$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: mxkzawrWId3VAvPO4lWzAZKTcPPuuRFHXFvuKQjV+00= Subject key identifier: 00:0E:D6:3D:0B:3D:A2:82:F0:82:16:FB:B7:3E:D1:A1:11:3A:9A:13 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 0F1AA37089035C4D979DF6E2D9B75F9E4C9E2E88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: D0 Signing time: Sun 25 Oct 2026 10:42:31 +0000 Manifest this update: Sun 25 Oct 2026 10:37:31 +0000 Manifest next update: Wed 28 Oct 2026 17:39:31 +0000 Files and hashes: 1: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: yt0ePMHoY4LconZwimHxjIiQnH1HT5pJpnXMgCgA8LM=) 2: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) 3: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 4: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) 5: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 6: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) 7: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 8: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 17:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1a:a3:70:89:03:5c:4d:97:9d:f6:e2:d9:b7:5f:9e:4c:9e:2e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: Oct 25 10:37:31 2026 GMT Not After : Oct 28 17:39:31 2026 GMT Subject: CN=000ED63D0B3DA282F08216FBB73ED1A1113A9A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:15:45:4b:a0:92:cc:ba:2c:de:7b:4a:41: b2:59:72:44:a8:25:d2:65:48:bc:0c:f6:d5:5c:ff: 32:bd:b0:cd:ad:43:ad:43:c5:e0:79:29:9c:44:50: 41:a5:80:e8:df:b8:63:68:4c:69:bc:9c:ae:52:3f: 34:67:7d:ed:71:1e:39:53:6b:2a:4a:16:82:82:06: 7d:c7:e6:21:70:d6:d5:d9:37:b3:de:32:14:9a:d4: 5e:3f:ba:da:08:9b:63:1b:71:53:9d:66:37:c0:7d: 28:60:5f:9e:40:6d:4d:a6:b9:68:1f:82:7f:86:ae: 06:86:32:f5:e1:21:e2:27:8b:fb:4c:f4:51:ca:6f: c8:43:0e:fd:8f:9f:bf:bd:7e:16:7e:38:5b:0f:90: 68:dd:1e:e5:bf:50:be:33:5e:ef:99:ae:b8:a8:4a: c5:aa:7c:9b:86:33:02:83:b5:14:52:d7:37:11:a1: e1:8a:b2:d5:47:cf:a2:9b:de:8d:31:f7:c1:8e:78: 7a:35:4b:9b:c1:14:fa:83:74:ec:49:41:e2:11:03: 76:0f:fb:94:59:89:cb:91:1c:ce:24:0d:40:a1:af: 04:f7:82:07:49:84:ef:46:a2:10:0d:18:44:1b:c3: f3:51:e2:6e:33:c1:11:a0:d8:33:3d:97:73:49:59: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:D6:3D:0B:3D:A2:82:F0:82:16:FB:B7:3E:D1:A1:11:3A:9A:13 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b6:63:38:38:83:02:26:3a:52:14:60:4a:83:fc:8e:e2:69: 94:f0:6b:53:fd:20:d9:94:fa:dc:03:5a:a7:8a:72:13:a5:d1: 8c:63:fc:fd:dc:17:36:f0:77:8e:00:39:ca:fc:8b:75:f0:e0: 07:ab:5b:56:c3:1c:5e:89:20:76:08:e5:ed:15:32:8b:89:c8: a7:bf:69:af:6a:4d:9a:56:7b:28:c1:5e:08:ca:7d:bb:1f:af: a6:95:5c:c3:06:4c:5d:69:11:b9:8f:18:ec:79:38:72:17:29: 45:e4:de:ae:94:f3:14:48:22:14:f3:c5:91:9a:ae:62:9f:ee: f7:5a:a0:aa:2d:75:2a:f8:18:db:21:d9:a0:45:e5:20:82:e0: d4:c8:6d:2c:3c:18:25:04:0c:63:1a:6d:d6:b6:4f:c4:71:fc: c8:6d:bd:c6:41:8b:e5:6d:89:f5:a5:f5:be:05:a6:a2:4b:4a: 8d:6b:9f:05:a4:2e:bd:ce:dd:a2:f4:1c:a0:fc:1d:46:88:25: ba:14:52:3e:94:bd:ef:3b:00:17:b1:e9:6e:74:19:5c:9d:97: 07:a7:d6:08:b5:ad:7c:1c:4e:89:54:85:cb:de:00:9b:90:aa: a2:8c:eb:7a:d7:e2:2e:4a:6d:f8:91:2b:a7:4f:f7:e7:76:69: d1:a5:f1:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDxqjcIkDXE2Xnfbi2bdfnkyeLogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjEwMjUxMDM3MzFaFw0yNjEwMjgxNzM5MzFaMDMxMTAvBgNV BAMTKDAwMEVENjNEMEIzREEyODJGMDgyMTZGQkI3M0VEMUExMTEzQTlBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbWhVFS6CSzLos3ntKQbJZckSo JdJlSLwM9tVc/zK9sM2tQ61DxeB5KZxEUEGlgOjfuGNoTGm8nK5SPzRnfe1xHjlT aypKFoKCBn3H5iFw1tXZN7PeMhSa1F4/utoIm2MbcVOdZjfAfShgX55AbU2muWgf gn+GrgaGMvXhIeIni/tM9FHKb8hDDv2Pn7+9fhZ+OFsPkGjdHuW/UL4zXu+Zrrio SsWqfJuGMwKDtRRS1zcRoeGKstVHz6Kb3o0x98GOeHo1S5vBFPqDdOxJQeIRA3YP +5RZicuRHM4kDUChrwT3ggdJhO9GohANGEQbw/NR4m4zwRGg2DM9l3NJWfyvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAA7WPQs9ooLwghb7tz7RoRE6mhMwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELZjODiDAiY6 UhRgSoP8juJplPBrU/0g2ZT63ANap4pyE6XRjGP8/dwXNvB3jgA5yvyLdfDgB6tb VsMcXokgdgjl7RUyi4nIp79pr2pNmlZ7KMFeCMp9ux+vppVcwwZMXWkRuY8Y7Hk4 chcpReTerpTzFEgiFPPFkZquYp/u91qgqi11KvgY2yHZoEXlIILg1MhtLDwYJQQM Yxpt1rZPxHH8yG29xkGL5W2J9aX1vgWmoktKjWufBaQuvc7dovQcoPwdRogluhRS PpS97zsAF7HpbnQZXJ2XB6fWCLWtfBxOiVSFy94Am5CqoozretfiLkpt+JErp0/3 53Zp0aXxkQ== -----END CERTIFICATE-----Generated at Mon Oct 26 08:15:20 2026 by rpki-client