$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: 1IOmzSB5BgjuGgErSv33OfDABL8uR6gEWHlYeQJtaFc= Subject key identifier: 82:AF:D1:1B:1B:A5:12:66:CB:26:BE:84:1A:01:F4:BF:D6:9B:9B:14 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 5CA04EC1439CCC9DC2307CBD986D0DAE2B673063 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: A9 Signing time: Fri 21 Aug 2026 06:59:00 +0000 Manifest this update: Fri 21 Aug 2026 06:54:00 +0000 Manifest next update: Sat 22 Aug 2026 07:11:00 +0000 Files and hashes: 1: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) 2: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: MYz21eDSD2jjHiyZmvGU3cZZsOGkfdGpV4ydpdbqBG4=) 3: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 07:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a0:4e:c1:43:9c:cc:9d:c2:30:7c:bd:98:6d:0d:ae:2b:67:30:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Aug 21 06:54:00 2026 GMT Not After : Aug 22 07:11:00 2026 GMT Subject: CN=82AFD11B1BA51266CB26BE841A01F4BFD69B9B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:cd:9c:94:fe:06:f0:62:c8:91:5b:bf:b3: ca:db:68:85:4c:f8:d9:64:04:07:65:59:ff:42:24: 3c:77:3c:52:ce:b9:d1:d6:98:97:71:a2:c0:3d:61: 3c:d4:27:88:6b:89:70:03:2f:97:7e:45:ef:db:17: 1b:3a:fe:ac:0a:7c:45:87:48:a3:2e:60:20:ce:85: 14:56:fb:22:a6:e0:0c:26:51:ae:75:0c:b8:96:66: 51:d5:26:58:e4:4f:90:49:dc:f5:d6:9b:0e:f3:ff: 1c:26:b6:ce:56:25:ba:40:5d:aa:40:e7:17:01:46: 5d:06:35:12:60:b5:03:81:72:23:52:d9:5b:68:0b: a9:d7:c7:51:08:65:68:e3:19:1b:ba:ff:28:db:14: 3c:8e:03:32:62:28:f2:8b:ec:7c:68:3a:4b:f5:0e: 39:42:24:2b:03:c0:0c:c2:f6:22:5a:58:07:ba:aa: 17:d5:ac:69:c5:a0:42:06:bb:14:51:63:87:5d:19: 42:8a:d8:b7:a3:b7:ee:f0:f5:6f:0d:ee:7f:ca:61: 57:25:12:a6:63:3a:01:a2:5d:d5:14:b6:30:4d:cd: 71:29:c8:ff:d4:1b:a2:5f:d2:21:b1:43:33:d1:b1: 49:a4:28:ce:fd:2c:08:af:1b:19:e8:5f:2b:44:93: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:D1:1B:1B:A5:12:66:CB:26:BE:84:1A:01:F4:BF:D6:9B:9B:14 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:70:c7:11:57:1a:f8:48:d9:87:94:f8:f5:f1:5c:25:78:49: e3:4c:65:ce:93:74:6a:68:dd:2e:aa:e3:34:cf:4d:be:6b:0c: 06:83:25:54:d6:8c:5c:78:fd:7d:29:04:79:c8:99:80:80:69: 1d:a2:76:1e:d8:c2:b8:e0:16:51:e6:1d:bd:00:61:b3:87:02: cd:86:c4:4f:8d:8a:2a:0e:88:aa:85:3b:33:4b:27:b7:68:8e: bb:64:92:fd:71:49:22:4c:c7:b5:b9:2e:c9:dc:10:93:c9:24: 95:9b:88:d2:ba:d3:e6:4d:39:2f:e7:44:6a:d7:ee:03:d7:61: 47:08:5b:3c:88:90:86:43:46:84:88:84:d5:ca:e8:1f:c9:59: e5:00:45:af:fb:e4:41:0b:85:48:df:14:0a:5d:a8:3c:9a:cd: 0e:82:6a:aa:53:7e:c3:c8:70:57:11:0e:e4:6e:22:3f:61:ca: f4:8b:7d:df:a0:7a:30:81:b2:c3:90:9e:44:fd:ec:c0:da:3f: ec:86:ef:a2:28:3e:62:b6:19:95:b6:89:12:5c:03:88:d4:b7: ec:9c:1e:ab:fe:46:3b:b1:f5:51:26:32:ed:55:e2:36:fe:c8: 44:c0:1d:2e:61:f4:30:32:ab:95:f7:61:77:33:72:c8:95:43: 12:af:dd:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXKBOwUOczJ3CMHy9mG0NritnMGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA4MjEwNjU0MDBaFw0yNjA4MjIwNzExMDBaMDMxMTAvBgNV BAMTKDgyQUZEMTFCMUJBNTEyNjZDQjI2QkU4NDFBMDFGNEJGRDY5QjlCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvs2clP4G8GLIkVu/s8rbaIVM +NlkBAdlWf9CJDx3PFLOudHWmJdxosA9YTzUJ4hriXADL5d+Re/bFxs6/qwKfEWH SKMuYCDOhRRW+yKm4AwmUa51DLiWZlHVJljkT5BJ3PXWmw7z/xwmts5WJbpAXapA 5xcBRl0GNRJgtQOBciNS2VtoC6nXx1EIZWjjGRu6/yjbFDyOAzJiKPKL7HxoOkv1 DjlCJCsDwAzC9iJaWAe6qhfVrGnFoEIGuxRRY4ddGUKK2Lejt+7w9W8N7n/KYVcl EqZjOgGiXdUUtjBNzXEpyP/UG6Jf0iGxQzPRsUmkKM79LAivGxnoXytEk3kTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgq/RGxulEmbLJr6EGgH0v9abmxQwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3DHEVca+EjZ h5T49fFcJXhJ40xlzpN0amjdLqrjNM9NvmsMBoMlVNaMXHj9fSkEeciZgIBpHaJ2 HtjCuOAWUeYdvQBhs4cCzYbET42KKg6IqoU7M0snt2iOu2SS/XFJIkzHtbkuydwQ k8kklZuI0rrT5k05L+dEatfuA9dhRwhbPIiQhkNGhIiE1croH8lZ5QBFr/vkQQuF SN8UCl2oPJrNDoJqqlN+w8hwVxEO5G4iP2HK9It936B6MIGyw5CeRP3swNo/7Ibv oig+YrYZlbaJElwDiNS37Jweq/5GO7H1USYy7VXiNv7IRMAdLmH0MDKrlfdhdzNy yJVDEq/d1A== -----END CERTIFICATE-----Generated at Sat Aug 22 00:54:06 2026 by rpki-client