$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: yI3qjIzX/k6Fk8H8ZWzyRn6zodIIBOSx/9Rh0Au6XaI= Subject key identifier: DF:A6:0E:1A:80:E7:02:F9:5F:EB:24:06:42:48:1B:5C:94:25:17:4F Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 6821596EB0582B2ACD1276271D101A608CA78C79 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 9B Signing time: Sat 10 Oct 2026 03:44:11 +0000 Manifest this update: Sat 10 Oct 2026 03:39:11 +0000 Manifest next update: Tue 13 Oct 2026 10:21:11 +0000 Files and hashes: 1: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: kajT3LrHaaVBZo6h8i1UPZcZD1FsMm9WhfS0zo5cCFk=) 2: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:21:59:6e:b0:58:2b:2a:cd:12:76:27:1d:10:1a:60:8c:a7:8c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Oct 10 03:39:11 2026 GMT Not After : Oct 13 10:21:11 2026 GMT Subject: CN=DFA60E1A80E702F95FEB240642481B5C9425174F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:0d:35:d5:ec:ad:6d:c7:77:64:bc:a1:95: aa:79:9d:ce:48:3f:20:14:60:2d:e5:ea:1a:7d:69: 37:54:ac:cd:8a:45:a7:d7:6d:2e:8e:91:39:b1:7b: a1:5f:cb:c0:c2:d7:a9:28:c1:c5:dc:fb:ea:10:59: e9:5c:8a:06:d8:2c:86:00:51:88:7e:75:7c:a1:4d: 7e:b5:c8:08:06:56:a7:fe:a6:13:fc:6a:66:43:a6: 4a:fc:9f:11:b0:07:95:85:03:eb:d4:2f:a5:26:b0: d7:c3:96:fd:74:37:3c:af:3d:59:4d:2d:91:c2:8d: f9:7a:2b:71:78:86:cc:f9:92:d2:3e:11:8f:08:36: 2e:f4:a7:68:82:7f:61:cb:74:7e:0e:cc:41:ec:91: db:a1:d3:2d:b6:61:73:69:50:42:8e:91:32:c4:bd: 6a:28:b4:33:68:9d:f6:f2:57:d7:81:35:74:19:a2: 4b:f7:fa:42:aa:a6:37:48:4c:1f:fe:48:4c:f0:82: 7e:53:f3:3f:ee:b0:73:f1:d1:3d:8b:22:ef:9f:3b: 2d:cd:f5:c5:1c:16:e8:4d:c6:75:be:37:92:df:df: 44:b6:a2:6e:c6:4a:70:a2:3b:96:00:9e:65:88:0b: 76:65:61:ec:f3:99:9d:5f:74:10:92:09:7b:a7:97: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A6:0E:1A:80:E7:02:F9:5F:EB:24:06:42:48:1B:5C:94:25:17:4F X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5d:89:20:65:d0:21:55:bd:54:67:ae:35:c1:c8:98:e9:26: 19:0a:42:99:fa:17:cb:2b:56:b2:3f:83:49:ef:2c:9f:0d:70: d1:43:ef:5a:7a:fc:53:25:05:8f:51:83:c4:b4:55:3b:67:6f: 60:ea:39:a2:db:53:23:b4:8d:0c:49:d9:e6:85:66:a1:e4:45: 39:f7:85:a3:99:2e:07:c7:06:c1:e3:c5:59:3c:f5:6b:cf:c7: 58:1b:5f:3f:7c:2c:f4:a6:52:ce:69:6e:ea:d6:c5:d0:b4:58: 93:2c:af:e8:9a:c3:a7:c0:a2:d5:ee:7f:6e:e6:1b:d9:31:6e: 60:ef:61:8f:4a:6a:2a:88:8b:bb:fd:23:08:fe:fe:13:48:18: 5b:08:3e:f2:bb:8e:a5:0f:77:77:00:ed:6c:f7:91:95:27:25: c4:e3:5a:89:dd:e9:99:ac:46:2a:b3:b0:9c:5d:ee:83:fb:f8: 37:45:a8:d5:2f:14:77:25:0b:da:02:2b:26:7c:0e:aa:a3:ed: 2f:61:59:4f:62:61:6c:9b:00:d3:6e:eb:59:e3:5b:fc:76:de: 65:db:b8:0f:5e:fa:7e:97:0d:fe:ce:41:e1:ad:24:68:2e:32: 6f:73:f2:b8:06:86:b1:38:cf:1e:3e:80:90:59:e9:b0:de:73: 2d:33:55:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaCFZbrBYKyrNEnYnHRAaYIynjHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjEwMTAwMzM5MTFaFw0yNjEwMTMxMDIxMTFaMDMxMTAvBgNV BAMTKERGQTYwRTFBODBFNzAyRjk1RkVCMjQwNjQyNDgxQjVDOTQyNTE3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopw011eytbcd3ZLyhlap5nc5I PyAUYC3l6hp9aTdUrM2KRafXbS6OkTmxe6Ffy8DC16kowcXc++oQWelcigbYLIYA UYh+dXyhTX61yAgGVqf+phP8amZDpkr8nxGwB5WFA+vUL6UmsNfDlv10NzyvPVlN LZHCjfl6K3F4hsz5ktI+EY8INi70p2iCf2HLdH4OzEHskduh0y22YXNpUEKOkTLE vWootDNonfbyV9eBNXQZokv3+kKqpjdITB/+SEzwgn5T8z/usHPx0T2LIu+fOy3N 9cUcFuhNxnW+N5Lf30S2om7GSnCiO5YAnmWIC3ZlYezzmZ1fdBCSCXunl4vHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU36YOGoDnAvlf6yQGQkgbXJQlF08wHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF2JIGXQIVW9 VGeuNcHImOkmGQpCmfoXyytWsj+DSe8snw1w0UPvWnr8UyUFj1GDxLRVO2dvYOo5 ottTI7SNDEnZ5oVmoeRFOfeFo5kuB8cGwePFWTz1a8/HWBtfP3ws9KZSzmlu6tbF 0LRYkyyv6JrDp8Ci1e5/buYb2TFuYO9hj0pqKoiLu/0jCP7+E0gYWwg+8ruOpQ93 dwDtbPeRlSclxONaid3pmaxGKrOwnF3ug/v4N0Wo1S8UdyUL2gIrJnwOqqPtL2FZ T2JhbJsA027rWeNb/HbeZdu4D176fpcN/s5B4a0kaC4yb3PyuAaGsTjPHj6AkFnp sN5zLTNVfw== -----END CERTIFICATE-----Generated at Mon Oct 12 02:11:45 2026 by rpki-client