$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: olHsJBXcvLN6SkqmGdkOonyxaxFrZqnXUjnTmPdnDGU= Subject key identifier: 2F:D1:71:E9:4D:B6:F7:15:21:11:C1:85:4E:D4:99:E8:39:EF:7B:69 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 7694A69EECACC2F9F94D4CF732FF61872427DA3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: CA Signing time: Mon 12 Oct 2026 08:26:48 +0000 Manifest this update: Mon 12 Oct 2026 08:21:48 +0000 Manifest next update: Thu 15 Oct 2026 13:17:48 +0000 Files and hashes: 1: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 2: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) 3: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: MHSsfUB528wYkUg4mWu+cf7VLUHMxrgyUuxlBnY5xlw=) 4: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) 5: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 6: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 7: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) 8: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:94:a6:9e:ec:ac:c2:f9:f9:4d:4c:f7:32:ff:61:87:24:27:da:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: Oct 12 08:21:48 2026 GMT Not After : Oct 15 13:17:48 2026 GMT Subject: CN=2FD171E94DB6F7152111C1854ED499E839EF7B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a6:2e:56:be:4b:65:6d:b4:5c:ab:8f:41:d8: f9:87:e4:ed:9d:af:5c:bf:6e:7e:41:84:c7:eb:ce: 78:0c:e9:4e:52:69:09:82:d4:58:6e:7b:00:f4:f9: fa:23:5a:2b:a1:ec:0e:6b:eb:7e:b0:dd:6b:f0:0c: 7a:ab:6d:72:c3:d2:1d:df:30:61:fe:c3:26:cc:72: 98:70:b0:a5:92:01:47:0e:94:31:a3:f4:93:96:48: 69:65:54:79:84:4e:16:35:1b:c4:df:59:91:de:cf: f6:67:0d:e8:e1:14:f3:fd:03:dd:48:7c:fd:e1:94: 3a:38:ae:53:21:3d:7b:ad:06:84:d8:ce:16:32:7a: 9c:e4:3c:78:33:e7:f0:3d:aa:bd:6d:a5:fd:40:f7: ce:a9:49:39:dc:1b:91:cb:fe:a4:0a:33:ed:36:ad: a7:cd:79:a8:2b:85:b4:5e:8d:03:05:30:68:9f:51: 13:d4:3e:e1:a8:dd:5f:ef:39:2c:b5:b6:ee:ff:35: ed:52:87:16:78:35:79:c4:b9:2a:cc:6b:68:a8:07: c1:07:fe:f1:cb:de:2b:c0:b4:7b:d2:e8:13:5f:b1: 3a:7a:b0:42:7f:e4:63:52:06:03:6c:7b:4a:cf:11: cb:59:be:0c:42:f9:37:0e:b7:b5:e8:ac:e1:e3:aa: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D1:71:E9:4D:B6:F7:15:21:11:C1:85:4E:D4:99:E8:39:EF:7B:69 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:06:bf:0d:cd:84:9b:bd:8e:51:7a:53:39:29:f9:cc:e9:63: 2d:a3:1a:5c:1c:c1:15:ce:e5:19:87:58:c5:f9:7e:04:bd:89: 60:dd:e0:87:cf:93:a1:f5:74:85:ac:e1:64:1e:84:57:6b:a3: c3:73:d8:53:5e:7b:f0:94:a7:df:21:eb:45:46:ff:bc:0b:db: ed:f6:8f:d5:f0:2a:c5:8a:5c:c7:9a:0a:3e:69:24:af:fb:2d: 5e:15:08:f4:b3:39:cc:fc:b7:ec:5b:5a:0e:0c:4e:63:39:a6: 37:82:8e:98:a1:87:6b:6e:5a:e0:94:2f:12:50:fd:8f:d4:53: e3:33:a6:03:c8:30:24:4b:8f:8d:8d:3e:f9:f2:25:c2:a0:47: 0b:ea:48:32:11:ac:17:b7:09:85:1d:e5:8f:8b:24:2a:ec:2f: c0:d0:7f:0a:0c:db:1e:ff:c8:12:38:c9:5e:04:57:cd:f5:8b: bf:14:09:ad:3d:cd:a1:d7:b5:50:fd:12:96:f5:c9:d0:8c:9c: f6:09:91:16:4e:29:b6:85:35:0d:06:88:28:d6:ed:bf:8a:3b: 58:f0:73:4d:8e:08:80:85:1b:5a:ac:9d:1d:79:cc:5d:d6:69: 9a:6b:01:59:3a:df:fa:0b:54:d3:42:40:1c:b8:5f:d6:9a:8d: e9:d7:3b:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdpSmnuyswvn5TUz3Mv9hhyQn2j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjEwMTIwODIxNDhaFw0yNjEwMTUxMzE3NDhaMDMxMTAvBgNV BAMTKDJGRDE3MUU5NERCNkY3MTUyMTExQzE4NTRFRDQ5OUU4MzlFRjdCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6pi5WvktlbbRcq49B2PmH5O2d r1y/bn5BhMfrzngM6U5SaQmC1FhuewD0+fojWiuh7A5r636w3WvwDHqrbXLD0h3f MGH+wybMcphwsKWSAUcOlDGj9JOWSGllVHmEThY1G8TfWZHez/ZnDejhFPP9A91I fP3hlDo4rlMhPXutBoTYzhYyepzkPHgz5/A9qr1tpf1A986pSTncG5HL/qQKM+02 rafNeagrhbRejQMFMGifURPUPuGo3V/vOSy1tu7/Ne1ShxZ4NXnEuSrMa2ioB8EH /vHL3ivAtHvS6BNfsTp6sEJ/5GNSBgNse0rPEctZvgxC+TcOt7XorOHjqt+TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL9Fx6U229xUhEcGFTtSZ6Dnve2kwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwa/Dc2Em72O UXpTOSn5zOljLaMaXBzBFc7lGYdYxfl+BL2JYN3gh8+TofV0hazhZB6EV2ujw3PY U1578JSn3yHrRUb/vAvb7faP1fAqxYpcx5oKPmkkr/stXhUI9LM5zPy37FtaDgxO YzmmN4KOmKGHa25a4JQvElD9j9RT4zOmA8gwJEuPjY0++fIlwqBHC+pIMhGsF7cJ hR3lj4skKuwvwNB/CgzbHv/IEjjJXgRXzfWLvxQJrT3Node1UP0SlvXJ0Iyc9gmR Fk4ptoU1DQaIKNbtv4o7WPBzTY4IgIUbWqydHXnMXdZpmmsBWTrf+gtU00JAHLhf 1pqN6dc74A== -----END CERTIFICATE-----Generated at Mon Oct 12 12:44:38 2026 by rpki-client