$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: 2p3n8/U4ECGocWsgDMb2l2uh7MZb7o6Kh0W3mZKG5ds= Subject key identifier: 21:57:5C:5C:88:EF:6A:F4:41:D5:F5:8B:34:8C:D0:59:62:DD:D1:E6 Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 0EFEF8AB70B0F07E8F8EEB46CDCB6581A1EAECBD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: 05 Signing time: Mon 13 Apr 2026 08:29:17 +0000 Manifest this update: Mon 13 Apr 2026 08:24:17 +0000 Manifest next update: Tue 14 Apr 2026 10:32:17 +0000 Files and hashes: 1: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: 5d2/qc5X9/ZnEmoO574eGJBWyZfdriElpxodA0UWbyk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fe:f8:ab:70:b0:f0:7e:8f:8e:eb:46:cd:cb:65:81:a1:ea:ec:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Apr 13 08:24:17 2026 GMT Not After : Apr 14 10:32:17 2026 GMT Subject: CN=21575C5C88EF6AF441D5F58B348CD05962DDD1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:58:06:49:ff:31:82:37:47:8c:6b:cf:25: 07:1c:9b:8a:f3:78:95:cb:76:a0:20:a6:7e:55:26: c7:cd:26:92:ec:8a:6f:24:38:76:93:a5:d2:19:f9: e5:0d:3d:a1:73:59:a9:04:56:7f:82:1d:df:cc:f8: 2d:24:fc:af:6b:e9:0f:49:ba:50:f6:f5:87:5b:13: 18:8e:ac:ae:18:fa:4f:d2:a3:99:20:f9:87:47:59: ff:a0:80:a5:76:da:d0:63:f5:2e:02:5d:22:ea:1c: 7e:1a:62:7c:bf:7e:80:ee:70:a5:e7:98:01:58:10: 5c:b4:ed:48:90:3f:e1:fe:12:eb:54:70:55:9c:31: f9:4a:06:20:75:88:2f:c0:a4:b5:95:25:fc:6a:6f: 7b:64:5c:a8:49:97:a2:e6:3b:b8:11:10:55:6f:75: 17:09:7b:0b:88:17:d0:6d:d3:52:4a:54:b3:9f:56: df:21:b0:52:94:91:20:15:c9:ff:40:85:38:9a:93: 19:23:61:29:1c:74:b0:a8:c2:2b:9b:52:b8:e6:a6: d8:ff:ff:58:ef:c4:e8:2b:b5:c8:44:f2:92:1a:30: 0d:81:fa:68:bf:cb:5b:a2:eb:ea:bd:22:26:d6:17: b1:e3:f6:80:93:a8:ef:85:85:3f:0b:ca:d7:bb:e1: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:57:5C:5C:88:EF:6A:F4:41:D5:F5:8B:34:8C:D0:59:62:DD:D1:E6 X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0e:97:ad:68:ed:60:48:e6:31:25:2d:bc:d1:e9:bb:0c:32: 76:41:e0:82:e5:58:3a:32:68:5c:6b:f5:81:c0:cd:36:23:8b: b5:7e:4a:d4:f5:b5:ba:e8:13:d0:3f:cb:cc:20:47:52:c6:50: 0d:3f:da:29:c2:73:90:4f:d7:c0:7f:66:fd:75:84:3c:64:5c: ee:6f:a2:9b:34:e4:43:5f:60:2f:5f:83:92:ef:b4:ea:dd:c9: d8:7e:dd:96:3d:52:b6:47:17:42:86:25:ac:68:9f:58:db:31: 55:c1:7c:cf:7f:63:5d:45:ee:4e:c4:92:18:99:41:10:80:a8: 97:ec:6c:06:51:c9:ba:2d:50:a2:f4:c7:e5:5d:a8:17:10:5b: 7b:20:12:92:28:56:c2:3f:e0:1e:c8:4a:5b:b8:7f:62:a9:df: 7a:ad:f8:12:d1:b3:0e:a7:e6:12:8b:e3:32:9a:d2:4a:81:9c: 43:33:4e:e0:ca:0d:92:e7:14:3d:40:31:d1:ef:8d:2c:c7:2c: 75:ef:af:6b:4b:80:a8:b0:72:e4:a8:4b:c2:d5:ae:a9:76:e0: b4:f9:b8:32:94:4c:a1:6d:96:59:2e:92:b4:2a:ee:cc:28:e0: 01:3d:4f:e6:42:41:d4:2a:86:7d:54:7e:a3:06:27:0c:46:e3: 1e:12:46:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDv74q3Cw8H6PjutGzctlgaHq7L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjA0MTMwODI0MTdaFw0yNjA0MTQxMDMyMTdaMDMxMTAvBgNV BAMTKDIxNTc1QzVDODhFRjZBRjQ0MUQ1RjU4QjM0OENEMDU5NjJEREQxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy91gGSf8xgjdHjGvPJQccm4rz eJXLdqAgpn5VJsfNJpLsim8kOHaTpdIZ+eUNPaFzWakEVn+CHd/M+C0k/K9r6Q9J ulD29YdbExiOrK4Y+k/So5kg+YdHWf+ggKV22tBj9S4CXSLqHH4aYny/foDucKXn mAFYEFy07UiQP+H+EutUcFWcMflKBiB1iC/ApLWVJfxqb3tkXKhJl6LmO7gREFVv dRcJewuIF9Bt01JKVLOfVt8hsFKUkSAVyf9AhTiakxkjYSkcdLCowiubUrjmptj/ /1jvxOgrtchE8pIaMA2B+mi/y1ui6+q9IibWF7Hj9oCTqO+FhT8Lyte74XlVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIVdcXIjvavRB1fWLNIzQWWLd0eYwHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA6XrWjtYEjm MSUtvNHpuwwydkHgguVYOjJoXGv1gcDNNiOLtX5K1PW1uugT0D/LzCBHUsZQDT/a KcJzkE/XwH9m/XWEPGRc7m+imzTkQ19gL1+Dku+06t3J2H7dlj1StkcXQoYlrGif WNsxVcF8z39jXUXuTsSSGJlBEICol+xsBlHJui1QovTH5V2oFxBbeyASkihWwj/g HshKW7h/Yqnfeq34EtGzDqfmEovjMprSSoGcQzNO4MoNkucUPUAx0e+NLMcsde+v a0uAqLBy5KhLwtWuqXbgtPm4MpRMoW2WWS6StCruzCjgAT1P5kJB1CqGfVR+owYn DEbjHhJG9g== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:43 2026 by rpki-client