$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: E0OnQGteENyd2qI3irBSxzALvT5xo9FxGqVFOfhmvMI= Subject key identifier: 8B:DB:2E:AF:9D:08:17:BF:6C:04:D9:6D:BC:18:B3:91:10:26:1A:2C Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 61FE22E79576C67C1BD6F99AF82519C10221890A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 2B Signing time: Tue 14 Jul 2026 18:06:50 +0000 Manifest this update: Tue 14 Jul 2026 18:01:50 +0000 Manifest next update: Wed 15 Jul 2026 18:11:50 +0000 Files and hashes: 1: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) 2: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 3: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 4: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) 5: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 6: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: xz1Au/WoNQZUkfIIXdLVGhGUgffZy/zI60PBx9BBPNI=) 7: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 8: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) 9: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 10: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 11: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 12: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 13: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 14: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 15: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fe:22:e7:95:76:c6:7c:1b:d6:f9:9a:f8:25:19:c1:02:21:89:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jul 14 18:01:50 2026 GMT Not After : Jul 15 18:11:50 2026 GMT Subject: CN=8BDB2EAF9D0817BF6C04D96DBC18B39110261A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:68:98:6f:17:f0:4b:c7:b1:19:3b:09:3d: 85:2b:16:c1:f1:3c:3f:03:9b:31:26:47:b2:e0:4c: 38:17:be:8e:d1:bf:0d:d1:9e:1b:3f:da:f4:55:18: 1d:c2:0d:2e:58:6a:c9:b2:41:b1:f9:d3:e0:f8:da: 65:9d:da:8e:9a:8c:5b:ca:bf:55:d8:a9:ff:d6:51: 3d:46:38:b4:a2:81:a8:ac:d9:4e:0d:f8:5c:fd:37: dc:47:25:1f:2c:46:b9:15:59:b3:da:16:03:9c:b5: 12:5e:d1:9c:b6:34:b7:24:d8:14:e8:1f:0c:7f:09: 45:7e:1d:27:a2:08:a7:70:66:e9:75:63:c7:1e:d6: 90:51:85:d1:06:0b:f6:85:c5:8b:e3:8b:6f:15:5f: f3:a3:ab:73:af:b8:7a:80:8a:e1:d2:8c:81:e2:05: 7f:98:82:7b:66:ae:5f:79:37:68:e0:05:cd:68:79: da:e5:59:22:43:5f:01:5f:30:2c:4f:10:37:43:61: e6:9d:5a:03:64:2c:de:f7:c2:4b:4d:10:af:eb:bd: 61:ad:3f:1d:0d:c0:f2:2e:d1:a6:56:3a:d1:47:50: 9b:b0:27:44:5c:17:15:9e:28:a6:2b:05:85:28:e9: a9:42:0a:74:e6:10:1a:6f:2d:30:3d:b4:31:72:ab: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DB:2E:AF:9D:08:17:BF:6C:04:D9:6D:BC:18:B3:91:10:26:1A:2C X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:74:76:68:fb:78:7e:7f:3c:1b:88:11:8b:c7:57:f6:86:f3: 5b:fc:d9:6a:75:46:db:33:76:95:86:10:48:2b:16:56:55:df: 68:fd:12:d8:b1:b9:1b:c3:dc:94:ac:6b:5c:66:09:6a:5b:a0: 3c:54:7e:48:10:d2:90:c4:6a:ad:36:71:91:c8:54:f0:d1:89: 71:06:1c:9a:7a:b7:96:b1:71:ba:0b:04:a4:95:a7:81:82:b7: e6:5f:41:2a:ad:15:b7:23:5d:5f:50:12:be:7e:e2:20:e4:98: 3e:91:c4:78:a3:15:b2:06:3d:5d:b6:f5:12:49:17:e3:55:15: d9:57:01:34:93:f3:7a:fc:b2:25:86:66:1b:f1:71:55:f4:df: ea:0d:0f:c2:1c:24:7e:ba:69:a4:a7:b3:b2:1c:c7:f5:ca:3a: 2a:76:31:20:c2:cb:43:eb:4f:bd:af:04:d9:6a:6c:5d:79:76: 64:e7:f1:b6:4f:de:0e:40:12:fb:ce:7f:d2:77:28:46:02:0b: 24:3c:46:51:99:ed:92:c7:8e:1f:41:b8:72:19:f5:47:57:80: 05:d3:5c:68:a7:68:05:72:62:a6:58:c6:20:68:61:e8:4d:d3: 56:68:08:fb:be:df:80:f1:36:54:c3:f3:75:ec:18:1e:68:d3: 83:6c:fe:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYf4i55V2xnwb1vma+CUZwQIhiQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA3MTQxODAxNTBaFw0yNjA3MTUxODExNTBaMDMxMTAvBgNV BAMTKDhCREIyRUFGOUQwODE3QkY2QzA0RDk2REJDMThCMzkxMTAyNjFBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTWiYbxfwS8exGTsJPYUrFsHx PD8DmzEmR7LgTDgXvo7Rvw3Rnhs/2vRVGB3CDS5YasmyQbH50+D42mWd2o6ajFvK v1XYqf/WUT1GOLSigais2U4N+Fz9N9xHJR8sRrkVWbPaFgOctRJe0Zy2NLck2BTo Hwx/CUV+HSeiCKdwZul1Y8ce1pBRhdEGC/aFxYvji28VX/Ojq3OvuHqAiuHSjIHi BX+Ygntmrl95N2jgBc1oedrlWSJDXwFfMCxPEDdDYeadWgNkLN73wktNEK/rvWGt Px0NwPIu0aZWOtFHUJuwJ0RcFxWeKKYrBYUo6alCCnTmEBpvLTA9tDFyq73zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi9sur50IF79sBNltvBizkRAmGiwwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXR2aPt4fn88 G4gRi8dX9obzW/zZanVG2zN2lYYQSCsWVlXfaP0S2LG5G8PclKxrXGYJalugPFR+ SBDSkMRqrTZxkchU8NGJcQYcmnq3lrFxugsEpJWngYK35l9BKq0VtyNdX1ASvn7i IOSYPpHEeKMVsgY9Xbb1EkkX41UV2VcBNJPzevyyJYZmG/FxVfTf6g0Pwhwkfrpp pKezshzH9co6KnYxIMLLQ+tPva8E2WpsXXl2ZOfxtk/eDkAS+85/0ncoRgILJDxG UZntkseOH0G4chn1R1eABdNcaKdoBXJipljGIGhh6E3TVmgI+77fgPE2VMPzdewY HmjTg2z+cw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:04 2026 by rpki-client