$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: PVirPnXkBNVE+Xbogwt/l1U07QDEemqvqFeZMbkJqEY= Subject key identifier: B1:C5:84:84:66:C9:D3:0B:43:95:56:9A:BA:AC:1D:EB:CE:40:48:CB Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 1C6AB9FD4C32D1D518783CDDE1F260132B10E1BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 11:58:17 +0000 Manifest this update: Mon 02 Mar 2026 11:53:17 +0000 Manifest next update: Tue 03 Mar 2026 14:17:17 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: Lgl3c+oG/SVyNzb/dfjeYUkfsmJZIcuzP1TUlCwCBFw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6a:b9:fd:4c:32:d1:d5:18:78:3c:dd:e1:f2:60:13:2b:10:e1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Mar 2 11:53:17 2026 GMT Not After : Mar 3 14:17:17 2026 GMT Subject: CN=B1C5848466C9D30B4395569ABAAC1DEBCE4048CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:bc:78:2b:80:3f:72:7f:17:06:ee:05:1f: 37:97:c1:19:f0:7b:1e:0e:e9:93:8f:20:10:03:43: e8:88:50:4f:a0:0f:e7:a7:2d:a9:5a:15:55:92:49: 8b:39:cb:d7:c6:a8:0c:18:3a:83:61:0e:91:ec:37: 2d:6a:6b:37:5c:74:a5:3e:81:75:93:6a:2a:47:04: 82:bb:a1:bc:d8:ed:21:4c:6a:c0:db:69:8d:fc:c7: f6:f4:be:bb:ea:03:7b:79:61:b6:5c:4a:92:48:d8: 09:e9:49:41:c5:96:69:09:c7:a5:7b:95:9c:b2:44: b7:e9:51:bb:6b:27:b6:78:62:bb:3f:c4:ff:ea:6a: c2:97:5c:5e:6e:e7:e4:1c:12:c6:c4:c3:7c:51:c7: fd:f8:56:55:50:6f:f5:1c:17:ca:d3:c2:d0:6c:ef: c9:f7:96:da:cc:55:c9:59:a0:bc:1a:58:f1:8b:89: 59:12:ef:c7:44:94:00:14:27:62:b2:ca:9e:d0:c1: 3e:10:e7:8c:0a:3f:f8:a3:c9:9f:0d:f0:9f:8c:7f: 2f:31:c1:13:c3:3a:95:23:9f:ea:10:61:88:af:fe: 4c:33:62:99:f3:45:8f:cf:ce:9f:91:db:c2:54:5f: 2e:c6:36:2a:eb:de:da:2a:91:36:e1:c8:a0:65:00: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C5:84:84:66:C9:D3:0B:43:95:56:9A:BA:AC:1D:EB:CE:40:48:CB X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fd:2e:8b:e9:09:ba:51:09:a4:eb:3e:62:d4:72:31:db:0e: 9b:fd:a9:22:58:f5:c4:f1:67:36:f3:84:fc:7a:39:12:61:93: fc:3e:e9:64:e0:73:45:74:e2:ff:0f:d8:03:55:bf:cb:2c:37: 60:55:27:e0:df:28:49:55:cd:ff:ea:1d:02:4d:16:7d:19:9d: 3c:68:17:f9:19:70:20:90:f4:df:fd:0e:58:90:35:2c:66:9e: a0:98:54:af:3b:48:0a:b9:39:3d:13:b3:f2:ea:a1:b4:3f:17: ab:dc:2d:28:1c:97:23:3f:1c:4f:cf:f0:bb:ea:f1:a3:86:4a: 47:df:f8:5d:33:bf:f3:0a:b1:5c:eb:2e:37:c8:70:91:08:16: a1:2b:e5:06:03:0b:65:bf:b1:5f:e9:7d:00:3c:5c:cb:c8:d4: 3d:32:78:d8:43:d3:4f:04:87:f2:69:bd:07:a8:63:99:a9:32: d5:94:6c:b5:61:ba:ea:92:43:b1:ad:b1:3e:20:f2:ae:7e:67: 93:c7:a4:8c:01:8f:d6:32:3c:1e:84:8c:bb:93:c4:2a:8e:44: 06:d2:05:d6:38:34:43:ca:c5:7d:73:87:6e:7d:01:33:d2:62: 17:dd:b5:ec:50:53:98:66:8b:bd:89:db:34:e2:69:38:96:a7: ec:bc:91:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHGq5/Uwy0dUYeDzd4fJgEysQ4b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjAzMDIxMTUzMTdaFw0yNjAzMDMxNDE3MTdaMDMxMTAvBgNV BAMTKEIxQzU4NDg0NjZDOUQzMEI0Mzk1NTY5QUJBQUMxREVCQ0U0MDQ4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIbx4K4A/cn8XBu4FHzeXwRnw ex4O6ZOPIBADQ+iIUE+gD+enLalaFVWSSYs5y9fGqAwYOoNhDpHsNy1qazdcdKU+ gXWTaipHBIK7obzY7SFMasDbaY38x/b0vrvqA3t5YbZcSpJI2AnpSUHFlmkJx6V7 lZyyRLfpUbtrJ7Z4Yrs/xP/qasKXXF5u5+QcEsbEw3xRx/34VlVQb/UcF8rTwtBs 78n3ltrMVclZoLwaWPGLiVkS78dElAAUJ2Kyyp7QwT4Q54wKP/ijyZ8N8J+Mfy8x wRPDOpUjn+oQYYiv/kwzYpnzRY/Pzp+R28JUXy7GNirr3toqkTbhyKBlAPflAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUscWEhGbJ0wtDlVaauqwd685ASMswHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP0ui+kJulEJ pOs+YtRyMdsOm/2pIlj1xPFnNvOE/Ho5EmGT/D7pZOBzRXTi/w/YA1W/yyw3YFUn 4N8oSVXN/+odAk0WfRmdPGgX+RlwIJD03/0OWJA1LGaeoJhUrztICrk5PROz8uqh tD8Xq9wtKByXIz8cT8/wu+rxo4ZKR9/4XTO/8wqxXOsuN8hwkQgWoSvlBgMLZb+x X+l9ADxcy8jUPTJ42EPTTwSH8mm9B6hjmaky1ZRstWG66pJDsa2xPiDyrn5nk8ek jAGP1jI8HoSMu5PEKo5EBtIF1jg0Q8rFfXOHbn0BM9JiF9217FBTmGaLvYnbNOJp OJan7LyRMA== -----END CERTIFICATE-----Generated at Mon Mar 2 22:33:19 2026 by rpki-client