$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: ItQgOjCOytMcbrvJi0MrJGFHu5bo8/40DCdqhrwsTs0= Subject key identifier: 8C:D1:63:6F:37:4A:62:4D:36:D5:BF:D9:30:64:2E:D1:63:7C:72:12 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 3577AED67D522E525D4EED4FB218B0F28EFA1D10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: 8D Signing time: Wed 29 Jul 2026 05:43:36 +0000 Manifest this update: Wed 29 Jul 2026 05:38:36 +0000 Manifest next update: Thu 30 Jul 2026 09:06:36 +0000 Files and hashes: 1: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 2: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 3: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) 4: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) 5: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) 6: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: fwJY25cFi9o3rIfzvMTCH47GDc1Koot4bo7XotJaE0k=) 7: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 8: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:77:ae:d6:7d:52:2e:52:5d:4e:ed:4f:b2:18:b0:f2:8e:fa:1d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: Jul 29 05:38:36 2026 GMT Not After : Jul 30 09:06:36 2026 GMT Subject: CN=8CD1636F374A624D36D5BFD930642ED1637C7212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:8c:63:51:16:2c:10:15:6b:93:a3:16:b2: 62:88:e7:81:25:d3:5d:3a:b3:55:d1:1a:f7:ce:9b: 6c:11:cf:eb:24:75:5d:ee:af:6f:91:63:8b:30:68: e3:35:1e:c8:36:1f:d4:fd:e1:ba:06:ae:db:92:4d: 5c:ac:38:f2:8b:77:3d:50:d8:e6:2a:88:63:b3:b5: 69:2c:e6:a2:f0:7b:f2:4b:3e:6e:53:bc:c9:9e:d5: 91:b5:fc:b1:3f:aa:1b:f9:71:2a:cc:51:6d:4c:c1: 0a:5c:31:7b:ed:25:ef:00:67:7f:ae:55:ad:c3:c2: d9:68:6c:e1:df:3a:05:ac:21:a8:ef:3e:75:24:f9: 90:61:97:96:e3:30:4d:ad:a1:ac:26:ca:24:92:b6: a5:75:e6:c6:b7:16:1a:2c:bf:17:d2:cb:67:e8:c5: 49:f3:e6:d3:95:5d:07:58:61:d3:c8:30:ae:2c:23: ff:13:d1:96:e6:b0:26:7a:be:d0:65:f9:33:a4:54: ea:0b:c1:41:8f:8c:11:68:b6:0a:28:9d:2b:88:5f: 16:68:bb:d8:75:f0:eb:ab:9b:b2:d5:dd:da:4a:6e: f4:c5:b1:a9:69:80:92:dc:26:82:f1:e4:d6:62:6b: 4f:89:47:d7:e1:53:fb:74:ca:5d:3f:6e:28:f8:09: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:63:6F:37:4A:62:4D:36:D5:BF:D9:30:64:2E:D1:63:7C:72:12 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8d:fc:ad:f2:3e:26:ae:af:77:84:55:ea:f6:52:eb:7f:f6: 45:21:c7:5e:1b:a4:49:fc:80:63:05:61:aa:35:a7:00:4e:96: 2e:dc:02:8b:47:bd:5b:0f:44:70:da:cc:8a:24:8c:c0:c0:e9: a6:58:84:91:b0:5f:8d:2c:64:f3:50:40:f3:5f:af:f3:b5:cd: 4c:a3:5b:3f:c0:a9:3a:74:e4:92:84:b0:42:7f:60:78:d7:f1: 93:f8:d6:62:75:9b:dc:8f:0e:96:40:2d:19:05:37:18:8b:2c: 28:7f:89:d5:90:d4:90:05:43:bf:96:0b:2d:86:76:66:64:7a: f0:7b:5b:ef:5d:c9:8c:35:b2:a9:d6:76:24:00:8d:a6:11:b0: 3a:2f:d9:2b:cf:31:16:24:20:b9:bf:b4:32:f6:15:b5:bd:b5: 35:74:3c:83:ba:d3:86:a7:2c:c6:a6:7f:e9:5e:20:0c:51:2c: 17:22:21:dc:fb:c1:40:21:07:ee:09:f4:50:73:c4:f4:77:b5: d2:cd:26:e0:5f:e4:5b:08:aa:79:60:39:78:59:b1:49:44:fd: 15:f0:8a:a8:30:0f:f5:f1:b1:1f:74:f6:9b:e9:1c:12:57:02: 0a:fc:b9:6a:dd:ee:fc:e3:3b:11:e0:fd:95:82:1a:58:5b:54: f0:4c:d2:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNXeu1n1SLlJdTu1Pshiw8o76HRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjA3MjkwNTM4MzZaFw0yNjA3MzAwOTA2MzZaMDMxMTAvBgNV BAMTKDhDRDE2MzZGMzc0QTYyNEQzNkQ1QkZEOTMwNjQyRUQxNjM3QzcyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUYxjURYsEBVrk6MWsmKI54El 0106s1XRGvfOm2wRz+skdV3ur2+RY4swaOM1Hsg2H9T94boGrtuSTVysOPKLdz1Q 2OYqiGOztWks5qLwe/JLPm5TvMme1ZG1/LE/qhv5cSrMUW1MwQpcMXvtJe8AZ3+u Va3DwtlobOHfOgWsIajvPnUk+ZBhl5bjME2toawmyiSStqV15sa3FhosvxfSy2fo xUnz5tOVXQdYYdPIMK4sI/8T0ZbmsCZ6vtBl+TOkVOoLwUGPjBFotgoonSuIXxZo u9h18Ourm7LV3dpKbvTFsalpgJLcJoLx5NZia0+JR9fhU/t0yl0/bij4CRaTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjNFjbzdKYk021b/ZMGQu0WN8chIwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACY38rfI+Jq6v d4RV6vZS63/2RSHHXhukSfyAYwVhqjWnAE6WLtwCi0e9Ww9EcNrMiiSMwMDppliE kbBfjSxk81BA81+v87XNTKNbP8CpOnTkkoSwQn9geNfxk/jWYnWb3I8OlkAtGQU3 GIssKH+J1ZDUkAVDv5YLLYZ2ZmR68Htb713JjDWyqdZ2JACNphGwOi/ZK88xFiQg ub+0MvYVtb21NXQ8g7rThqcsxqZ/6V4gDFEsFyIh3PvBQCEH7gn0UHPE9He10s0m 4F/kWwiqeWA5eFmxSUT9FfCKqDAP9fGxH3T2m+kcElcCCvy5at3u/OM7EeD9lYIa WFtU8EzS2w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:23 2026 by rpki-client