$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft (raw, json) Hash identifier: I0uFA7vBvQncio8twsX87WH6r2xCrZcevpTHjzJbxss= Subject key identifier: 14:05:57:01:A7:45:3E:76:28:69:F7:EB:72:60:69:72:02:44:13:27 Authority key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Certificate issuer: /CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Certificate serial: 72DE939E37A24F88C08AE92AA6340BF870E89240 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft Manifest number: 0A Signing time: Sat 18 Apr 2026 13:04:54 +0000 Manifest this update: Sat 18 Apr 2026 12:59:54 +0000 Manifest next update: Sun 19 Apr 2026 16:12:54 +0000 Files and hashes: 1: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl (hash: lQ/bKOiEJ7CBWFolPVp5OKEFMNFc2+7eGxK3v1TM8k0=) 2: 323430313a623336303a3a2f33322d3332203d3e20313531323830.roa (hash: 5SJEj1nc3qGBhaCTByzHxgbcFU/ieorqq3xy9zqQc3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:de:93:9e:37:a2:4f:88:c0:8a:e9:2a:a6:34:0b:f8:70:e8:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Validity Not Before: Apr 18 12:59:54 2026 GMT Not After : Apr 19 16:12:54 2026 GMT Subject: CN=14055701A7453E762869F7EB7260697202441327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:d2:7b:08:a2:76:79:8c:db:9a:a3:b0:3f: d3:3c:0b:1a:2a:d5:69:65:30:45:88:0c:2c:3f:82: 98:36:6d:f0:04:e8:d1:6f:8a:17:f1:31:5f:ed:4e: 3b:3b:1e:6e:39:eb:14:2d:29:92:88:32:db:0a:b4: f8:8a:ab:5c:00:44:d8:31:a0:c5:0a:67:2d:0e:c2: af:51:c9:92:4d:ee:e5:f9:41:50:30:59:ba:9c:0f: 7b:f8:79:6c:93:fd:01:fc:f0:69:e1:16:2c:7a:07: 84:58:26:62:33:86:f2:00:fc:c1:1f:91:81:64:7b: c8:a6:cf:43:d8:6f:a2:fe:51:99:b7:f2:86:5f:28: fd:8a:8c:fa:61:59:37:fd:0b:8e:1d:93:ea:8a:bd: 81:52:7b:b5:d0:46:f8:6c:08:47:22:0d:27:db:2a: 94:f4:51:eb:e8:39:ee:cb:d4:27:97:98:10:ff:22: 7d:58:1e:8b:62:a8:35:f7:33:09:ed:41:92:94:c4: 0d:7d:c5:b4:78:00:5a:69:7b:8d:09:45:69:a6:4c: 7a:56:63:28:57:a1:64:01:24:7d:37:e5:27:dd:ef: a4:06:13:52:a3:27:36:93:35:7a:20:ae:3e:71:96: 6c:15:a0:2d:81:34:a3:67:f6:47:01:a5:8c:c5:6d: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:05:57:01:A7:45:3E:76:28:69:F7:EB:72:60:69:72:02:44:13:27 X509v3 Authority Key Identifier: keyid:A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5c:f3:55:51:b4:04:fd:2a:83:ab:18:29:6c:b0:be:e6:1e: 46:64:fa:52:4f:36:c6:de:38:77:29:db:26:d0:2b:d0:30:b5: 9b:2a:0b:c4:c3:23:c9:9d:ce:db:83:3e:c9:2a:d8:1a:da:d8: b6:f0:6c:d2:5e:35:f7:9e:42:10:cd:99:59:85:f8:ee:35:8a: 20:cf:92:9c:5b:32:37:b0:60:3f:5b:c5:7c:6f:64:ba:8b:38: ad:4a:8c:ae:68:bc:17:1e:1f:ef:f2:f0:74:98:38:ba:55:8f: 1c:72:94:e5:13:72:bb:70:8b:4b:01:0b:15:e2:d9:f7:4e:0a: b4:26:15:4a:97:fd:54:e3:a3:33:59:91:ef:81:70:84:38:13: 72:42:2a:d5:fb:b7:df:24:29:d8:89:0a:9d:e4:79:bb:09:df: 18:85:cc:a8:d4:da:db:89:83:08:0c:d3:b3:22:fc:2d:47:af: 99:2f:9d:ae:ed:ee:8c:1b:a8:87:c1:2c:bb:12:9f:41:52:f3: bd:ab:83:4c:58:8a:3c:52:85:b1:58:bd:2f:95:02:d9:d1:6a: 04:bb:3c:7e:9d:26:e4:6b:61:fb:b3:3c:ff:d3:12:d3:4f:85: 84:f6:90:b1:99:4f:27:44:8c:32:b2:8e:fb:f2:08:b6:3b:2f: a1:01:f0:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUct6TnjeiT4jAiukqpjQL+HDokkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1 Qjg5MTZGMzAeFw0yNjA0MTgxMjU5NTRaFw0yNjA0MTkxNjEyNTRaMDMxMTAvBgNV BAMTKDE0MDU1NzAxQTc0NTNFNzYyODY5RjdFQjcyNjA2OTcyMDI0NDEzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3G9J7CKJ2eYzbmqOwP9M8Cxoq 1WllMEWIDCw/gpg2bfAE6NFvihfxMV/tTjs7Hm456xQtKZKIMtsKtPiKq1wARNgx oMUKZy0Owq9RyZJN7uX5QVAwWbqcD3v4eWyT/QH88GnhFix6B4RYJmIzhvIA/MEf kYFke8imz0PYb6L+UZm38oZfKP2KjPphWTf9C44dk+qKvYFSe7XQRvhsCEciDSfb KpT0UevoOe7L1CeXmBD/In1YHotiqDX3MwntQZKUxA19xbR4AFppe40JRWmmTHpW YyhXoWQBJH035Sfd76QGE1KjJzaTNXogrj5xlmwVoC2BNKNn9kcBpYzFbXrHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFAVXAadFPnYoaffrcmBpcgJEEycwHwYDVR0j BBgwFoAUopiAomMi6tiV+hdq1M0+7FuJFvMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8xL0EyOTg4MEEyNjMyMkVBRDg5NUZBMTc2QUQ0Q0Qz RUVDNUI4OTE2RjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMS9BMjk4ODBBMjYzMjJF QUQ4OTVGQTE3NkFENENEM0VFQzVCODkxNkYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1zzVVG0BP0q g6sYKWywvuYeRmT6Uk82xt44dynbJtAr0DC1myoLxMMjyZ3O24M+ySrYGtrYtvBs 0l41955CEM2ZWYX47jWKIM+SnFsyN7BgP1vFfG9kuos4rUqMrmi8Fx4f7/LwdJg4 ulWPHHKU5RNyu3CLSwELFeLZ904KtCYVSpf9VOOjM1mR74FwhDgTckIq1fu33yQp 2IkKneR5uwnfGIXMqNTa24mDCAzTsyL8LUevmS+dru3ujBuoh8EsuxKfQVLzvauD TFiKPFKFsVi9L5UC2dFqBLs8fp0m5Gth+7M8/9MS00+FhPaQsZlPJ0SMMrKO+/II tjsvoQHwJg== -----END CERTIFICATE-----Generated at Sun Apr 19 06:44:04 2026 by rpki-client