$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: E0kkygyM8Cr84ZSOa/foa1HK4/lAcRcGGB1Dd3FRqec= Subject key identifier: 9C:1E:09:8A:1E:CD:27:98:93:22:DE:28:F4:8C:3C:D5:C1:20:BA:61 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 47D28272CA900C49539B127E447B4A3D26D9E544 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 3E Signing time: Wed 29 Jul 2026 09:03:57 +0000 Manifest this update: Wed 29 Jul 2026 08:58:57 +0000 Manifest next update: Thu 30 Jul 2026 11:34:57 +0000 Files and hashes: 1: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: iOfqpDLAsz07IB8adjy3ptj+2chvS/+28pqraDGhDeg=) 2: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 3: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 4: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) 5: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 6: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 7: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 8: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) 9: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 10: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) 11: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 12: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 13: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 14: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 15: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d2:82:72:ca:90:0c:49:53:9b:12:7e:44:7b:4a:3d:26:d9:e5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jul 29 08:58:57 2026 GMT Not After : Jul 30 11:34:57 2026 GMT Subject: CN=9C1E098A1ECD27989322DE28F48C3CD5C120BA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:0d:a0:11:67:d2:87:69:e2:e0:fa:f6:a4: 0d:7c:cb:e9:02:b2:93:3c:a6:16:5f:b4:31:77:5c: 16:cc:14:e4:67:b4:2f:90:b0:fe:7c:06:b4:2a:e3: 04:d0:2f:0c:24:0d:45:cb:5d:29:59:b6:5c:de:34: 40:29:33:8f:d5:7b:5d:de:56:1c:f0:5a:80:f1:7d: 43:88:86:16:71:2a:bf:04:30:be:26:08:a3:06:64: 97:43:47:87:48:90:88:39:56:b7:dd:3a:46:b5:9e: bc:70:8b:3c:56:56:97:12:a2:63:39:dd:7a:79:6a: 29:3e:7e:15:8b:df:b3:10:f0:bc:48:c1:2d:22:6f: 1d:31:3d:02:cd:9c:da:29:f0:82:a0:a2:13:a2:89: a9:23:94:cc:e2:0d:17:84:36:f6:99:f5:b8:71:b4: d5:be:93:b8:38:90:cb:fc:3f:c9:b6:8a:dc:a2:99: 38:e9:9e:e9:fb:c2:e0:46:ab:cf:f6:b6:fe:2c:e3: c3:13:e8:09:aa:16:c9:b4:e7:c0:16:5e:36:2d:5f: 26:15:c1:86:83:6a:c9:8f:d0:c9:20:2e:11:56:97: 4c:0d:6c:44:ad:93:f6:08:49:c8:6f:dc:1c:12:14: 9a:b0:dc:5b:85:74:77:c0:00:13:6c:c1:bc:c3:4d: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1E:09:8A:1E:CD:27:98:93:22:DE:28:F4:8C:3C:D5:C1:20:BA:61 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7e:7c:9f:24:b3:61:18:52:55:76:06:99:8a:e1:ae:b7:14: d0:62:8c:16:e7:08:cc:c3:47:22:6a:cf:c4:30:6b:25:d8:90: d8:38:f1:f0:1a:a8:8b:77:18:2d:c7:08:81:8a:29:41:17:94: 59:be:55:02:b6:8a:ce:f1:c1:81:f2:35:2b:2d:e1:a7:68:ef: c8:f5:d9:d3:b5:3b:25:1d:e6:c2:5a:05:f8:1a:7b:47:36:a1: 6f:d9:3d:dc:c1:69:06:ba:a2:4f:e5:ab:09:47:d0:74:91:cf: 12:84:40:78:18:0b:b4:66:e7:07:95:2b:a6:2b:fc:ad:72:f0: e8:23:ae:ee:ce:20:bc:ce:1a:aa:3b:a5:57:ae:f0:e2:28:51: 02:30:34:be:15:02:7b:59:60:12:2d:9b:8f:26:3f:77:2e:1c: d0:9a:c2:e7:8f:0b:01:4d:46:a0:b2:a7:96:e2:c7:2b:db:01: 6f:d3:cf:05:b3:2f:10:99:2e:2b:47:c4:0f:71:97:a6:65:36: ea:ed:13:0c:31:82:46:89:d7:b0:73:31:55:38:8a:d7:03:f3: 11:5c:2b:01:6a:c7:ab:a8:7f:87:00:69:36:da:5c:0b:35:fd: e1:11:7c:0a:7a:bc:33:b0:20:ee:f8:f8:80:05:65:44:a6:56: 98:33:81:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR9KCcsqQDElTmxJ+RHtKPSbZ5UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA3MjkwODU4NTdaFw0yNjA3MzAxMTM0NTdaMDMxMTAvBgNV BAMTKDlDMUUwOThBMUVDRDI3OTg5MzIyREUyOEY0OEMzQ0Q1QzEyMEJBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmg2gEWfSh2ni4Pr2pA18y+kC spM8phZftDF3XBbMFORntC+QsP58BrQq4wTQLwwkDUXLXSlZtlzeNEApM4/Ve13e VhzwWoDxfUOIhhZxKr8EML4mCKMGZJdDR4dIkIg5VrfdOka1nrxwizxWVpcSomM5 3Xp5aik+fhWL37MQ8LxIwS0ibx0xPQLNnNop8IKgohOiiakjlMziDReENvaZ9bhx tNW+k7g4kMv8P8m2ityimTjpnun7wuBGq8/2tv4s48MT6AmqFsm058AWXjYtXyYV wYaDasmP0MkgLhFWl0wNbEStk/YISchv3BwSFJqw3FuFdHfAABNswbzDTW1XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnB4Jih7NJ5iTIt4o9Iw81cEgumEwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhH58nySzYRhS VXYGmYrhrrcU0GKMFucIzMNHImrPxDBrJdiQ2Djx8Bqoi3cYLccIgYopQReUWb5V AraKzvHBgfI1Ky3hp2jvyPXZ07U7JR3mwloF+Bp7Rzahb9k93MFpBrqiT+WrCUfQ dJHPEoRAeBgLtGbnB5Urpiv8rXLw6COu7s4gvM4aqjulV67w4ihRAjA0vhUCe1lg Ei2bjyY/dy4c0JrC548LAU1GoLKnluLHK9sBb9PPBbMvEJkuK0fED3GXpmU26u0T DDGCRonXsHMxVTiK1wPzEVwrAWrHq6h/hwBpNtpcCzX94RF8Cnq8M7Ag7vj4gAVl RKZWmDOB1A== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:39 2026 by rpki-client