$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: TwLu2+F7i10SEiZ9JURa1hBxw8NtBI7r10Ihdgscrfg= Subject key identifier: 86:B4:A1:C3:FE:CE:8F:BD:FF:B1:4E:D9:20:9F:DF:FA:A3:2E:68:54 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 37603B3613AB9812A8E1D1D44BB507B20F2DE04E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 08:33:53 +0000 Manifest this update: Wed 29 Jul 2026 08:28:53 +0000 Manifest next update: Thu 30 Jul 2026 08:48:53 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: anDHQKqBg8gg4ZcxN7tJPH0P5aD/xNVQetRaxFFcSII=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:60:3b:36:13:ab:98:12:a8:e1:d1:d4:4b:b5:07:b2:0f:2d:e0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Jul 29 08:28:53 2026 GMT Not After : Jul 30 08:48:53 2026 GMT Subject: CN=86B4A1C3FECE8FBDFFB14ED9209FDFFAA32E6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:26:04:04:cf:37:28:d6:c2:8f:38:8a:a2: 2a:d3:35:79:f2:be:9a:1a:a7:16:09:24:67:e3:ab: 1f:86:7d:2c:ca:06:83:b4:cd:b3:a6:f5:ba:e7:ef: 5c:08:25:16:0e:c0:e9:bc:8f:0c:7f:3f:45:20:47: c2:17:7d:f2:74:29:7c:5c:ea:2d:e6:a2:5e:d0:cc: 61:12:53:c6:d4:88:9e:15:6f:d6:13:a6:18:b2:fb: 23:49:19:82:8a:e4:c6:a4:d7:1e:89:16:e9:d2:75: ca:a6:fe:fb:24:8f:f9:47:f4:e9:a1:69:c4:59:ab: f2:59:cd:0a:1f:3d:3e:ee:d1:d3:c5:21:e2:4f:7d: 17:0a:90:18:0d:0d:42:b3:66:c9:60:9a:16:f0:bf: 35:d0:7d:b5:a4:11:d4:dc:e6:f9:3d:d5:16:71:c3: 95:14:38:a5:de:32:00:91:32:9b:7d:fa:e9:8a:35: d7:f6:7f:cc:0f:ea:99:2b:d8:64:e7:41:37:44:df: a8:12:93:7f:ec:43:50:f1:a0:fe:7a:eb:d0:83:66: 4b:2a:64:27:82:47:51:b3:f9:0d:7f:ff:c1:77:ef: 90:b9:0b:cd:89:21:d3:06:8a:f4:25:52:40:65:04: 7f:47:ce:b9:da:31:c2:9e:ff:20:ab:80:96:6a:7c: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B4:A1:C3:FE:CE:8F:BD:FF:B1:4E:D9:20:9F:DF:FA:A3:2E:68:54 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d5:bd:74:11:a6:6b:69:db:17:31:ba:17:ed:08:b5:3c:fb: ab:e2:2b:dc:df:90:85:65:35:fa:e0:85:fb:9d:d5:77:86:a1: cb:78:f9:6b:c8:aa:81:2e:d5:69:92:f7:a3:aa:75:00:f4:65: a7:ce:cf:d0:c9:5d:c0:ac:3f:bf:96:61:24:4c:f6:13:d1:77: 44:bb:fd:2a:84:0a:be:c7:7d:d8:d9:47:d8:98:85:80:b9:4c: 2f:5e:41:2b:45:6e:73:18:d0:9a:ea:c8:0a:19:7a:5a:da:5d: d2:26:a2:62:50:d1:aa:d7:f5:4d:cc:d2:96:b0:48:8f:4e:4e: 4a:9f:67:6c:24:04:3b:c7:a5:fc:e1:34:65:22:eb:92:cd:f4: ee:35:ac:af:9f:9b:87:76:68:92:39:43:cf:64:fb:45:83:d5: a9:68:fd:bb:e9:69:86:c7:5c:80:82:81:ea:1d:81:8d:b1:ce: 96:34:82:e4:5f:89:60:f8:86:7a:84:7b:80:5d:f2:ee:b6:e5: f7:e0:14:78:8c:39:17:b1:bd:6c:48:58:49:a7:52:5b:b3:e2: a5:a3:e9:33:39:f7:36:cd:99:3e:eb:93:76:95:39:54:90:62: d4:c6:2c:d4:66:0f:c3:60:fd:aa:35:f0:f7:a2:75:1a:fd:50: e4:c5:50:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN2A7NhOrmBKo4dHUS7UHsg8t4E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA3MjkwODI4NTNaFw0yNjA3MzAwODQ4NTNaMDMxMTAvBgNV BAMTKDg2QjRBMUMzRkVDRThGQkRGRkIxNEVEOTIwOUZERkZBQTMyRTY4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJCYEBM83KNbCjziKoirTNXny vpoapxYJJGfjqx+GfSzKBoO0zbOm9brn71wIJRYOwOm8jwx/P0UgR8IXffJ0KXxc 6i3mol7QzGESU8bUiJ4Vb9YTphiy+yNJGYKK5Mak1x6JFunSdcqm/vskj/lH9Omh acRZq/JZzQofPT7u0dPFIeJPfRcKkBgNDUKzZslgmhbwvzXQfbWkEdTc5vk91RZx w5UUOKXeMgCRMpt9+umKNdf2f8wP6pkr2GTnQTdE36gSk3/sQ1DxoP5669CDZksq ZCeCR1Gz+Q1//8F375C5C82JIdMGivQlUkBlBH9HzrnaMcKe/yCrgJZqfL/jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhrShw/7Oj73/sU7ZIJ/f+qMuaFQwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9W9dBGma2nb FzG6F+0ItTz7q+Ir3N+QhWU1+uCF+53Vd4ahy3j5a8iqgS7VaZL3o6p1APRlp87P 0MldwKw/v5ZhJEz2E9F3RLv9KoQKvsd92NlH2JiFgLlML15BK0VucxjQmurIChl6 Wtpd0iaiYlDRqtf1TczSlrBIj05OSp9nbCQEO8el/OE0ZSLrks307jWsr5+bh3Zo kjlDz2T7RYPVqWj9u+lphsdcgIKB6h2BjbHOljSC5F+JYPiGeoR7gF3y7rbl9+AU eIw5F7G9bEhYSadSW7PipaPpMzn3Ns2ZPuuTdpU5VJBi1MYs1GYPw2D9qjXw96J1 Gv1Q5MVQWA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:33 2026 by rpki-client