$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: CPfQwOPHaO9ZNYs/Beg56aFNW7nRYu7AG1/+MKIdByc= Subject key identifier: BE:69:67:7F:F2:2B:98:B5:7A:DE:E3:F8:17:42:CC:CA:ED:FD:D1:BC Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 0C022F5F7D7F0042946FF2142113890017B2370F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: D5 Signing time: Tue 27 Oct 2026 01:29:13 +0000 Manifest this update: Tue 27 Oct 2026 01:24:13 +0000 Manifest next update: Fri 30 Oct 2026 04:48:13 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: QWNF+X7TRtDKlpsRDz1hSowsygASlCq1NYYCUKikTF0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 04:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:02:2f:5f:7d:7f:00:42:94:6f:f2:14:21:13:89:00:17:b2:37:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Oct 27 01:24:13 2026 GMT Not After : Oct 30 04:48:13 2026 GMT Subject: CN=BE69677FF22B98B57ADEE3F81742CCCAEDFDD1BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:6d:ab:13:6a:dc:43:18:a7:13:e6:0d:6a: 49:b7:02:30:95:80:7b:2a:22:bc:6e:ab:fa:dd:31: de:ad:d8:fc:23:ad:33:18:07:e1:50:bb:3a:5f:51: f9:41:f5:dc:2d:8b:63:a6:ec:57:64:13:5a:71:cc: 47:0f:4d:f9:11:43:26:ab:ac:17:92:c8:66:ab:fb: 0d:b4:bc:31:9f:38:0d:e7:b7:4c:d1:3a:6b:78:f5: 41:b9:8f:28:b9:69:e4:27:9d:ef:00:9f:15:f6:ca: af:ca:c1:55:77:53:f9:d0:3e:83:45:98:ba:b6:64: cf:c6:e8:ec:7a:50:49:c1:75:38:8c:bb:de:d5:d5: 2c:9a:19:64:47:86:2c:de:33:68:4a:26:31:80:a6: fb:ca:69:71:b6:59:d0:83:f8:16:64:68:fd:19:a3: bc:ee:ac:f1:b2:89:37:71:d9:ec:f4:3b:8c:ae:d0: 4a:f0:98:1b:ed:2a:16:41:59:20:96:a2:11:a1:4d: 86:cd:0b:db:22:23:b8:9c:ef:78:20:c2:89:68:4f: ba:f0:49:79:12:e4:ae:31:a2:02:bc:d8:86:3d:59: 2f:2b:dd:ec:2f:1c:0b:66:b3:12:6f:bf:7b:84:93: 26:77:65:ab:13:0e:31:83:74:0b:aa:67:c0:c3:69: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:67:7F:F2:2B:98:B5:7A:DE:E3:F8:17:42:CC:CA:ED:FD:D1:BC X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:bb:cd:18:f3:4d:11:b1:36:cd:b3:e1:70:1f:43:55:fd: ee:31:9b:a3:3b:a6:a3:05:51:1e:1a:09:c5:68:e6:2f:68:9d: 5e:ad:d5:18:e4:aa:3a:25:90:e6:a2:5e:d6:cc:60:eb:71:9f: e9:9e:e8:be:43:76:e2:4f:5b:1b:a1:9a:46:34:cb:bd:3f:5d: 9d:4b:a1:57:c7:65:27:83:79:1b:ed:26:f8:39:d4:a9:87:85: f2:e4:81:d3:73:61:04:93:ce:2c:80:6f:d1:b1:0a:00:3f:8c: 35:ee:13:05:c3:da:0a:2d:08:be:da:b2:74:fb:76:a0:a4:5b: 20:af:3b:6f:9c:d2:06:00:bc:a3:fb:6d:bd:b0:31:0d:59:8e: b1:b7:af:d1:89:57:9d:a2:4a:5d:4c:cd:69:1f:41:2f:9d:9a: b9:70:2b:85:69:53:6a:8c:3e:68:e8:27:08:7b:46:bd:a9:72: 99:47:e9:0a:89:92:07:8b:01:2c:07:64:93:ef:e1:43:1b:ab: ac:a2:c6:90:2d:72:c4:e0:58:f0:c2:5b:dc:e1:c6:35:db:22: eb:88:48:73:bc:e6:ac:a0:fe:20:02:d3:a1:0f:0d:9e:68:6f: 33:43:ad:d3:cd:67:ce:5a:ec:d6:88:57:03:0d:5f:76:d3:ca: 2a:1b:fa:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDAIvX31/AEKUb/IUIROJABeyNw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjEwMjcwMTI0MTNaFw0yNjEwMzAwNDQ4MTNaMDMxMTAvBgNV BAMTKEJFNjk2NzdGRjIyQjk4QjU3QURFRTNGODE3NDJDQ0NBRURGREQxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI922rE2rcQxinE+YNakm3AjCV gHsqIrxuq/rdMd6t2PwjrTMYB+FQuzpfUflB9dwti2Om7FdkE1pxzEcPTfkRQyar rBeSyGar+w20vDGfOA3nt0zROmt49UG5jyi5aeQnne8AnxX2yq/KwVV3U/nQPoNF mLq2ZM/G6Ox6UEnBdTiMu97V1SyaGWRHhizeM2hKJjGApvvKaXG2WdCD+BZkaP0Z o7zurPGyiTdx2ez0O4yu0ErwmBvtKhZBWSCWohGhTYbNC9siI7ic73ggwoloT7rw SXkS5K4xogK82IY9WS8r3ewvHAtmsxJvv3uEkyZ3ZasTDjGDdAuqZ8DDaVcnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvmlnf/IrmLV63uP4F0LMyu390bwwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyO7zRjzTRGx Ns2z4XAfQ1X97jGbozumowVRHhoJxWjmL2idXq3VGOSqOiWQ5qJe1sxg63Gf6Z7o vkN24k9bG6GaRjTLvT9dnUuhV8dlJ4N5G+0m+DnUqYeF8uSB03NhBJPOLIBv0bEK AD+MNe4TBcPaCi0IvtqydPt2oKRbIK87b5zSBgC8o/ttvbAxDVmOsbev0YlXnaJK XUzNaR9BL52auXArhWlTaow+aOgnCHtGvalymUfpComSB4sBLAdkk+/hQxurrKLG kC1yxOBY8MJb3OHGNdsi64hIc7zmrKD+IALToQ8NnmhvM0Ot081nzlrs1ohXAw1f dtPKKhv6ug== -----END CERTIFICATE-----Generated at Wed Oct 28 14:54:16 2026 by rpki-client