$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: ObvJtYiDORKkEAX1jrMcQVWm/3BxxPijfpXrgo71+zI= Subject key identifier: EB:F3:74:6D:B3:BC:F4:F2:C6:78:99:9A:DF:58:34:3F:CB:A9:B9:72 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 552000D275C118A93796BF96771D03AD008E4E8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: A8 Signing time: Mon 12 Oct 2026 20:12:20 +0000 Manifest this update: Mon 12 Oct 2026 20:07:20 +0000 Manifest next update: Fri 16 Oct 2026 06:43:20 +0000 Files and hashes: 1: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: Lf2WQWLIDA2z4t8M6oV899STdlUryoZWh4XIzaFKctk=) 2: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:20:00:d2:75:c1:18:a9:37:96:bf:96:77:1d:03:ad:00:8e:4e:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Oct 12 20:07:20 2026 GMT Not After : Oct 16 06:43:20 2026 GMT Subject: CN=EBF3746DB3BCF4F2C678999ADF58343FCBA9B972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:e0:ba:45:46:be:47:53:7d:d7:72:1b:12: c0:e5:74:23:3e:fd:77:e5:dd:5a:4d:9e:37:2a:b5: d4:5c:4e:fb:9d:6d:55:04:05:a4:cd:9b:ac:f4:d2: 90:6b:84:4e:a0:ad:28:7b:c9:5e:89:8d:cb:f4:20: 45:82:b3:86:a3:4a:fe:ed:80:18:50:1e:4f:36:4f: e5:cd:d9:e7:04:3d:f4:ab:52:cf:59:4f:57:4b:a0: 7f:43:86:94:1e:28:86:95:36:da:3e:04:7e:69:19: 2e:36:67:ff:84:55:ce:29:42:5e:88:d1:59:43:11: 49:73:11:bd:41:f8:e4:de:b0:16:5c:2a:d9:fd:8b: 5e:54:78:54:b9:bc:54:80:f0:81:ca:6c:ff:e2:d0: 2f:e4:84:c5:00:3b:ef:7e:1b:c9:26:ab:9b:59:8b: 0a:fe:34:d8:0a:8b:29:c6:05:92:1e:83:3c:20:92: 26:73:a2:f4:8c:b8:ef:eb:21:8b:9b:49:10:a9:c1: 82:89:e4:66:79:c5:3d:a6:2e:a8:6d:e6:ea:98:e8: d8:51:03:bd:18:d4:63:28:66:cb:13:7d:5d:5d:3a: 5f:be:1f:cd:49:33:82:c0:4f:6c:1c:2f:de:95:4f: 04:c9:6b:f7:a1:3b:f2:56:c5:f5:20:70:06:64:29: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:74:6D:B3:BC:F4:F2:C6:78:99:9A:DF:58:34:3F:CB:A9:B9:72 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9b:8e:1c:5b:4b:ff:88:47:b6:6b:30:b9:07:f8:c9:c3:2e: 24:ea:1d:d7:be:0a:c0:c0:93:fa:86:0a:c9:68:42:e9:48:44: 29:bd:ba:22:68:9f:20:97:a0:de:03:c5:42:b1:03:c4:b3:f8: c9:61:9f:10:12:77:e3:e1:c7:3c:c2:f9:dc:04:9f:c0:bf:4e: bb:ed:6e:23:14:b3:44:ab:11:78:24:ea:a0:84:2e:d7:65:73: 5f:f5:30:85:40:57:63:71:5d:ae:29:9a:fa:10:23:af:09:8b: 63:74:13:41:ca:97:f6:ba:33:cb:e2:a3:83:27:d8:52:ce:42: b3:7a:46:c2:d7:35:80:d1:af:99:9d:08:68:57:a0:bd:88:d9: d4:24:ee:be:bd:a5:0f:03:97:8e:f5:23:dc:10:7f:31:aa:fd: b1:e9:db:3a:db:40:c5:67:4b:68:23:09:ca:44:3b:5f:fd:48: 9e:78:4d:c9:58:35:7e:c6:c0:8c:86:e8:90:ba:47:e9:ee:b0: 71:25:2d:4e:c7:51:ff:e4:42:16:3d:88:d9:73:eb:3b:2d:3a: 20:68:3e:79:58:5f:9b:de:ee:f5:1b:ca:56:7b:90:3d:68:4c: 4c:d6:07:4d:d8:e9:38:e1:5b:b8:7f:16:e1:d1:06:02:0e:ca: 64:67:6c:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVSAA0nXBGKk3lr+Wdx0DrQCOTo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjEwMTIyMDA3MjBaFw0yNjEwMTYwNjQzMjBaMDMxMTAvBgNV BAMTKEVCRjM3NDZEQjNCQ0Y0RjJDNjc4OTk5QURGNTgzNDNGQ0JBOUI5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEauC6RUa+R1N913IbEsDldCM+ /Xfl3VpNnjcqtdRcTvudbVUEBaTNm6z00pBrhE6grSh7yV6Jjcv0IEWCs4ajSv7t gBhQHk82T+XN2ecEPfSrUs9ZT1dLoH9DhpQeKIaVNto+BH5pGS42Z/+EVc4pQl6I 0VlDEUlzEb1B+OTesBZcKtn9i15UeFS5vFSA8IHKbP/i0C/khMUAO+9+G8kmq5tZ iwr+NNgKiynGBZIegzwgkiZzovSMuO/rIYubSRCpwYKJ5GZ5xT2mLqht5uqY6NhR A70Y1GMoZssTfV1dOl++H81JM4LAT2wcL96VTwTJa/ehO/JWxfUgcAZkKSx9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6/N0bbO89PLGeJma31g0P8upuXIwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZuOHFtL/4hH tmswuQf4ycMuJOod174KwMCT+oYKyWhC6UhEKb26ImifIJeg3gPFQrEDxLP4yWGf EBJ34+HHPML53ASfwL9Ou+1uIxSzRKsReCTqoIQu12VzX/UwhUBXY3Fdrima+hAj rwmLY3QTQcqX9rozy+KjgyfYUs5Cs3pGwtc1gNGvmZ0IaFegvYjZ1CTuvr2lDwOX jvUj3BB/Mar9senbOttAxWdLaCMJykQ7X/1InnhNyVg1fsbAjIbokLpH6e6wcSUt TsdR/+RCFj2I2XPrOy06IGg+eVhfm97u9RvKVnuQPWhMTNYHTdjpOOFbuH8W4dEG Ag7KZGds+w== -----END CERTIFICATE-----Generated at Tue Oct 13 22:50:33 2026 by rpki-client