$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft (raw, json) Hash identifier: GT5LVjw9CNuYaAdJT8Oih9Toc+fSOJUX02MfYYkwcEA= Subject key identifier: A6:5A:A0:24:FF:96:28:AA:5F:B8:8D:17:84:2E:AB:83:14:79:E4:CB Authority key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Certificate issuer: /CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Certificate serial: 0DB13097D0114DDCF1DECBA0E888C347923C1051 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft Manifest number: 45 Signing time: Mon 12 Oct 2026 13:37:00 +0000 Manifest this update: Mon 12 Oct 2026 13:32:00 +0000 Manifest next update: Thu 15 Oct 2026 18:42:00 +0000 Files and hashes: 1: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl (hash: zvYQ6Bjb9JDn/hhc7RnyqJ7Vyxs4RQC9AUFD05xNt4w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b1:30:97:d0:11:4d:dc:f1:de:cb:a0:e8:88:c3:47:92:3c:10:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Validity Not Before: Oct 12 13:32:00 2026 GMT Not After : Oct 15 18:42:00 2026 GMT Subject: CN=A65AA024FF9628AA5FB88D17842EAB831479E4CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:d5:02:d3:80:4d:25:9e:92:70:2f:a5:dd: 8a:7e:27:25:ab:6c:48:04:5f:3a:a3:40:35:68:9c: 77:ad:97:8e:6f:65:0c:23:7b:2e:62:53:7b:5c:fe: 50:e8:11:34:c6:84:62:f6:5d:80:7d:e7:e9:1e:ff: 8f:f6:e1:23:15:89:3a:ee:88:a0:17:4f:ee:ee:73: c4:5b:06:0f:56:1c:64:da:7f:6a:ab:6b:15:49:b7: 0e:0b:25:31:44:00:0d:d6:a8:69:1f:6a:c6:a1:8b: b0:3d:6d:a9:09:11:8a:ec:4e:ec:6e:d2:23:6f:ec: f1:1b:4f:b5:2e:31:de:e1:e4:03:5a:7b:a3:b7:9a: f2:59:ea:ce:6a:ff:fa:aa:ec:0a:c2:67:7c:e2:10: 65:48:ef:f1:fa:b0:f3:c0:b7:05:72:7a:06:d8:3a: 1f:f9:4c:41:f0:bf:b8:77:aa:2c:a9:d0:48:ea:f9: b1:dd:ef:08:68:ea:78:48:a7:ce:e5:4f:fe:d5:54: 0b:03:ba:b4:b5:2a:b1:9b:c5:07:31:cc:07:89:83: 5a:14:1c:6e:81:0e:75:f0:56:2a:e7:1e:65:00:02: 81:a3:60:8a:6c:72:a1:71:00:35:56:48:69:2a:cc: c1:ca:b9:78:e9:d1:a2:d2:30:b3:0e:19:ed:0d:a4: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5A:A0:24:FF:96:28:AA:5F:B8:8D:17:84:2E:AB:83:14:79:E4:CB X509v3 Authority Key Identifier: keyid:29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:37:04:7d:a9:d1:2d:2a:dc:16:ef:4a:f0:4e:77:51:67:99: 55:53:bb:9d:65:b7:a5:a3:8f:a3:1f:1c:47:85:3e:6b:02:1c: 11:91:d6:ef:92:c7:47:62:dc:00:b2:85:fb:2a:17:0d:7c:81: ed:50:ad:0f:af:97:1e:6c:7a:2c:24:5c:fa:c4:45:66:97:c3: aa:33:ba:e0:a1:85:f6:d7:83:91:26:2f:a1:bf:36:8f:16:d9: b3:b2:80:ac:84:e9:b2:11:f0:1a:33:69:68:2b:49:bb:50:3b: 14:7a:41:fa:72:1f:18:a0:e4:7a:0c:c7:0d:7b:78:05:e6:6e: 63:43:34:88:1c:e9:ba:39:0a:5d:63:3a:d7:a7:cf:54:2b:6c: 97:e0:cb:37:bf:86:8e:82:ab:84:33:4e:ae:b8:b3:4c:44:5e: 04:9a:50:84:98:0a:d9:db:39:e4:71:13:e5:e1:57:35:f5:ab: d4:97:94:35:9f:cd:ba:06:e6:7e:30:b1:b7:40:87:2c:88:63: 1b:2b:c2:d2:74:ff:b7:11:16:d6:2b:2f:02:61:73:f2:cd:d1: 7f:c7:74:03:cb:85:2b:53:fd:26:7e:20:db:06:1f:18:58:6c: e8:28:2a:1a:2d:01:05:cf:75:17:48:78:a0:68:b6:f3:f8:ee: 42:49:00:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDbEwl9ARTdzx3sug6IjDR5I8EFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5 QzJFNTkyMzAeFw0yNjEwMTIxMzMyMDBaFw0yNjEwMTUxODQyMDBaMDMxMTAvBgNV BAMTKEE2NUFBMDI0RkY5NjI4QUE1RkI4OEQxNzg0MkVBQjgzMTQ3OUU0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6m9UC04BNJZ6ScC+l3Yp+JyWr bEgEXzqjQDVonHetl45vZQwjey5iU3tc/lDoETTGhGL2XYB95+ke/4/24SMViTru iKAXT+7uc8RbBg9WHGTaf2qraxVJtw4LJTFEAA3WqGkfasahi7A9bakJEYrsTuxu 0iNv7PEbT7UuMd7h5ANae6O3mvJZ6s5q//qq7ArCZ3ziEGVI7/H6sPPAtwVyegbY Oh/5TEHwv7h3qiyp0Ejq+bHd7who6nhIp87lT/7VVAsDurS1KrGbxQcxzAeJg1oU HG6BDnXwVirnHmUAAoGjYIpscqFxADVWSGkqzMHKuXjp0aLSMLMOGe0NpF9ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUplqgJP+WKKpfuI0XhC6rgxR55MswHwYDVR0j BBgwFoAUKbix/1Y0OlME/76lJP6bc5wuWSMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MjU5NTA5NDU0MTU2NTk5Ny8wLzI5QjhCMUZGNTYzNDNBNTMwNEZGQkVBNTI0RkU5 QjczOUMyRTU5MjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMC8yOUI4QjFGRjU2MzQz QTUzMDRGRkJFQTUyNEZFOUI3MzlDMkU1OTIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADcEfanRLSrc Fu9K8E53UWeZVVO7nWW3paOPox8cR4U+awIcEZHW75LHR2LcALKF+yoXDXyB7VCt D6+XHmx6LCRc+sRFZpfDqjO64KGF9teDkSYvob82jxbZs7KArITpshHwGjNpaCtJ u1A7FHpB+nIfGKDkegzHDXt4BeZuY0M0iBzpujkKXWM616fPVCtsl+DLN7+GjoKr hDNOrrizTEReBJpQhJgK2ds55HET5eFXNfWr1JeUNZ/NugbmfjCxt0CHLIhjGyvC 0nT/txEW1isvAmFz8s3Rf8d0A8uFK1P9Jn4g2wYfGFhs6CgqGi0BBc91F0h4oGi2 8/juQkkArw== -----END CERTIFICATE-----Generated at Wed Oct 14 08:48:28 2026 by rpki-client