$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: etVK7MfgMQWuyK9fU1SqmAI0gL0u4lWQ2XeMYt24fGg= Subject key identifier: F7:F7:1A:5F:5C:B0:E6:6A:30:2C:24:CD:C4:21:C5:80:DC:20:B9:13 Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 514CC949AAEE52E9C584A8DA0C86ADA1EE7290C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: 32 Signing time: Fri 22 May 2026 19:22:29 +0000 Manifest this update: Fri 22 May 2026 19:17:29 +0000 Manifest next update: Sat 23 May 2026 20:16:29 +0000 Files and hashes: 1: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: 40Sx5SRV0LGt8uy21XTPruNXvwSvVtMv4Vx5FxNFigk=) 2: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) 3: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4c:c9:49:aa:ee:52:e9:c5:84:a8:da:0c:86:ad:a1:ee:72:90:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: May 22 19:17:29 2026 GMT Not After : May 23 20:16:29 2026 GMT Subject: CN=F7F71A5F5CB0E66A302C24CDC421C580DC20B913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:a5:4e:f5:e7:d8:cb:f6:df:16:eb:61:9f: 4a:68:8c:e0:99:eb:d8:20:62:0a:82:25:e1:7c:a1: 45:43:2f:25:a8:d1:22:5b:32:4f:95:9a:10:12:49: 97:83:e3:bc:1c:a6:3b:f9:02:78:a0:c0:0f:bc:6e: 2a:b8:b4:7b:35:f7:e0:ef:ac:0c:91:d7:16:27:c2: fd:02:1e:22:3d:ac:98:4b:51:6c:7e:2e:8a:b4:6a: ab:6d:a7:be:8d:ec:5b:55:be:05:ee:4f:1f:cd:44: c2:27:41:35:bd:57:18:a3:05:8b:0c:93:d5:ef:1a: f3:a7:11:6d:bd:a2:d5:d4:e4:21:83:4d:35:3c:37: 6c:2d:d8:82:83:25:99:92:61:f0:86:8d:4d:9a:e0: 55:ef:29:d3:7c:c2:77:ff:3d:a9:96:0f:2f:03:2c: 92:46:97:7b:24:2f:4d:27:0a:ca:a8:6f:b2:de:41: bc:fa:e1:a2:9e:fb:50:77:7d:37:a3:42:02:4a:0e: 04:67:a9:97:73:e6:f3:e5:bd:8a:23:45:74:67:8c: 7a:70:59:e3:a8:4a:6e:80:b1:08:98:6c:9b:93:85: 4d:2a:6b:d6:43:74:cb:61:be:6e:f9:52:a7:4f:22: 76:05:85:d9:74:6c:f7:a3:2c:b2:98:7c:d2:d9:4e: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F7:1A:5F:5C:B0:E6:6A:30:2C:24:CD:C4:21:C5:80:DC:20:B9:13 X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b6:65:38:81:c2:32:6e:c6:31:da:de:d1:32:5e:45:f1:8f: 4e:3e:38:c2:0c:15:cc:90:e0:d8:14:35:ca:ce:89:ae:67:ea: 44:e0:f4:f2:95:74:c3:ce:ac:ea:c7:81:4b:25:4e:e3:79:18: a0:d9:e6:ce:53:7d:4d:be:e3:5c:fa:6a:55:a0:2b:26:c8:db: 34:b4:c6:28:ab:3c:70:39:cf:3b:fb:71:c5:c6:37:09:ff:95: c7:8e:d2:0c:d3:a8:d8:15:14:fe:19:6a:89:cf:2d:d0:b4:fb: ea:f9:38:08:b8:06:22:26:cd:b8:9e:cc:a9:31:f0:ac:c7:ad: d0:8a:9d:dd:14:b1:ef:35:bc:4c:82:93:ef:83:75:90:b1:54: bc:48:02:f9:ab:b4:c4:30:ad:61:d0:dc:a0:eb:05:b0:83:7f: 88:88:94:e2:de:54:90:54:e2:8e:4c:b4:f7:a2:b5:a3:90:3e: ed:72:4e:83:ec:3f:9c:a1:5b:81:9c:42:47:6b:52:b6:da:8c: dd:c9:a3:9d:05:82:a9:26:60:86:8f:91:50:72:6e:30:44:97: 9e:a8:42:47:b5:41:a9:fe:7e:2f:30:9c:6b:83:d1:a7:6b:e4: f1:fb:ae:e3:fb:16:1a:8f:a1:ed:19:48:4c:4c:31:df:7c:af: 05:3a:2b:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUUzJSaruUunFhKjaDIatoe5ykMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA1MjIxOTE3MjlaFw0yNjA1MjMyMDE2MjlaMDMxMTAvBgNV BAMTKEY3RjcxQTVGNUNCMEU2NkEzMDJDMjRDREM0MjFDNTgwREMyMEI5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gqVO9efYy/bfFuthn0pojOCZ 69ggYgqCJeF8oUVDLyWo0SJbMk+VmhASSZeD47wcpjv5AnigwA+8biq4tHs19+Dv rAyR1xYnwv0CHiI9rJhLUWx+Loq0aqttp76N7FtVvgXuTx/NRMInQTW9VxijBYsM k9XvGvOnEW29otXU5CGDTTU8N2wt2IKDJZmSYfCGjU2a4FXvKdN8wnf/PamWDy8D LJJGl3skL00nCsqob7LeQbz64aKe+1B3fTejQgJKDgRnqZdz5vPlvYojRXRnjHpw WeOoSm6AsQiYbJuThU0qa9ZDdMthvm75UqdPInYFhdl0bPejLLKYfNLZToOVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9/caX1yw5mowLCTNxCHFgNwguRMwHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7ZlOIHCMm7G Mdre0TJeRfGPTj44wgwVzJDg2BQ1ys6JrmfqROD08pV0w86s6seBSyVO43kYoNnm zlN9Tb7jXPpqVaArJsjbNLTGKKs8cDnPO/txxcY3Cf+Vx47SDNOo2BUU/hlqic8t 0LT76vk4CLgGIibNuJ7MqTHwrMet0Iqd3RSx7zW8TIKT74N1kLFUvEgC+au0xDCt YdDcoOsFsIN/iIiU4t5UkFTijky096K1o5A+7XJOg+w/nKFbgZxCR2tSttqM3cmj nQWCqSZgho+RUHJuMESXnqhCR7VBqf5+LzCca4PRp2vk8fuu4/sWGo+h7RlITEwx 33yvBTorTA== -----END CERTIFICATE-----Generated at Sat May 23 03:44:04 2026 by rpki-client