$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: 6Pk69AImf4OOsWtVZLmG9G68OHwD0HpzqdQOV5+PZzI= Subject key identifier: 06:04:6D:17:84:23:A1:FF:53:EE:07:B1:17:C9:2D:DC:B0:63:AD:87 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 0208AF134F7C50C2563B222E3C33457F2E9ACA89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 58 Signing time: Fri 24 Jul 2026 06:00:32 +0000 Manifest this update: Fri 24 Jul 2026 05:55:32 +0000 Manifest next update: Sat 25 Jul 2026 06:35:32 +0000 Files and hashes: 1: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: TIfY+66byI3X32U9SlgBiV1RuRJh1tkKDRvoeL495RU=) 2: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:08:af:13:4f:7c:50:c2:56:3b:22:2e:3c:33:45:7f:2e:9a:ca:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Jul 24 05:55:32 2026 GMT Not After : Jul 25 06:35:32 2026 GMT Subject: CN=06046D178423A1FF53EE07B117C92DDCB063AD87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:58:ad:e6:c3:7f:68:b0:bd:2c:06:d2:3a: fd:fa:02:63:a3:13:f2:cf:de:1d:d4:57:1d:69:ac: db:21:b1:18:7b:70:0a:92:86:02:11:f5:f3:4b:4e: 45:da:03:fc:83:a8:39:b0:5e:bd:43:e3:39:d5:1e: b1:c5:ec:02:fc:59:5a:aa:96:cf:a8:10:54:41:e5: 9e:a1:e7:d1:7a:3f:61:cd:52:8c:62:01:d3:c6:68: 06:71:68:92:97:6c:91:08:e4:33:26:c1:92:a7:18: 1c:60:d0:f5:52:93:4f:ca:59:88:82:6e:15:bb:21: 3e:6d:45:ac:8c:f8:0a:86:2f:4e:f1:b1:da:a8:f6: 00:50:a7:d8:98:74:36:68:c9:07:51:20:76:a6:d0: 02:2f:39:5d:c7:aa:89:10:8a:d5:66:24:85:ff:33: 82:6a:96:6f:99:f2:54:5d:36:c2:e7:cd:f1:da:be: 6e:2f:b3:31:37:47:ab:37:8c:85:4b:87:b0:90:48: 1b:ce:04:e4:59:db:41:d1:39:aa:df:7d:cb:e5:93: d0:c5:75:25:5a:f3:c9:b2:3c:a3:05:51:ed:94:31: 4f:db:16:da:98:e2:ac:30:39:e2:1b:04:21:8f:24: 4b:99:48:3b:7e:b5:cd:b5:c8:f8:2e:2c:b0:d9:b0: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:04:6D:17:84:23:A1:FF:53:EE:07:B1:17:C9:2D:DC:B0:63:AD:87 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:03:a1:77:73:f9:3e:85:24:50:7c:ff:5d:1e:e7:79:96:d3: cb:9d:e8:b7:a1:c8:39:a3:cb:b9:5d:ba:35:d5:33:ac:5b:f2: a1:78:4f:14:d6:62:f3:81:9d:69:ef:0e:33:29:82:e8:6d:6e: ea:a7:23:fa:42:35:ec:25:25:a6:de:fc:e2:dc:5e:9c:1b:15: 95:35:a1:bf:02:4c:c4:c7:e9:9c:9e:30:08:a3:74:f2:84:e6: b0:4a:63:e2:4c:65:af:2f:17:b8:c7:c9:d4:b4:1e:6c:33:90: 2a:a8:e5:8a:71:e2:df:07:1d:b9:6d:13:0e:05:88:94:b9:5c: 9b:8e:89:5b:9b:b2:84:8e:39:4b:d5:0f:da:42:b5:75:8d:45: a7:b3:15:41:bc:ea:90:42:dc:ba:50:80:9f:7f:08:6c:ba:13: 8f:02:49:2d:9b:ad:38:1b:24:49:07:a8:f2:22:24:00:be:a7: 29:e6:91:5e:f0:2b:6b:8d:32:fb:69:ce:a5:87:24:9f:cb:71: 55:4c:10:8d:3a:3b:84:42:a1:30:2d:7f:2d:9a:33:fd:1a:b4: 53:11:f4:25:bb:b2:78:7e:2b:b7:98:c8:41:fe:df:bd:7d:26: 6d:48:3c:67:cc:15:08:87:b2:d6:ce:49:8d:51:6d:b0:89:dc: 61:8f:2e:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAgivE098UMJWOyIuPDNFfy6ayokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjA3MjQwNTU1MzJaFw0yNjA3MjUwNjM1MzJaMDMxMTAvBgNV BAMTKDA2MDQ2RDE3ODQyM0ExRkY1M0VFMDdCMTE3QzkyRERDQjA2M0FEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr31it5sN/aLC9LAbSOv36AmOj E/LP3h3UVx1prNshsRh7cAqShgIR9fNLTkXaA/yDqDmwXr1D4znVHrHF7AL8WVqq ls+oEFRB5Z6h59F6P2HNUoxiAdPGaAZxaJKXbJEI5DMmwZKnGBxg0PVSk0/KWYiC bhW7IT5tRayM+AqGL07xsdqo9gBQp9iYdDZoyQdRIHam0AIvOV3HqokQitVmJIX/ M4Jqlm+Z8lRdNsLnzfHavm4vszE3R6s3jIVLh7CQSBvOBORZ20HROarffcvlk9DF dSVa88myPKMFUe2UMU/bFtqY4qwwOeIbBCGPJEuZSDt+tc21yPguLLDZsJERAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBgRtF4Qjof9T7gexF8kt3LBjrYcwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgOhd3P5PoUk UHz/XR7neZbTy53ot6HIOaPLuV26NdUzrFvyoXhPFNZi84Gdae8OMymC6G1u6qcj +kI17CUlpt784txenBsVlTWhvwJMxMfpnJ4wCKN08oTmsEpj4kxlry8XuMfJ1LQe bDOQKqjlinHi3wcduW0TDgWIlLlcm46JW5uyhI45S9UP2kK1dY1Fp7MVQbzqkELc ulCAn38IbLoTjwJJLZutOBskSQeo8iIkAL6nKeaRXvAra40y+2nOpYckn8txVUwQ jTo7hEKhMC1/LZoz/Rq0UxH0JbuyeH4rt5jIQf7fvX0mbUg8Z8wVCIey1s5JjVFt sIncYY8uAQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:53:38 2026 by rpki-client