$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft (raw, json) Hash identifier: ZXw3Gk2vUeMKqESlJOrQ+7R3N3FmpufsmM2XR1Cccrk= Subject key identifier: 0C:5C:3E:84:BE:67:B8:86:A9:4C:64:F7:B4:FC:3F:59:4C:48:01:BA Authority key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Certificate issuer: /CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Certificate serial: 40C3CE75D8FCC5B09C0D907E19B43F68146095AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft Manifest number: 6D Signing time: Tue 07 Jul 2026 07:13:36 +0000 Manifest this update: Tue 07 Jul 2026 07:08:36 +0000 Manifest next update: Wed 08 Jul 2026 07:35:36 +0000 Files and hashes: 1: 323430373a323834303a3a2f34382d3438203d3e203538383238.roa (hash: xgCFc2N/0CsJue4d/P/Q+7aRKdG0hdkuMXTcNRaPkXw=) 2: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl (hash: P+SJmJ55WDl6WSjk7UiIPs8PUSNFb5Bi4zlgRPL3P48=) 3: 323430373a323834303a3a2f33322d3332203d3e2030.roa (hash: zsGBjXcwxkrjK2vUTPfoTJ1+mSS0BV+nQCf2o4sbmDQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c3:ce:75:d8:fc:c5:b0:9c:0d:90:7e:19:b4:3f:68:14:60:95:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Validity Not Before: Jul 7 07:08:36 2026 GMT Not After : Jul 8 07:35:36 2026 GMT Subject: CN=0C5C3E84BE67B886A94C64F7B4FC3F594C4801BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:b4:4f:86:77:7c:97:ac:f2:63:75:97:90: 12:35:51:05:10:27:68:ba:83:ad:8c:79:65:3c:30: 32:78:ba:29:f5:8d:58:49:ef:0a:5d:1e:c9:75:4f: 26:7c:47:3d:10:71:1b:99:20:05:1d:13:8b:25:af: bd:c9:1a:62:a2:c4:6d:53:78:a7:1f:56:e3:dd:28: 0e:82:5c:af:3e:98:f9:ac:f9:f4:c2:73:c3:b4:80: e4:18:84:6f:67:a6:a8:f1:1c:16:e3:45:db:4f:96: 18:c5:61:de:3e:d6:94:91:7c:b8:c8:52:5c:0d:61: 77:11:3b:d2:0a:10:cd:e6:a4:57:52:0a:60:e0:13: e1:c2:e3:d8:62:e0:ab:d7:72:a5:81:43:3f:54:ce: 4d:b1:95:0b:13:ee:da:7f:93:73:05:a3:b0:73:95: 81:ab:e0:1d:0b:0f:0a:6a:99:c9:fb:d1:03:28:39: 40:b8:2c:16:36:0a:49:79:18:9d:02:a7:99:67:d2: 3d:e4:50:60:a0:b1:8c:d2:d8:4f:6b:23:4c:bf:c7: d6:bd:a1:ff:69:cd:c0:a0:bf:ab:05:cd:b2:b2:06: cc:06:d2:27:46:52:5a:d7:5d:53:96:09:d6:9a:f0: 1d:6f:7c:01:1e:63:87:fc:07:12:f1:60:0c:e4:6a: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:3E:84:BE:67:B8:86:A9:4C:64:F7:B4:FC:3F:59:4C:48:01:BA X509v3 Authority Key Identifier: keyid:42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ad:02:0c:cf:23:0c:c5:10:1e:5c:d7:cc:3c:a9:ed:a7:57: 6c:75:35:61:90:ca:e7:a0:09:9d:9a:fb:1c:04:85:ec:3e:66: 81:7b:44:f9:bd:8e:fe:5c:58:bb:b6:1c:ab:81:44:33:d4:2c: cf:9d:ef:49:b4:52:d7:7a:09:0f:66:07:7c:eb:b0:cc:cb:37: e6:26:c9:9f:8e:40:0a:e3:da:7f:a8:a4:24:58:06:5f:72:9f: 9f:2b:db:87:2e:c6:81:6d:a4:92:21:54:71:6f:d7:43:76:94: ac:0e:73:90:f0:ed:7a:1c:a9:04:59:10:c9:e8:70:3b:2d:44: 31:d1:18:3e:bb:5d:6c:bd:10:60:7d:32:02:9a:37:ca:d2:58: 82:d2:d6:36:bd:07:ff:45:18:77:cb:fa:cc:a8:08:3f:4a:fd: 83:a3:f2:4c:29:84:e5:be:75:43:d5:83:7e:41:c9:79:68:46: f5:79:16:fb:f6:aa:c0:bf:66:cd:44:54:15:ba:6c:e8:84:6c: 86:1a:da:1c:c6:80:f3:0f:55:0c:e9:c0:0a:5a:61:5e:2b:20: 3a:ce:b7:0b:32:6c:a2:0e:1c:fa:c4:f6:34:d7:37:11:4d:4c: aa:59:23:b3:18:e3:dc:68:51:27:e4:25:50:b5:c7:e1:ac:4c: 4c:44:08:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQMPOddj8xbCcDZB+GbQ/aBRgla4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0 MTZDNjFDRTAeFw0yNjA3MDcwNzA4MzZaFw0yNjA3MDgwNzM1MzZaMDMxMTAvBgNV BAMTKDBDNUMzRTg0QkU2N0I4ODZBOTRDNjRGN0I0RkMzRjU5NEM0ODAxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJOLRPhnd8l6zyY3WXkBI1UQUQ J2i6g62MeWU8MDJ4uin1jVhJ7wpdHsl1TyZ8Rz0QcRuZIAUdE4slr73JGmKixG1T eKcfVuPdKA6CXK8+mPms+fTCc8O0gOQYhG9npqjxHBbjRdtPlhjFYd4+1pSRfLjI UlwNYXcRO9IKEM3mpFdSCmDgE+HC49hi4KvXcqWBQz9Uzk2xlQsT7tp/k3MFo7Bz lYGr4B0LDwpqmcn70QMoOUC4LBY2Ckl5GJ0Cp5ln0j3kUGCgsYzS2E9rI0y/x9a9 of9pzcCgv6sFzbKyBswG0idGUlrXXVOWCdaa8B1vfAEeY4f8BxLxYAzkarknAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDFw+hL5nuIapTGT3tPw/WUxIAbowHwYDVR0j BBgwFoAUQp8eWxinp8k25/Kl1vSPQUFsYc4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDcyMzk3MS8wLzQyOUYxRTVCMThBN0E3QzkzNkU3RjJBNUQ2RjQ4 RjQxNDE2QzYxQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjI0NzMwNDA3MjM5NzEvMC80MjlGMUU1QjE4QTdB N0M5MzZFN0YyQTVENkY0OEY0MTQxNkM2MUNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW60CDM8jDMUQ HlzXzDyp7adXbHU1YZDK56AJnZr7HASF7D5mgXtE+b2O/lxYu7Ycq4FEM9Qsz53v SbRS13oJD2YHfOuwzMs35ibJn45ACuPaf6ikJFgGX3Kfnyvbhy7GgW2kkiFUcW/X Q3aUrA5zkPDtehypBFkQyehwOy1EMdEYPrtdbL0QYH0yApo3ytJYgtLWNr0H/0UY d8v6zKgIP0r9g6PyTCmE5b51Q9WDfkHJeWhG9XkW+/aqwL9mzURUFbps6IRshhra HMaA8w9VDOnAClphXisgOs63CzJsog4c+sT2NNc3EU1Mqlkjsxjj3GhRJ+QlULXH 4axMTEQIkg== -----END CERTIFICATE-----Generated at Tue Jul 7 10:45:51 2026 by rpki-client