$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft File: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft (raw, json) Hash identifier: bWwYDYpF2IaHOTATtdhini5JhdS5fA8VOxurz8TfwAo= Subject key identifier: C9:05:5A:3D:9B:37:5E:39:34:4C:A2:8E:8A:9C:08:17:22:42:EA:D4 Authority key identifier: 32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13 Certificate issuer: /CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13 Certificate serial: 5DA4C818D3E6F8EB1A8E8D447333C15BF8EBEBB6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft Manifest number: 0D Signing time: Sun 11 Oct 2026 01:10:06 +0000 Manifest this update: Sun 11 Oct 2026 01:05:06 +0000 Manifest next update: Wed 14 Oct 2026 05:01:06 +0000 Files and hashes: 1: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl (hash: XkBHZoQCmcWpYSUxMYxs2NI2ISIBdWzam7LKY30/deM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a4:c8:18:d3:e6:f8:eb:1a:8e:8d:44:73:33:c1:5b:f8:eb:eb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13 Validity Not Before: Oct 11 01:05:06 2026 GMT Not After : Oct 14 05:01:06 2026 GMT Subject: CN=C9055A3D9B375E39344CA28E8A9C08172242EAD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:1c:01:c1:cf:ed:c6:4e:6b:d6:11:5c:86: 80:31:5e:9f:15:f6:d7:26:b0:f6:75:22:ce:ba:18: 66:4b:d2:34:b8:59:cc:83:3d:1c:cb:c0:c9:a5:b8: fe:c5:62:ec:94:50:8d:d6:78:3e:54:d9:f9:c4:7b: 33:82:91:28:54:b5:74:23:58:e8:d0:69:6d:71:ef: 88:62:76:53:a7:09:9a:a8:84:d0:60:24:7c:a7:ac: 00:12:e2:af:db:95:df:87:f3:c6:50:2c:8e:a4:ba: ed:cc:2c:8f:b0:1e:a3:c2:d3:04:c1:68:05:44:4a: b0:d0:51:af:e0:07:7c:4b:32:df:f0:81:70:12:a2: fb:58:e2:21:27:bc:69:85:2e:ea:1b:39:7a:8f:0d: 90:ba:d5:50:56:a0:be:65:98:f0:0c:54:0a:92:34: 1f:91:a2:e3:f9:86:10:95:e9:3d:03:41:89:76:54: 6d:95:62:82:38:2f:e3:6b:7e:84:55:b0:5c:37:cd: cf:df:7a:d5:18:12:84:bb:5f:9c:40:1f:2a:a0:ec: d3:36:aa:65:95:8d:6f:43:4b:3c:5a:81:3a:b9:7b: de:35:5f:2d:de:d3:bc:d1:9b:0e:22:32:c0:7b:b3: 64:ef:49:2a:15:e4:77:48:6e:af:97:6e:c4:0f:7e: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:05:5A:3D:9B:37:5E:39:34:4C:A2:8E:8A:9C:08:17:22:42:EA:D4 X509v3 Authority Key Identifier: keyid:32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:37:ae:a5:77:1a:50:56:b0:5d:0c:b6:fe:d0:d3:6a:9c:24: e9:9b:06:f9:f7:85:e1:08:28:0b:c8:77:34:83:9c:e1:0b:ca: b3:da:ab:b5:87:f5:13:ee:fc:28:1d:0c:8d:9c:43:7b:15:ee: 02:e8:c1:8a:e6:76:54:8f:a7:06:a7:bd:d4:b0:07:6a:51:99: 18:43:1c:3c:cc:85:60:8c:17:6d:83:7c:ca:02:68:80:74:af: c8:de:9f:14:a0:01:77:c3:a0:0e:1f:00:23:ef:17:97:ec:74: 38:67:27:ec:03:d5:69:67:16:1e:38:16:ef:39:0f:f6:15:ae: 46:9e:0c:7d:98:25:85:14:4f:b2:94:90:7c:af:17:5c:cf:8e: d2:d3:0d:59:a5:92:13:58:c9:b7:00:10:06:ed:4d:ab:cc:96: 41:ef:74:ea:15:cb:15:ab:2b:5d:be:a6:bb:0f:69:6e:c8:2a: 41:c2:b2:fa:55:55:64:e2:50:0f:45:df:be:45:c5:35:84:bb: 21:3f:aa:24:3d:a7:ee:31:17:1c:7b:bb:31:f7:66:b0:5d:f5: fe:93:2a:f0:26:b7:10:7d:9e:48:69:b5:46:43:38:73:f3:71: 75:9a:bb:0d:e9:0c:01:c1:54:76:ba:8d:29:69:2b:3a:e9:25: 99:03:1c:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXaTIGNPm+Osajo1EczPBW/jr67YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCRjgyMDBBMzZCNkRBQzEzNzREMDVFREIzMDk3RDcw MUYzQkMxMzAeFw0yNjEwMTEwMTA1MDZaFw0yNjEwMTQwNTAxMDZaMDMxMTAvBgNV BAMTKEM5MDU1QTNEOUIzNzVFMzkzNDRDQTI4RThBOUMwODE3MjI0MkVBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfRwBwc/txk5r1hFchoAxXp8V 9tcmsPZ1Is66GGZL0jS4WcyDPRzLwMmluP7FYuyUUI3WeD5U2fnEezOCkShUtXQj WOjQaW1x74hidlOnCZqohNBgJHynrAAS4q/bld+H88ZQLI6kuu3MLI+wHqPC0wTB aAVESrDQUa/gB3xLMt/wgXASovtY4iEnvGmFLuobOXqPDZC61VBWoL5lmPAMVAqS NB+RouP5hhCV6T0DQYl2VG2VYoI4L+NrfoRVsFw3zc/fetUYEoS7X5xAHyqg7NM2 qmWVjW9DSzxagTq5e941Xy3e07zRmw4iMsB7s2TvSSoV5HdIbq+XbsQPfshZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyQVaPZs3Xjk0TKKOipwIFyJC6tQwHwYDVR0j BBgwFoAUMr+CAKNrbawTdNBe2zCX1wHzvBMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 MjA0ODA0NTM2MjI0OTc3My8wLzMyQkY4MjAwQTM2QjZEQUMxMzc0RDA1RURCMzA5 N0Q3MDFGM0JDMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJCRjgyMDBBMzZCNkRBQzEzNzREMDVFREIzMDk3RDcwMUYzQkMxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTIwNDgwNDUzNjIyNDk3NzMvMC8zMkJGODIwMEEzNkI2 REFDMTM3NEQwNUVEQjMwOTdENzAxRjNCQzEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTeupXcaUFaw XQy2/tDTapwk6ZsG+feF4QgoC8h3NIOc4QvKs9qrtYf1E+78KB0MjZxDexXuAujB iuZ2VI+nBqe91LAHalGZGEMcPMyFYIwXbYN8ygJogHSvyN6fFKABd8OgDh8AI+8X l+x0OGcn7APVaWcWHjgW7zkP9hWuRp4MfZglhRRPspSQfK8XXM+O0tMNWaWSE1jJ twAQBu1Nq8yWQe906hXLFasrXb6muw9pbsgqQcKy+lVVZOJQD0XfvkXFNYS7IT+q JD2n7jEXHHu7MfdmsF31/pMq8Ca3EH2eSGm1RkM4c/NxdZq7DekMAcFUdrqNKWkr OuklmQMc3w== -----END CERTIFICATE-----Generated at Mon Oct 12 07:45:32 2026 by rpki-client