
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft
File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json)
Hash identifier: WdN9JPudPUlGwUvZLfWaH04dY+bj7pmgRbFNB0M/6y8=
Subject key identifier: F7:C5:C3:22:D6:DA:2A:FD:B8:92:C4:B5:F8:56:B8:7D:FB:1E:E7:E1
Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3
Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3
Certificate serial: 5D79624895156413FCEE6E82D68D0EF10C2F930E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft
Manifest number: BD
Signing time: Thu 03 Sep 2026 13:58:33 +0000
Manifest this update: Thu 03 Sep 2026 13:53:33 +0000
Manifest next update: Sun 06 Sep 2026 18:55:33 +0000
Files and hashes: 1: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: ZKosk2Z9WhWyI09LTeAKiZZrS0UK9hSXohdcTJEwvOc=)
2: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:79:62:48:95:15:64:13:fc:ee:6e:82:d6:8d:0e:f1:0c:2f:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3
Validity
Not Before: Sep 3 13:53:33 2026 GMT
Not After : Sep 6 18:55:33 2026 GMT
Subject: CN=F7C5C322D6DA2AFDB892C4B5F856B87DFB1EE7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:08:ca:bb:7d:8c:e8:13:e8:87:9a:2d:64:
cc:28:b9:3e:e8:c3:f6:ab:5c:6a:fd:bc:c5:63:09:
7b:e3:da:54:a9:30:73:ff:b6:75:1d:51:ca:1e:95:
b7:b2:d8:2c:51:47:aa:af:d7:dd:53:b8:81:34:4a:
9d:d2:ed:e7:eb:f3:cf:d7:d7:22:1c:3a:95:65:94:
e8:42:20:1a:8d:c7:5e:af:66:80:ac:18:cc:fb:7d:
b9:d8:bd:b0:c3:e5:33:37:6e:64:7a:cf:0e:55:bd:
cb:ea:31:cf:bf:57:38:27:93:c1:9a:24:eb:5f:1c:
ff:c5:b0:64:23:2b:6f:e9:b5:39:a1:b8:21:8c:e7:
ef:a8:ec:08:cd:dd:f7:3f:8e:f8:1e:c4:19:3d:8a:
0f:75:13:c2:ec:f2:7f:12:38:2a:a4:bc:91:57:af:
bf:5b:19:28:60:e8:a5:e3:b3:8a:95:80:1a:8e:63:
53:ed:56:60:53:44:b2:54:02:01:dc:56:d8:7f:e9:
32:d4:32:e6:51:91:6d:33:8a:e7:aa:dc:18:14:d5:
19:14:28:8b:40:aa:ec:cf:60:d1:ee:f5:9e:4f:7d:
af:90:1c:da:f9:8b:a5:2f:fe:6c:48:f2:df:bf:b4:
e1:8d:fd:e7:86:fb:62:dc:a1:c5:21:fc:32:8e:d1:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:C3:22:D6:DA:2A:FD:B8:92:C4:B5:F8:56:B8:7D:FB:1E:E7:E1
X509v3 Authority Key Identifier:
keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:dc:53:a1:19:6a:ed:cb:b2:3d:25:2a:0c:03:91:b3:03:36:
75:60:b0:3d:ed:6c:4e:3a:a8:91:c7:25:5e:a5:c8:32:d5:bc:
6c:f3:89:49:b1:5e:1e:f1:7d:55:54:39:1f:49:4f:5a:d6:1e:
99:9d:26:3a:28:3a:9a:54:11:af:e3:26:7d:1a:73:3c:e5:7f:
22:2a:cc:e1:b3:69:27:2f:36:13:82:b5:0b:28:1f:70:ea:b7:
49:53:ad:99:50:da:a3:17:7d:8e:30:4e:1f:43:b7:e0:39:8a:
3f:ea:22:f5:98:1d:2f:23:db:12:54:2d:ed:57:7f:4f:4e:df:
57:cb:c8:0a:ee:9c:c0:b4:d1:ab:70:45:5f:80:48:bf:e5:81:
78:21:95:e5:7a:f4:82:31:e9:b8:a1:7e:15:5d:65:0b:6d:e2:
a1:7f:bf:a1:7e:9a:96:88:59:6c:fd:31:09:eb:bc:b8:81:71:
d2:47:79:10:4b:86:aa:7a:49:e4:84:c7:53:73:49:bb:5e:5e:
77:b7:1f:44:02:37:ba:61:dc:88:a9:93:b5:ae:d4:d9:7e:ff:
7a:5d:78:ca:3b:4f:8c:ac:5b:9a:94:7c:4b:9c:81:1e:ad:1d:
1b:60:18:86:d8:e3:a2:8d:af:ae:30:eb:a9:cd:01:84:a9:25:
e5:0c:dc:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUXXliSJUVZBP87m6C1o0O8Qwvkw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1
Qjg5MTZGMzAeFw0yNjA5MDMxMzUzMzNaFw0yNjA5MDYxODU1MzNaMDMxMTAvBgNV
BAMTKEY3QzVDMzIyRDZEQTJBRkRCODkyQzRCNUY4NTZCODdERkIxRUU3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJgjKu32M6BPoh5otZMwouT7o
w/arXGr9vMVjCXvj2lSpMHP/tnUdUcoelbey2CxRR6qv191TuIE0Sp3S7efr88/X
1yIcOpVllOhCIBqNx16vZoCsGMz7fbnYvbDD5TM3bmR6zw5VvcvqMc+/Vzgnk8Ga
JOtfHP/FsGQjK2/ptTmhuCGM5++o7AjN3fc/jvgexBk9ig91E8Ls8n8SOCqkvJFX
r79bGShg6KXjs4qVgBqOY1PtVmBTRLJUAgHcVth/6TLUMuZRkW0ziueq3BgU1RkU
KItAquzPYNHu9Z5Pfa+QHNr5i6Uv/mxI8t+/tOGN/eeG+2LcocUh/DKO0f87AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU98XDItbaKv24ksS1+Fa4ffse5+EwHwYDVR0j
BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz
RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF
QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtxToRlq7cuy
PSUqDAORswM2dWCwPe1sTjqokcclXqXIMtW8bPOJSbFeHvF9VVQ5H0lPWtYemZ0m
Oig6mlQRr+MmfRpzPOV/IirM4bNpJy82E4K1CygfcOq3SVOtmVDaoxd9jjBOH0O3
4DmKP+oi9ZgdLyPbElQt7Vd/T07fV8vICu6cwLTRq3BFX4BIv+WBeCGV5Xr0gjHp
uKF+FV1lC23ioX+/oX6alohZbP0xCeu8uIFx0kd5EEuGqnpJ5ITHU3NJu15ed7cf
RAI3umHciKmTta7U2X7/el14yjtPjKxbmpR8S5yBHq0dG2AYhtjjoo2vrjDrqc0B
hKkl5Qzc5A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 15:23:40 2026 by rpki-client