$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json) Hash identifier: Pja6YEW3OI6wqqXDkg175yWF2i1CgdoJoq8jnGTwSgs= Subject key identifier: 95:53:A8:B1:4C:90:81:20:A3:01:E0:D0:CF:82:47:C9:1B:7D:F2:C6 Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Certificate serial: 5CEBCC6AD5D889DD8C84090A0128C67B688D7465 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft Manifest number: 94 Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 14:57:53 +0000 Files and hashes: 1: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=) 2: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: 6t971qRWGwtH9KRFdyCHkEtOIrA5oQWG3IEsjeaziEs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:eb:cc:6a:d5:d8:89:dd:8c:84:09:0a:01:28:c6:7b:68:8d:74:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 14:57:53 2026 GMT Subject: CN=9553A8B14C908120A301E0D0CF8247C91B7DF2C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:37:e5:49:5d:8e:52:cd:b0:4b:7f:62:d6: 97:4e:2a:fc:35:09:23:db:de:ff:cd:96:ae:31:a2: 63:1e:6f:ee:e0:97:60:d9:2b:bf:cf:5e:51:10:6c: 33:87:84:46:cd:d9:6e:7b:37:30:f3:65:66:fc:58: 0c:00:16:09:54:7b:60:94:7f:23:0b:26:19:91:dc: 24:d7:70:58:43:82:3b:f2:8a:5b:d2:c8:23:f2:47: b9:bb:98:66:0f:1d:fa:c3:a7:d1:6d:01:ee:89:93: c5:a4:f7:21:a3:0c:fc:90:45:3d:35:0f:21:3d:89: 17:f0:96:c3:c2:bb:37:9e:00:fb:61:27:79:19:d0: e3:63:4f:51:0f:09:f1:4d:8f:d9:07:68:6b:22:e7: fb:c0:e6:54:38:a6:c5:79:12:64:b4:80:c0:ce:f7: fb:63:39:98:e9:5d:42:f3:d4:ca:93:9a:8b:17:41: c2:49:cc:f8:ab:a2:fd:dc:db:20:86:ca:3e:4c:b7: 97:34:11:b5:30:63:02:5e:50:ed:aa:74:6d:d6:99: ef:25:f1:9b:ec:6e:30:3d:c3:b1:a7:0e:d0:f8:8e: 05:d0:9a:b0:77:db:3b:63:82:bd:e3:4b:d0:77:d1: 5a:f6:a2:fd:31:f8:77:93:4b:e8:b7:73:dd:05:07: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:53:A8:B1:4C:90:81:20:A3:01:E0:D0:CF:82:47:C9:1B:7D:F2:C6 X509v3 Authority Key Identifier: keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:fe:64:e0:e4:65:e7:a1:45:5f:8e:93:5c:9d:15:77:6f: d1:55:f0:1a:31:29:ee:84:09:46:c3:85:2e:cb:69:92:2c:e0: 4d:f0:e6:b4:46:b4:87:2a:65:4c:ad:87:9b:a3:fb:84:4e:8d: d8:1b:66:c5:90:2c:d0:29:a1:7c:9d:00:13:1f:52:38:42:db: f3:a6:ad:c0:7b:56:67:ca:4b:15:18:be:0a:aa:a9:6b:e7:47: 95:02:4f:5e:bc:61:17:c1:cf:40:fc:da:9b:19:21:55:ce:68: 65:c9:81:a6:22:56:45:08:52:71:5a:6b:ed:fd:25:c9:f6:26: 9e:2b:86:b3:51:5d:5a:c4:89:f1:c3:c7:aa:1b:42:95:d7:6a: ba:39:c9:d5:c6:3e:f3:1f:6b:cc:39:f0:b3:ff:fc:a7:ea:70: 76:63:0e:78:9a:56:46:aa:a9:bb:93:8f:25:b4:71:ad:33:10: 51:fe:19:67:af:42:60:25:64:b6:47:61:d5:04:9b:83:de:6d: 2f:05:06:ab:e1:8a:ae:06:dc:7e:67:79:d4:7e:f2:41:ca:3b: 3f:7d:46:d8:b4:3d:7a:15:ae:73:44:9b:32:e5:a5:f3:49:14: d6:67:53:1e:45:96:7a:e5:9b:c4:ef:64:22:9b:26:be:fb:98: f9:57:49:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXOvMatXYid2MhAkKASjGe2iNdGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODRE MTAzMUNDQjAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzExNDU3NTNaMDMxMTAvBgNV BAMTKDk1NTNBOEIxNEM5MDgxMjBBMzAxRTBEMENGODI0N0M5MUI3REYyQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLjflSV2OUs2wS39i1pdOKvw1 CSPb3v/Nlq4xomMeb+7gl2DZK7/PXlEQbDOHhEbN2W57NzDzZWb8WAwAFglUe2CU fyMLJhmR3CTXcFhDgjvyilvSyCPyR7m7mGYPHfrDp9FtAe6Jk8Wk9yGjDPyQRT01 DyE9iRfwlsPCuzeeAPthJ3kZ0ONjT1EPCfFNj9kHaGsi5/vA5lQ4psV5EmS0gMDO 9/tjOZjpXULz1MqTmosXQcJJzPirov3c2yCGyj5Mt5c0EbUwYwJeUO2qdG3Wme8l 8ZvsbjA9w7GnDtD4jgXQmrB32ztjgr3jS9B30Vr2ov0x+HeTS+i3c90FB09JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlVOosUyQgSCjAeDQz4JHyRt98sYwHwYDVR0j BBgwFoAUKU9KN60tCkWWJJ65SOgrhNEDHMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1MDY3OTYyNzA1NTExOS8wLzI5NEY0QTM3QUQyRDBBNDU5NjI0OUVCOTQ4RTgy Qjg0RDEwMzFDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTA2Nzk2MjcwNTUxMTkvMC8yOTRGNEEzN0FEMkQw QTQ1OTYyNDlFQjk0OEU4MkI4NEQxMDMxQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVi7+ZODkZeeh RV+Ok1ydFXdv0VXwGjEp7oQJRsOFLstpkizgTfDmtEa0hyplTK2Hm6P7hE6N2Btm xZAs0CmhfJ0AEx9SOELb86atwHtWZ8pLFRi+Cqqpa+dHlQJPXrxhF8HPQPzamxkh Vc5oZcmBpiJWRQhScVpr7f0lyfYmniuGs1FdWsSJ8cPHqhtClddqujnJ1cY+8x9r zDnws//8p+pwdmMOeJpWRqqpu5OPJbRxrTMQUf4ZZ69CYCVktkdh1QSbg95tLwUG q+GKrgbcfmd51H7yQco7P31G2LQ9ehWuc0SbMuWl80kU1mdTHkWWeuWbxO9kIpsm vvuY+VdJHA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:26 2026 by rpki-client