$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: mNAE8fArXwoaFZKZuiSjy79N8Iz9co8hO/m3eMKztk0= Subject key identifier: DD:5E:C4:4F:19:1C:76:A5:05:96:94:B2:EA:11:6E:14:49:60:93:8A Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 2F6098E70E78B11471C0125A215E652F5F886CE5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: D4 Signing time: Thu 22 Oct 2026 21:39:27 +0000 Manifest this update: Thu 22 Oct 2026 21:34:27 +0000 Manifest next update: Mon 26 Oct 2026 03:31:27 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: yiXz0KrTOB4Etpz3SZMP4X8o/fYA9JX+8IANCkhWFaI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 09:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:60:98:e7:0e:78:b1:14:71:c0:12:5a:21:5e:65:2f:5f:88:6c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Oct 22 21:34:27 2026 GMT Not After : Oct 26 03:31:27 2026 GMT Subject: CN=DD5EC44F191C76A5059694B2EA116E144960938A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:3a:76:3b:32:b8:66:cf:5f:0d:37:57:4b: 5c:d8:82:aa:fd:53:36:83:4a:6c:ae:34:ee:d4:87: ef:54:98:75:4c:99:01:06:83:19:06:59:e3:be:d7: 2b:5d:f5:b7:6e:08:c9:1b:d6:bb:70:0b:4d:a2:fd: 69:9d:1a:c5:be:ad:23:2b:7e:36:b3:4c:f9:28:cf: 6c:11:82:2c:31:4c:6c:01:7c:df:01:29:ed:98:bf: cf:1b:9e:b0:29:b8:6a:63:2c:3c:50:12:58:67:93: 41:f6:5a:00:dd:10:69:42:78:ef:28:2b:26:4a:40: c7:22:ec:57:63:09:6b:08:4c:92:be:07:a1:30:f9: 93:48:a0:7a:6a:36:d0:96:f9:01:5e:a8:a1:ec:14: 38:87:ea:bc:42:ae:b3:e3:21:17:ae:71:ec:b1:fe: aa:e6:ea:58:f3:06:11:48:5a:4c:23:59:9d:ae:d6: a1:8d:25:ca:83:78:9a:ef:be:32:11:03:44:da:35: cb:df:b3:53:b0:6a:da:af:29:c2:71:30:14:3c:46: 74:fa:33:f4:5e:18:41:8e:02:c5:bb:ce:da:de:67: ae:f1:fe:d7:1e:19:70:a3:e6:53:03:b0:78:72:a3: eb:0f:96:3a:cc:16:76:61:21:ce:a5:bb:87:9f:5d: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:C4:4F:19:1C:76:A5:05:96:94:B2:EA:11:6E:14:49:60:93:8A X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1c:dd:f7:70:71:81:c4:ce:73:79:88:79:24:ae:97:db:4d: 26:98:b6:7b:d9:b8:08:ae:40:79:96:b8:03:fa:6a:67:d4:a9: 6f:78:37:c2:ad:1f:c5:df:04:a9:38:dd:4b:f3:8b:b6:d2:34: cb:6c:22:29:b4:43:1e:f3:ed:31:45:72:6a:f4:15:9a:ff:09: 09:40:e8:91:b4:a9:d5:b3:00:9a:50:2f:5e:82:11:3e:52:b4: f8:ea:64:e5:e7:69:1a:69:da:d4:9a:cb:cb:22:2c:63:e0:46: 75:52:46:c1:25:ec:fa:84:d0:3e:14:77:ab:b8:2e:ff:b8:7a: 04:6f:51:39:5d:82:db:0c:c4:30:74:95:cd:7b:7f:5e:7f:04: 69:88:a9:32:f9:44:a5:8a:33:ef:0f:73:18:1d:93:91:f7:9a: c2:a1:73:1e:15:fd:05:f7:04:23:3c:ab:49:b6:88:62:af:8a: 4c:14:e3:36:8a:4f:84:c8:90:a5:61:f6:54:a3:ec:3d:f8:a3: 59:16:60:04:99:2f:ce:22:5f:62:69:ee:9b:ec:f1:45:3d:71: d6:50:54:a7:89:38:04:15:69:b6:d5:26:3f:9f:0c:cd:e3:4d: 92:87:2a:ee:7e:a8:8c:1a:9f:1d:7b:b3:8d:19:f5:52:b0:33: 1d:87:02:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL2CY5w54sRRxwBJaIV5lL1+IbOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjEwMjIyMTM0MjdaFw0yNjEwMjYwMzMxMjdaMDMxMTAvBgNV BAMTKERENUVDNDRGMTkxQzc2QTUwNTk2OTRCMkVBMTE2RTE0NDk2MDkzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUDp2OzK4Zs9fDTdXS1zYgqr9 UzaDSmyuNO7Uh+9UmHVMmQEGgxkGWeO+1ytd9bduCMkb1rtwC02i/WmdGsW+rSMr fjazTPkoz2wRgiwxTGwBfN8BKe2Yv88bnrApuGpjLDxQElhnk0H2WgDdEGlCeO8o KyZKQMci7FdjCWsITJK+B6Ew+ZNIoHpqNtCW+QFeqKHsFDiH6rxCrrPjIReuceyx /qrm6ljzBhFIWkwjWZ2u1qGNJcqDeJrvvjIRA0TaNcvfs1OwatqvKcJxMBQ8RnT6 M/ReGEGOAsW7ztreZ67x/tceGXCj5lMDsHhyo+sPljrMFnZhIc6lu4efXUUPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3V7ETxkcdqUFlpSy6hFuFElgk4owHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBzd93BxgcTO c3mIeSSul9tNJpi2e9m4CK5AeZa4A/pqZ9Spb3g3wq0fxd8EqTjdS/OLttI0y2wi KbRDHvPtMUVyavQVmv8JCUDokbSp1bMAmlAvXoIRPlK0+Opk5edpGmna1JrLyyIs Y+BGdVJGwSXs+oTQPhR3q7gu/7h6BG9ROV2C2wzEMHSVzXt/Xn8EaYipMvlEpYoz 7w9zGB2TkfeawqFzHhX9BfcEIzyrSbaIYq+KTBTjNopPhMiQpWH2VKPsPfijWRZg BJkvziJfYmnum+zxRT1x1lBUp4k4BBVpttUmP58MzeNNkocq7n6ojBqfHXuzjRn1 UrAzHYcCxQ== -----END CERTIFICATE-----Generated at Fri Oct 23 03:59:25 2026 by rpki-client