$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: eiCNz+JS3hIgd6eSGmi3R6mTnus/Ee8cSFiQW/9Mnys= Subject key identifier: AA:11:B2:77:E3:D2:AC:33:3B:36:26:FF:E9:A7:DE:B7:E0:28:03:D6 Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 6593E866DFB076153079BE2873EF00FE23423ED4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: D0 Signing time: Wed 14 Oct 2026 05:43:36 +0000 Manifest this update: Wed 14 Oct 2026 05:38:36 +0000 Manifest next update: Sat 17 Oct 2026 10:06:36 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: FKcIEG2IsetlvkdA6kBPFhM6no+bm5kOOqZrhBwU0/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:93:e8:66:df:b0:76:15:30:79:be:28:73:ef:00:fe:23:42:3e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Oct 14 05:38:36 2026 GMT Not After : Oct 17 10:06:36 2026 GMT Subject: CN=AA11B277E3D2AC333B3626FFE9A7DEB7E02803D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:78:8a:58:9b:c2:c4:07:ae:86:6c:47:ed: d7:c4:07:8f:92:0f:cf:33:7c:6c:01:2d:79:79:f3: 34:c2:41:2f:77:36:e7:d9:78:f3:09:af:cf:14:4b: 83:32:c0:4c:5f:38:56:26:63:17:af:3b:54:86:cb: 40:67:7e:5c:9a:44:ef:8e:ef:29:d3:14:e9:bb:22: 38:9d:6e:ab:ba:3a:10:36:cc:65:00:2e:0f:25:c7: 84:19:12:97:73:a4:70:53:ee:d4:6c:e3:99:88:36: e9:f2:72:f2:4c:17:9a:21:08:c2:07:c2:8b:7a:9d: 7e:16:15:02:30:40:35:59:d4:e0:46:c3:b3:ef:23: 04:e3:0a:ae:aa:6e:99:4b:28:bb:ed:ae:f4:05:02: 34:c3:fb:fc:a5:cb:af:6b:01:7d:2f:a9:02:cd:80: f5:54:b0:db:aa:51:ee:d9:fb:3e:fd:20:9c:8f:08: 36:09:76:60:87:75:7b:6c:85:84:1a:5e:76:51:78: c0:45:8d:78:f0:ae:48:19:30:80:05:b7:ac:36:46: 0a:b6:18:09:52:1a:7f:c2:26:a6:eb:4b:34:77:ee: ad:ba:f5:09:2a:60:12:60:c9:26:b3:5b:0c:03:19: 68:3f:2f:11:68:82:a0:34:8c:23:e6:39:85:44:8a: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:11:B2:77:E3:D2:AC:33:3B:36:26:FF:E9:A7:DE:B7:E0:28:03:D6 X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f9:9f:6b:ba:ad:0d:8e:c4:c9:84:ac:6f:a9:d5:07:ba:f3: 28:0f:3d:d1:b9:08:0f:73:c5:ff:92:6e:bf:c1:50:01:c0:06: 4e:b2:65:13:b9:83:9e:82:ca:7c:07:44:7d:a6:9a:5b:03:1e: 2f:d8:7f:2d:f1:68:2e:45:68:71:2c:86:cb:5d:32:e8:be:79: ff:c1:8a:32:31:46:12:4c:9c:7a:32:cc:ca:4a:ca:85:43:e4: 04:c4:bf:3d:2d:72:04:a9:7a:41:81:b7:21:0b:0c:73:c2:08: 73:18:85:fe:fa:21:03:3e:58:6f:28:5e:99:8c:7d:9b:43:6c: 3a:a2:ca:e6:80:9a:15:5f:20:33:78:50:ce:b7:dc:1c:f8:bf: 7a:27:a1:1d:12:68:d9:b2:b3:1d:b4:e0:62:6a:e3:35:ca:9e: 05:cb:30:18:2e:14:92:5a:78:10:08:4d:56:b9:2a:27:6a:c2: 2a:43:5b:1b:c7:19:75:a9:de:86:48:8b:22:a8:71:eb:55:87: 97:dd:c1:cc:9b:29:ba:a5:82:7a:46:31:e4:25:81:a3:d2:80: 63:12:34:9b:46:b8:69:88:a6:11:ee:53:43:2d:f7:f8:4d:5e: 7b:8e:cc:17:7c:60:31:78:d6:bc:dc:0a:a3:c7:c5:38:cc:e4: 28:54:e4:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZZPoZt+wdhUweb4oc+8A/iNCPtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjEwMTQwNTM4MzZaFw0yNjEwMTcxMDA2MzZaMDMxMTAvBgNV BAMTKEFBMTFCMjc3RTNEMkFDMzMzQjM2MjZGRkU5QTdERUI3RTAyODAzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyXiKWJvCxAeuhmxH7dfEB4+S D88zfGwBLXl58zTCQS93NufZePMJr88US4MywExfOFYmYxevO1SGy0BnflyaRO+O 7ynTFOm7Ijidbqu6OhA2zGUALg8lx4QZEpdzpHBT7tRs45mINunycvJMF5ohCMIH wot6nX4WFQIwQDVZ1OBGw7PvIwTjCq6qbplLKLvtrvQFAjTD+/yly69rAX0vqQLN gPVUsNuqUe7Z+z79IJyPCDYJdmCHdXtshYQaXnZReMBFjXjwrkgZMIAFt6w2Rgq2 GAlSGn/CJqbrSzR37q269QkqYBJgySazWwwDGWg/LxFogqA0jCPmOYVEioqZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqhGyd+PSrDM7Nib/6afet+AoA9YwHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfmfa7qtDY7E yYSsb6nVB7rzKA890bkID3PF/5Juv8FQAcAGTrJlE7mDnoLKfAdEfaaaWwMeL9h/ LfFoLkVocSyGy10y6L55/8GKMjFGEkycejLMykrKhUPkBMS/PS1yBKl6QYG3IQsM c8IIcxiF/vohAz5YbyhemYx9m0NsOqLK5oCaFV8gM3hQzrfcHPi/eiehHRJo2bKz HbTgYmrjNcqeBcswGC4Uklp4EAhNVrkqJ2rCKkNbG8cZdanehkiLIqhx61WHl93B zJspuqWCekYx5CWBo9KAYxI0m0a4aYimEe5TQy33+E1ee47MF3xgMXjWvNwKo8fF OMzkKFTkdw== -----END CERTIFICATE-----Generated at Wed Oct 14 10:24:02 2026 by rpki-client