$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: ctkbRvvWWUgGvbgTV9FPRxa6f7/BAquG84nFAqSxEwg= Subject key identifier: 76:A7:70:49:5A:4C:05:49:1C:2E:19:0D:BB:CF:01:4A:4C:A7:05:1D Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 1A05270C56FF67082A32999B8CA0BEF1BC08E423 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 88 Signing time: Tue 21 Jul 2026 17:44:12 +0000 Manifest this update: Tue 21 Jul 2026 17:39:12 +0000 Manifest next update: Wed 22 Jul 2026 21:11:12 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: mJlLI7iiT9QoEiRIqu6IizL2wC01emsa62zJDh5VlMg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:05:27:0c:56:ff:67:08:2a:32:99:9b:8c:a0:be:f1:bc:08:e4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Jul 21 17:39:12 2026 GMT Not After : Jul 22 21:11:12 2026 GMT Subject: CN=76A770495A4C05491C2E190DBBCF014A4CA7051D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:3d:87:c9:1f:c0:a6:f7:f3:1c:17:a8:1c: ed:0d:57:59:68:2d:3b:44:94:ca:14:3f:be:75:79: 54:c8:43:69:3e:c7:52:9c:2c:7d:a3:b4:82:3a:9f: 2e:81:ca:2b:92:18:42:c3:e2:4f:76:40:57:e0:3c: 3e:fc:f7:90:1f:5d:e8:1d:6b:ed:f9:16:f6:28:7a: 4f:63:55:b1:64:5a:8a:e3:50:5d:29:3a:26:ac:2c: 91:d7:79:db:22:7c:3a:a2:55:3b:ba:55:4b:cd:7b: f2:30:7c:69:eb:89:14:4f:f1:70:97:cb:e7:d8:86: 76:6c:a6:46:29:8e:b1:bb:9c:62:0e:f6:4d:3c:6c: e9:14:8c:c7:ac:79:01:a2:72:19:90:c4:82:3e:ab: b4:78:71:66:4c:ad:4b:d4:ea:be:b8:de:b5:0a:4b: a1:c6:98:e9:cd:d7:62:6c:df:8b:e1:ea:7d:0c:83: 89:4b:09:9b:b1:dd:18:76:23:a6:b3:da:95:fb:e7: b0:17:74:54:0c:34:99:6e:e7:c9:ff:57:b9:be:07: ce:53:a0:b7:1b:b9:c5:57:8a:65:3a:d0:6f:93:c3: c3:16:1d:d8:7d:33:77:37:03:7d:52:70:b6:91:88: 8b:44:03:de:86:92:fc:e5:59:38:04:56:52:f3:cd: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A7:70:49:5A:4C:05:49:1C:2E:19:0D:BB:CF:01:4A:4C:A7:05:1D X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5c:ea:51:b7:e4:60:cd:29:bf:4c:4e:c9:1b:3a:e2:fe:92: 59:79:b1:79:ea:79:5a:18:0d:63:4e:78:ff:9d:d7:28:09:0a: 1e:fc:28:c6:30:eb:fe:d7:6b:cf:c4:2e:d0:15:cf:a9:98:b1: c2:9c:42:64:29:ae:07:2b:e5:21:95:89:e5:8a:7c:ca:21:fe: f4:fd:b8:7e:58:2a:55:2b:b5:11:a0:83:67:6f:73:27:7c:60: 58:e5:06:dd:3c:80:99:cb:90:16:cb:42:34:5a:41:04:86:c4: d1:6c:46:7a:00:98:ed:e5:d3:c8:a3:7e:ed:a5:47:77:8e:e6: c2:f1:73:0f:f4:75:c6:a8:83:79:c1:58:47:d9:31:70:3f:e4: c4:8d:7f:78:4d:c7:b2:fb:9b:1a:10:88:2d:4e:7c:f0:b4:04: df:79:61:21:f0:af:e3:7b:0e:00:45:ed:fb:3b:42:64:84:7a: 5d:bb:91:25:37:a5:ee:f2:ba:cf:6d:89:7d:64:a1:6d:3f:0d: c8:a5:28:88:74:23:67:ff:57:7d:c8:18:62:4f:4c:ec:6b:e0: 27:45:4d:10:7a:7e:7d:7c:9e:5a:d8:41:b2:1b:3a:18:76:e5: df:ff:c9:52:1b:0e:95:2f:7f:43:55:73:00:b5:06:5d:73:b9: f6:d8:12:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGgUnDFb/ZwgqMpmbjKC+8bwI5CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA3MjExNzM5MTJaFw0yNjA3MjIyMTExMTJaMDMxMTAvBgNV BAMTKDc2QTc3MDQ5NUE0QzA1NDkxQzJFMTkwREJCQ0YwMTRBNENBNzA1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7D2HyR/ApvfzHBeoHO0NV1lo LTtElMoUP751eVTIQ2k+x1KcLH2jtII6ny6ByiuSGELD4k92QFfgPD7895AfXegd a+35FvYoek9jVbFkWorjUF0pOiasLJHXedsifDqiVTu6VUvNe/IwfGnriRRP8XCX y+fYhnZspkYpjrG7nGIO9k08bOkUjMeseQGichmQxII+q7R4cWZMrUvU6r643rUK S6HGmOnN12Js34vh6n0Mg4lLCZux3Rh2I6az2pX757AXdFQMNJlu58n/V7m+B85T oLcbucVXimU60G+Tw8MWHdh9M3c3A31ScLaRiItEA96GkvzlWTgEVlLzzckrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdqdwSVpMBUkcLhkNu88BSkynBR0wHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1zqUbfkYM0p v0xOyRs64v6SWXmxeep5WhgNY054/53XKAkKHvwoxjDr/tdrz8Qu0BXPqZixwpxC ZCmuByvlIZWJ5Yp8yiH+9P24flgqVSu1EaCDZ29zJ3xgWOUG3TyAmcuQFstCNFpB BIbE0WxGegCY7eXTyKN+7aVHd47mwvFzD/R1xqiDecFYR9kxcD/kxI1/eE3Hsvub GhCILU588LQE33lhIfCv43sOAEXt+ztCZIR6XbuRJTel7vK6z22JfWShbT8NyKUo iHQjZ/9XfcgYYk9M7GvgJ0VNEHp+fXyeWthBshs6GHbl3//JUhsOlS9/Q1VzALUG XXO59tgSew== -----END CERTIFICATE-----Generated at Wed Jul 22 02:42:40 2026 by rpki-client