$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json) Hash identifier: Geryy0bcU6NoIbK3as9o5cHMedgjlB0Jt+8ajLN46Mk= Subject key identifier: 3B:0A:63:0F:9E:35:1F:2B:FF:9C:C7:32:EB:A4:D7:4B:CF:0D:EC:05 Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF Certificate serial: 73959F6BAC37CD8DA26D3955E74E84A9559DE71E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft Manifest number: 013C Signing time: Sat 10 Oct 2026 15:49:46 +0000 Manifest this update: Sat 10 Oct 2026 15:44:46 +0000 Manifest next update: Tue 13 Oct 2026 19:48:46 +0000 Files and hashes: 1: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: WoOQpWyYce0DsV2PT3KR89AmavdxO+kTxK1Hx3VG9rg=) 2: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 19:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:9f:6b:ac:37:cd:8d:a2:6d:39:55:e7:4e:84:a9:55:9d:e7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF Validity Not Before: Oct 10 15:44:46 2026 GMT Not After : Oct 13 19:48:46 2026 GMT Subject: CN=3B0A630F9E351F2BFF9CC732EBA4D74BCF0DEC05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:6e:5b:97:d7:b8:76:19:f5:ae:84:8c:c3: 2f:84:de:5e:16:cc:77:11:e3:f2:68:9b:19:9b:bc: 50:87:52:68:e5:8e:2d:0d:13:55:c7:50:ef:b8:62: 15:0a:a4:0f:be:d7:b8:c5:1e:75:34:9b:58:3b:d3: aa:85:75:39:f6:c9:c6:a6:00:8e:ea:9e:2d:2e:1d: f0:bd:0d:db:5a:4f:e7:d9:93:4a:fa:ef:99:d7:9d: f0:da:b0:49:00:8a:ab:86:f8:a5:25:87:27:5e:2b: 64:a5:81:36:4e:2b:66:d9:6a:f1:28:fb:48:20:88: 52:d9:7f:7b:51:4a:44:de:e8:ab:6f:86:0c:a0:d7: b2:0f:31:a5:72:0c:c1:e4:1c:ee:1c:0f:65:71:80: d8:74:b6:44:45:9b:77:cf:5c:7c:ef:f4:6d:67:a5: bd:3f:67:99:75:f9:1a:64:86:83:16:e8:2f:27:1e: e2:6f:a0:19:02:a1:66:8b:b8:ee:3d:72:20:88:4d: 8f:1a:b0:2a:d7:19:b5:53:de:3b:d0:59:0f:28:87: 0d:34:52:8f:e3:1f:50:ec:29:14:65:68:27:10:ec: e7:04:64:b5:9b:38:b1:9e:a3:10:ef:8c:c5:07:34: 5d:d1:87:e9:d1:08:38:7b:28:b8:d9:ee:9a:54:11: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:63:0F:9E:35:1F:2B:FF:9C:C7:32:EB:A4:D7:4B:CF:0D:EC:05 X509v3 Authority Key Identifier: keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:03:9b:2c:61:83:d5:d0:0a:dd:ae:5b:20:53:6f:f9:db:e6: 84:39:c4:54:ea:d3:17:04:d3:82:93:a0:83:4a:31:a6:21:3c: b4:1c:68:53:4f:3f:54:1e:bc:06:d6:41:74:7b:fb:26:66:e6: 73:7d:ba:e3:0b:8d:44:d7:a2:73:c3:a0:c2:bd:6a:35:7c:35: 97:82:d5:0d:83:a4:10:d5:58:d7:0e:5b:d8:bb:01:e6:56:09: 9d:32:f2:0e:3e:58:f3:72:d7:8f:9b:ea:69:00:ad:89:e2:c4: 8a:f0:60:5c:ad:6d:65:7a:ae:38:89:6b:d0:7a:53:0b:01:70: 3d:cc:b4:cd:b6:e4:26:d0:6a:dd:d2:63:ed:bb:95:5d:7e:84: 53:70:23:43:0d:10:d1:03:8b:41:f3:16:d3:58:05:ca:03:c9: 77:28:1b:5b:30:df:93:fc:da:17:fe:46:03:13:d1:69:a4:88: 58:eb:a6:fa:0e:b3:19:f5:85:12:9e:7b:da:93:52:d9:be:92: 6e:95:f3:6e:bf:fb:85:bc:1a:83:e5:b0:91:ee:78:dd:01:8d: 83:4f:99:eb:2b:f5:93:46:70:9c:46:c9:cb:34:e3:98:65:f3: 09:cd:46:c4:23:5e:70:7a:7f:ed:5a:9e:ec:a9:bd:48:35:23: 3b:c7:e8:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc5Wfa6w3zY2ibTlV506EqVWd5x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw ODY1NkRDRjAeFw0yNjEwMTAxNTQ0NDZaFw0yNjEwMTMxOTQ4NDZaMDMxMTAvBgNV BAMTKDNCMEE2MzBGOUUzNTFGMkJGRjlDQzczMkVCQTRENzRCQ0YwREVDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrsG5bl9e4dhn1roSMwy+E3l4W zHcR4/JomxmbvFCHUmjlji0NE1XHUO+4YhUKpA++17jFHnU0m1g706qFdTn2ycam AI7qni0uHfC9DdtaT+fZk0r675nXnfDasEkAiquG+KUlhydeK2SlgTZOK2bZavEo +0ggiFLZf3tRSkTe6Ktvhgyg17IPMaVyDMHkHO4cD2VxgNh0tkRFm3fPXHzv9G1n pb0/Z5l1+RpkhoMW6C8nHuJvoBkCoWaLuO49ciCITY8asCrXGbVT3jvQWQ8ohw00 Uo/jH1DsKRRlaCcQ7OcEZLWbOLGeoxDvjMUHNF3Rh+nRCDh7KLjZ7ppUERq/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOwpjD541Hyv/nMcy66TXS88N7AUwHwYDVR0j BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgObLGGD1dAK 3a5bIFNv+dvmhDnEVOrTFwTTgpOgg0oxpiE8tBxoU08/VB68BtZBdHv7Jmbmc326 4wuNRNeic8Ogwr1qNXw1l4LVDYOkENVY1w5b2LsB5lYJnTLyDj5Y83LXj5vqaQCt ieLEivBgXK1tZXquOIlr0HpTCwFwPcy0zbbkJtBq3dJj7buVXX6EU3AjQw0Q0QOL QfMW01gFygPJdygbWzDfk/zaF/5GAxPRaaSIWOum+g6zGfWFEp572pNS2b6SbpXz br/7hbwag+Wwke543QGNg0+Z6yv1k0ZwnEbJyzTjmGXzCc1GxCNecHp/7Vqe7Km9 SDUjO8foIw== -----END CERTIFICATE-----Generated at Mon Oct 12 11:05:42 2026 by rpki-client