$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: 0uy5kQXTApMMMkB5ahM+X2q4PL0ObbOD7agjjRbWR/0= Subject key identifier: B2:77:F7:23:E2:34:01:BB:DC:A8:74:1F:3A:47:5E:E7:EE:CC:0E:FE Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 40E66F43CE986D32046A1FC5249F698C58E84E0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 49 Signing time: Thu 04 Jun 2026 16:34:43 +0000 Manifest this update: Thu 04 Jun 2026 16:29:43 +0000 Manifest next update: Fri 05 Jun 2026 18:50:43 +0000 Files and hashes: 1: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) 2: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: 41ffNRTgY89/40vZ30oMT2XzV96qH6NrEB+KSpDYZks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 18:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:6f:43:ce:98:6d:32:04:6a:1f:c5:24:9f:69:8c:58:e8:4e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Jun 4 16:29:43 2026 GMT Not After : Jun 5 18:50:43 2026 GMT Subject: CN=B277F723E23401BBDCA8741F3A475EE7EECC0EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:bf:af:89:24:f7:7d:7d:ca:2d:83:64:75: 93:bb:53:f6:a9:cd:43:a8:bf:c9:10:2e:db:e2:99: af:5a:c4:f2:d5:69:87:5d:c9:85:50:93:b7:76:c5: 76:49:09:d8:a4:7b:77:b0:e2:b0:e4:1a:04:34:ae: 1a:bb:0f:6a:96:83:d4:0b:c3:70:6f:5a:cf:e8:72: 52:4d:c3:ad:ec:49:85:e1:06:37:02:bd:f6:09:2a: 7f:df:fb:50:ee:6f:49:5b:32:e2:67:27:ce:4c:e9: 44:26:e5:1e:06:a2:19:ac:87:c4:56:04:1a:32:9e: 20:73:e9:c8:f5:45:ba:99:c8:b3:0e:9f:ef:4b:16: ab:98:76:9c:d0:98:2b:20:fe:aa:21:20:72:cb:89: 12:ef:fc:84:8d:81:74:c6:ff:d6:af:ef:90:99:46: 53:4d:69:01:cf:32:6c:16:ae:e6:e1:e1:be:f3:87: 48:0b:c8:32:a7:26:99:3c:d7:07:90:43:0c:96:2c: f5:59:a0:42:a2:7f:81:56:ac:1a:82:34:bb:e7:c1: 6c:a6:f9:c4:71:64:01:55:8c:5e:c6:7f:4f:ea:f2: a2:55:12:2b:fe:16:8b:3f:05:a1:07:5a:44:65:28: ff:a7:d6:6e:c0:ba:3c:f4:88:0d:f7:9b:2b:2b:7c: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:F7:23:E2:34:01:BB:DC:A8:74:1F:3A:47:5E:E7:EE:CC:0E:FE X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:73:ea:cd:bf:d3:60:6e:d3:8d:e0:e9:b8:05:e1:12:19:ff: 8a:42:d2:fa:81:52:f5:ff:24:46:aa:ea:c9:e0:39:88:64:24: c9:02:38:aa:e9:50:c1:84:86:4b:55:82:34:ed:53:c7:71:22: e9:ff:74:66:a1:9c:cb:fe:37:53:87:32:26:12:63:d8:97:59: 8f:d8:da:5b:a9:de:85:ea:8a:9c:bb:2b:b6:9b:9d:d3:75:17: f5:05:8f:31:dc:47:e1:62:70:8a:64:c6:14:09:ea:4f:3f:70: af:ae:10:14:01:22:cf:d6:7d:e7:00:66:87:45:04:5a:13:56: b6:8d:1c:cd:28:d9:66:87:a6:0d:af:97:da:09:19:f3:25:0b: 41:be:63:22:fd:9b:3f:4e:95:71:35:cf:e2:fa:b1:cd:32:e0: 4c:01:80:9c:f8:ae:93:bd:1e:74:1f:b4:54:c8:4a:d9:0f:5b: cc:ec:bd:62:dd:93:2d:66:bc:3e:dc:af:21:60:bb:34:85:a7: 1a:57:72:36:99:6a:10:8b:19:a9:6d:cb:11:2c:64:24:c5:f4: 01:ea:a7:35:a2:aa:d0:e2:ba:1d:17:b1:9b:4e:93:eb:69:da: 01:2b:3c:89:47:b7:93:7d:a3:07:77:23:72:65:ff:8b:10:2e: f0:ba:9e:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQOZvQ86YbTIEah/FJJ9pjFjoTg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA2MDQxNjI5NDNaFw0yNjA2MDUxODUwNDNaMDMxMTAvBgNV BAMTKEIyNzdGNzIzRTIzNDAxQkJEQ0E4NzQxRjNBNDc1RUU3RUVDQzBFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/L+viST3fX3KLYNkdZO7U/ap zUOov8kQLtvima9axPLVaYddyYVQk7d2xXZJCdike3ew4rDkGgQ0rhq7D2qWg9QL w3BvWs/oclJNw63sSYXhBjcCvfYJKn/f+1Dub0lbMuJnJ85M6UQm5R4Gohmsh8RW BBoyniBz6cj1RbqZyLMOn+9LFquYdpzQmCsg/qohIHLLiRLv/ISNgXTG/9av75CZ RlNNaQHPMmwWrubh4b7zh0gLyDKnJpk81weQQwyWLPVZoEKif4FWrBqCNLvnwWym +cRxZAFVjF7Gf0/q8qJVEiv+Fos/BaEHWkRlKP+n1m7Aujz0iA33mysrfEzfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsnf3I+I0AbvcqHQfOkde5+7MDv4wHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHPqzb/TYG7T jeDpuAXhEhn/ikLS+oFS9f8kRqrqyeA5iGQkyQI4qulQwYSGS1WCNO1Tx3Ei6f90 ZqGcy/43U4cyJhJj2JdZj9jaW6neheqKnLsrtpud03UX9QWPMdxH4WJwimTGFAnq Tz9wr64QFAEiz9Z95wBmh0UEWhNWto0czSjZZoemDa+X2gkZ8yULQb5jIv2bP06V cTXP4vqxzTLgTAGAnPiuk70edB+0VMhK2Q9bzOy9Yt2TLWa8PtyvIWC7NIWnGldy NplqEIsZqW3LESxkJMX0AeqnNaKq0OK6HRexm06T62naASs8iUe3k32jB3cjcmX/ ixAu8Lqeqg== -----END CERTIFICATE-----Generated at Thu Jun 4 19:42:28 2026 by rpki-client