$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: aOxCNygKlcAkixy7ZHsl7PIdgude/ppUnM38ilSpa+k= Subject key identifier: 09:CF:32:FF:3D:EB:0D:5B:6E:95:CE:4A:8A:15:FC:91:BF:06:7E:6A Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 27EB329562EC00DDC10117F37D13A4C5CA7E820D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 08:25:45 +0000 Manifest this update: Fri 24 Jul 2026 08:20:45 +0000 Manifest next update: Sat 25 Jul 2026 09:38:45 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: AuFta5VxP6AL5Ps+f1dmlPy0ymBnM2qTfHDaQxZd93o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:eb:32:95:62:ec:00:dd:c1:01:17:f3:7d:13:a4:c5:ca:7e:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Jul 24 08:20:45 2026 GMT Not After : Jul 25 09:38:45 2026 GMT Subject: CN=09CF32FF3DEB0D5B6E95CE4A8A15FC91BF067E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:20:20:3d:9d:35:f5:2a:fd:ab:2a:92:78:11: cc:6b:2e:a1:bf:50:71:b0:33:3e:eb:09:d3:1d:5d: f4:d5:53:02:37:74:f8:36:7e:cc:4e:de:49:f7:ed: 7a:17:98:6d:38:fc:f8:a3:cd:18:44:94:0d:15:24: 91:e5:ec:ab:ce:ba:f1:5c:4b:78:af:18:11:71:3e: 26:f0:29:9a:20:24:3b:35:28:c6:7b:c0:d0:8b:fc: 05:0f:c6:37:ed:8e:0e:03:a5:bc:6f:87:86:f1:e4: a0:95:0f:c0:2a:e5:2b:98:aa:97:82:5a:6d:f4:d5: b0:0e:21:f7:23:2a:dc:8e:f0:9a:e2:0b:05:40:7e: 03:76:fa:c8:ef:d5:5d:2b:8d:10:f1:2c:d8:e6:34: 54:94:5c:d6:16:d1:00:18:f2:86:6e:67:5c:8c:0d: cd:07:e5:f0:e8:92:d6:0c:ac:d3:f7:41:07:3e:aa: 8c:f0:52:ef:c0:24:e4:61:63:2b:60:c0:f8:58:1a: aa:43:67:59:53:29:be:4c:cb:11:3f:55:87:e2:ef: ce:36:93:7b:53:4c:82:d8:d4:2f:18:02:b8:7b:c2: da:f5:19:95:94:b1:3b:6b:c5:90:dd:c5:96:50:86: c4:64:7a:a6:6c:f6:a9:11:ff:2f:bf:fb:4c:ef:c3: d8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:32:FF:3D:EB:0D:5B:6E:95:CE:4A:8A:15:FC:91:BF:06:7E:6A X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:26:6c:7a:4d:2e:8e:57:c2:8f:bb:50:3a:97:f0:d2:37:25: 51:21:5b:3e:64:25:b7:41:4c:c2:fb:95:d3:57:92:dd:cd:e9: be:27:c1:37:43:d8:54:b8:3c:10:90:59:90:21:91:c7:a9:dc: e8:7e:74:10:8d:b8:1e:9f:f6:3b:3d:a2:8a:ce:8e:41:4d:00: a5:df:52:db:e9:2b:58:97:a1:70:8f:a8:36:50:aa:33:07:9d: 52:01:e5:4f:07:6a:90:f1:9b:98:ed:c8:b6:99:a9:42:cf:85: ab:37:52:dc:82:c8:c2:4c:65:4e:98:36:50:0f:db:cd:60:d5: 31:dd:c0:fe:7d:fb:fd:d0:f6:94:6c:49:cd:8d:56:7e:3f:f9: 50:09:80:39:8d:68:07:6b:b8:f0:cd:08:ea:52:e4:0c:a1:89: 05:04:c5:ea:ea:07:04:1b:16:57:cc:52:00:49:35:2b:e6:d3: a0:f9:61:d9:f8:24:b0:46:36:fc:5f:bf:c4:5c:c1:68:06:31: 6a:34:74:fd:17:1f:06:d2:9e:ad:cb:26:11:11:75:6b:eb:a8: 59:e7:6f:4a:bd:3b:fe:a4:ee:f3:28:eb:9b:b4:16:23:f3:8a: 13:17:76:59:c0:2d:6a:3e:99:e2:6d:ae:57:a4:09:6a:4c:da: 17:fc:fa:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ+sylWLsAN3BARfzfROkxcp+gg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA3MjQwODIwNDVaFw0yNjA3MjUwOTM4NDVaMDMxMTAvBgNV BAMTKDA5Q0YzMkZGM0RFQjBENUI2RTk1Q0U0QThBMTVGQzkxQkYwNjdFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQICA9nTX1Kv2rKpJ4EcxrLqG/ UHGwMz7rCdMdXfTVUwI3dPg2fsxO3kn37XoXmG04/PijzRhElA0VJJHl7KvOuvFc S3ivGBFxPibwKZogJDs1KMZ7wNCL/AUPxjftjg4Dpbxvh4bx5KCVD8Aq5SuYqpeC Wm301bAOIfcjKtyO8JriCwVAfgN2+sjv1V0rjRDxLNjmNFSUXNYW0QAY8oZuZ1yM Dc0H5fDoktYMrNP3QQc+qozwUu/AJORhYytgwPhYGqpDZ1lTKb5MyxE/VYfi7842 k3tTTILY1C8YArh7wtr1GZWUsTtrxZDdxZZQhsRkeqZs9qkR/y+/+0zvw9j1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCc8y/z3rDVtulc5KihX8kb8GfmowHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyZsek0ujlfC j7tQOpfw0jclUSFbPmQlt0FMwvuV01eS3c3pvifBN0PYVLg8EJBZkCGRx6nc6H50 EI24Hp/2Oz2iis6OQU0Apd9S2+krWJehcI+oNlCqMwedUgHlTwdqkPGbmO3Itpmp Qs+FqzdS3ILIwkxlTpg2UA/bzWDVMd3A/n37/dD2lGxJzY1Wfj/5UAmAOY1oB2u4 8M0I6lLkDKGJBQTF6uoHBBsWV8xSAEk1K+bToPlh2fgksEY2/F+/xFzBaAYxajR0 /RcfBtKercsmERF1a+uoWedvSr07/qTu8yjrm7QWI/OKExd2WcAtaj6Z4m2uV6QJ akzaF/z6aA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:51:10 2026 by rpki-client