$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: 50s4YbersM68sqRQueV5aC5ywOyLyTnJBtQnvRd3Gog= Subject key identifier: 55:34:F8:4E:68:2A:F4:7A:BB:EA:6F:F2:42:F4:24:5E:E5:17:4E:19 Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 3C1F065556479E3F06F1D4F062D657EE42935737 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: 94 Signing time: Wed 29 Jul 2026 21:40:18 +0000 Manifest this update: Wed 29 Jul 2026 21:35:18 +0000 Manifest next update: Thu 30 Jul 2026 23:27:18 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: aL2t+5qEm5jrNYG4Qj+N/jGmxTwkPNBtHDJ/mtTPhR8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1f:06:55:56:47:9e:3f:06:f1:d4:f0:62:d6:57:ee:42:93:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Jul 29 21:35:18 2026 GMT Not After : Jul 30 23:27:18 2026 GMT Subject: CN=5534F84E682AF47ABBEA6FF242F4245EE5174E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:07:34:6e:7e:da:a1:aa:ce:4d:bb:0a:f4: 4f:b4:09:35:b5:63:3a:4b:6f:a7:18:fa:91:a6:cb: 42:f8:f0:aa:e2:c5:bb:74:2a:a6:99:6c:38:a4:10: 5d:ac:f5:50:45:01:e7:99:60:a6:2d:b6:e0:6c:a3: 3b:c4:ac:af:b1:03:6f:7f:10:f9:2d:69:8a:08:43: 39:74:af:67:00:66:03:e1:80:f3:5d:f0:18:c7:df: bc:8b:30:74:10:7d:fd:54:d6:42:9d:0e:7e:c9:f4: ae:d9:8c:1b:67:79:b4:89:c7:1c:bf:94:0a:91:a9: 13:33:15:08:f5:70:55:01:d5:de:e7:0e:c8:cc:7d: 44:df:83:cd:2f:3e:50:5e:ef:f3:e7:38:c5:6d:41: af:76:00:b6:e4:02:16:06:d4:b9:f7:23:2d:d9:2b: 9f:69:2c:1d:f1:c3:28:77:dc:eb:e5:05:de:69:7c: 3d:21:31:bb:c2:c2:69:aa:4e:29:7d:6d:da:b9:3e: 4b:bd:c9:4c:60:b5:e7:9d:28:eb:b2:74:69:3f:80: 03:08:1e:de:aa:f4:90:79:7d:d4:a5:8f:25:ee:66: 8e:6d:54:54:a2:3f:5e:5d:07:4c:75:97:2d:f4:6c: 16:7a:61:06:8c:ba:66:96:4f:fe:2a:ca:5c:52:f9: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:34:F8:4E:68:2A:F4:7A:BB:EA:6F:F2:42:F4:24:5E:E5:17:4E:19 X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:1c:b6:99:45:0c:ac:a4:98:b4:56:37:f7:37:59:c2:46: 14:5d:fa:77:1b:bb:7a:e1:47:65:15:ef:84:41:c3:99:1a:64: 72:be:b2:7e:5f:07:8e:b3:f8:56:86:7b:04:c9:eb:8b:b0:d4: 2f:14:e1:c0:48:59:bf:96:f3:8b:e3:9a:a6:1d:61:05:df:dc: 07:bc:0d:bd:aa:0d:af:33:22:9c:38:93:e6:8b:c3:bf:a7:a4: d1:7a:ee:1e:44:16:9a:9f:87:be:ee:ce:bf:a4:48:01:ea:30: e0:84:09:8d:84:a9:1e:b7:66:da:9e:5a:61:a8:c9:6f:99:35: 9b:03:81:1a:48:76:64:30:7e:03:da:e1:85:a1:0b:1f:85:15: de:57:ba:29:06:a5:ff:6d:5c:69:7a:11:fe:44:2d:56:09:15: 27:5c:13:98:b4:83:09:c1:40:41:c3:f8:3d:b0:37:51:71:a7: 9c:5e:92:54:93:b2:84:4d:29:53:4d:6a:67:b5:e7:bb:69:56: 7c:c5:38:25:75:99:eb:31:7f:44:4c:ba:32:7d:2c:f4:de:dc: 62:d1:9a:13:4e:6b:92:1a:90:6c:52:55:ff:6e:db:43:ae:c9: 37:75:6a:0b:19:d8:85:83:e6:03:22:b5:c8:3d:81:64:b1:f2: e0:8b:bb:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPB8GVVZHnj8G8dTwYtZX7kKTVzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA3MjkyMTM1MThaFw0yNjA3MzAyMzI3MThaMDMxMTAvBgNV BAMTKDU1MzRGODRFNjgyQUY0N0FCQkVBNkZGMjQyRjQyNDVFRTUxNzRFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhAc0bn7aoarOTbsK9E+0CTW1 YzpLb6cY+pGmy0L48Krixbt0KqaZbDikEF2s9VBFAeeZYKYttuBsozvErK+xA29/ EPktaYoIQzl0r2cAZgPhgPNd8BjH37yLMHQQff1U1kKdDn7J9K7ZjBtnebSJxxy/ lAqRqRMzFQj1cFUB1d7nDsjMfUTfg80vPlBe7/PnOMVtQa92ALbkAhYG1Ln3Iy3Z K59pLB3xwyh33OvlBd5pfD0hMbvCwmmqTil9bdq5Pku9yUxgteedKOuydGk/gAMI Ht6q9JB5fdSljyXuZo5tVFSiP15dB0x1ly30bBZ6YQaMumaWT/4qylxS+eXTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVTT4Tmgq9Hq76m/yQvQkXuUXThkwHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjIctplFDKyk mLRWN/c3WcJGFF36dxu7euFHZRXvhEHDmRpkcr6yfl8HjrP4VoZ7BMnri7DULxTh wEhZv5bzi+Oaph1hBd/cB7wNvaoNrzMinDiT5ovDv6ek0XruHkQWmp+Hvu7Ov6RI Aeow4IQJjYSpHrdm2p5aYajJb5k1mwOBGkh2ZDB+A9rhhaELH4UV3le6KQal/21c aXoR/kQtVgkVJ1wTmLSDCcFAQcP4PbA3UXGnnF6SVJOyhE0pU01qZ7Xnu2lWfMU4 JXWZ6zF/REy6Mn0s9N7cYtGaE05rkhqQbFJV/27bQ67JN3VqCxnYhYPmAyK1yD2B ZLHy4Iu7OQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:23 2026 by rpki-client