$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: 0GBRhRCjIcPDhfG0lFDGriKIDZdnnSIjn+H5IJoL0sQ= Subject key identifier: CD:CB:30:DE:69:D5:E1:CD:D1:15:D6:29:44:10:D5:6D:6D:6B:9A:23 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 2A4A170002F736ECD524D2422F042ECC0D74ABF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 2E Signing time: Sat 13 Jun 2026 17:16:58 +0000 Manifest this update: Sat 13 Jun 2026 17:11:58 +0000 Manifest next update: Sun 14 Jun 2026 19:46:58 +0000 Files and hashes: 1: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: FE/iMq1vYcTdJyqQisw98mKiFrUVM5l/eWy7uVzU0+8=) 2: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4a:17:00:02:f7:36:ec:d5:24:d2:42:2f:04:2e:cc:0d:74:ab:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Jun 13 17:11:58 2026 GMT Not After : Jun 14 19:46:58 2026 GMT Subject: CN=CDCB30DE69D5E1CDD115D6294410D56D6D6B9A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:e0:f9:40:ac:8b:b6:7c:39:c0:3b:51:19: 57:f3:f5:ac:3e:6d:e4:3b:78:db:35:d3:ed:6e:59: 43:7a:7b:3e:ff:a0:46:3e:e6:f3:4f:42:d2:31:38: 73:4a:b9:c4:ad:54:1a:4c:7f:08:91:8c:04:3e:ce: 05:7b:59:d2:53:fd:3b:d6:91:c0:c8:dd:b3:b4:e9: 31:c6:dd:05:95:7b:27:2c:f7:7a:54:6c:03:73:36: 76:47:aa:08:25:44:79:8a:5e:9d:19:51:de:8c:6e: 05:08:9f:cf:f2:28:f7:d4:70:4b:e5:9f:ac:73:76: 85:62:a9:ee:1e:b6:24:6d:23:73:b4:f1:45:ff:0b: fc:19:53:ed:74:62:4d:16:19:5c:9b:d8:98:cf:8c: c7:2d:d0:0e:0d:e7:36:cc:74:cb:18:3f:f8:e6:05: 96:6e:55:22:8a:2a:ac:00:3f:6a:c1:d5:81:0b:9d: f5:06:9b:0a:04:85:05:8a:93:de:e9:d4:b8:79:87: c8:ad:96:28:68:86:21:c7:ba:eb:68:98:57:6c:3c: 75:f2:7d:c7:84:be:18:40:c0:3f:91:5a:0e:c1:2e: 4c:a5:b1:40:1f:a2:23:80:92:f8:9e:3f:f1:17:4e: 79:d9:3c:1f:67:67:62:fc:ae:41:9c:58:64:c4:25: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CB:30:DE:69:D5:E1:CD:D1:15:D6:29:44:10:D5:6D:6D:6B:9A:23 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d5:60:13:76:f7:d9:53:85:4e:ed:d6:d7:cb:2c:31:fa:6d: b0:8b:85:88:66:65:f6:ae:08:e6:00:f8:80:ea:a2:3a:79:88: 0c:b1:1b:45:ad:03:20:29:39:37:59:35:fd:3a:98:2b:9b:4a: 22:6f:8e:52:e8:f6:4c:ee:e7:b8:f9:03:30:bf:72:cc:3f:a3: 08:b5:8d:97:9e:da:40:84:e5:3c:57:e3:6e:35:c2:2c:6c:7c: 4c:59:0a:43:37:a4:8b:65:12:14:75:78:c5:81:52:22:96:8b: 8a:c3:45:eb:60:12:77:b6:86:60:99:d3:ff:7a:e9:38:27:72: a1:b2:4a:c6:20:2c:5e:ab:74:0c:52:6b:fc:be:85:3e:df:f2: a2:c6:60:87:ba:44:6a:56:bd:1f:ba:9c:9f:2c:f2:36:7a:f4: a1:89:44:cb:25:1b:f1:59:8e:9f:8f:6d:43:49:5a:13:ac:97: 2c:ef:f6:a5:d6:e9:83:ae:59:08:46:4b:f8:dc:95:dc:87:8b: fe:36:c6:01:76:b8:00:a6:08:01:35:92:38:83:9a:e3:eb:80: d3:10:52:2d:cf:9c:34:99:94:ea:f1:24:a8:8c:7c:1f:c5:7f: 9c:51:fb:7e:ad:24:6d:c8:0f:6a:f0:96:fc:7d:3d:f6:70:1c: 44:d4:09:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKkoXAAL3NuzVJNJCLwQuzA10q/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA2MTMxNzExNThaFw0yNjA2MTQxOTQ2NThaMDMxMTAvBgNV BAMTKENEQ0IzMERFNjlENUUxQ0REMTE1RDYyOTQ0MTBENTZENkQ2QjlBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGquD5QKyLtnw5wDtRGVfz9aw+ beQ7eNs10+1uWUN6ez7/oEY+5vNPQtIxOHNKucStVBpMfwiRjAQ+zgV7WdJT/TvW kcDI3bO06THG3QWVeycs93pUbANzNnZHqgglRHmKXp0ZUd6MbgUIn8/yKPfUcEvl n6xzdoViqe4etiRtI3O08UX/C/wZU+10Yk0WGVyb2JjPjMct0A4N5zbMdMsYP/jm BZZuVSKKKqwAP2rB1YELnfUGmwoEhQWKk97p1Lh5h8itlihohiHHuutomFdsPHXy fceEvhhAwD+RWg7BLkylsUAfoiOAkvieP/EXTnnZPB9nZ2L8rkGcWGTEJX1bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzcsw3mnV4c3RFdYpRBDVbW1rmiMwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9VgE3b32VOF Tu3W18ssMfptsIuFiGZl9q4I5gD4gOqiOnmIDLEbRa0DICk5N1k1/TqYK5tKIm+O Uuj2TO7nuPkDML9yzD+jCLWNl57aQITlPFfjbjXCLGx8TFkKQzeki2USFHV4xYFS IpaLisNF62ASd7aGYJnT/3rpOCdyobJKxiAsXqt0DFJr/L6FPt/yosZgh7pEala9 H7qcnyzyNnr0oYlEyyUb8VmOn49tQ0laE6yXLO/2pdbpg65ZCEZL+NyV3IeL/jbG AXa4AKYIATWSOIOa4+uA0xBSLc+cNJmU6vEkqIx8H8V/nFH7fq0kbcgPavCW/H09 9nAcRNQJOw== -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:31 2026 by rpki-client