOFN5ejQ6WcU/CtRoZO44QCtkwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8LjvZrmTpWS wuofm9w4nPt9iX/qPw7ThTzqz42LbyxorljHegqxprXhoXwJD1w//FrSm+d0VQx5 KQjAsqXx6cPvF4O81gtjLmc2vaLdJ5966ncxH8sQ6iDgTv8elIUHusG0YzmkWQ+9 o9XPIjNc/noVMJ9D6zihl5aTV+5q+fQkuC7Ql4HvD45+H2gMpyZoSyn1w6CXOSSq lqabmF8mafR679N1RQiBpnZOGC7+ZlOV5/Ajk33Zxe/pZh5+4jHcIDXEQ/Pj96e1 tGGWMA9t+vez0QTZAUoqEDSnysfVnSRA6wHUko27waaIBXycAiFuW0DOpQGjlIwJ pcmV30DqfA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:04 2026 by rpki-client