$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: qkHdWSzY/RjkRHT70DbFMw/TYUxu3MYS/vojI8Ttfws= Subject key identifier: 71:C2:6B:55:A8:BE:CA:17:4B:A8:08:8F:C6:94:77:80:D7:43:72:A6 Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 6DFF78144D2408B9F03891DE75BF4E1071A94CEE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: 2D Signing time: Wed 13 May 2026 05:15:57 +0000 Manifest this update: Wed 13 May 2026 05:10:57 +0000 Manifest next update: Thu 14 May 2026 09:02:57 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: 3wP2gH2PRk0qtHeH+ZYI+2JVXp4E5H5Elq/X4m1eQi4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ff:78:14:4d:24:08:b9:f0:38:91:de:75:bf:4e:10:71:a9:4c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: May 13 05:10:57 2026 GMT Not After : May 14 09:02:57 2026 GMT Subject: CN=71C26B55A8BECA174BA8088FC6947780D74372A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9e:23:39:c3:1c:5f:53:10:7a:5c:0a:5c:03: 55:1f:0e:2a:96:58:41:d2:4b:3c:e2:27:1e:bf:24: f2:1b:d7:41:df:7e:8d:d7:94:28:4d:47:40:81:1a: ca:d1:6a:81:e3:23:b8:ca:a9:9c:34:00:e6:4a:8e: d5:7b:66:cc:2e:a0:9e:09:06:57:d5:09:dc:ae:78: 84:57:04:d5:93:9b:19:d7:72:ca:37:58:31:2f:ca: bc:7b:bb:a2:21:c2:f5:7a:c5:d9:01:fe:02:19:47: 97:80:63:29:64:31:9f:9a:5d:aa:55:46:e3:2f:03: cf:1e:80:2f:48:29:e8:44:d8:32:11:fb:90:a9:af: d5:93:6a:cc:d1:77:3f:48:ae:2d:9d:94:a9:1b:10: 1a:35:d1:6d:99:15:b2:bc:14:30:33:7c:4a:f1:f4: b2:0a:ae:54:5a:58:79:48:10:0e:13:65:15:86:ec: 60:28:52:13:e3:1d:41:c2:3c:f9:e2:16:83:4c:89: d2:9c:9f:ce:16:46:8d:1c:ca:bf:c0:61:3f:bf:a9: 5c:0a:13:df:aa:cf:53:7c:dc:e2:e1:f3:fd:2e:07: 1d:18:3a:f1:60:35:18:05:72:20:77:47:0a:4b:b6: 79:72:d2:1c:b1:1a:9c:7e:cc:3c:73:7e:bd:9e:28: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:6B:55:A8:BE:CA:17:4B:A8:08:8F:C6:94:77:80:D7:43:72:A6 X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c2:a0:1a:8a:5a:0a:1e:01:a1:2f:0e:64:b1:f0:15:fb:08: 4a:c2:2f:62:e5:1c:ae:be:8a:54:52:2e:c5:44:af:97:c3:a6: 59:c7:62:c1:6e:b5:84:95:1a:51:dc:bb:a7:44:44:99:64:16: c4:26:3f:59:d9:43:6d:ac:c9:ff:a9:7c:ca:40:d7:6b:ad:e9: 95:8c:89:ee:fb:0a:45:96:63:fd:35:c9:37:6a:05:71:24:e3: f6:e6:75:64:7e:19:5d:06:b7:73:a6:df:55:28:c3:3b:7a:77: 63:11:5e:4f:55:eb:de:45:5f:90:35:8b:d6:46:27:2d:15:e4: 53:8f:00:f2:6c:db:6b:c4:b6:36:be:23:ea:44:c9:51:93:41: 83:da:65:d3:3c:0d:6b:34:18:7b:6e:25:53:24:95:25:c8:92: 23:32:0a:f3:7c:4c:28:b4:03:df:06:63:36:15:6f:42:d0:74: 6d:3f:bf:b0:2e:48:1e:19:0b:23:32:dd:8f:0b:4d:ca:fe:70: 1a:e4:2a:2a:e6:a6:15:3b:d9:d5:6d:47:bd:66:77:44:f0:41: 5b:b1:f8:d3:44:40:97:0e:ed:70:5a:94:d3:f3:c6:67:e2:1a: d0:8e:e5:b3:ff:44:e6:1d:ea:b9:8a:25:c0:7b:08:62:8a:e0: 8b:8f:35:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbf94FE0kCLnwOJHedb9OEHGpTO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA1MTMwNTEwNTdaFw0yNjA1MTQwOTAyNTdaMDMxMTAvBgNV BAMTKDcxQzI2QjU1QThCRUNBMTc0QkE4MDg4RkM2OTQ3NzgwRDc0MzcyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUniM5wxxfUxB6XApcA1UfDiqW WEHSSzziJx6/JPIb10Hffo3XlChNR0CBGsrRaoHjI7jKqZw0AOZKjtV7ZswuoJ4J BlfVCdyueIRXBNWTmxnXcso3WDEvyrx7u6IhwvV6xdkB/gIZR5eAYylkMZ+aXapV RuMvA88egC9IKehE2DIR+5Cpr9WTaszRdz9Iri2dlKkbEBo10W2ZFbK8FDAzfErx 9LIKrlRaWHlIEA4TZRWG7GAoUhPjHUHCPPniFoNMidKcn84WRo0cyr/AYT+/qVwK E9+qz1N83OLh8/0uBx0YOvFgNRgFciB3RwpLtnly0hyxGpx+zDxzfr2eKF0fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUccJrVai+yhdLqAiPxpR3gNdDcqYwHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMKgGopaCh4B oS8OZLHwFfsISsIvYuUcrr6KVFIuxUSvl8OmWcdiwW61hJUaUdy7p0REmWQWxCY/ WdlDbazJ/6l8ykDXa63plYyJ7vsKRZZj/TXJN2oFcSTj9uZ1ZH4ZXQa3c6bfVSjD O3p3YxFeT1Xr3kVfkDWL1kYnLRXkU48A8mzba8S2Nr4j6kTJUZNBg9pl0zwNazQY e24lUySVJciSIzIK83xMKLQD3wZjNhVvQtB0bT+/sC5IHhkLIzLdjwtNyv5wGuQq KuamFTvZ1W1HvWZ3RPBBW7H400RAlw7tcFqU0/PGZ+Ia0I7ls/9E5h3quYolwHsI Yorgi481Zg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:00 2026 by rpki-client