$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: YIv7rlZ4iR0DLpvES7RzC6KfFzr3j63CfYDUrsZY68I= Subject key identifier: A7:0D:E9:29:82:53:B7:BD:5F:A3:94:36:71:7B:DC:79:23:2B:D6:4B Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 7DFF4A25190D182C7FCBCE160EE7E587611DE33F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 97 Signing time: Fri 28 Aug 2026 06:48:22 +0000 Manifest this update: Fri 28 Aug 2026 06:43:22 +0000 Manifest next update: Mon 31 Aug 2026 11:53:22 +0000 Files and hashes: 1: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: 4Gqy92C33nvOGc+IWs+uyGWVnCtfOFiVJCHa4PiImqk=) 2: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 3: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) 4: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ff:4a:25:19:0d:18:2c:7f:cb:ce:16:0e:e7:e5:87:61:1d:e3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Aug 28 06:43:22 2026 GMT Not After : Aug 31 11:53:22 2026 GMT Subject: CN=A70DE9298253B7BD5FA39436717BDC79232BD64B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:ec:f4:37:e9:fd:d8:ea:85:e1:ba:4c:96: 87:86:4e:24:1d:3d:ef:1b:32:8e:6a:b3:18:5e:fb: ab:7a:11:27:8a:ee:13:18:1c:55:b1:71:9d:95:a6: 55:d0:d5:55:9b:ea:8a:4f:22:44:03:c1:d3:53:c7: 97:fe:76:87:6b:39:b8:34:f6:e2:1f:ab:b9:0e:7f: d9:ab:c5:3d:59:81:d3:08:2b:bb:41:ed:b1:99:a8: 98:c5:8f:99:da:ec:f6:c3:c5:78:f6:9a:ac:df:9d: 66:1f:2b:54:03:6a:68:ec:30:07:60:17:d6:03:b4: f2:3a:5a:79:17:89:70:4e:08:b5:6e:34:50:2f:92: 53:b3:70:e7:ca:de:bf:a7:30:56:56:94:e0:1c:6a: 18:cc:e0:e3:aa:a8:1c:84:ab:8a:3d:03:b7:36:69: 03:fa:61:af:00:6e:98:6d:bb:bb:fa:c6:3e:db:e6: 68:d5:cf:64:27:0b:b0:9e:07:50:6c:1f:c5:51:ff: 8c:66:4a:20:7c:3b:27:6e:07:18:1f:6c:03:34:d5: ad:16:6b:fc:48:2d:1c:06:d8:af:c9:d0:85:6b:b8: 90:ec:a7:18:4d:62:45:7c:42:0b:90:0c:c9:c3:9b: 81:81:59:7c:b4:32:36:61:6a:6d:2f:bd:bc:2a:7a: 73:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0D:E9:29:82:53:B7:BD:5F:A3:94:36:71:7B:DC:79:23:2B:D6:4B X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3f:f4:35:53:08:26:35:d7:46:ae:36:e0:9f:c5:b8:33:af: f8:bb:30:7f:ea:e6:25:bb:32:36:b5:e3:58:9f:93:bd:0a:3d: 6e:a0:d5:e2:d7:9d:14:d7:2b:96:12:64:dc:43:2b:f7:d3:7a: be:61:c4:e5:d0:be:98:18:2d:04:c1:3c:c5:e3:d7:37:55:8f: 6f:57:4b:31:ad:47:c9:26:d1:b9:45:ae:ef:ed:46:7f:5d:26: 18:85:8d:72:d0:a8:26:8b:87:11:f6:4a:b7:4f:ab:4e:8c:e0: 6d:2a:24:67:78:14:47:e5:6b:d6:32:03:61:99:93:07:e2:8c: f5:fe:04:2a:49:c2:94:40:f2:14:98:7f:4d:a6:16:fa:98:f8: 9a:9f:da:ab:93:9b:de:69:61:fa:63:cf:d1:2d:10:d9:10:97: 1c:e8:8a:7b:d3:ca:50:a3:d5:78:8e:9e:19:0b:84:ab:0d:b3: 59:9c:1e:1a:7e:aa:a0:25:f8:65:f9:e6:3f:24:a8:42:aa:ca: 73:01:b9:e3:90:f3:5f:86:b4:15:17:c4:96:63:0c:3a:79:e7: e2:11:78:df:ce:fe:fa:07:dc:eb:f1:53:c3:36:ad:96:9a:c6: 53:e8:5b:9b:14:a2:88:0e:34:76:4b:da:02:5d:b6:e8:58:6c: ff:d9:82:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUff9KJRkNGCx/y84WDuflh2Ed4z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA4MjgwNjQzMjJaFw0yNjA4MzExMTUzMjJaMDMxMTAvBgNV BAMTKEE3MERFOTI5ODI1M0I3QkQ1RkEzOTQzNjcxN0JEQzc5MjMyQkQ2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgy+z0N+n92OqF4bpMloeGTiQd Pe8bMo5qsxhe+6t6ESeK7hMYHFWxcZ2VplXQ1VWb6opPIkQDwdNTx5f+dodrObg0 9uIfq7kOf9mrxT1ZgdMIK7tB7bGZqJjFj5na7PbDxXj2mqzfnWYfK1QDamjsMAdg F9YDtPI6WnkXiXBOCLVuNFAvklOzcOfK3r+nMFZWlOAcahjM4OOqqByEq4o9A7c2 aQP6Ya8Abphtu7v6xj7b5mjVz2QnC7CeB1BsH8VR/4xmSiB8OyduBxgfbAM01a0W a/xILRwG2K/J0IVruJDspxhNYkV8QguQDMnDm4GBWXy0MjZham0vvbwqenNBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpw3pKYJTt71fo5Q2cXvceSMr1kswHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj/0NVMIJjXX Rq424J/FuDOv+Lswf+rmJbsyNrXjWJ+TvQo9bqDV4tedFNcrlhJk3EMr99N6vmHE 5dC+mBgtBME8xePXN1WPb1dLMa1HySbRuUWu7+1Gf10mGIWNctCoJouHEfZKt0+r TozgbSokZ3gUR+Vr1jIDYZmTB+KM9f4EKknClEDyFJh/TaYW+pj4mp/aq5Ob3mlh +mPP0S0Q2RCXHOiKe9PKUKPVeI6eGQuEqw2zWZweGn6qoCX4ZfnmPySoQqrKcwG5 45DzX4a0FRfElmMMOnnn4hF4387++gfc6/FTwzatlprGU+hbmxSiiA40dkvaAl22 6Fhs/9mCJg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:03:12 2026 by rpki-client