$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: IpqESrG6EJgnF18mLTS8lGjhtj3bybZGu9iTPhdh6e8= Subject key identifier: D8:D8:FA:7F:39:C3:62:1A:80:CE:B7:94:7F:94:B1:A5:30:96:4D:38 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 1B21BE68916756DD96A532EAFA8D98F0C3B4DE25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 99 Signing time: Mon 05 Oct 2026 08:28:51 +0000 Manifest this update: Mon 05 Oct 2026 08:23:51 +0000 Manifest next update: Thu 08 Oct 2026 15:56:51 +0000 Files and hashes: 1: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) 2: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: PLiYUq3Fx/eUvc33twD8QGE3zInoEJCuxq9jyUSUv+E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 15:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:21:be:68:91:67:56:dd:96:a5:32:ea:fa:8d:98:f0:c3:b4:de:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Oct 5 08:23:51 2026 GMT Not After : Oct 8 15:56:51 2026 GMT Subject: CN=D8D8FA7F39C3621A80CEB7947F94B1A530964D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:56:4d:02:3b:d7:3d:e6:d5:fc:26:77:16:09: 03:0d:33:5c:55:47:ff:7c:ca:ba:5b:f7:d4:40:f1: 28:9d:41:8e:2e:20:33:5f:13:9f:bd:aa:82:48:28: 09:ad:b2:e2:c6:f5:1d:2f:31:2d:6b:19:ed:0f:66: d5:44:8f:6e:e2:74:8c:9e:6f:d5:10:99:8e:a9:1a: 8b:97:26:41:ed:a0:f7:fb:23:9e:b9:83:78:0b:cf: a0:b1:dd:80:be:27:04:e4:2a:8e:5a:0a:07:dc:f4: 95:f1:f8:85:79:ad:90:58:43:ba:7b:6d:53:f4:cc: c4:39:b9:9b:e6:d6:85:f1:b4:a5:e5:5e:9d:b7:8d: 66:97:65:c6:1c:77:b6:61:61:63:0d:05:63:28:ff: 96:c6:52:5b:92:f6:c3:82:88:96:b5:6b:ca:89:49: 7d:99:07:bc:1b:bd:4c:33:4f:33:24:98:26:d7:7f: 13:7c:dc:b8:a1:70:b4:c0:67:ae:5d:c7:81:74:21: f0:3d:97:7b:40:3f:67:a8:b8:6c:f6:5c:86:56:27: d4:30:ad:24:e8:e6:d4:37:f9:73:07:47:75:09:bd: 1e:9a:43:1b:28:2f:7d:7e:86:3e:48:ea:92:f1:7a: 40:13:cc:de:fa:34:5a:f7:ee:b8:2c:88:b6:eb:fb: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:FA:7F:39:C3:62:1A:80:CE:B7:94:7F:94:B1:A5:30:96:4D:38 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:c4:77:da:dc:b4:d9:b0:0a:8e:fb:7b:4b:b9:cb:89:42: 2b:fa:cc:a9:b0:3f:c8:32:3b:e9:ba:7d:0a:ae:14:df:6b:5a: aa:98:92:6a:30:a7:31:78:b0:16:bd:84:ad:16:2f:72:22:86: d1:e9:18:58:63:2a:8d:6c:6b:a6:1e:31:e6:c0:26:74:e4:3d: a3:b9:85:17:0d:29:11:bf:d7:65:7e:c1:fc:73:0b:69:f5:bd: 32:d6:89:ae:37:8b:d4:15:94:db:b4:d0:09:10:a8:d1:3f:c5: c9:63:68:85:9e:e6:46:df:08:fc:f2:a8:44:43:3e:69:46:5d: 01:63:ac:a4:e3:58:2a:67:af:6c:c2:56:8a:d6:2c:6f:8d:e1: 15:67:90:40:ad:96:b4:2c:c7:45:49:17:65:e5:7a:11:19:0f: 05:da:24:ee:20:6f:a4:75:95:8f:07:b9:e7:62:a0:5c:c2:7b: df:fb:47:8b:93:71:bb:ae:71:2c:f0:dc:5e:8a:f5:4f:e7:d8: 93:7e:96:4e:f3:83:2b:3d:4b:4c:3c:66:08:48:7d:8d:b7:42: bf:d1:0c:f3:5e:ff:43:df:5b:94:6b:71:0f:f1:00:49:49:f1: f3:c7:76:26:05:76:87:e1:dc:63:92:d7:b1:24:30:0e:98:c4: 9c:87:4e:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGyG+aJFnVt2WpTLq+o2Y8MO03iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjEwMDUwODIzNTFaFw0yNjEwMDgxNTU2NTFaMDMxMTAvBgNV BAMTKEQ4RDhGQTdGMzlDMzYyMUE4MENFQjc5NDdGOTRCMUE1MzA5NjREMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVk0CO9c95tX8JncWCQMNM1xV R/98yrpb99RA8SidQY4uIDNfE5+9qoJIKAmtsuLG9R0vMS1rGe0PZtVEj27idIye b9UQmY6pGouXJkHtoPf7I565g3gLz6Cx3YC+JwTkKo5aCgfc9JXx+IV5rZBYQ7p7 bVP0zMQ5uZvm1oXxtKXlXp23jWaXZcYcd7ZhYWMNBWMo/5bGUluS9sOCiJa1a8qJ SX2ZB7wbvUwzTzMkmCbXfxN83LihcLTAZ65dx4F0IfA9l3tAP2eouGz2XIZWJ9Qw rSTo5tQ3+XMHR3UJvR6aQxsoL31+hj5I6pLxekATzN76NFr37rgsiLbr+/+fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2Nj6fznDYhqAzreUf5SxpTCWTTgwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXPEd9rctNmw Co77e0u5y4lCK/rMqbA/yDI76bp9Cq4U32taqpiSajCnMXiwFr2ErRYvciKG0ekY WGMqjWxrph4x5sAmdOQ9o7mFFw0pEb/XZX7B/HMLafW9MtaJrjeL1BWU27TQCRCo 0T/FyWNohZ7mRt8I/PKoREM+aUZdAWOspONYKmevbMJWitYsb43hFWeQQK2WtCzH RUkXZeV6ERkPBdok7iBvpHWVjwe552KgXMJ73/tHi5Nxu65xLPDcXor1T+fYk36W TvODKz1LTDxmCEh9jbdCv9EM817/Q99blGtxD/EASUnx88d2JgV2h+HcY5LXsSQw DpjEnIdO6A== -----END CERTIFICATE-----Generated at Wed Oct 7 00:23:48 2026 by rpki-client