$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft File: 2949D20EB3FEA14E986D0754348A679E44983AEE.mft (raw, json) Hash identifier: hqlO1M72R/7L68ISpaf0BcSKzqnJw+JNtmUKPC1rFew= Subject key identifier: C7:36:AD:91:AD:8A:6A:60:FC:B6:5D:34:87:70:BE:E9:C0:BC:D6:48 Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 40BC5425EC79D3CBFBB23780645D5CD21C759469 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft Manifest number: 5B Signing time: Tue 14 Jul 2026 07:30:41 +0000 Manifest this update: Tue 14 Jul 2026 07:25:41 +0000 Manifest next update: Wed 15 Jul 2026 08:41:41 +0000 Files and hashes: 1: 3130332e34382e3233332e302f32342d3234203d3e2034383437.roa (hash: LDIs8/M2gOfS+D/dmGkDo7bBaDOrz66D/eIJXKjNX54=) 2: 2949D20EB3FEA14E986D0754348A679E44983AEE.crl (hash: PSM5OwwLVkyQlmuYII1DutnsfHiVeZpY5leDP8mlHZk=) 3: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (hash: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs=) 4: 3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (hash: 16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:bc:54:25:ec:79:d3:cb:fb:b2:37:80:64:5d:5c:d2:1c:75:94:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: Jul 14 07:25:41 2026 GMT Not After : Jul 15 08:41:41 2026 GMT Subject: CN=C736AD91AD8A6A60FCB65D348770BEE9C0BCD648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:b1:41:6b:f3:0d:93:e5:b2:79:b4:6d:92: 61:5f:b6:da:c5:fb:d9:cb:3e:d9:7e:64:09:ca:3a: bf:a8:05:7f:9e:12:a2:94:c1:5e:58:59:eb:a2:8d: bf:19:da:3c:8a:7d:46:bc:85:a7:60:be:6b:a2:ea: 6b:07:97:eb:fb:0f:e3:51:6c:26:90:76:3a:74:3e: b6:87:d8:13:0d:2f:78:84:a7:36:99:60:f9:e5:60: 72:1b:6a:4f:80:2a:bb:cb:18:0f:5b:5f:66:61:cf: f4:0d:37:61:b0:dd:56:7d:6b:28:e1:f0:2a:3a:10: ed:c1:55:b7:68:70:44:eb:24:96:ac:1b:a8:95:03: a5:06:3a:f1:9b:9e:3d:21:49:b8:21:20:73:6c:64: 4e:b8:0c:18:a0:39:fc:80:90:76:5d:29:3a:67:53: 3a:70:96:79:b1:a0:9f:6c:54:e0:8d:76:f3:3b:70: ea:25:20:a8:ce:75:b5:61:1f:16:c6:c1:ef:b0:f2: 52:93:5c:9c:37:c2:73:80:76:1b:a3:a6:9a:84:a6: dd:a1:1d:bc:ad:3e:7d:0d:87:5a:94:c3:31:5f:7c: e5:21:16:a6:cc:10:5d:b5:88:ed:32:ce:f7:8c:9f: 05:6d:a4:4e:97:5f:bf:8c:8a:40:38:01:28:ab:8c: d5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:36:AD:91:AD:8A:6A:60:FC:B6:5D:34:87:70:BE:E9:C0:BC:D6:48 X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:31:a2:74:d5:90:9c:84:56:eb:54:f5:17:8a:45:af:d7:2f: 50:1e:7c:29:af:ec:85:2b:63:61:17:9f:74:27:60:2f:76:99: 49:f9:3f:c4:b5:de:eb:93:dc:13:c0:48:f4:b8:8b:19:57:67: 85:e1:a4:a2:b1:27:10:ad:ec:2b:fa:6a:ae:50:10:e8:a6:93: 33:34:6f:6e:9c:aa:69:de:32:6b:59:51:85:7b:9e:7e:eb:93: 6a:f2:58:99:96:fc:fd:e3:c7:32:8a:7c:be:81:63:f8:2b:37: ad:d9:6d:57:49:cc:6c:49:1f:3a:f5:8d:77:81:71:a8:cf:84: 17:ac:4f:f8:34:a3:f9:03:ce:b4:9a:79:4a:dc:70:ad:32:f1: 89:de:5c:7c:05:52:65:a8:14:72:9f:41:28:91:c7:d3:43:1b: 9a:e2:e9:61:b6:18:10:e2:00:a5:4f:69:b2:b3:b1:c6:34:93: 87:11:4b:86:9c:78:10:0e:13:f9:df:df:d0:6c:3c:8b:a0:26: 56:55:28:ad:d9:80:e3:7a:4a:ba:41:62:b0:71:81:6d:1f:98: 83:a0:bf:5d:25:24:49:55:a1:b1:f5:79:e1:e0:a8:e2:a5:6a: 79:24:65:7e:3f:b9:45:45:71:e7:48:bd:ac:ac:06:fe:76:15: 93:f1:7a:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQLxUJex508v7sjeAZF1c0hx1lGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA3MTQwNzI1NDFaFw0yNjA3MTUwODQxNDFaMDMxMTAvBgNV BAMTKEM3MzZBRDkxQUQ4QTZBNjBGQ0I2NUQzNDg3NzBCRUU5QzBCQ0Q2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTrFBa/MNk+WyebRtkmFfttrF +9nLPtl+ZAnKOr+oBX+eEqKUwV5YWeuijb8Z2jyKfUa8hadgvmui6msHl+v7D+NR bCaQdjp0PraH2BMNL3iEpzaZYPnlYHIbak+AKrvLGA9bX2Zhz/QNN2Gw3VZ9ayjh 8Co6EO3BVbdocETrJJasG6iVA6UGOvGbnj0hSbghIHNsZE64DBigOfyAkHZdKTpn UzpwlnmxoJ9sVOCNdvM7cOolIKjOdbVhHxbGwe+w8lKTXJw3wnOAdhujppqEpt2h HbytPn0Nh1qUwzFffOUhFqbMEF21iO0yzveMnwVtpE6XX7+MikA4ASirjNVBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxzatka2KamD8tl00h3C+6cC81kgwHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0NDU4NjUyMDU1MzA2MzkvMC8yOTQ5RDIwRUIzRkVB MTRFOTg2RDA3NTQzNDhBNjc5RTQ0OTgzQUVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzGidNWQnIRW 61T1F4pFr9cvUB58Ka/shStjYRefdCdgL3aZSfk/xLXe65PcE8BI9LiLGVdnheGk orEnEK3sK/pqrlAQ6KaTMzRvbpyqad4ya1lRhXuefuuTavJYmZb8/ePHMop8voFj +Cs3rdltV0nMbEkfOvWNd4FxqM+EF6xP+DSj+QPOtJp5StxwrTLxid5cfAVSZagU cp9BKJHH00MbmuLpYbYYEOIApU9psrOxxjSThxFLhpx4EA4T+d/f0Gw8i6AmVlUo rdmA43pKukFisHGBbR+Yg6C/XSUkSVWhsfV54eCo4qVqeSRlfj+5RUVx50i9rKwG /nYVk/F64w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:52 2026 by rpki-client