$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: 1p31e9Z7qELE2BQuhUvnAlxKVqjtV0wAfE7gGE3LZic= Subject key identifier: 42:17:3C:9E:A3:87:5B:D0:9A:C9:F9:C7:A1:17:DB:75:9B:E8:83:F7 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 7838B45166AD84F6BA01BC0E9C03785233439C95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 66 Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 09:49:53 +0000 Files and hashes: 1: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 2: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 3: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 4: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 5: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 6: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 7: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) 8: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 9: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) 10: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 11: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: i8Oi55uCooJMAVlamVZbItsJ6f1Dc/M5aHEh1IVoBEI=) 12: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 13: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 14: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) 15: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:38:b4:51:66:ad:84:f6:ba:01:bc:0e:9c:03:78:52:33:43:9c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 09:49:53 2026 GMT Subject: CN=42173C9EA3875BD09AC9F9C7A117DB759BE883F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:20:85:ec:26:2e:84:ce:62:1b:5b:37:43: 86:04:a3:cc:84:e5:f5:be:ef:eb:f9:53:ca:a8:e7: cf:22:4a:b8:c2:e5:81:27:ae:39:29:77:95:24:20: 0c:9a:25:f8:ed:ed:c3:e0:e3:fd:11:68:02:c3:21: bf:35:b5:80:48:87:95:b7:86:62:38:b2:f3:0f:44: d4:80:a7:84:0b:d4:01:af:24:21:83:fe:fd:c7:18: 4d:53:71:f5:3b:dc:9c:32:ce:e8:66:74:6a:ea:65: c6:cf:b0:fe:bf:24:5f:e6:78:4f:ec:71:c2:8f:a0: 74:d4:b7:89:2f:e5:ab:ee:d0:85:52:a8:2a:a0:d3: ac:f5:22:62:56:39:c4:ae:00:d5:da:2b:d3:f0:92: cd:40:c5:d5:42:de:6c:c0:16:32:fd:3e:40:00:b2: c9:14:30:46:33:bd:3f:f5:fa:26:df:b1:01:9b:c8: a5:84:8c:09:84:39:ab:39:39:b9:64:bf:a6:30:d6: 74:69:07:9c:57:84:ce:bc:cf:2a:5e:fd:e5:90:c6: 7c:30:e9:0e:f6:6c:78:85:69:e4:d1:48:65:2d:db: b0:34:e7:08:37:dc:db:78:9d:eb:42:ad:1b:90:a1: b3:9d:0e:eb:f5:e1:9b:4a:24:1a:ec:0c:a1:d7:9d: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:3C:9E:A3:87:5B:D0:9A:C9:F9:C7:A1:17:DB:75:9B:E8:83:F7 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ef:f4:b8:0e:98:f0:95:fe:40:0d:8c:0a:d5:d2:82:12:fd: 04:99:2f:8e:22:5c:7b:51:e6:a7:c9:ad:9f:60:80:69:8e:ba: 17:53:4f:64:f3:a8:83:58:ea:49:be:9d:38:9b:11:14:3e:01: 18:c8:9e:a1:e4:04:3b:72:75:da:90:43:4f:60:19:67:ed:ca: df:df:d6:93:48:a8:ff:d3:c3:9a:a8:94:3a:4f:2c:58:3c:79: 9a:aa:ec:69:09:82:8d:b2:72:ae:43:72:bf:73:e6:f6:f4:59: 28:8c:3b:85:20:ce:16:e3:73:84:8c:be:b0:f3:8d:1a:5d:e1: 44:95:ba:a5:87:b1:0a:0f:ad:05:89:24:88:06:43:18:6d:8b: 38:72:f1:dd:06:5d:9d:77:d2:71:80:03:f1:b3:7e:5f:4c:b1: 26:40:b7:cd:df:1e:72:aa:34:98:3b:c2:43:28:5a:72:21:0d: a7:41:75:57:08:4b:90:d7:5a:15:3d:d0:d7:43:c7:5f:8b:43: cf:39:ed:00:e6:85:db:70:79:22:8f:b7:7b:bf:0f:05:e0:a6: 61:2f:1a:dd:ae:fc:1d:94:b2:31:eb:b5:02:17:8e:e7:88:ac: ca:58:73:6a:f4:c7:a3:cd:6b:96:94:3b:45:bc:cf:4c:1b:f3: 91:d6:c2:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeDi0UWathPa6AbwOnAN4UjNDnJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzEwOTQ5NTNaMDMxMTAvBgNV BAMTKDQyMTczQzlFQTM4NzVCRDA5QUM5RjlDN0ExMTdEQjc1OUJFODgzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSyCF7CYuhM5iG1s3Q4YEo8yE 5fW+7+v5U8qo588iSrjC5YEnrjkpd5UkIAyaJfjt7cPg4/0RaALDIb81tYBIh5W3 hmI4svMPRNSAp4QL1AGvJCGD/v3HGE1TcfU73JwyzuhmdGrqZcbPsP6/JF/meE/s ccKPoHTUt4kv5avu0IVSqCqg06z1ImJWOcSuANXaK9Pwks1AxdVC3mzAFjL9PkAA sskUMEYzvT/1+ibfsQGbyKWEjAmEOas5Oblkv6Yw1nRpB5xXhM68zype/eWQxnww 6Q72bHiFaeTRSGUt27A05wg33Nt4netCrRuQobOdDuv14ZtKJBrsDKHXnUUDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQhc8nqOHW9CayfnHoRfbdZvog/cwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe/0uA6Y8JX+ QA2MCtXSghL9BJkvjiJce1Hmp8mtn2CAaY66F1NPZPOog1jqSb6dOJsRFD4BGMie oeQEO3J12pBDT2AZZ+3K39/Wk0io/9PDmqiUOk8sWDx5mqrsaQmCjbJyrkNyv3Pm 9vRZKIw7hSDOFuNzhIy+sPONGl3hRJW6pYexCg+tBYkkiAZDGG2LOHLx3QZdnXfS cYAD8bN+X0yxJkC3zd8ecqo0mDvCQyhaciENp0F1VwhLkNdaFT3Q10PHX4tDzznt AOaF23B5Io+3e78PBeCmYS8a3a78HZSyMeu1AheO54isylhzavTHo81rlpQ7RbzP TBvzkdbChA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:25 2026 by rpki-client