$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: tZSrmsBI1LR6ZpSG8v1TibMdFrke6QtltQ1XXk40/d4= Subject key identifier: 29:64:1C:EA:B9:D5:4B:BD:89:BE:15:F6:DB:29:CF:55:21:CB:B3:66 Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 19D96492797389CCF29B975D8E53D767A224EBC8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: 0B Signing time: Fri 17 Apr 2026 06:59:41 +0000 Manifest this update: Fri 17 Apr 2026 06:54:41 +0000 Manifest next update: Sat 18 Apr 2026 10:04:41 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: vuZB9NoovDn9C1hd2RPjEs5wbN6klNjcIjknnjL72Ts=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d9:64:92:79:73:89:cc:f2:9b:97:5d:8e:53:d7:67:a2:24:eb:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Apr 17 06:54:41 2026 GMT Not After : Apr 18 10:04:41 2026 GMT Subject: CN=29641CEAB9D54BBD89BE15F6DB29CF5521CBB366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:3c:22:2a:f0:be:99:30:b4:c1:f3:bc:5b: 99:21:a4:53:48:95:d8:c9:f8:51:36:0d:e5:0f:10: 2f:8f:97:fc:bc:14:c8:fa:47:3e:0a:ee:56:7e:94: dd:29:0b:c8:9a:a9:28:75:10:31:38:53:47:f6:16: ed:11:45:d5:01:bc:11:4d:57:10:0d:0d:fc:54:4e: 80:0f:94:3a:ce:7b:b2:74:c8:05:a1:2d:07:99:3a: 4d:dc:6e:4c:7c:9d:a5:8e:70:76:12:b7:a3:4f:62: b3:cf:46:8f:84:35:14:39:e3:d8:33:c8:b9:45:a4: a6:77:80:3a:99:67:5e:8f:0e:12:65:da:2d:e2:d3: a8:8f:a2:39:c2:cd:fa:61:de:07:b1:88:50:e6:c1: 15:25:cb:11:a2:56:3c:58:0f:65:5b:ee:24:95:c0: f6:6c:45:08:91:a4:54:ab:77:78:63:86:d9:6c:c0: bd:b6:16:8b:dc:2e:81:0e:58:b0:3e:49:3f:8a:cc: b5:fc:a8:98:8d:3f:41:f1:c0:98:ca:32:24:28:ee: 74:40:50:3c:9e:0e:b3:79:a2:bc:d6:67:4f:1a:48: 55:a7:05:04:f9:97:79:5a:67:ed:52:38:58:9f:c2: ea:d9:67:cd:02:d1:9b:f2:29:31:cf:59:76:2f:4a: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:1C:EA:B9:D5:4B:BD:89:BE:15:F6:DB:29:CF:55:21:CB:B3:66 X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:d3:68:0f:1a:34:7e:09:5d:4d:ff:c9:d3:fc:f8:25:55: bb:23:81:e7:d3:71:6b:e3:9b:73:37:57:de:0d:77:7e:71:4c: 2d:e1:a6:7a:04:cf:07:ce:67:27:23:bb:6e:b3:14:1d:3d:07: 42:50:d3:0a:5e:04:49:c5:28:d8:cb:e6:06:3d:59:95:a2:50: 88:65:86:9d:23:2e:60:9b:e8:2c:70:9d:42:9f:35:65:69:a6: 2f:a5:80:ce:5c:c7:5a:be:ab:e1:6a:fc:25:a9:de:72:4a:69: 8c:ef:ee:62:4f:39:2f:9d:65:5e:ef:3c:15:57:6c:02:84:2e: 21:0b:b5:73:bc:b6:02:88:18:52:d4:09:4e:fe:d9:f1:0a:ed: 0c:7b:cd:1e:c9:79:f9:fe:a7:35:ce:1a:bb:fc:84:07:d7:aa: c1:45:55:a4:25:6f:a0:5f:1b:df:6d:97:a1:b3:6c:ad:04:12: 88:a8:bf:c9:58:ee:27:0e:e7:bf:7e:fe:f0:ef:a7:7d:e7:3e: c9:43:d0:1c:ad:fa:e9:2a:d2:37:36:f8:4a:1b:cb:af:c0:9f: 36:a4:ed:70:be:51:26:97:95:89:29:ba:55:78:86:70:15:de: ba:b1:b5:b0:fd:4f:d9:43:3e:24:d9:19:b8:32:39:14:01:b4: 64:94:72:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGdlkknlziczym5ddjlPXZ6Ik68gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA0MTcwNjU0NDFaFw0yNjA0MTgxMDA0NDFaMDMxMTAvBgNV BAMTKDI5NjQxQ0VBQjlENTRCQkQ4OUJFMTVGNkRCMjlDRjU1MjFDQkIzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kTwiKvC+mTC0wfO8W5khpFNI ldjJ+FE2DeUPEC+Pl/y8FMj6Rz4K7lZ+lN0pC8iaqSh1EDE4U0f2Fu0RRdUBvBFN VxANDfxUToAPlDrOe7J0yAWhLQeZOk3cbkx8naWOcHYSt6NPYrPPRo+ENRQ549gz yLlFpKZ3gDqZZ16PDhJl2i3i06iPojnCzfph3gexiFDmwRUlyxGiVjxYD2Vb7iSV wPZsRQiRpFSrd3hjhtlswL22FovcLoEOWLA+ST+KzLX8qJiNP0HxwJjKMiQo7nRA UDyeDrN5orzWZ08aSFWnBQT5l3laZ+1SOFifwurZZ80C0ZvyKTHPWXYvSgrpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKWQc6rnVS72JvhX22ynPVSHLs2YwHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKrTaA8aNH4J XU3/ydP8+CVVuyOB59Nxa+ObczdX3g13fnFMLeGmegTPB85nJyO7brMUHT0HQlDT Cl4EScUo2MvmBj1ZlaJQiGWGnSMuYJvoLHCdQp81ZWmmL6WAzlzHWr6r4Wr8Jane ckppjO/uYk85L51lXu88FVdsAoQuIQu1c7y2AogYUtQJTv7Z8QrtDHvNHsl5+f6n Nc4au/yEB9eqwUVVpCVvoF8b322XobNsrQQSiKi/yVjuJw7nv37+8O+nfec+yUPQ HK366SrSNzb4ShvLr8CfNqTtcL5RJpeViSm6VXiGcBXeurG1sP1P2UM+JNkZuDI5 FAG0ZJRyIQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:01:20 2026 by rpki-client