$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft (raw, json) Hash identifier: g4oGwN4WGBixRBwaiHt8putRgLBZSf0p4Fpzdn1qwCE= Subject key identifier: 26:94:36:CF:98:F8:74:12:DE:A2:3A:97:C9:01:4D:6F:B8:33:47:6A Authority key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Certificate issuer: /CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Certificate serial: 211DDEE70E119EF2EC9D0C41BC67B41BD5DFA437 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft Manifest number: BB Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 14:28:06 +0000 Files and hashes: 1: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl (hash: jE0RqKuypwAwFrM6gWsKVFc8qJhYLh4SbTYTHvBehIw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1d:de:e7:0e:11:9e:f2:ec:9d:0c:41:bc:67:b4:1b:d5:df:a4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 14:28:06 2026 GMT Subject: CN=269436CF98F87412DEA23A97C9014D6FB833476A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:b8:a4:03:3c:98:83:4b:1f:27:90:cb:4e: e8:fd:90:b9:a0:2a:cc:1d:21:e0:87:d5:c9:a0:25: 06:f4:f1:42:3f:75:ac:86:ae:d1:f3:75:ea:fd:ca: 07:d4:d8:4b:c1:0f:ae:83:03:db:de:e0:94:ca:da: c0:0c:5e:96:37:a7:9c:b2:78:db:eb:2b:52:51:90: 54:58:eb:c7:a5:f3:23:e6:69:4f:34:2d:38:dc:22: 5e:58:fa:6d:55:1a:1f:b9:15:e7:29:3c:18:83:10: 0a:39:20:64:04:ed:8e:6f:ac:3e:1b:ce:30:e4:57: b2:e1:fc:c7:e9:bb:89:e4:d1:6a:cb:65:4d:a5:02: 85:72:68:3f:04:c7:3d:81:d6:58:8a:16:8f:d0:6d: 73:95:6b:9e:78:21:97:e5:6d:5d:b7:26:b1:4c:32: a5:8c:aa:c4:67:9f:12:b0:06:e6:3a:6d:17:9a:7f: d6:96:f0:c6:4c:eb:bb:89:75:95:74:75:2a:a2:49: 95:ff:bd:da:40:23:8e:92:50:a1:e9:0f:c3:8e:70: f1:ef:d8:8f:e8:21:46:05:ad:95:1e:33:39:d4:e4: e7:37:1b:98:af:d6:7d:ad:8e:dd:a0:e3:2f:4e:5c: 94:83:a9:d7:62:4e:9a:b1:68:d3:c5:5b:0f:78:8e: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:94:36:CF:98:F8:74:12:DE:A2:3A:97:C9:01:4D:6F:B8:33:47:6A X509v3 Authority Key Identifier: keyid:0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:c9:eb:fc:ee:14:ad:3b:52:6a:77:29:ef:6e:b6:28:2d: d5:d3:8b:25:61:b3:66:c2:08:8f:f8:a7:78:67:06:c6:fd:d9: fb:22:f9:99:71:9d:de:45:6b:bf:d1:a2:7e:7b:38:e2:95:2f: 7c:10:45:d9:83:04:bd:71:1e:a7:b9:71:7a:26:19:c4:8b:3a: 83:16:35:c1:68:83:e4:e7:2f:ca:ff:dc:e0:30:53:16:5b:6b: ca:b2:b8:fc:cc:15:4c:00:55:d1:c8:ab:fe:36:2a:50:76:a3: 40:1b:56:b1:af:e8:63:6d:a4:26:0f:81:26:ec:ea:37:bb:91: c0:02:4a:fe:66:65:19:2b:ae:ed:88:2d:48:e5:cc:9e:57:1c: aa:f3:8d:2c:4c:84:a2:6e:f5:23:f5:3e:ce:7a:6f:12:05:4f: a0:a8:d0:43:74:ce:f7:6b:67:62:29:a9:63:33:67:24:52:56: f5:88:72:2c:ba:94:77:6c:85:1d:15:8a:7b:06:bb:78:12:12: e8:2e:02:82:6a:95:11:49:d9:d0:86:29:99:eb:c9:7a:9b:45: ed:17:9d:df:20:da:de:85:52:bc:14:37:f2:ce:35:b8:4a:9d: 17:bf:ca:ea:cf:eb:4a:79:d4:9f:b9:fe:51:7a:f3:2c:9b:01: 85:7e:81:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIR3e5w4RnvLsnQxBvGe0G9XfpDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZB OUIxQ0Y5NDAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzExNDI4MDZaMDMxMTAvBgNV BAMTKDI2OTQzNkNGOThGODc0MTJERUEyM0E5N0M5MDE0RDZGQjgzMzQ3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulLikAzyYg0sfJ5DLTuj9kLmg KswdIeCH1cmgJQb08UI/dayGrtHzder9ygfU2EvBD66DA9ve4JTK2sAMXpY3p5yy eNvrK1JRkFRY68el8yPmaU80LTjcIl5Y+m1VGh+5FecpPBiDEAo5IGQE7Y5vrD4b zjDkV7Lh/Mfpu4nk0WrLZU2lAoVyaD8Exz2B1liKFo/QbXOVa554IZflbV23JrFM MqWMqsRnnxKwBuY6bReaf9aW8MZM67uJdZV0dSqiSZX/vdpAI46SUKHpD8OOcPHv 2I/oIUYFrZUeMznU5Oc3G5iv1n2tjt2g4y9OXJSDqddiTpqxaNPFWw94jhHvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJpQ2z5j4dBLeojqXyQFNb7gzR2owHwYDVR0j BBgwFoAUDUKXdszD1MzAngPGgYjD36mxz5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc4MTEwNzUwNjc3NDAxNy8wLzBENDI5Nzc2Q0NDM0Q0Q0NDMDlFMDNDNjgxODhD M0RGQTlCMUNGOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3ODExMDc1MDY3NzQwMTcvMC8wRDQyOTc3NkNDQzNE NENDQzA5RTAzQzY4MTg4QzNERkE5QjFDRjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsazJ6/zuFK07 Ump3Ke9utigt1dOLJWGzZsIIj/ineGcGxv3Z+yL5mXGd3kVrv9Gifns44pUvfBBF 2YMEvXEep7lxeiYZxIs6gxY1wWiD5Ocvyv/c4DBTFltryrK4/MwVTABV0cir/jYq UHajQBtWsa/oY22kJg+BJuzqN7uRwAJK/mZlGSuu7YgtSOXMnlccqvONLEyEom71 I/U+znpvEgVPoKjQQ3TO92tnYimpYzNnJFJW9YhyLLqUd2yFHRWKewa7eBIS6C4C gmqVEUnZ0IYpmevJeptF7Red3yDa3oVSvBQ38s41uEqdF7/K6s/rSnnUn7n+UXrz LJsBhX6BRw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:33 2026 by rpki-client