$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: zbApvmUUdKTNZVwnnRnbFdVs8ON2G08YkneQ66dAsG8= Subject key identifier: 00:C9:D6:2F:6A:BA:46:D6:F4:B8:BF:03:B0:CB:5B:D7:3D:C7:FB:8B Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 396CEA386976B82B3EF8F139AE5808DA2D95B0A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: C5 Signing time: Wed 07 Oct 2026 16:01:26 +0000 Manifest this update: Wed 07 Oct 2026 15:56:26 +0000 Manifest next update: Sat 10 Oct 2026 16:12:26 +0000 Files and hashes: 1: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) 2: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: 2HuLmJvV8L2NGYDyX86foXoakZznlxk8Ud7U/zwrVWk=) 3: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 16:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6c:ea:38:69:76:b8:2b:3e:f8:f1:39:ae:58:08:da:2d:95:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Oct 7 15:56:26 2026 GMT Not After : Oct 10 16:12:26 2026 GMT Subject: CN=00C9D62F6ABA46D6F4B8BF03B0CB5BD73DC7FB8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:77:32:d3:e8:e5:f8:43:ac:8c:ad:14:dc: 43:fb:91:40:e7:c4:bb:80:bf:7f:01:0f:52:35:0c: c4:03:51:5f:81:b2:cd:6d:b2:3f:7b:25:43:f7:e1: 34:7b:bb:75:45:53:8f:c5:f6:04:53:dd:8a:2a:a8: f1:37:40:06:b5:22:76:82:15:21:02:8e:40:4f:4c: 17:4c:6a:bb:5a:a2:a3:9e:ca:b3:df:cd:44:10:56: 84:ad:af:36:15:dd:e1:79:87:28:57:c8:99:e2:0f: 98:f0:9b:8f:33:35:47:59:be:63:dd:74:c0:60:1f: ef:d5:7d:77:9c:9b:6d:37:9a:35:a2:67:8e:87:1c: 47:61:c6:da:cc:29:5a:d7:5d:12:72:63:dd:5d:50: 83:92:87:2d:f8:36:85:ff:5d:d2:c2:4b:bf:e0:1f: a1:27:bb:1f:34:94:f5:c7:b4:5d:7b:ed:17:dc:ba: 73:de:32:22:8c:58:1d:9a:60:a1:07:c6:dc:a1:c7: 2f:d3:a2:ae:cd:33:b2:e0:57:82:61:fc:de:18:59: a5:cf:3e:9e:20:35:cd:31:2f:bf:d1:94:82:ac:82: 24:8d:3b:3e:48:d1:f8:40:6c:10:52:ab:9b:7a:8c: a1:3b:7b:a3:97:97:ee:fb:54:1d:a7:0d:11:5c:36: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C9:D6:2F:6A:BA:46:D6:F4:B8:BF:03:B0:CB:5B:D7:3D:C7:FB:8B X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3d:85:34:78:4e:9b:3a:53:d6:39:da:1a:04:87:e5:4a:4d: b2:ac:05:cf:a4:2e:d2:f1:58:98:41:f6:1d:a5:d0:71:3f:4a: 80:9e:73:04:af:8f:d5:11:47:65:0c:c9:cc:1c:ec:3a:4a:c2: ce:ed:02:2b:55:42:76:fd:ba:7f:2b:a3:fa:a0:74:3d:76:8f: a7:25:6f:56:ac:2a:9b:14:74:60:cd:8a:38:0b:50:43:29:fd: 1b:3c:b4:81:ab:80:9f:47:fd:85:40:82:7a:24:60:6a:da:ff: 36:d9:fb:b6:67:82:6b:57:8c:29:14:05:51:c7:f1:53:cd:f2: 33:ed:39:f8:ac:cd:d7:89:c3:6a:70:6d:ee:ce:9a:59:b7:8f: 8a:71:cf:0c:ec:59:39:77:92:d3:5b:ed:ea:00:ce:a0:23:9e: e7:34:d3:83:1d:0d:1e:57:22:24:4c:a9:46:2c:51:1d:a8:70: 6c:97:94:81:c7:3d:c2:c7:59:3f:c6:e6:41:0f:66:a3:e0:80: 09:c6:a5:17:29:bb:66:eb:9e:a6:6e:01:00:89:85:4a:e0:c0: 3c:40:46:a1:c6:98:97:85:3b:52:e1:9e:1d:dc:1f:74:94:44: 08:1c:6c:7f:4a:f6:89:95:dd:3d:46:d7:be:dd:f5:cd:87:29: af:82:9d:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOWzqOGl2uCs++PE5rlgI2i2VsKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjEwMDcxNTU2MjZaFw0yNjEwMTAxNjEyMjZaMDMxMTAvBgNV BAMTKDAwQzlENjJGNkFCQTQ2RDZGNEI4QkYwM0IwQ0I1QkQ3M0RDN0ZCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lncy0+jl+EOsjK0U3EP7kUDn xLuAv38BD1I1DMQDUV+Bss1tsj97JUP34TR7u3VFU4/F9gRT3YoqqPE3QAa1InaC FSECjkBPTBdMartaoqOeyrPfzUQQVoStrzYV3eF5hyhXyJniD5jwm48zNUdZvmPd dMBgH+/VfXecm203mjWiZ46HHEdhxtrMKVrXXRJyY91dUIOShy34NoX/XdLCS7/g H6Enux80lPXHtF177RfcunPeMiKMWB2aYKEHxtyhxy/Toq7NM7LgV4Jh/N4YWaXP Pp4gNc0xL7/RlIKsgiSNOz5I0fhAbBBSq5t6jKE7e6OXl+77VB2nDRFcNretAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAMnWL2q6Rtb0uL8DsMtb1z3H+4swHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD2FNHhOmzpT 1jnaGgSH5UpNsqwFz6Qu0vFYmEH2HaXQcT9KgJ5zBK+P1RFHZQzJzBzsOkrCzu0C K1VCdv26fyuj+qB0PXaPpyVvVqwqmxR0YM2KOAtQQyn9Gzy0gauAn0f9hUCCeiRg atr/Ntn7tmeCa1eMKRQFUcfxU83yM+05+KzN14nDanBt7s6aWbePinHPDOxZOXeS 01vt6gDOoCOe5zTTgx0NHlciJEypRixRHahwbJeUgcc9wsdZP8bmQQ9mo+CACcal Fym7Zuuepm4BAImFSuDAPEBGocaYl4U7UuGeHdwfdJRECBxsf0r2iZXdPUbXvt31 zYcpr4Kd0w== -----END CERTIFICATE-----Generated at Thu Oct 8 10:33:31 2026 by rpki-client