$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json) Hash identifier: NfF8KchdhYz8Y+Bt420z2GT0fLtKcWr4trkiSt66qgA= Subject key identifier: 65:92:CA:8F:63:E0:EF:5B:90:E0:FF:32:94:FA:FA:2B:9D:2F:A9:EF Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Certificate serial: 3BD0B6621B33A44307A661B118F86FF2429EAAAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft Manifest number: D5 Signing time: Thu 15 Oct 2026 17:06:52 +0000 Manifest this update: Thu 15 Oct 2026 17:01:52 +0000 Manifest next update: Sun 18 Oct 2026 17:15:52 +0000 Files and hashes: 1: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=) 2: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=) 3: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=) 4: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=) 5: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: TAxhU7rU9s26NK/26Sxp3VryBt19dQIgFOSWPvy7wsw=) 6: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=) 7: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=) 8: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=) 9: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=) 10: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=) 11: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=) 12: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=) 13: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=) 14: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:b6:62:1b:33:a4:43:07:a6:61:b1:18:f8:6f:f2:42:9e:aa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Validity Not Before: Oct 15 17:01:52 2026 GMT Not After : Oct 18 17:15:52 2026 GMT Subject: CN=6592CA8F63E0EF5B90E0FF3294FAFA2B9D2FA9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:7a:fa:e9:b5:a0:79:bd:9e:16:54:0e:00: 7c:0a:fc:18:02:85:3e:f6:89:f5:1f:95:e3:fa:98: 38:1c:e2:70:de:2d:fe:ff:2f:93:ae:83:b8:9b:c1: 70:da:cc:a2:69:56:69:77:87:e7:13:ea:11:07:50: 29:9f:31:c4:af:0a:37:9d:9b:52:e3:7b:2a:ab:91: 74:13:18:68:10:79:a8:b8:d2:2f:0f:53:8a:b5:d7: 39:fd:a5:c8:42:5e:3b:f8:85:d4:66:95:f0:e6:7f: a9:87:59:27:f3:51:76:ec:10:2d:9a:c6:39:31:f4: 45:46:58:7e:9b:44:4c:fc:7a:36:69:d1:54:4a:91: 47:1b:64:f3:ee:cf:43:9d:e2:b0:58:8e:ff:90:2c: 4b:1a:d1:48:7c:26:c1:e2:2f:c0:fe:bb:66:60:64: 0c:73:aa:a9:24:cc:f5:f7:96:f6:3a:8a:40:74:f6: 97:c8:73:8d:16:4a:58:f9:d0:5d:e1:61:56:aa:d2: 9e:c7:c1:65:df:db:1c:c7:15:a2:ba:2a:a1:41:bc: 4d:8c:07:45:63:e5:d2:97:d0:8d:f6:1d:e7:df:f8: 97:7a:a3:d8:1d:b8:80:dd:33:fc:c3:1e:13:05:9a: f8:e1:3d:8d:98:97:6b:d2:81:49:bb:28:6e:92:37: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:CA:8F:63:E0:EF:5B:90:E0:FF:32:94:FA:FA:2B:9D:2F:A9:EF X509v3 Authority Key Identifier: keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:d4:5a:47:68:59:eb:fd:28:76:79:94:cb:0c:28:ce:b9:1e: be:c5:86:af:06:2a:5b:bf:fa:ea:63:b8:1a:86:84:e2:0a:44: 5b:9c:4e:44:e2:f9:92:79:1e:40:39:d5:c2:3f:29:06:21:b7: 6b:20:41:1f:17:6c:25:13:eb:ba:e6:f4:0a:96:59:d5:fa:61: 7d:d0:ae:b9:8a:34:79:ec:75:41:65:97:50:87:b9:8a:f6:27: e1:78:97:b1:4b:4c:5d:4b:67:29:c5:b6:43:8a:66:71:7b:8c: 06:8e:14:6e:0e:35:d8:db:5a:7b:ce:f8:24:16:9e:87:cc:1c: 57:8f:54:57:4c:8f:80:9f:e9:a0:27:47:6d:9a:4e:06:d4:79: 2d:34:f7:1f:19:44:27:cb:a7:ae:40:fa:9d:4a:8c:03:cb:50: e8:4a:ae:a4:61:96:2c:2c:17:f7:b2:55:7b:b6:f0:13:4e:01: 9a:87:62:77:7b:0d:3b:e9:78:cc:26:ee:b9:bb:15:43:0e:67: 21:a7:f0:23:7b:9b:67:d5:50:5a:ad:7b:01:fa:e2:70:7c:37: 63:ae:6d:ac:43:f9:9c:b4:35:ca:88:24:85:5f:e1:da:95:89: da:50:6f:a9:b6:bb:41:24:c6:59:9e:e5:b1:ba:95:31:54:81: 9c:c5:f7:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO9C2YhszpEMHpmGxGPhv8kKeqq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2Rjgy M0JBQjMzMTAeFw0yNjEwMTUxNzAxNTJaFw0yNjEwMTgxNzE1NTJaMDMxMTAvBgNV BAMTKDY1OTJDQThGNjNFMEVGNUI5MEUwRkYzMjk0RkFGQTJCOUQyRkE5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A3r66bWgeb2eFlQOAHwK/BgC hT72ifUfleP6mDgc4nDeLf7/L5Oug7ibwXDazKJpVml3h+cT6hEHUCmfMcSvCjed m1LjeyqrkXQTGGgQeai40i8PU4q11zn9pchCXjv4hdRmlfDmf6mHWSfzUXbsEC2a xjkx9EVGWH6bREz8ejZp0VRKkUcbZPPuz0Od4rBYjv+QLEsa0Uh8JsHiL8D+u2Zg ZAxzqqkkzPX3lvY6ikB09pfIc40WSlj50F3hYVaq0p7HwWXf2xzHFaK6KqFBvE2M B0Vj5dKX0I32Heff+Jd6o9gduIDdM/zDHhMFmvjhPY2Yl2vSgUm7KG6SN5MpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZZLKj2Pg71uQ4P8ylPr6K50vqe8wHwYDVR0j BBgwFoAUKbrpC3lbprtQOQ6zGWTm+CO6szEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MTE0OTY1MDY0MDg5Ny8wLzI5QkFFOTBCNzk1QkE2QkI1MDM5MEVCMzE5NjRF NkY4MjNCQUIzMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzExNDk2NTA2NDA4OTcvMC8yOUJBRTkwQjc5NUJB NkJCNTAzOTBFQjMxOTY0RTZGODIzQkFCMzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA19RaR2hZ6/0o dnmUywwozrkevsWGrwYqW7/66mO4GoaE4gpEW5xOROL5knkeQDnVwj8pBiG3ayBB HxdsJRPruub0CpZZ1fphfdCuuYo0eex1QWWXUIe5ivYn4XiXsUtMXUtnKcW2Q4pm cXuMBo4Ubg412Ntae874JBaeh8wcV49UV0yPgJ/poCdHbZpOBtR5LTT3HxlEJ8un rkD6nUqMA8tQ6EqupGGWLCwX97JVe7bwE04Bmodid3sNO+l4zCbuubsVQw5nIafw I3ubZ9VQWq17AfricHw3Y65trEP5nLQ1yogkhV/h2pWJ2lBvqba7QSTGWZ7lsbqV MVSBnMX3fw== -----END CERTIFICATE-----Generated at Fri Oct 16 04:13:50 2026 by rpki-client