
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json)
Hash identifier: DW+hncUvk8r6g/SItVG1FxAnABG1Iv32ummwj/Jmb60=
Subject key identifier: 67:B6:B8:16:CD:E2:6B:26:87:B5:80:16:0C:5E:61:08:3B:0B:D8:A4
Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94
Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94
Certificate serial: 1FB54D748841CF054C394371585F45E54EAA69B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
Manifest number: 7F
Signing time: Tue 14 Jul 2026 05:45:34 +0000
Manifest this update: Tue 14 Jul 2026 05:40:34 +0000
Manifest next update: Wed 15 Jul 2026 09:34:34 +0000
Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: h578PiObvhxd09zEhglizDRqPpyiAAVa1+38rBAehPk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl
rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b5:4d:74:88:41:cf:05:4c:39:43:71:58:5f:45:e5:4e:aa:69:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94
Validity
Not Before: Jul 14 05:40:34 2026 GMT
Not After : Jul 15 09:34:34 2026 GMT
Subject: CN=67B6B816CDE26B2687B580160C5E61083B0BD8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:89:21:3b:2c:e3:7b:09:73:99:d7:e4:5b:
9b:35:8b:15:6a:b6:77:7e:d4:3f:87:37:98:ab:0c:
43:5b:5f:49:f0:7b:d6:e1:e6:63:56:6d:4e:b2:c4:
ac:af:eb:cc:4b:fe:93:52:49:4f:88:65:f6:f9:36:
7c:34:b1:ca:9c:09:89:d9:3e:d5:e4:e4:c7:65:02:
2b:ba:6a:7a:83:2c:1c:1d:e0:98:49:09:21:27:ef:
77:e6:22:ba:01:db:28:e7:21:30:0f:ca:75:01:67:
34:3d:ff:e5:3a:fa:95:71:1d:57:30:4c:a7:22:ff:
47:d2:6f:e3:9e:52:3e:6f:3f:b0:30:81:46:af:b8:
65:cc:29:1a:d8:a2:cf:39:96:ce:4a:35:1c:4d:13:
0d:b3:33:a5:ce:9e:83:7a:49:be:3f:fa:ac:91:a7:
47:d4:13:68:4a:a4:0d:6b:ff:f3:95:67:05:b6:47:
bb:47:24:58:75:26:28:2f:30:22:c2:59:0b:6a:ec:
6f:a1:5f:bd:f4:c1:3a:15:1c:9a:e7:89:d7:a2:5a:
e2:bc:dc:af:c5:47:ae:9e:a2:13:0a:22:68:03:86:
c0:77:5e:1e:2c:b1:9d:62:fa:7c:ce:a2:66:46:3c:
98:40:63:92:9a:3c:d0:09:6d:d8:71:93:8e:20:89:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:B8:16:CD:E2:6B:26:87:B5:80:16:0C:5E:61:08:3B:0B:D8:A4
X509v3 Authority Key Identifier:
keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:92:03:73:4d:f4:e2:05:7b:b6:85:1b:3f:f1:7d:d7:70:14:
e2:12:bc:6a:ac:23:36:45:1a:df:3a:ad:e0:9f:69:05:e0:53:
7b:95:1f:71:d9:6b:45:a7:b8:10:a8:ce:3e:af:85:af:d7:e3:
70:08:bc:ec:41:06:aa:cf:d8:1a:a4:59:b0:30:a9:36:b3:67:
5d:8b:74:9c:f2:40:46:b7:4b:3b:52:5b:26:be:3c:65:4d:97:
0d:e8:c8:25:86:a6:2f:2f:20:ca:b7:b1:13:ff:00:8d:4e:45:
1b:5e:bc:49:29:84:8f:21:50:41:b9:5c:02:39:18:5e:30:0c:
7d:7c:2f:29:a6:45:54:ef:d4:83:a8:96:7e:b6:d9:9a:ee:22:
c5:62:ce:f0:e6:df:f1:7b:63:1d:ba:93:d9:21:74:d4:7a:f4:
65:1e:80:34:c8:fe:ba:d3:65:35:39:89:83:41:7b:7f:78:ad:
18:53:01:47:de:64:72:06:86:f8:4d:0f:6d:e0:b8:aa:84:28:
64:e1:91:02:e4:70:f5:52:fc:48:84:80:7b:95:37:b8:f2:f9:
2f:c6:5d:87:c6:96:df:9e:f1:1f:3c:52:8a:69:d1:e1:10:0b:
2d:f8:b3:ad:2c:7c:a0:bb:92:e6:6c:21:33:5c:d6:a7:3a:31:
5b:84:c6:60
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUH7VNdIhBzwVMOUNxWF9F5U6qabYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB
OUIxQ0Y5NDAeFw0yNjA3MTQwNTQwMzRaFw0yNjA3MTUwOTM0MzRaMDMxMTAvBgNV
BAMTKDY3QjZCODE2Q0RFMjZCMjY4N0I1ODAxNjBDNUU2MTA4M0IwQkQ4QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXDIkhOyzjewlzmdfkW5s1ixVq
tnd+1D+HN5irDENbX0nwe9bh5mNWbU6yxKyv68xL/pNSSU+IZfb5Nnw0scqcCYnZ
PtXk5MdlAiu6anqDLBwd4JhJCSEn73fmIroB2yjnITAPynUBZzQ9/+U6+pVxHVcw
TKci/0fSb+OeUj5vP7AwgUavuGXMKRrYos85ls5KNRxNEw2zM6XOnoN6Sb4/+qyR
p0fUE2hKpA1r//OVZwW2R7tHJFh1JigvMCLCWQtq7G+hX730wToVHJrnideiWuK8
3K/FR66eohMKImgDhsB3Xh4ssZ1i+nzOomZGPJhAY5KaPNAJbdhxk44giYEtAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUZ7a4Fs3iayaHtYAWDF5hCDsL2KQwHwYDVR0j
BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD
M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE
NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJIDc0304gV7
toUbP/F913AU4hK8aqwjNkUa3zqt4J9pBeBTe5UfcdlrRae4EKjOPq+Fr9fjcAi8
7EEGqs/YGqRZsDCpNrNnXYt0nPJARrdLO1JbJr48ZU2XDejIJYamLy8gyrexE/8A
jU5FG168SSmEjyFQQblcAjkYXjAMfXwvKaZFVO/Ug6iWfrbZmu4ixWLO8Obf8Xtj
HbqT2SF01Hr0ZR6ANMj+utNlNTmJg0F7f3itGFMBR95kcgaG+E0PbeC4qoQoZOGR
AuRw9VL8SISAe5U3uPL5L8Zdh8aW357xHzxSimnR4RALLfizrSx8oLuS5mwhM1zW
pzoxW4TGYA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:04 2026 by rpki-client