
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.mft (raw, json)
Hash identifier: YhnPejCLUbV0wG+Y//0KCX2hfn5RDF/7ZXCjP+PEHXU=
Subject key identifier: 5E:D9:84:6D:BB:3B:0E:38:94:C8:93:DE:23:F5:5E:AF:BB:B2:BF:DB
Authority key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
Certificate issuer: /CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Certificate serial: 581B9791FC1E1EBF828AB582C5B29D934B65A567
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
Manifest number: 84
Signing time: Tue 14 Jul 2026 08:25:50 +0000
Manifest this update: Tue 14 Jul 2026 08:20:50 +0000
Manifest next update: Wed 15 Jul 2026 12:05:50 +0000
Files and hashes: 1: 3132322e3230302e39322e302f32342d3234203d3e2034383437.roa (hash: 7MKytXnVY3xTke2Q8+t8jq61Vb4/fGpyyq+FUQmQJnw=)
2: 3131342e36362e38312e302f32342d3234203d3e2034383038.roa (hash: DQgk0NoRfkqgILds3YUN9ncexo35feZAfTqpFHdqjmw=)
3: 3132322e3230302e36382e302f32332d3233203d3e2034383437.roa (hash: DBCbk6MBsne5yFcDN/1ext+/m/nBPtwfRFNsBlsk0+A=)
4: 3132322e3230302e37382e302f32342d3234203d3e2034383437.roa (hash: F+5G2tOBlVTwpojIu2RWks8TZtYttNGuYi9aLoVwvA8=)
5: 29BAE90B795BA6BB50390EB31964E6F823BAB331.crl (hash: ZnkbPxEwji5PKSVn+NADvvSb+ANzoLhPIVIICsC2yt0=)
6: 3132322e3230302e38322e302f32342d3234203d3e2034383038.roa (hash: iXPCWNvWzlbiyKQV1tytAGROlhAXSqRq6+d7dUU2dC0=)
7: 3132322e3230302e39322e302f32342d3234203d3e2034383038.roa (hash: 4nrH9LfsUqF1kG4hbRAgCUaFjmEZbef1g1MPoHFYyJc=)
8: 3132322e3230302e37382e302f32342d3234203d3e2034383038.roa (hash: iZ+UPJZRYFv38gs9qgOgP60v6lhbfpea4kBBrPAAlmc=)
9: 3132322e3230302e38342e302f32332d3233203d3e2034383437.roa (hash: Sy0DoHCGElAr96NNn+1jmBipOF87gYOaf8SMvzlgHcI=)
10: 3132322e3230302e39322e302f32332d3233203d3e2034383437.roa (hash: uin0SgixTaYZJ3n/wNUUiTbNcosdsZ8/3gkowJLHTew=)
11: 323430333a373538303a3a2f33322d3332203d3e203338333634.roa (hash: kmvkwlJ7w+pkja0hVcX0tlL6TVc6mN3qMP/ouy0N+b8=)
12: 3132322e3230302e38362e302f32342d3234203d3e2034383038.roa (hash: oS2jMaoEFE4sG5rQcBiPluuvCuNl0NOgHIY832u8x+I=)
13: 3132322e3230302e38322e302f32342d3234203d3e2034383437.roa (hash: Xp6isEa2ewBI3m6lqm1H70tKTkaKIvsLOOgR2gG3b8k=)
14: 3132322e3230302e38362e302f32342d3234203d3e2034383437.roa (hash: 04Q++9CzWyL1iOZV12B67bzkPYaoZgGLpQXoBVdnaCc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1b:97:91:fc:1e:1e:bf:82:8a:b5:82:c5:b2:9d:93:4b:65:a5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331
Validity
Not Before: Jul 14 08:20:50 2026 GMT
Not After : Jul 15 12:05:50 2026 GMT
Subject: CN=5ED9846DBB3B0E3894C893DE23F55EAFBBB2BFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fe:f7:1c:1c:20:e9:7e:d5:d7:4c:38:dc:99:
ee:88:8e:2a:ae:07:79:79:08:20:b4:c2:3d:cc:2d:
ec:56:05:7f:07:1e:bf:79:9b:a3:ed:9c:6f:a4:6e:
9c:bc:9c:c3:0b:54:62:ca:ce:08:72:6c:56:80:9e:
87:57:1f:a7:b9:45:59:ed:ca:98:f0:26:20:17:e5:
13:46:4d:86:cd:92:e2:97:5e:82:39:5e:24:1c:ae:
cb:a2:d5:87:cb:7a:1c:48:bd:e6:da:bc:2b:58:4c:
f7:c1:fa:01:a2:e8:bc:89:75:6c:c7:d3:3a:45:a7:
2e:87:8d:3b:6d:2d:5d:36:55:47:a5:e2:a7:bf:fb:
66:9e:df:3a:33:b8:b3:50:61:f6:0c:9b:8a:fa:2c:
f8:6f:23:1e:e5:94:eb:c9:eb:b7:63:2f:6e:78:36:
fb:bf:50:ec:97:7e:93:39:59:37:05:ca:20:8f:19:
04:e6:46:57:fc:cf:89:4d:b7:2f:d2:08:1a:d8:fa:
d9:08:a4:83:e3:49:37:4e:c8:e5:6f:8d:8c:72:e0:
11:c7:07:f6:bd:3c:f8:0d:39:d2:71:2f:81:6f:f3:
28:d6:26:cf:ea:da:af:db:1a:f5:40:cd:16:81:3c:
d0:da:fa:3c:e1:b3:88:53:8b:4f:f8:e4:e9:9e:d1:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D9:84:6D:BB:3B:0E:38:94:C8:93:DE:23:F5:5E:AF:BB:B2:BF:DB
X509v3 Authority Key Identifier:
keyid:29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:ca:0b:72:73:9b:57:02:ed:f8:fa:d3:de:9e:4f:9c:47:
96:7d:d6:a0:5e:cf:65:ec:39:41:b0:08:e1:ce:f6:44:64:1c:
fb:14:3e:8d:52:12:22:2f:59:35:79:0e:e4:9c:5b:3f:89:5a:
45:6c:9e:2c:de:9a:77:c2:31:02:68:48:10:b5:05:bc:c3:e0:
74:81:bf:2d:91:52:1a:10:db:bd:d8:b5:0e:dd:30:71:3a:d6:
d4:dd:c7:d5:29:23:87:8c:5a:0c:6a:79:cf:b6:ef:9f:d3:06:
27:f7:b6:3d:87:bf:ad:41:ba:86:d4:20:1d:0f:5f:86:41:98:
df:cc:0e:0e:40:db:4c:9f:74:da:9b:b2:56:44:5d:25:92:73:
73:23:08:48:2f:81:8e:8e:56:a0:64:c5:85:42:7c:41:64:57:
53:46:4b:2f:38:5a:91:36:ee:7d:97:97:0f:a2:a4:69:4e:16:
05:f3:a5:7d:15:42:fd:8b:a3:5d:10:27:1b:6f:05:13:8b:f0:
84:41:1d:a8:11:18:a3:68:5e:1d:78:23:b9:18:29:5c:ab:89:
36:72:f2:dd:93:81:a3:cb:4f:00:99:66:27:93:40:27:d3:de:
47:14:66:92:79:e9:4b:ae:08:87:1d:bc:c0:29:a7:bb:55:6d:
2e:aa:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:15:07 2026 by rpki-client