$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft (raw, json) Hash identifier: ITP1fWxdh5oJy90vPViU1IQE0zERPkpBHIwp2p9w508= Subject key identifier: 5A:D9:1C:90:8F:A2:0B:71:C6:3B:B0:A6:F0:08:23:E4:09:B4:5E:94 Authority key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Certificate issuer: /CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Certificate serial: 1BCCF2C18A4208E791579749D22813876413CBB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft Manifest number: 4B Signing time: Mon 26 Oct 2026 13:28:44 +0000 Manifest this update: Mon 26 Oct 2026 13:23:44 +0000 Manifest next update: Thu 29 Oct 2026 16:44:44 +0000 Files and hashes: 1: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl (hash: PFugIicONlSTBwCX/SdzsI3XTRzZ4NbMp/YCnI7Rq8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 21:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:f2:c1:8a:42:08:e7:91:57:97:49:d2:28:13:87:64:13:cb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Validity Not Before: Oct 26 13:23:44 2026 GMT Not After : Oct 29 16:44:44 2026 GMT Subject: CN=5AD91C908FA20B71C63BB0A6F00823E409B45E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:c0:36:31:16:a1:4b:a2:0c:09:89:b6:9c: 22:30:85:9b:f5:36:d8:9c:ab:8a:aa:b1:38:00:b9: 83:1f:63:e3:a6:bb:c3:06:df:8f:01:1d:30:ea:6f: 11:d9:1d:0f:8d:06:18:4a:fb:3f:4f:04:53:57:d6: 48:58:f0:fd:71:46:fb:ab:52:95:5f:f3:42:e8:b0: f8:0e:8f:d4:fb:a0:4b:05:d2:a5:5b:98:8b:29:ba: c2:e2:68:c4:42:26:d4:e2:f3:c3:67:c6:2f:0a:56: 54:d7:18:6b:57:29:11:e5:3e:48:07:4e:ba:e2:6d: 99:8e:3b:5c:63:0a:b0:e0:40:3c:db:ed:bc:e0:c2: 0f:69:af:d9:74:7b:dc:09:75:21:68:b7:20:cb:56: 2f:61:17:96:b9:82:b8:34:53:58:c4:52:35:88:4a: a1:0c:d7:00:40:6c:7c:e5:39:c8:07:9e:54:9e:64: 6d:45:b9:b8:e1:55:4e:57:12:f9:b8:de:51:02:d3: 96:c5:66:f4:91:5b:d5:b0:09:a3:e9:ae:8e:93:3a: 38:bc:76:17:1f:5f:1a:f0:a1:1e:a6:5a:3f:ef:70: 0e:3c:ba:ed:a3:1f:2e:bd:e8:07:66:75:16:b8:73: 85:3c:d2:ec:c4:46:bf:85:34:b7:8f:37:1c:79:16: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:1C:90:8F:A2:0B:71:C6:3B:B0:A6:F0:08:23:E4:09:B4:5E:94 X509v3 Authority Key Identifier: keyid:29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3a:f4:c8:33:c8:04:6b:30:73:e2:8d:22:dc:25:24:eb:f2: cc:62:fd:7f:f6:8c:db:47:c2:1e:cb:b3:2f:93:3e:b6:df:26: 82:f6:01:a4:cf:4b:15:c0:6b:89:e3:b1:2d:92:3b:a0:c7:1c: 6c:17:3b:b5:3f:b9:d9:35:33:f9:72:5c:8f:b0:a2:46:89:4e: 1a:df:53:f1:af:63:fa:7b:1e:82:39:a9:9a:e2:e1:45:33:ba: d4:41:b1:ba:75:95:54:41:5b:04:6f:4c:57:6f:8f:dd:8a:01: 35:61:a4:d1:4b:d3:a8:71:2b:be:91:c9:8d:e0:88:d5:8f:63: 55:0c:5c:0a:33:fb:fd:46:6e:91:62:30:83:79:28:03:1e:cb: cd:23:d7:25:79:ad:41:3e:d8:d6:76:65:26:9b:2c:0a:64:9f: a9:b3:a6:79:fc:d9:95:a5:77:6e:16:e9:9b:a3:85:bf:b9:ff: a2:75:b3:f1:9c:6c:2b:a8:cc:9f:8e:41:d4:48:13:a1:00:ed: 75:74:f8:a8:ff:14:bc:73:46:a7:eb:23:4b:36:7c:92:35:c9: 59:4d:14:c4:bb:15:c4:84:38:1e:27:27:02:4a:c5:12:ca:0a: 60:ad:1e:07:44:02:a1:e0:41:a7:af:48:aa:a7:64:a6:fd:36: 65:cc:5a:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG8zywYpCCOeRV5dJ0igTh2QTy7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5 QzJFNTkyMzAeFw0yNjEwMjYxMzIzNDRaFw0yNjEwMjkxNjQ0NDRaMDMxMTAvBgNV BAMTKDVBRDkxQzkwOEZBMjBCNzFDNjNCQjBBNkYwMDgyM0U0MDlCNDVFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUsA2MRahS6IMCYm2nCIwhZv1 Nticq4qqsTgAuYMfY+Omu8MG348BHTDqbxHZHQ+NBhhK+z9PBFNX1khY8P1xRvur UpVf80LosPgOj9T7oEsF0qVbmIspusLiaMRCJtTi88Nnxi8KVlTXGGtXKRHlPkgH TrribZmOO1xjCrDgQDzb7bzgwg9pr9l0e9wJdSFotyDLVi9hF5a5grg0U1jEUjWI SqEM1wBAbHzlOcgHnlSeZG1FubjhVU5XEvm43lEC05bFZvSRW9WwCaPpro6TOji8 dhcfXxrwoR6mWj/vcA48uu2jHy696AdmdRa4c4U80uzERr+FNLePNxx5FssXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWtkckI+iC3HGO7Cm8Agj5Am0XpQwHwYDVR0j BBgwFoAUKbix/1Y0OlME/76lJP6bc5wuWSMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MjU5NTA5NDU0MTU2NTk5Ny8wLzI5QjhCMUZGNTYzNDNBNTMwNEZGQkVBNTI0RkU5 QjczOUMyRTU5MjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMC8yOUI4QjFGRjU2MzQz QTUzMDRGRkJFQTUyNEZFOUI3MzlDMkU1OTIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTr0yDPIBGsw c+KNItwlJOvyzGL9f/aM20fCHsuzL5M+tt8mgvYBpM9LFcBrieOxLZI7oMccbBc7 tT+52TUz+XJcj7CiRolOGt9T8a9j+nsegjmpmuLhRTO61EGxunWVVEFbBG9MV2+P 3YoBNWGk0UvTqHErvpHJjeCI1Y9jVQxcCjP7/UZukWIwg3koAx7LzSPXJXmtQT7Y 1nZlJpssCmSfqbOmefzZlaV3bhbpm6OFv7n/onWz8ZxsK6jMn45B1EgToQDtdXT4 qP8UvHNGp+sjSzZ8kjXJWU0UxLsVxIQ4HicnAkrFEsoKYK0eB0QCoeBBp69Iqqdk pv02ZcxaHA== -----END CERTIFICATE-----Generated at Mon Oct 26 23:12:13 2026 by rpki-client