$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: JCWoyVeOE3dmO70vPXUtwINHI7strVUctEaud3+AgJc= Subject key identifier: 68:B7:34:81:95:23:E0:B9:DC:19:6E:21:A4:A7:32:9E:44:46:17:34 Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 52815F11BDD083C6CD4880136B10708CB765100D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: 05 Signing time: Sun 12 Apr 2026 23:54:17 +0000 Manifest this update: Sun 12 Apr 2026 23:49:17 +0000 Manifest next update: Tue 14 Apr 2026 00:13:17 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: F2ZMVRvu/ujkPOvaNIiZUKovdk/vXwx8n8jDsC7GAJA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 00:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:81:5f:11:bd:d0:83:c6:cd:48:80:13:6b:10:70:8c:b7:65:10:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Apr 12 23:49:17 2026 GMT Not After : Apr 14 00:13:17 2026 GMT Subject: CN=68B734819523E0B9DC196E21A4A7329E44461734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:a3:5c:81:a7:56:21:34:ac:c4:f9:08:00: 23:58:e2:a6:b3:32:fc:56:7d:c7:38:64:e7:57:33: 32:c6:4d:a3:80:80:1c:9c:11:59:af:b8:3e:aa:b4: 55:a3:0a:f6:2b:37:7b:d6:d5:7e:05:aa:bc:63:40: 88:d7:fd:3a:e1:6a:3f:e8:04:7a:2a:c2:84:ae:e0: 05:00:1b:70:e7:34:0e:c7:67:40:8a:4c:61:03:96: 42:a7:46:25:97:6b:bf:5b:c4:b5:36:d4:74:fd:81: 89:a4:70:8c:d4:c4:0f:f4:c8:5b:2e:7d:1d:97:25: 06:7c:c8:e3:93:7f:7f:9b:c8:19:02:fd:a6:4f:d2: 22:22:10:06:9e:62:a9:e9:47:af:ff:85:e4:4e:9f: 17:15:85:53:3f:33:29:fc:17:55:a7:36:5a:ed:b8: d3:a8:1a:ec:8c:3e:cc:c8:8b:0f:f1:77:70:90:fd: d4:3c:4a:0c:12:7f:c4:10:7c:d3:0c:8b:db:95:c1: cc:b2:ea:90:85:84:0a:0a:26:9e:4a:b7:e4:ed:98: e9:94:a8:36:c2:18:37:af:59:f9:ff:70:b0:fd:14: df:73:50:4e:19:84:1e:f8:b7:dd:bb:54:4e:d0:0a: 19:df:42:46:5b:ca:82:78:c7:f1:0b:7d:42:c2:bb: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:34:81:95:23:E0:B9:DC:19:6E:21:A4:A7:32:9E:44:46:17:34 X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:80:2f:52:c2:bb:b5:dc:20:ae:cc:d8:eb:e9:26:97:c4:e3: f8:3d:ae:6e:fd:32:8c:c2:02:e9:27:87:34:bd:86:19:7e:ab: 65:38:be:57:c5:45:73:2b:59:c5:36:82:b9:2f:8f:64:9c:d2: 1a:52:b0:96:ea:54:e3:19:7a:60:27:02:f5:f9:06:13:eb:6f: bc:f7:24:25:48:d8:03:16:3c:f1:19:07:1f:b1:3e:56:1e:3e: 07:26:7d:57:57:44:6d:62:b6:eb:76:f1:0d:02:c0:0e:1c:6f: 72:ce:b9:10:58:73:6e:b1:00:ce:b9:4d:55:0c:4f:99:10:31: a0:ee:2b:a8:3b:3c:af:4a:10:57:34:73:2c:45:f9:77:fe:d5: fd:6a:cb:db:94:fe:48:62:f6:d3:7f:1d:dd:48:2f:ac:3b:0a: d6:c4:d4:e2:1a:b2:9b:81:10:b1:e0:dd:72:51:02:f3:9e:ec: 90:67:80:9a:f9:ff:20:6e:72:5d:04:cb:f4:c4:ab:3b:e1:d2: 80:52:b2:d3:61:bd:d8:f3:26:3a:34:f5:70:d5:1a:4f:88:23: b6:60:ec:d0:7d:3a:b1:fa:a2:02:4b:e4:93:fa:e3:28:9f:10: d4:9a:a7:3d:99:0a:94:31:57:8d:67:9b:fc:f7:2f:44:6e:9e: 3e:23:7f:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUoFfEb3Qg8bNSIATaxBwjLdlEA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA0MTIyMzQ5MTdaFw0yNjA0MTQwMDEzMTdaMDMxMTAvBgNV BAMTKDY4QjczNDgxOTUyM0UwQjlEQzE5NkUyMUE0QTczMjlFNDQ0NjE3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEqNcgadWITSsxPkIACNY4qaz MvxWfcc4ZOdXMzLGTaOAgBycEVmvuD6qtFWjCvYrN3vW1X4FqrxjQIjX/Trhaj/o BHoqwoSu4AUAG3DnNA7HZ0CKTGEDlkKnRiWXa79bxLU21HT9gYmkcIzUxA/0yFsu fR2XJQZ8yOOTf3+byBkC/aZP0iIiEAaeYqnpR6//heROnxcVhVM/Myn8F1WnNlrt uNOoGuyMPszIiw/xd3CQ/dQ8SgwSf8QQfNMMi9uVwcyy6pCFhAoKJp5Kt+TtmOmU qDbCGDevWfn/cLD9FN9zUE4ZhB74t927VE7QChnfQkZbyoJ4x/ELfULCu4QpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaLc0gZUj4LncGW4hpKcynkRGFzQwHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoAvUsK7tdwg rszY6+kml8Tj+D2ubv0yjMIC6SeHNL2GGX6rZTi+V8VFcytZxTaCuS+PZJzSGlKw lupU4xl6YCcC9fkGE+tvvPckJUjYAxY88RkHH7E+Vh4+ByZ9V1dEbWK263bxDQLA Dhxvcs65EFhzbrEAzrlNVQxPmRAxoO4rqDs8r0oQVzRzLEX5d/7V/WrL25T+SGL2 038d3UgvrDsK1sTU4hqym4EQseDdclEC857skGeAmvn/IG5yXQTL9MSrO+HSgFKy 02G92PMmOjT1cNUaT4gjtmDs0H06sfqiAkvkk/rjKJ8Q1JqnPZkKlDFXjWeb/Pcv RG6ePiN/bA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:06:18 2026 by rpki-client