$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft (raw, json) Hash identifier: zd9vk366NZVT3/FEpn13M6/x789JIEDiYyzZleR7SIE= Subject key identifier: A3:46:5A:5A:D1:78:2B:55:A7:98:1D:42:D8:8B:9A:5E:FC:85:69:B2 Authority key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Certificate issuer: /CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Certificate serial: 1065760F310F3D8D67FC8F4583E100CA84E25DD6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft Manifest number: 34 Signing time: Thu 03 Sep 2026 21:19:08 +0000 Manifest this update: Thu 03 Sep 2026 21:14:08 +0000 Manifest next update: Mon 07 Sep 2026 06:44:08 +0000 Files and hashes: 1: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl (hash: SvIcV5bDIydOJUj1i0hTeeeIHC4JyDrHq/77d4f+qjQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:65:76:0f:31:0f:3d:8d:67:fc:8f:45:83:e1:00:ca:84:e2:5d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Validity Not Before: Sep 3 21:14:08 2026 GMT Not After : Sep 7 06:44:08 2026 GMT Subject: CN=A3465A5AD1782B55A7981D42D88B9A5EFC8569B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:67:19:ef:2f:80:f8:38:23:e9:a1:66:9b: b1:52:ce:ba:d0:3c:52:ee:35:df:57:b9:58:f4:17: 74:0c:52:d7:9e:10:9b:34:fc:54:6e:35:6b:03:f8: 9c:83:a5:cf:bb:6c:a3:73:d0:8b:46:38:45:02:2a: 9f:ac:6e:11:91:2d:6e:1c:aa:0e:95:42:ac:5b:8a: 02:e0:2a:bb:e3:72:22:56:31:bc:60:d1:a3:a0:f8: 30:f7:ed:65:c0:52:fa:2e:bd:a2:27:a9:74:11:6b: 9f:f6:a5:61:d1:7b:ee:96:d9:84:f9:8c:43:c9:57: 61:63:99:4a:92:0b:3f:7f:85:0c:d9:c5:76:de:34: 33:b7:d6:da:a1:83:ac:e3:dc:0a:80:86:3b:cc:6c: c9:c1:2f:66:07:59:bb:a0:98:7e:f7:1b:bd:01:6f: 3a:dd:21:4c:fe:b0:d6:b7:60:89:76:88:78:11:b4: ad:0b:a8:b5:1d:e9:ca:e6:6b:13:b7:30:e2:5b:8a: 1c:3b:3a:73:49:5b:37:5b:1e:77:7c:b6:31:15:c1: b1:e9:7e:d2:2a:7b:5c:0f:48:f5:28:c8:81:59:b6: 9e:50:ac:73:ec:9b:28:34:2f:0b:10:21:00:29:be: 42:c6:13:cc:21:67:9d:94:3f:27:fa:c1:71:15:dc: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:5A:5A:D1:78:2B:55:A7:98:1D:42:D8:8B:9A:5E:FC:85:69:B2 X509v3 Authority Key Identifier: keyid:29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:45:3d:3c:9e:72:b7:c2:16:60:3a:0c:2a:38:ce:30:e7:15: 3c:ed:1e:00:f7:8e:de:5d:90:aa:f1:ff:b8:49:2a:74:89:b0: 8e:0c:a7:75:1b:54:de:66:3d:90:a5:92:12:e5:99:79:df:d5: c8:60:63:97:df:4a:79:e4:8c:3e:8a:3e:2c:bb:dc:24:24:62: 87:73:f0:fe:71:38:43:d4:30:cd:1a:f3:43:91:60:24:17:53: 9a:7f:36:33:38:f9:84:30:21:38:3f:2c:8c:c1:f8:d8:2c:9e: ee:c5:56:08:a0:1e:ef:70:04:3f:8f:5a:1e:e8:97:ca:04:52: 88:a5:b6:38:5b:48:d4:ea:53:f9:9d:b8:9f:74:0c:f6:7b:66: 68:cd:47:5b:08:5a:83:9c:6d:07:a3:2d:4c:e7:21:e2:ad:ec: 65:6a:7b:83:12:a8:38:76:54:87:79:10:55:85:1b:c6:87:a1: e8:74:6d:bf:f7:8a:b0:2c:65:86:b9:ae:55:83:58:b9:26:71: 1a:49:a6:96:3b:f4:18:e9:f0:fc:26:c5:bb:17:00:ed:77:25: d3:81:4f:33:f7:c3:04:a6:30:8d:ad:11:05:70:0a:32:55:af: 02:ad:b8:a1:58:3b:94:38:72:3b:ea:6a:be:13:3f:e9:72:45: cc:c7:e3:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEGV2DzEPPY1n/I9Fg+EAyoTiXdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5 QzJFNTkyMzAeFw0yNjA5MDMyMTE0MDhaFw0yNjA5MDcwNjQ0MDhaMDMxMTAvBgNV BAMTKEEzNDY1QTVBRDE3ODJCNTVBNzk4MUQ0MkQ4OEI5QTVFRkM4NTY5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hGcZ7y+A+Dgj6aFmm7FSzrrQ PFLuNd9XuVj0F3QMUteeEJs0/FRuNWsD+JyDpc+7bKNz0ItGOEUCKp+sbhGRLW4c qg6VQqxbigLgKrvjciJWMbxg0aOg+DD37WXAUvouvaInqXQRa5/2pWHRe+6W2YT5 jEPJV2FjmUqSCz9/hQzZxXbeNDO31tqhg6zj3AqAhjvMbMnBL2YHWbugmH73G70B bzrdIUz+sNa3YIl2iHgRtK0LqLUd6crmaxO3MOJbihw7OnNJWzdbHnd8tjEVwbHp ftIqe1wPSPUoyIFZtp5QrHPsmyg0LwsQIQApvkLGE8whZ52UPyf6wXEV3JGnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo0ZaWtF4K1WnmB1C2IuaXvyFabIwHwYDVR0j BBgwFoAUKbix/1Y0OlME/76lJP6bc5wuWSMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz MjU5NTA5NDU0MTU2NTk5Ny8wLzI5QjhCMUZGNTYzNDNBNTMwNEZGQkVBNTI0RkU5 QjczOUMyRTU5MjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMC8yOUI4QjFGRjU2MzQz QTUzMDRGRkJFQTUyNEZFOUI3MzlDMkU1OTIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0U9PJ5yt8IW YDoMKjjOMOcVPO0eAPeO3l2QqvH/uEkqdImwjgyndRtU3mY9kKWSEuWZed/VyGBj l99KeeSMPoo+LLvcJCRih3Pw/nE4Q9QwzRrzQ5FgJBdTmn82Mzj5hDAhOD8sjMH4 2Cye7sVWCKAe73AEP49aHuiXygRSiKW2OFtI1OpT+Z24n3QM9ntmaM1HWwhag5xt B6MtTOch4q3sZWp7gxKoOHZUh3kQVYUbxoeh6HRtv/eKsCxlhrmuVYNYuSZxGkmm ljv0GOnw/CbFuxcA7Xcl04FPM/fDBKYwja0RBXAKMlWvAq24oVg7lDhyO+pqvhM/ 6XJFzMfj4w== -----END CERTIFICATE-----Generated at Sat Sep 5 06:20:46 2026 by rpki-client