$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft (raw, json) Hash identifier: UEOc8XYLTMtwgsNAGFBeUdQ0FgVuBO8vhbrILJnaFLM= Subject key identifier: DA:2E:10:4B:25:B5:0A:1B:A3:E1:26:F9:5E:0A:90:72:92:1F:9E:1C Authority key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Certificate issuer: /CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Certificate serial: 20A85CEE01F88BB2C71B103DD85747C2953B8683 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft Manifest number: 08 Signing time: Tue 28 Jul 2026 14:37:00 +0000 Manifest this update: Tue 28 Jul 2026 14:32:00 +0000 Manifest next update: Wed 29 Jul 2026 18:09:00 +0000 Files and hashes: 1: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl (hash: 2t1IZ7ygOSxkY1YwnZcpNV7Z+tUJQQeI1BNgR4lMG4g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a8:5c:ee:01:f8:8b:b2:c7:1b:10:3d:d8:57:47:c2:95:3b:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Validity Not Before: Jul 28 14:32:00 2026 GMT Not After : Jul 29 18:09:00 2026 GMT Subject: CN=DA2E104B25B50A1BA3E126F95E0A9072921F9E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:0e:6f:74:57:ab:7f:e3:9d:f2:b5:64:9c: 3b:17:0b:ac:61:42:e1:c0:89:db:35:ab:de:2e:cd: d7:6a:21:d3:90:28:50:a1:1c:7c:67:53:85:73:74: 6a:f2:dd:37:6b:0f:54:0b:37:95:94:f6:1d:d7:d9: 8c:ff:ca:70:8f:db:27:e5:bd:41:bc:0d:94:88:08: 2b:37:b3:f7:e8:8c:8f:d2:ba:6d:94:35:c3:8d:66: 75:16:31:2f:8e:f9:6e:36:ca:bb:4c:c8:f4:53:53: 0f:33:59:77:6b:8c:cb:b4:56:df:8b:b7:b5:2c:fb: dd:43:49:4b:de:da:37:7d:d7:2c:2a:6f:89:7b:49: 0d:93:50:90:9a:fc:25:89:c0:20:ba:f7:17:59:13: 03:54:ff:a0:68:b8:52:e1:8c:e8:ca:3b:b8:5c:ac: 48:97:14:35:82:5f:3f:cc:09:1a:86:d0:0e:1e:b0: f7:f6:71:74:25:7b:2c:1f:31:c7:aa:62:a8:fd:5b: 26:5a:cd:44:95:91:5d:d9:b4:a5:e1:9d:53:bc:a2: 2c:d7:87:b5:cc:29:6a:aa:35:f8:15:19:4e:f7:ae: 39:a1:4a:d8:20:68:f5:df:d5:f9:f3:75:48:88:31: 05:9f:97:0e:d1:35:a2:fb:8f:c1:6c:53:1b:4e:d9: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2E:10:4B:25:B5:0A:1B:A3:E1:26:F9:5E:0A:90:72:92:1F:9E:1C X509v3 Authority Key Identifier: keyid:29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b8:47:6a:35:3b:e4:20:2b:97:43:57:72:62:b4:97:42:83: 2e:f8:96:42:12:8f:f1:34:a9:b0:5d:b0:7c:d2:98:4f:46:b8: 6d:ec:fe:95:27:5d:ff:f7:f7:19:2a:57:f5:29:96:e8:b9:d0: 27:8e:87:60:3b:2b:05:ba:f7:01:da:f3:fd:9f:3a:ca:d2:f1: aa:ab:72:33:89:6a:95:cc:60:90:42:f9:bd:b3:1d:54:c8:95: 2d:83:99:43:06:83:12:c2:43:f5:e6:3d:e2:95:95:31:2a:c2: 13:7d:ad:eb:59:ca:22:c9:42:1c:ca:a7:2c:c2:f6:46:d7:b6: d2:50:78:2f:57:54:bf:13:42:63:b9:b2:98:4a:15:6a:33:04: f1:62:33:aa:fd:c7:5f:09:c2:2a:08:e9:8c:0e:ee:2b:45:34: 95:99:6d:23:7c:67:11:a6:4e:a2:ab:dc:f5:7c:6b:57:28:53: 8f:76:f2:24:fe:d2:f8:2a:4d:b1:bf:66:67:d4:e3:1b:82:8f: 89:49:da:f9:5c:41:6e:42:9a:4d:1f:fc:63:29:f8:f5:88:a5: 16:2b:e9:81:32:9b:f9:56:41:04:9b:e0:c6:3d:f1:d6:c7:fb: 76:58:7a:f6:c9:34:ab:05:76:6d:c6:3f:d7:ea:c4:63:96:9e: ea:f6:b4:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIKhc7gH4i7LHGxA92FdHwpU7hoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5 QzJFNTkyMzAeFw0yNjA3MjgxNDMyMDBaFw0yNjA3MjkxODA5MDBaMDMxMTAvBgNV BAMTKERBMkUxMDRCMjVCNTBBMUJBM0UxMjZGOTVFMEE5MDcyOTIxRjlFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMQ5vdFerf+Od8rVknDsXC6xh QuHAids1q94uzddqIdOQKFChHHxnU4VzdGry3TdrD1QLN5WU9h3X2Yz/ynCP2yfl vUG8DZSICCs3s/fojI/Sum2UNcONZnUWMS+O+W42yrtMyPRTUw8zWXdrjMu0Vt+L t7Us+91DSUve2jd91ywqb4l7SQ2TUJCa/CWJwCC69xdZEwNU/6BouFLhjOjKO7hc rEiXFDWCXz/MCRqG0A4esPf2cXQleywfMceqYqj9WyZazUSVkV3ZtKXhnVO8oizX h7XMKWqqNfgVGU73rjmhStggaPXf1fnzdUiIMQWflw7RNaL7j8FsUxtO2U0tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2i4QSyW1Chuj4Sb5XgqQcpIfnhwwHwYDVR0j BBgwFoAUKbix/1Y0OlME/76lJP6bc5wuWSMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MjU5NTA5NDU0MTU2NTk5Ny8wLzI5QjhCMUZGNTYzNDNBNTMwNEZGQkVBNTI0RkU5 QjczOUMyRTU5MjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMC8yOUI4QjFGRjU2MzQz QTUzMDRGRkJFQTUyNEZFOUI3MzlDMkU1OTIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrhHajU75CAr l0NXcmK0l0KDLviWQhKP8TSpsF2wfNKYT0a4bez+lSdd//f3GSpX9SmW6LnQJ46H YDsrBbr3Adrz/Z86ytLxqqtyM4lqlcxgkEL5vbMdVMiVLYOZQwaDEsJD9eY94pWV MSrCE32t61nKIslCHMqnLML2Rte20lB4L1dUvxNCY7mymEoVajME8WIzqv3HXwnC KgjpjA7uK0U0lZltI3xnEaZOoqvc9XxrVyhTj3byJP7S+CpNsb9mZ9TjG4KPiUna +VxBbkKaTR/8Yyn49YilFivpgTKb+VZBBJvgxj3x1sf7dlh69sk0qwV2bcY/1+rE Y5ae6va0UQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:24:16 2026 by rpki-client