$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft (raw, json) Hash identifier: yL1AKvN8U8FVrfP7UNuKDLcRhLy/1CTA9gDYdoXCAVU= Subject key identifier: D8:4D:A8:22:7F:0B:C9:DF:55:4F:3C:7F:50:B6:86:85:91:F6:A5:DA Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 65CA9C2B2B585483CB058F056F56DD5E6A6D1391 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft Manifest number: 7A Signing time: Mon 12 Oct 2026 22:22:27 +0000 Manifest this update: Mon 12 Oct 2026 22:17:27 +0000 Manifest next update: Fri 16 Oct 2026 09:56:27 +0000 Files and hashes: 1: 3232332e302e33302e302f32342d3234203d3e203633353535.roa (hash: AhwYrA7rprhxjAUjJQ/8I1ajfiEMR/cG2JIYvnxOp/Y=) 2: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (hash: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88=) 3: 3232332e302e3132362e302f32342d3234203d3e203633353535.roa (hash: ElRD3wRac/xlPPybfG99RYpbrEsjqMxeTuRfW7LovL8=) 4: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (hash: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c=) 5: 3232332e302e382e302f32332d3233203d3e203633353535.roa (hash: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw=) 6: 3232332e302e34312e302f32342d3234203d3e203633353535.roa (hash: VFL5gFLae8BFZyuSM0OErzlN1X4K1zN2RZPP5W4aWVU=) 7: 3232332e302e302e302f32342d3234203d3e203633353535.roa (hash: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg=) 8: 3232332e302e31312e302f32342d3234203d3e203633353535.roa (hash: /oPIIonpOifhWwPEEOw8cb79yk+0Qt0cKwd2H1SsSYs=) 9: 3232332e302e322e302f32342d3234203d3e203633353535.roa (hash: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA=) 10: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (hash: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo=) 11: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl (hash: 6aGKSr+ZlrITgj4G0lkErcPnFfV0zbhR4UUdG8rvy8s=) 12: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (hash: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0=) 13: 3232332e302e31332e302f32342d3234203d3e203633353535.roa (hash: wkZEWjSfmMCc17yDUYICtj/0PypJmWK507oPGjbX4Kc=) 14: 3232332e302e312e302f32342d3234203d3e203633353535.roa (hash: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8=) 15: 3232332e302e31362e302f32342d3234203d3e203633353535.roa (hash: zgS2xz/SRijQgitZ7bCvshptnZgmZLeNYqrCtRe+U/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ca:9c:2b:2b:58:54:83:cb:05:8f:05:6f:56:dd:5e:6a:6d:13:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Oct 12 22:17:27 2026 GMT Not After : Oct 16 09:56:27 2026 GMT Subject: CN=D84DA8227F0BC9DF554F3C7F50B6868591F6A5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:ee:d7:13:41:c0:65:b6:bb:6e:00:b5:b4: 6d:e0:dc:e4:c5:c1:1c:4b:98:db:0a:43:ef:31:e4: 31:e4:34:06:2a:2c:52:87:9b:eb:bd:f9:81:3d:4a: 32:5e:db:e6:8e:db:03:e8:eb:76:d9:1b:2c:a2:96: df:f6:65:9a:90:b2:88:99:0e:bc:43:d5:67:dd:5d: 3d:f5:b7:ef:7d:98:40:8b:58:44:63:26:99:64:d3: e2:b6:bd:a0:45:af:58:63:3c:5f:5a:ae:4a:e5:5c: 3b:72:2e:92:a4:04:c5:c5:b5:cc:82:12:46:98:9a: 4c:7e:ba:86:af:dc:26:08:9d:a2:f9:b8:74:2d:d5: 48:04:df:f9:84:15:bc:87:ed:ab:87:42:49:80:32: 83:84:c6:91:57:8a:40:84:f8:cf:3e:ac:d3:17:ef: bc:95:3a:27:f4:0a:b2:c0:3a:6f:1e:35:91:9e:a6: 22:d3:7c:9e:62:74:51:7d:87:a4:56:a3:1c:de:d8: d0:d2:fe:d6:15:77:63:c1:b3:c2:b5:e9:da:db:47: fe:50:db:1f:58:a1:76:85:73:17:4b:da:f3:82:7a: 45:6d:50:a2:ae:4a:b5:d0:74:25:35:b9:8a:8f:20: a2:86:a2:40:e4:5a:46:2f:f2:f9:f7:93:01:c5:49: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4D:A8:22:7F:0B:C9:DF:55:4F:3C:7F:50:B6:86:85:91:F6:A5:DA X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ba:17:ed:d9:13:cf:2e:19:52:ad:97:21:f1:01:ef:9b:9d: 99:56:ff:b9:36:30:0b:fa:bf:0d:51:2c:90:0f:3b:32:72:35: 0d:d6:f3:86:8e:e4:3c:fb:9b:18:8b:92:20:9a:9c:25:8a:bc: ee:b1:f4:ad:69:f7:c2:f1:9c:b0:dd:0e:20:87:4a:05:dd:1d: de:ca:56:b9:81:67:5f:e3:1a:30:16:1f:85:2d:3b:9b:28:8f: 8a:af:ba:0f:df:b2:87:c2:74:bf:59:95:57:35:b2:ac:53:e2: eb:30:93:fa:c0:d6:84:b7:91:90:9d:81:a2:21:20:b8:95:ad: 03:02:61:86:be:62:6a:ee:e2:3e:47:4b:73:2c:41:05:09:ef: 80:20:a0:65:01:4e:ab:51:fd:40:00:94:84:c3:e0:55:c2:bc: 5a:57:d9:7c:50:04:8e:cb:7d:ed:ba:72:ae:8e:ef:7f:94:83: 79:f6:db:67:1d:a6:03:d0:3c:05:6f:2d:d0:c5:f5:b0:95:3c: 56:2d:07:7d:4b:4b:e8:72:11:b3:84:0b:22:14:d0:bf:c8:dc: 2f:16:4e:af:54:44:0a:14:ea:4d:8d:51:b2:20:73:e6:5e:b8: bf:f5:a0:65:14:08:a2:a9:1f:b3:1c:86:83:6e:68:62:37:dc: 2a:4b:08:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZcqcKytYVIPLBY8Fb1bdXmptE5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjEwMTIyMjE3MjdaFw0yNjEwMTYwOTU2MjdaMDMxMTAvBgNV BAMTKEQ4NERBODIyN0YwQkM5REY1NTRGM0M3RjUwQjY4Njg1OTFGNkE1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OO7XE0HAZba7bgC1tG3g3OTF wRxLmNsKQ+8x5DHkNAYqLFKHm+u9+YE9SjJe2+aO2wPo63bZGyyilt/2ZZqQsoiZ DrxD1WfdXT31t+99mECLWERjJplk0+K2vaBFr1hjPF9arkrlXDtyLpKkBMXFtcyC EkaYmkx+uoav3CYInaL5uHQt1UgE3/mEFbyH7auHQkmAMoOExpFXikCE+M8+rNMX 77yVOif0CrLAOm8eNZGepiLTfJ5idFF9h6RWoxze2NDS/tYVd2PBs8K16drbR/5Q 2x9YoXaFcxdL2vOCekVtUKKuSrXQdCU1uYqPIKKGokDkWkYv8vn3kwHFSX+nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2E2oIn8Lyd9VTzx/ULaGhZH2pdowHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3Njk0NTUyNTAyNzYzNzkvMC80MjlDRjk2NzFFMEUy RUZFODcxM0U5QTlDM0VFQjY0NDNEQzkxMjUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiboX7dkTzy4Z Uq2XIfEB75udmVb/uTYwC/q/DVEskA87MnI1Ddbzho7kPPubGIuSIJqcJYq87rH0 rWn3wvGcsN0OIIdKBd0d3spWuYFnX+MaMBYfhS07myiPiq+6D9+yh8J0v1mVVzWy rFPi6zCT+sDWhLeRkJ2BoiEguJWtAwJhhr5iau7iPkdLcyxBBQnvgCCgZQFOq1H9 QACUhMPgVcK8WlfZfFAEjst97bpyro7vf5SDefbbZx2mA9A8BW8t0MX1sJU8Vi0H fUtL6HIRs4QLIhTQv8jcLxZOr1REChTqTY1RsiBz5l64v/WgZRQIoqkfsxyGg25o YjfcKksIRg== -----END CERTIFICATE-----Generated at Tue Oct 13 17:52:28 2026 by rpki-client