$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: 2RZ26Aq8eaH0rQwcOOG1ngWCvQfjzgGkfYdCtBgXQRo= Subject key identifier: A9:1D:16:42:A7:5A:EF:50:3E:8D:E5:1A:BF:3D:52:37:D7:FA:08:C9 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 1B39F66C20B5716560D093456ABD469A527CEF86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 99 Signing time: Wed 13 May 2026 15:51:05 +0000 Manifest this update: Wed 13 May 2026 15:46:05 +0000 Manifest next update: Thu 14 May 2026 18:52:05 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: lYADHzeFlyGqU2i4IVWLdUqgGVOunCqpwu6sf7piKCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:f6:6c:20:b5:71:65:60:d0:93:45:6a:bd:46:9a:52:7c:ef:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: May 13 15:46:05 2026 GMT Not After : May 14 18:52:05 2026 GMT Subject: CN=A91D1642A75AEF503E8DE51ABF3D5237D7FA08C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:c7:4c:93:fb:4e:39:4f:57:5d:19:5b:4a: 4d:0e:4e:31:f4:17:86:e7:b9:5b:a5:00:37:2b:c5: 5e:d6:09:a0:bd:da:d2:02:5c:7c:f3:52:a2:0d:23: ba:25:88:34:6b:df:67:ae:8a:fa:da:17:1a:cf:8f: 70:d5:bf:c2:7a:92:4a:fc:3e:9f:cb:6d:a9:12:30: ff:b1:29:44:05:f1:d7:72:d3:76:33:4c:5d:70:25: ce:93:08:a2:aa:a7:43:58:71:50:15:e9:72:bd:76: 10:d9:13:63:c8:13:28:83:bc:4e:3e:3d:d9:c7:35: 3e:48:21:5b:63:dc:ef:f1:26:3c:f9:0d:c7:cd:36: b4:35:9c:57:44:ac:83:0a:05:00:1e:34:ea:96:b1: a0:88:35:3a:fc:7f:df:ad:2d:f6:ab:33:6d:97:a7: 56:55:6d:8b:cc:00:95:f5:92:7a:c1:9e:da:4b:54: 82:14:31:d8:f7:99:20:7f:c0:8a:0c:56:30:5d:cd: e2:21:cb:8f:04:84:54:9f:9f:cd:4e:aa:be:1c:a0: 0e:ce:ce:d5:8d:ae:0c:67:a5:d7:1a:1c:79:90:94: 91:88:12:e8:a3:6d:8e:4e:87:c0:0c:36:86:d1:46: e9:fa:2c:06:4e:f8:3b:ca:9c:36:c7:06:9b:2d:8a: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:16:42:A7:5A:EF:50:3E:8D:E5:1A:BF:3D:52:37:D7:FA:08:C9 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6a:39:03:da:be:08:1a:15:32:b6:1f:ff:6f:90:24:4a:e5: cc:e9:3f:ab:87:d4:c6:48:54:c8:9f:a5:db:f7:1a:a8:15:80: 79:4a:4f:de:be:b5:42:05:9d:86:1f:ef:e6:16:ce:43:31:f8: af:c7:21:ff:ce:7f:2b:9b:a9:fa:df:38:af:23:17:cb:8a:7c: 82:4b:8f:a3:6f:52:9a:a6:28:23:7a:3c:2d:46:96:28:dc:62: 82:6b:c8:b9:40:40:fe:84:a7:83:4b:79:e4:98:49:56:27:23: ce:5a:d0:df:bd:73:d5:ed:77:03:82:48:4b:4a:85:86:8d:08: ed:d8:37:98:a6:01:20:a9:10:9b:ba:5a:16:5d:14:d9:16:52: 3b:31:63:79:90:bc:4e:36:45:51:20:6c:92:75:8c:75:7a:d2: f9:2f:0b:53:42:81:f6:c4:51:ad:52:f0:33:d8:40:7f:bf:47: 73:1c:4c:82:82:75:71:ae:9a:06:ee:0b:0b:b5:2d:26:4f:54: c3:0a:ec:ca:17:6f:a4:69:11:c0:76:c9:39:43:de:95:0d:52: fa:8d:7a:41:7e:85:a9:aa:31:43:db:e6:c9:36:4f:89:52:9c: 57:77:36:56:a0:ac:ff:76:d3:b8:46:38:16:0b:6a:d5:a3:ec: d5:9e:94:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGzn2bCC1cWVg0JNFar1GmlJ874YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA1MTMxNTQ2MDVaFw0yNjA1MTQxODUyMDVaMDMxMTAvBgNV BAMTKEE5MUQxNjQyQTc1QUVGNTAzRThERTUxQUJGM0Q1MjM3RDdGQTA4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWsdMk/tOOU9XXRlbSk0OTjH0 F4bnuVulADcrxV7WCaC92tICXHzzUqINI7oliDRr32euivraFxrPj3DVv8J6kkr8 Pp/LbakSMP+xKUQF8ddy03YzTF1wJc6TCKKqp0NYcVAV6XK9dhDZE2PIEyiDvE4+ PdnHNT5IIVtj3O/xJjz5DcfNNrQ1nFdErIMKBQAeNOqWsaCINTr8f9+tLfarM22X p1ZVbYvMAJX1knrBntpLVIIUMdj3mSB/wIoMVjBdzeIhy48EhFSfn81Oqr4coA7O ztWNrgxnpdcaHHmQlJGIEuijbY5Oh8AMNobRRun6LAZO+DvKnDbHBpstigXjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqR0WQqda71A+jeUavz1SN9f6CMkwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2o5A9q+CBoV MrYf/2+QJErlzOk/q4fUxkhUyJ+l2/caqBWAeUpP3r61QgWdhh/v5hbOQzH4r8ch /85/K5up+t84ryMXy4p8gkuPo29SmqYoI3o8LUaWKNxigmvIuUBA/oSng0t55JhJ VicjzlrQ371z1e13A4JIS0qFho0I7dg3mKYBIKkQm7paFl0U2RZSOzFjeZC8TjZF USBsknWMdXrS+S8LU0KB9sRRrVLwM9hAf79HcxxMgoJ1ca6aBu4LC7UtJk9Uwwrs yhdvpGkRwHbJOUPelQ1S+o16QX6FqaoxQ9vmyTZPiVKcV3c2VqCs/3bTuEY4Fgtq 1aPs1Z6UUA== -----END CERTIFICATE-----Generated at Wed May 13 19:43:16 2026 by rpki-client