$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: ghIG4eT/Cd4lrdcZZHMSe7ZBtoJCtR4IjY7Pfh5VuqI= Subject key identifier: ED:2C:28:62:A5:26:32:31:E7:E0:3D:B6:1C:5B:A2:B1:37:4B:50:5B Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 56BA6E97DDBFE9C25226FDAAE0F3BCEC425DB45F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: 8C Signing time: Fri 24 Jul 2026 03:25:16 +0000 Manifest this update: Fri 24 Jul 2026 03:20:16 +0000 Manifest next update: Sat 25 Jul 2026 05:17:16 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: 0CWTNK5m1QZuINU7XBpU0a1+l3K8Gr29xzRNygQpDrU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ba:6e:97:dd:bf:e9:c2:52:26:fd:aa:e0:f3:bc:ec:42:5d:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Jul 24 03:20:16 2026 GMT Not After : Jul 25 05:17:16 2026 GMT Subject: CN=ED2C2862A5263231E7E03DB61C5BA2B1374B505B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:d3:26:a0:04:3d:7f:a7:66:54:62:15:9f: b2:a7:1a:d1:71:60:33:36:f6:15:e3:99:53:c9:0a: d0:9b:69:09:1e:30:f5:c1:f1:b8:68:a3:99:bc:f2: 83:ce:e7:5b:62:e0:a7:93:92:b0:2e:7d:18:2a:ba: 37:a9:19:61:0f:93:ab:05:94:d1:ad:50:d9:d1:3c: 19:8b:fc:94:d5:cc:b3:e4:f6:b2:97:36:8a:f6:fa: ef:bf:61:54:31:36:5e:ad:c5:95:78:b3:2a:00:78: 64:ab:ee:93:a7:ee:a2:31:46:dd:10:3b:c7:49:6a: 27:28:ab:15:ca:21:16:ae:0d:5c:32:30:2e:93:dd: d5:b7:c5:d3:17:d6:f6:e1:d5:1d:31:5e:47:ce:9d: 30:61:25:bf:26:c2:c5:53:7b:0f:25:e6:25:7a:35: 4e:c1:79:78:04:e0:9b:f9:1c:84:fb:ef:c0:82:d7: e4:2e:86:4b:8a:88:1d:29:cd:2f:8f:02:d3:4e:af: 06:29:5f:10:d2:fc:5c:98:c9:35:0e:aa:c5:fa:57: a5:ea:da:7b:f4:29:24:f4:c3:58:0c:45:10:1f:42: b6:ca:f5:2f:e2:63:3d:fe:c0:6b:e9:73:4d:7c:9d: 14:9c:d7:5b:0e:41:7b:99:d0:5a:78:88:90:73:2d: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:28:62:A5:26:32:31:E7:E0:3D:B6:1C:5B:A2:B1:37:4B:50:5B X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:49:c6:6b:49:2d:85:a3:58:4a:27:84:65:99:84:cf:17:86: f1:49:81:01:34:50:79:af:fd:95:54:27:7e:90:f2:a2:7b:20: e0:de:f8:73:45:e5:c0:ff:c5:73:6f:90:1e:4b:36:db:57:d5: 44:41:e8:43:fd:1b:04:61:45:23:78:b7:b0:79:4d:ec:4b:a6: 61:80:47:b4:aa:d1:a5:ef:67:5a:27:72:95:9b:84:cb:10:b5: 8d:ab:72:81:c5:30:5b:83:6b:d5:0a:70:4e:a0:81:11:72:ea: 83:46:8d:81:cd:90:6e:e9:68:27:c6:ed:39:a4:7d:78:fd:91: 7f:46:21:53:05:09:14:a7:21:6c:a2:e8:a8:9e:83:7b:e3:13: b5:30:45:5f:fb:bf:76:85:aa:f6:2b:5a:10:fd:22:aa:b1:79: fd:76:5f:18:cc:bc:92:48:6f:a0:da:f5:d9:21:02:69:e4:4c: ed:98:1f:78:60:5f:cf:37:24:c2:f2:02:89:59:05:c4:e8:91: c0:47:f1:3d:d2:5c:46:a1:83:c4:66:4d:f6:1e:80:73:7a:d8: bd:48:7b:43:de:57:a9:84:d4:fe:04:37:e6:eb:83:2d:62:8e: b2:78:14:d3:16:fa:f6:7b:8e:f2:fe:42:c0:94:2a:1e:77:90: 89:1c:a0:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVrpul92/6cJSJv2q4PO87EJdtF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA3MjQwMzIwMTZaFw0yNjA3MjUwNTE3MTZaMDMxMTAvBgNV BAMTKEVEMkMyODYyQTUyNjMyMzFFN0UwM0RCNjFDNUJBMkIxMzc0QjUwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7dMmoAQ9f6dmVGIVn7KnGtFx YDM29hXjmVPJCtCbaQkeMPXB8bhoo5m88oPO51ti4KeTkrAufRgqujepGWEPk6sF lNGtUNnRPBmL/JTVzLPk9rKXNor2+u+/YVQxNl6txZV4syoAeGSr7pOn7qIxRt0Q O8dJaicoqxXKIRauDVwyMC6T3dW3xdMX1vbh1R0xXkfOnTBhJb8mwsVTew8l5iV6 NU7BeXgE4Jv5HIT778CC1+QuhkuKiB0pzS+PAtNOrwYpXxDS/FyYyTUOqsX6V6Xq 2nv0KST0w1gMRRAfQrbK9S/iYz3+wGvpc018nRSc11sOQXuZ0Fp4iJBzLfhVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7SwoYqUmMjHn4D22HFuisTdLUFswHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhknGa0kthaNY SieEZZmEzxeG8UmBATRQea/9lVQnfpDyonsg4N74c0XlwP/Fc2+QHks221fVREHo Q/0bBGFFI3i3sHlN7EumYYBHtKrRpe9nWidylZuEyxC1jatygcUwW4Nr1QpwTqCB EXLqg0aNgc2QbuloJ8btOaR9eP2Rf0YhUwUJFKchbKLoqJ6De+MTtTBFX/u/doWq 9itaEP0iqrF5/XZfGMy8kkhvoNr12SECaeRM7ZgfeGBfzzckwvICiVkFxOiRwEfx PdJcRqGDxGZN9h6Ac3rYvUh7Q95XqYTU/gQ35uuDLWKOsngU0xb69nuO8v5CwJQq HneQiRygQg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:02:38 2026 by rpki-client