$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: EJjcVd/x+fLQ9xMoUYhSjoFkUD4WEMQh4WZaySkH1Sg= Subject key identifier: 97:A5:D0:A4:5E:05:55:A8:02:02:DB:65:57:93:8B:BB:E8:6B:EE:0B Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 6030B76CCAFFB0EE9C0DE01A31149C47A5C299EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 13:19:43 +0000 Manifest this update: Fri 17 Apr 2026 13:14:43 +0000 Manifest next update: Sat 18 Apr 2026 16:33:43 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: nOl6KVN/7XNdslUmhbD3dnl9jprVie8kfOUPP6h8GnU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:30:b7:6c:ca:ff:b0:ee:9c:0d:e0:1a:31:14:9c:47:a5:c2:99:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Apr 17 13:14:43 2026 GMT Not After : Apr 18 16:33:43 2026 GMT Subject: CN=97A5D0A45E0555A80202DB6557938BBBE86BEE0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:f3:46:05:0a:ee:02:3f:1c:5e:91:3f:8e: 30:07:dc:a0:a5:1f:0a:84:b8:74:d4:85:34:49:9b: 81:2e:3a:10:3f:02:d6:f3:24:50:44:68:f3:ef:55: 0f:a4:eb:9d:4c:c3:96:70:6b:15:5b:74:95:13:0d: 97:ad:e3:09:3d:86:88:cb:83:9f:15:82:3c:db:f2: af:74:74:22:f0:0b:13:24:5b:b7:c2:6d:09:d4:e9: be:d8:fb:de:4b:8e:22:9a:20:41:5e:04:8a:3b:9d: cf:80:e1:2d:49:2e:3d:0c:61:77:2e:a2:ed:00:ec: 09:cc:a7:c5:34:01:e3:94:78:8c:77:23:e6:22:63: ae:f7:45:d6:d0:b8:cf:62:f9:51:a5:b4:21:62:19: 11:6e:89:d1:f0:7d:5f:c2:0f:5c:3b:a4:17:27:7e: b8:12:25:0c:ad:ae:bb:88:dd:9b:9d:29:35:ab:c1: 73:27:92:06:c2:4e:18:17:d9:e6:d9:71:3e:d3:c7: ba:cd:1c:6d:c7:8c:cc:ce:c6:b7:0c:e0:11:52:13: db:14:48:21:44:4c:57:b8:7f:68:b2:46:fe:82:f3: 1f:e0:98:60:ff:d9:56:d7:d7:af:69:12:f2:36:26: f6:3d:c0:cf:ee:00:fb:fb:4e:c4:b1:93:7f:73:b6: 98:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A5:D0:A4:5E:05:55:A8:02:02:DB:65:57:93:8B:BB:E8:6B:EE:0B X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a4:89:a9:9d:9a:4c:c8:3e:aa:77:50:0f:14:52:4e:75:3d: 00:42:93:57:69:d7:13:61:30:6b:7a:8b:24:61:78:49:93:45: 45:21:32:5b:bb:6b:4e:fd:a2:a1:59:38:b3:d5:b4:65:a5:71: 22:b9:4f:6d:75:65:92:40:0a:45:24:cf:aa:41:d9:24:9d:4e: 91:aa:3f:be:ea:5b:74:e8:9f:36:de:ae:97:99:ee:b1:0e:06: 47:02:e0:b0:2e:b8:7e:92:71:06:ef:b2:a8:20:88:33:49:18: 60:03:7f:ad:3f:f6:71:fb:df:ff:43:78:a0:09:4f:5d:57:62: 86:9c:dd:1f:1d:43:be:ed:95:e9:c6:51:43:7f:e8:5d:85:88: a0:0e:b4:94:e2:f8:34:10:8b:96:60:35:f9:c0:81:d3:e3:82: d1:b3:58:c1:d5:6b:92:c1:54:cd:34:9d:27:72:e9:bb:49:ae: 34:22:f0:02:99:8c:93:21:27:74:2b:21:8c:76:60:e7:d5:cc: 03:a6:17:6c:d4:62:ca:16:01:e5:83:9f:a6:a1:1d:bd:1f:9c: dc:19:27:de:b7:18:cc:22:6e:70:84:9b:88:41:e5:46:5c:30: 25:42:eb:49:37:d7:38:fb:03:38:25:69:64:dd:c0:3b:ec:a4: c5:34:05:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYDC3bMr/sO6cDeAaMRScR6XCmeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA0MTcxMzE0NDNaFw0yNjA0MTgxNjMzNDNaMDMxMTAvBgNV BAMTKDk3QTVEMEE0NUUwNTU1QTgwMjAyREI2NTU3OTM4QkJCRTg2QkVFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFxPNGBQruAj8cXpE/jjAH3KCl HwqEuHTUhTRJm4EuOhA/AtbzJFBEaPPvVQ+k651Mw5ZwaxVbdJUTDZet4wk9hojL g58Vgjzb8q90dCLwCxMkW7fCbQnU6b7Y+95LjiKaIEFeBIo7nc+A4S1JLj0MYXcu ou0A7AnMp8U0AeOUeIx3I+YiY673RdbQuM9i+VGltCFiGRFuidHwfV/CD1w7pBcn frgSJQytrruI3ZudKTWrwXMnkgbCThgX2ebZcT7Tx7rNHG3HjMzOxrcM4BFSE9sU SCFETFe4f2iyRv6C8x/gmGD/2VbX169pEvI2JvY9wM/uAPv7TsSxk39ztpj/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl6XQpF4FVagCAttlV5OLu+hr7gswHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKSJqZ2aTMg+ qndQDxRSTnU9AEKTV2nXE2Ewa3qLJGF4SZNFRSEyW7trTv2ioVk4s9W0ZaVxIrlP bXVlkkAKRSTPqkHZJJ1Okao/vupbdOifNt6ul5nusQ4GRwLgsC64fpJxBu+yqCCI M0kYYAN/rT/2cfvf/0N4oAlPXVdihpzdHx1Dvu2V6cZRQ3/oXYWIoA60lOL4NBCL lmA1+cCB0+OC0bNYwdVrksFUzTSdJ3Lpu0muNCLwApmMkyEndCshjHZg59XMA6YX bNRiyhYB5YOfpqEdvR+c3Bkn3rcYzCJucISbiEHlRlwwJULrSTfXOPsDOCVpZN3A O+ykxTQFQw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:08:20 2026 by rpki-client