$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: KbalTtVET5SWtMz3ImT6fP0Imx9T3qUNtYOG2hCLz+c= Subject key identifier: 52:42:A9:33:97:32:24:55:9E:81:67:50:7F:6C:6E:48:6E:B0:DE:F8 Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 99F3B4FFF09DCE9ED755DD9A51AF718F743880 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: C0 Signing time: Fri 28 Aug 2026 06:48:09 +0000 Manifest this update: Fri 28 Aug 2026 06:43:09 +0000 Manifest next update: Mon 31 Aug 2026 17:24:09 +0000 Files and hashes: 1: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) 2: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) 3: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) 4: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 5: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 6: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) 7: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 8: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 9: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 10: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=) 11: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 12: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 13: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: HbhtLUpy7XSeEpfGeGP2II6OTAT27Jl6OEVk/yy5oXA=) 14: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99:f3:b4:ff:f0:9d:ce:9e:d7:55:dd:9a:51:af:71:8f:74:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Aug 28 06:43:09 2026 GMT Not After : Aug 31 17:24:09 2026 GMT Subject: CN=5242A933973224559E8167507F6C6E486EB0DEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:c5:3a:df:9a:4a:fa:ed:b1:4a:8a:74:55: 12:35:1e:21:07:8c:7c:ef:63:3a:bd:da:c2:73:8b: 41:7b:46:2e:8b:9b:e9:99:9b:20:65:8e:b0:f7:3d: 66:b7:c3:3f:5d:64:50:81:a7:f8:f3:b8:45:5f:b1: 12:1a:96:85:f2:16:40:57:ac:d4:cc:bb:d2:82:60: 86:d9:a3:9c:05:21:86:9d:e5:58:d1:43:68:dd:a2: bb:f4:8a:0e:e9:12:bb:13:80:eb:51:ba:67:d2:d4: 15:fb:e4:bb:35:f7:fc:e0:9d:40:cd:9f:d8:63:bf: 2b:c2:c4:94:38:3d:c8:46:46:4e:ba:7b:73:35:83: 0d:d3:33:48:49:3d:e3:56:aa:2b:63:8f:74:c8:75: ae:e4:d7:e1:2b:f3:49:41:73:18:c4:0f:77:78:14: a2:24:3f:d2:9d:e7:3c:4c:a8:ae:a5:4b:b6:16:0d: ca:3a:d4:3e:68:d4:f5:84:38:87:b6:b2:dd:72:50: a0:53:84:62:4d:73:ae:e0:e2:e2:4e:35:30:66:0e: 12:23:ab:93:6c:c5:f2:e2:81:cc:29:7d:a8:f6:16: bc:f7:5b:5b:73:54:7b:9d:88:3c:8f:d5:63:13:64: 5b:54:89:21:c1:17:00:1d:ed:92:df:88:12:dd:d4: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:A9:33:97:32:24:55:9E:81:67:50:7F:6C:6E:48:6E:B0:DE:F8 X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ba:8c:3a:52:9d:88:f7:85:92:be:a2:da:4f:65:61:dc:88: ac:fb:18:96:d0:f6:bc:a9:ee:98:c4:f6:10:c5:ba:b2:c6:ca: 7d:b4:5c:b9:4e:57:7d:ff:81:4f:43:6a:f3:a4:4c:8b:75:72: c4:ff:8e:cb:bb:81:0e:c7:93:1d:1b:42:c9:78:0b:12:e8:c0: ff:eb:da:74:c9:fd:6e:a1:68:75:bc:18:b1:83:c7:7a:82:d9: 09:05:25:ce:99:52:2c:6e:83:5c:18:b0:88:d7:af:a0:02:21: a4:63:f3:6a:c3:c8:f4:e5:66:a8:a8:80:8e:4e:7d:01:3b:ac: 47:9d:47:cc:e8:0c:c1:f0:ad:08:ed:db:67:09:d0:26:e5:7b: 23:ed:cd:59:c9:39:0e:a2:97:1c:f4:3e:02:5a:50:99:9d:39: 54:67:56:13:06:72:4b:f4:1e:4e:64:fb:58:f3:b2:a0:fb:59: 93:5d:02:e0:81:b7:c2:2e:70:66:d1:8d:3c:87:f3:5d:51:60: 01:c8:89:98:be:d7:ca:88:c7:58:a8:59:4a:f1:de:c3:b0:d5: c6:2d:db:f3:38:b6:a1:46:20:45:82:0b:26:c5:73:72:b5:4a: 53:8f:9c:e4:78:c0:cf:55:70:34:52:ec:ba:0e:fc:25:e3:a3: e3:1b:02:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAJnztP/wnc6e11XdmlGvcY90OIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjA4MjgwNjQzMDlaFw0yNjA4MzExNzI0MDlaMDMxMTAvBgNV BAMTKDUyNDJBOTMzOTczMjI0NTU5RTgxNjc1MDdGNkM2RTQ4NkVCMERFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC488U635pK+u2xSop0VRI1HiEH jHzvYzq92sJzi0F7Ri6Lm+mZmyBljrD3PWa3wz9dZFCBp/jzuEVfsRIaloXyFkBX rNTMu9KCYIbZo5wFIYad5VjRQ2jdorv0ig7pErsTgOtRumfS1BX75Ls19/zgnUDN n9hjvyvCxJQ4PchGRk66e3M1gw3TM0hJPeNWqitjj3TIda7k1+Er80lBcxjED3d4 FKIkP9Kd5zxMqK6lS7YWDco61D5o1PWEOIe2st1yUKBThGJNc67g4uJONTBmDhIj q5NsxfLigcwpfaj2Frz3W1tzVHudiDyP1WMTZFtUiSHBFwAd7ZLfiBLd1GYRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUkKpM5cyJFWegWdQf2xuSG6w3vgwHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrqMOlKdiPeF kr6i2k9lYdyIrPsYltD2vKnumMT2EMW6ssbKfbRcuU5Xff+BT0Nq86RMi3VyxP+O y7uBDseTHRtCyXgLEujA/+vadMn9bqFodbwYsYPHeoLZCQUlzplSLG6DXBiwiNev oAIhpGPzasPI9OVmqKiAjk59ATusR51HzOgMwfCtCO3bZwnQJuV7I+3NWck5DqKX HPQ+AlpQmZ05VGdWEwZyS/QeTmT7WPOyoPtZk10C4IG3wi5wZtGNPIfzXVFgAciJ mL7XyojHWKhZSvHew7DVxi3b8zi2oUYgRYILJsVzcrVKU4+c5HjAz1VwNFLsug78 JeOj4xsClg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:45 2026 by rpki-client