$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: TvonasIc9OiyxsMNNbdWW8G+HiVsuUbPhkJcb/i6PZM= Subject key identifier: A4:5B:7C:BC:E9:F8:D4:97:5B:5C:42:59:DA:1F:93:C9:A9:1C:AE:87 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 09DB1D72C73BEF7C342660198481DA4BE160A697 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 21:13:28 +0000 Manifest this update: Thu 26 Mar 2026 21:08:28 +0000 Manifest next update: Fri 27 Mar 2026 21:52:28 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: vWlsaMw1QfKUYXE2y6BtnKhNvgHuHfizI1Z/RsrUTwo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:db:1d:72:c7:3b:ef:7c:34:26:60:19:84:81:da:4b:e1:60:a6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Mar 26 21:08:28 2026 GMT Not After : Mar 27 21:52:28 2026 GMT Subject: CN=A45B7CBCE9F8D4975B5C4259DA1F93C9A91CAE87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:03:a8:da:fe:f4:2b:84:e4:b1:4b:ab:19: 23:63:0b:97:ab:2a:ed:75:83:78:cc:51:97:42:5b: 13:6b:bf:d5:3c:93:83:3f:15:23:5a:06:78:5d:24: 01:88:4f:7c:53:1a:5e:11:e2:c8:98:b8:02:37:fd: 95:2b:8b:95:ef:3a:7e:6a:3e:75:84:63:87:b6:f7: c5:cb:f9:21:7f:d3:38:bf:05:a4:65:12:1a:7a:6f: 77:e1:2f:7c:ff:b6:b3:31:b9:0f:28:5f:f0:1b:8a: 24:19:7a:ba:1b:0a:05:dd:6b:bb:95:1a:7f:ff:7e: 9a:f0:34:35:17:4e:bb:a7:66:dd:66:33:4c:75:0b: ae:96:72:8f:e3:18:8a:c3:01:cb:85:83:60:91:3a: dc:93:22:5b:03:f3:ee:04:f4:56:e5:5a:f4:2c:b8: 69:b6:05:e5:9d:f6:7e:f1:75:c3:c3:b4:e5:dc:81: 8e:ba:a1:01:26:81:11:f2:3a:31:67:19:0a:f8:8a: 3d:90:ac:f2:cc:8a:f4:48:6f:fe:58:0c:8a:13:9c: e3:ef:c2:d8:ca:9e:d8:d2:32:ca:06:da:54:01:d9: aa:15:42:1f:d6:b6:95:7d:42:1a:1c:ee:82:1d:c2: 4a:d9:a1:e5:ad:92:8b:76:d2:32:d8:d9:c8:1f:7d: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5B:7C:BC:E9:F8:D4:97:5B:5C:42:59:DA:1F:93:C9:A9:1C:AE:87 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:af:b0:6c:c1:cb:3a:86:9e:95:8c:2c:53:16:54:63:35:6f: 22:90:25:e2:70:26:68:bc:44:96:c7:0a:df:76:6c:6d:40:44: 2f:05:ed:c1:70:ad:c9:bc:40:51:bf:34:7b:0b:37:c3:6d:e0: 4b:ff:b5:be:b3:a0:22:27:90:fc:b4:e7:9a:25:b3:e0:8a:e9: e4:3d:89:7e:b7:53:c1:08:0e:e4:91:eb:38:a8:d2:76:0c:8b: 42:20:92:bf:c0:17:c6:48:c6:27:19:be:5e:ae:1f:27:f2:47: 1b:37:6f:63:ed:2b:36:28:d5:e5:86:ee:db:41:86:e5:8f:43: 6c:9b:95:12:4c:e0:97:4f:d0:1a:bc:70:cf:da:ff:ad:2a:2b: 59:ee:aa:87:7e:f2:0c:ad:78:d0:8d:57:b5:34:53:45:58:41: 80:f4:80:62:15:1d:e2:3b:28:9f:69:d6:7c:51:cd:31:19:dd: d8:5c:39:f9:d1:be:4b:4a:ec:d2:94:af:54:27:3e:ef:1b:96: ee:4c:54:3e:fe:2b:40:4f:d8:3c:57:f0:b5:36:4a:4d:70:32: 5e:7f:1c:69:40:6c:45:15:78:14:4b:9a:dc:90:3a:c4:6a:a9: 86:0b:05:bf:1f:b1:bc:69:31:72:20:66:83:48:b4:7f:d3:7f: a5:40:4f:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCdsdcsc773w0JmAZhIHaS+FgppcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjAzMjYyMTA4MjhaFw0yNjAzMjcyMTUyMjhaMDMxMTAvBgNV BAMTKEE0NUI3Q0JDRTlGOEQ0OTc1QjVDNDI1OURBMUY5M0M5QTkxQ0FFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0AOo2v70K4TksUurGSNjC5er Ku11g3jMUZdCWxNrv9U8k4M/FSNaBnhdJAGIT3xTGl4R4siYuAI3/ZUri5XvOn5q PnWEY4e298XL+SF/0zi/BaRlEhp6b3fhL3z/trMxuQ8oX/AbiiQZerobCgXda7uV Gn//fprwNDUXTrunZt1mM0x1C66Wco/jGIrDAcuFg2CROtyTIlsD8+4E9FblWvQs uGm2BeWd9n7xdcPDtOXcgY66oQEmgRHyOjFnGQr4ij2QrPLMivRIb/5YDIoTnOPv wtjKntjSMsoG2lQB2aoVQh/WtpV9Qhoc7oIdwkrZoeWtkot20jLY2cgffcG9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpFt8vOn41JdbXEJZ2h+TyakcrocwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6+wbMHLOoae lYwsUxZUYzVvIpAl4nAmaLxElscK33ZsbUBELwXtwXCtybxAUb80ews3w23gS/+1 vrOgIieQ/LTnmiWz4Irp5D2JfrdTwQgO5JHrOKjSdgyLQiCSv8AXxkjGJxm+Xq4f J/JHGzdvY+0rNijV5Ybu20GG5Y9DbJuVEkzgl0/QGrxwz9r/rSorWe6qh37yDK14 0I1XtTRTRVhBgPSAYhUd4json2nWfFHNMRnd2Fw5+dG+S0rs0pSvVCc+7xuW7kxU Pv4rQE/YPFfwtTZKTXAyXn8caUBsRRV4FEua3JA6xGqphgsFvx+xvGkxciBmg0i0 f9N/pUBPSQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:01:10 2026 by rpki-client