$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: kHjMPnmrV1r9YvKpExOu/A0g3aY0Gm9d0kEQo2KoYuM= Subject key identifier: 83:14:5C:56:41:BB:C6:09:3D:04:B8:6D:CC:DC:E6:9C:E5:A2:03:DA Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 07FE4794ED5D31861E7FF71CD87741829F5D9EE8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 7C Signing time: Sat 17 Oct 2026 17:09:06 +0000 Manifest this update: Sat 17 Oct 2026 17:04:06 +0000 Manifest next update: Tue 20 Oct 2026 19:20:06 +0000 Files and hashes: 1: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 2: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 3: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 4: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 5: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 6: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 7: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) 8: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 9: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) 10: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 11: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 12: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 13: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) 14: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: LG/2H7T4cEWeic1d538oao8X2T/t0aAamcpaM2ve0Lc=) 15: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 19:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fe:47:94:ed:5d:31:86:1e:7f:f7:1c:d8:77:41:82:9f:5d:9e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Oct 17 17:04:06 2026 GMT Not After : Oct 20 19:20:06 2026 GMT Subject: CN=83145C5641BBC6093D04B86DCCDCE69CE5A203DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:55:1a:cc:09:89:29:ea:33:32:2a:c8:24: 79:3e:4b:aa:6c:09:3b:a4:3f:15:40:12:58:36:7a: 4d:6b:99:52:1d:08:ea:ea:79:bb:15:28:cd:df:b3: 94:dc:b2:a5:1b:fa:dd:b1:a1:fc:7d:71:52:95:14: b0:02:73:ae:8c:96:d3:83:e4:76:11:00:a3:d4:41: 5c:01:35:ca:cc:91:04:b5:5a:1b:f1:e8:6e:18:e6: 6b:38:fd:1f:6e:fe:cd:c6:6e:b1:e1:2d:5f:b6:cb: 26:a4:6a:b5:d8:63:da:af:3d:73:f3:4f:87:31:4a: 2e:32:98:94:b5:59:2f:06:3c:cf:1c:a1:18:57:a4: 8a:cb:86:1a:e2:d9:63:4a:d8:44:b9:9a:07:1a:fc: 49:00:55:fe:80:c4:4e:38:ae:c0:13:05:e7:1f:ce: 22:15:28:7d:12:11:1b:d3:c3:db:6d:4b:b5:f8:f2: 29:86:3e:83:fc:08:8c:01:d0:1d:82:0c:59:c2:68: af:0a:91:04:95:48:1e:94:a7:f3:9e:73:05:cb:f3: b0:ef:17:ce:f5:d1:4e:26:22:07:99:08:70:ab:2c: 78:73:d1:aa:1d:b0:ea:18:0c:7a:a2:79:57:51:65: d3:27:d4:d5:64:17:58:c8:c6:64:71:b1:d2:5d:e8: e2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:5C:56:41:BB:C6:09:3D:04:B8:6D:CC:DC:E6:9C:E5:A2:03:DA X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b8:03:e9:03:ba:18:99:90:7e:37:d5:ac:e4:e1:1d:db:b8: d9:e6:f9:4d:eb:f1:09:59:c0:56:13:6c:34:2a:23:36:43:63: 8d:0c:e3:ba:fc:47:86:48:26:0a:a9:32:8e:15:c3:21:46:48: aa:30:aa:53:c0:88:bc:85:53:a8:d0:4e:6a:62:0c:63:29:b4: e2:86:6b:7f:83:4b:30:5c:6c:6d:6d:89:06:2e:0f:65:96:4a: ba:e1:e3:56:be:6b:80:db:0a:a7:83:ac:a0:3c:77:20:e3:c6: 5e:0a:ad:bc:89:a1:90:44:b7:0a:3d:1f:df:4f:38:53:73:90: 21:3d:57:8c:3c:b3:5a:cc:26:6d:ff:cf:61:d9:c1:19:b1:af: 38:71:8a:8a:ab:5c:ed:4e:a2:87:e2:8d:19:b6:00:d8:fa:77: 08:e6:3f:c7:bb:c0:a5:a9:f3:33:55:4e:31:d9:fd:96:d0:1e: 5f:6e:c6:dc:3f:8f:e9:ab:8c:01:00:6d:dc:ed:0a:f4:2e:07: 80:b4:8f:4c:e8:d7:b8:ce:b2:4a:7e:53:1a:19:7a:d4:0d:97: bf:e5:ba:d7:91:34:bf:d0:b3:59:be:2a:7f:89:2e:ba:84:3a: 98:38:9e:5c:3f:50:6b:d5:82:a3:b9:95:4f:fc:64:f9:9f:f5: f8:3c:1a:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB/5HlO1dMYYef/cc2HdBgp9dnugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjEwMTcxNzA0MDZaFw0yNjEwMjAxOTIwMDZaMDMxMTAvBgNV BAMTKDgzMTQ1QzU2NDFCQkM2MDkzRDA0Qjg2RENDRENFNjlDRTVBMjAzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBR1UazAmJKeozMirIJHk+S6ps CTukPxVAElg2ek1rmVIdCOrqebsVKM3fs5TcsqUb+t2xofx9cVKVFLACc66MltOD 5HYRAKPUQVwBNcrMkQS1Whvx6G4Y5ms4/R9u/s3GbrHhLV+2yyakarXYY9qvPXPz T4cxSi4ymJS1WS8GPM8coRhXpIrLhhri2WNK2ES5mgca/EkAVf6AxE44rsATBecf ziIVKH0SERvTw9ttS7X48imGPoP8CIwB0B2CDFnCaK8KkQSVSB6Up/OecwXL87Dv F8710U4mIgeZCHCrLHhz0aodsOoYDHqieVdRZdMn1NVkF1jIxmRxsdJd6OIxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgxRcVkG7xgk9BLhtzNzmnOWiA9owHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLgD6QO6GJmQ fjfVrOThHdu42eb5TevxCVnAVhNsNCojNkNjjQzjuvxHhkgmCqkyjhXDIUZIqjCq U8CIvIVTqNBOamIMYym04oZrf4NLMFxsbW2JBi4PZZZKuuHjVr5rgNsKp4OsoDx3 IOPGXgqtvImhkES3Cj0f3084U3OQIT1XjDyzWswmbf/PYdnBGbGvOHGKiqtc7U6i h+KNGbYA2Pp3COY/x7vApanzM1VOMdn9ltAeX27G3D+P6auMAQBt3O0K9C4HgLSP TOjXuM6ySn5TGhl61A2Xv+W615E0v9CzWb4qf4kuuoQ6mDieXD9Qa9WCo7mVT/xk +Z/1+Dwa/w== -----END CERTIFICATE-----Generated at Sun Oct 18 19:15:32 2026 by rpki-client