$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft File: EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft (raw, json) Hash identifier: 1BXuRuyVEn56RShBOTk6lyFI2P1/U9zfOPpLMVxXnPM= Subject key identifier: A3:9D:B2:C4:41:E9:E6:99:3C:06:47:DB:BB:26:E1:3E:37:83:54:BB Authority key identifier: EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF Certificate issuer: /CN=EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF Certificate serial: 7914884D1265C25D3338A548E9CC02F8AD55FBA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft Manifest number: 0A Signing time: Sat 10 Oct 2026 23:10:04 +0000 Manifest this update: Sat 10 Oct 2026 23:05:04 +0000 Manifest next update: Wed 14 Oct 2026 03:51:04 +0000 Files and hashes: 1: EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl (hash: T8y/rOLPhnOQ+Q3VM9SvMD814TQyhOVgtJyR2pj9Es8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 03:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:14:88:4d:12:65:c2:5d:33:38:a5:48:e9:cc:02:f8:ad:55:fb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF Validity Not Before: Oct 10 23:05:04 2026 GMT Not After : Oct 14 03:51:04 2026 GMT Subject: CN=A39DB2C441E9E6993C0647DBBB26E13E378354BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:0d:c2:01:ff:3e:e2:ca:ab:51:f1:98:b5: d9:57:99:bc:12:3e:75:ca:a0:e6:79:06:15:2b:df: 21:f1:87:3d:e7:18:73:6b:c3:56:9e:b8:a4:35:8f: f8:56:f4:ff:a4:b3:d4:af:45:84:23:e9:e2:51:cb: 3a:e6:e1:4a:83:0f:71:be:1d:13:a3:a6:a5:9d:97: 3d:6f:0b:ea:2b:69:3d:bc:ac:cc:e6:5b:9c:fd:8c: 1c:97:17:77:d7:09:e4:a3:2d:78:b3:ba:a2:30:64: 38:40:db:d1:36:12:a2:3f:88:b1:22:81:55:d9:43: 88:cf:7b:a6:7b:6b:70:fc:54:0d:a3:c1:18:71:3e: 27:2c:56:b1:32:33:71:0f:9c:d7:0b:a2:89:3a:8c: b0:a4:5f:14:b3:d4:76:ef:ce:ab:f2:47:22:ff:39: 2f:75:95:b3:64:87:c2:0d:e8:61:7e:e6:33:a6:1d: ab:81:af:29:2f:3b:8c:50:55:83:c5:84:6a:78:04: c1:b5:96:aa:96:b1:cd:70:e0:8b:95:64:a6:a4:85: 45:48:8b:8f:ec:b2:2b:64:0c:51:73:87:b1:81:9b: df:aa:a9:e4:94:0c:7a:03:a0:37:35:c1:16:d4:55: fb:3c:2a:4b:fd:89:e3:3d:72:18:36:9e:0c:c8:28: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9D:B2:C4:41:E9:E6:99:3C:06:47:DB:BB:26:E1:3E:37:83:54:BB X509v3 Authority Key Identifier: keyid:EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:aa:7c:e7:39:11:84:b0:45:dc:45:56:49:0f:99:29:cc:eb: 53:03:be:2b:3f:a7:3f:8e:73:56:bf:38:d2:b1:88:dc:29:89: 66:07:be:87:a5:e2:02:a4:bc:2c:52:16:cd:27:af:73:72:a9: c4:38:7d:3a:90:79:b2:0a:ac:43:9c:75:c5:06:b1:83:36:6c: 90:66:e2:6c:76:4e:11:a2:16:a6:88:cb:45:ec:07:92:b4:b2: b7:7f:d1:f5:03:14:b6:86:d0:56:7d:24:d3:a0:00:6c:9a:6d: 57:89:2a:29:23:6b:64:cc:d0:a3:32:d9:bf:67:fe:bd:90:a7: db:12:79:90:13:20:4b:07:5f:be:c1:a1:61:6f:8d:02:cc:b6: c7:f9:46:71:39:69:2e:d1:7b:73:60:51:97:72:99:a4:46:96: cf:fa:df:a3:0c:8d:b3:2c:49:d4:81:92:c6:b9:94:75:32:a7: 48:9c:e6:5f:3d:e9:e8:4b:78:e3:af:b3:f0:1a:1e:d9:88:e6: ed:e7:78:54:f6:c8:08:65:f3:a2:34:96:f7:d9:64:0a:d1:ef: 5b:8b:5a:69:63:16:a5:a0:2c:ec:6f:e2:4a:aa:2d:3f:e1:43: 40:e3:5a:01:0d:a1:0e:2e:4b:f0:25:00:08:d0:c5:aa:f1:7c: 9c:43:21:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeRSITRJlwl0zOKVI6cwC+K1V+6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzM0Y4NzJEOUJDNTg0NUQ3OUZDNUFDQkNGOUU4MEM1 M0IzNzdFRjAeFw0yNjEwMTAyMzA1MDRaFw0yNjEwMTQwMzUxMDRaMDMxMTAvBgNV BAMTKEEzOURCMkM0NDFFOUU2OTkzQzA2NDdEQkJCMjZFMTNFMzc4MzU0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIg3CAf8+4sqrUfGYtdlXmbwS PnXKoOZ5BhUr3yHxhz3nGHNrw1aeuKQ1j/hW9P+ks9SvRYQj6eJRyzrm4UqDD3G+ HROjpqWdlz1vC+oraT28rMzmW5z9jByXF3fXCeSjLXizuqIwZDhA29E2EqI/iLEi gVXZQ4jPe6Z7a3D8VA2jwRhxPicsVrEyM3EPnNcLook6jLCkXxSz1HbvzqvyRyL/ OS91lbNkh8IN6GF+5jOmHauBrykvO4xQVYPFhGp4BMG1lqqWsc1w4IuVZKakhUVI i4/ssitkDFFzh7GBm9+qqeSUDHoDoDc1wRbUVfs8Kkv9ieM9chg2ngzIKIcPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo52yxEHp5pk8BkfbuybhPjeDVLswHwYDVR0j BBgwFoAU7DP4ctm8WEXXn8WsvPnoDFOzd+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 Mzk1ODAwMjkwMjk1ODEyMy8wL0VDMzNGODcyRDlCQzU4NDVENzlGQzVBQ0JDRjlF ODBDNTNCMzc3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUMzM0Y4NzJEOUJDNTg0NUQ3OUZDNUFDQkNGOUU4MEM1M0IzNzdFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTM5NTgwMDI5MDI5NTgxMjMvMC9FQzMzRjg3MkQ5QkM1 ODQ1RDc5RkM1QUNCQ0Y5RTgwQzUzQjM3N0VGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiap85zkRhLBF 3EVWSQ+ZKczrUwO+Kz+nP45zVr840rGI3CmJZge+h6XiAqS8LFIWzSevc3KpxDh9 OpB5sgqsQ5x1xQaxgzZskGbibHZOEaIWpojLRewHkrSyt3/R9QMUtobQVn0k06AA bJptV4kqKSNrZMzQozLZv2f+vZCn2xJ5kBMgSwdfvsGhYW+NAsy2x/lGcTlpLtF7 c2BRl3KZpEaWz/rfowyNsyxJ1IGSxrmUdTKnSJzmXz3p6Et446+z8Boe2Yjm7ed4 VPbICGXzojSW99lkCtHvW4taaWMWpaAs7G/iSqotP+FDQONaAQ2hDi5L8CUACNDF qvF8nEMhAA== -----END CERTIFICATE-----Generated at Mon Oct 12 19:49:34 2026 by rpki-client