$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: q4GnAURzbYmFX6CXUCxK7J7IBiYNQZdG+Y/b3V80xy4= Subject key identifier: 2B:FE:2B:5F:E7:CD:3C:E3:A0:2B:66:32:19:72:BF:8C:5E:9B:AE:69 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 457953C670C002776481C284F3C245E372A77B9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 5E Signing time: Tue 28 Jul 2026 15:17:06 +0000 Manifest this update: Tue 28 Jul 2026 15:12:06 +0000 Manifest next update: Wed 29 Jul 2026 17:01:06 +0000 Files and hashes: 1: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: r5xYZ51Kv4L/x6kS4Nkel7OXLdlgvAY5lzF/iTYOfGg=) 2: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:79:53:c6:70:c0:02:77:64:81:c2:84:f3:c2:45:e3:72:a7:7b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Jul 28 15:12:06 2026 GMT Not After : Jul 29 17:01:06 2026 GMT Subject: CN=2BFE2B5FE7CD3CE3A02B66321972BF8C5E9BAE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:60:a1:92:74:76:bf:3a:63:c9:09:ec:27: 57:84:ff:2d:e6:7b:03:2a:76:0b:f8:62:d2:80:6c: ce:bb:f5:08:b3:44:8e:7c:5d:c1:2e:53:08:79:aa: ee:8c:3f:b1:be:94:5d:f4:15:e7:f8:cf:0b:e3:7f: 24:01:31:cc:40:d9:f1:d9:c7:dc:2f:46:fc:55:c4: e1:df:a2:1d:a7:94:ad:43:4a:6b:0e:05:f5:b7:aa: f4:91:8e:2a:f7:22:9a:f3:0e:6a:e9:f4:33:fa:81: 28:60:a1:62:6a:56:07:79:31:f6:0d:6b:45:51:3f: 14:80:55:e7:d4:a7:8b:c7:2d:00:b6:87:c1:6d:c6: 7e:23:39:df:50:87:cf:9a:77:f0:93:f8:1e:97:38: 36:6a:da:c4:23:7f:31:9b:eb:f0:94:c4:bf:29:58: f1:b5:67:ac:90:63:8d:71:73:f6:a5:91:d1:e8:51: c2:ec:71:ff:af:d0:8b:b1:23:9e:66:08:30:a9:76: fc:af:66:7a:c7:28:7e:60:92:fd:fe:eb:4d:7c:66: 1a:1f:66:6f:24:59:69:8a:35:9d:68:92:05:f7:47: 41:6e:f9:74:63:d1:4f:98:f9:35:4a:ef:1b:5d:8c: 78:ab:65:f4:9c:de:84:57:45:13:34:2b:8b:6e:f8: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:2B:5F:E7:CD:3C:E3:A0:2B:66:32:19:72:BF:8C:5E:9B:AE:69 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:3a:ea:5a:83:ea:37:6f:6c:e8:83:d8:ac:65:26:2c:e0:ff: f7:67:72:a3:72:c3:88:c1:05:b2:83:8b:1c:15:bf:9e:8a:b2: 93:02:9b:98:01:e9:0e:e0:86:d4:1e:fa:16:fa:94:76:95:47: 9b:2b:cc:d0:be:56:b9:14:b0:10:e9:e8:46:b9:76:e6:07:2b: 3f:21:9d:e6:e8:88:bd:59:e5:5e:0d:49:25:f3:fb:27:13:bf: bd:7c:34:5c:9c:79:a4:12:f7:0f:8b:ec:b3:5f:32:a1:be:7b: 4b:50:df:e6:9c:2f:f8:50:c9:68:b7:63:bb:87:52:08:aa:6f: 81:29:88:e6:10:ba:a1:13:10:cb:2b:b1:6a:65:10:88:76:85: cf:51:31:86:2d:81:2c:f5:cc:5e:e0:76:ee:f2:4f:36:2a:33: b5:3b:20:ea:c0:6a:81:59:f4:65:20:45:2e:bc:01:df:e8:8f: 77:1e:f4:0f:8e:09:90:a1:fa:6e:e7:64:b4:f4:53:34:48:f3: 95:ef:7f:f3:2a:56:c6:44:b4:a0:1f:ae:1b:4f:ff:03:5d:ef: d6:03:a8:57:5d:37:18:8c:8c:a9:60:49:a7:54:47:30:70:fc: 5e:13:8e:96:de:12:35:b1:ad:ad:09:ff:e6:43:8d:b4:47:66: d3:9b:47:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURXlTxnDAAndkgcKE88JF43Kne5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjA3MjgxNTEyMDZaFw0yNjA3MjkxNzAxMDZaMDMxMTAvBgNV BAMTKDJCRkUyQjVGRTdDRDNDRTNBMDJCNjYzMjE5NzJCRjhDNUU5QkFFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspWChknR2vzpjyQnsJ1eE/y3m ewMqdgv4YtKAbM679QizRI58XcEuUwh5qu6MP7G+lF30Fef4zwvjfyQBMcxA2fHZ x9wvRvxVxOHfoh2nlK1DSmsOBfW3qvSRjir3IprzDmrp9DP6gShgoWJqVgd5MfYN a0VRPxSAVefUp4vHLQC2h8Ftxn4jOd9Qh8+ad/CT+B6XODZq2sQjfzGb6/CUxL8p WPG1Z6yQY41xc/alkdHoUcLscf+v0IuxI55mCDCpdvyvZnrHKH5gkv3+6018Zhof Zm8kWWmKNZ1okgX3R0Fu+XRj0U+Y+TVK7xtdjHirZfSc3oRXRRM0K4tu+EGzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK/4rX+fNPOOgK2YyGXK/jF6brmkwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTrqWoPqN29s 6IPYrGUmLOD/92dyo3LDiMEFsoOLHBW/noqykwKbmAHpDuCG1B76FvqUdpVHmyvM 0L5WuRSwEOnoRrl25gcrPyGd5uiIvVnlXg1JJfP7JxO/vXw0XJx5pBL3D4vss18y ob57S1Df5pwv+FDJaLdju4dSCKpvgSmI5hC6oRMQyyuxamUQiHaFz1Exhi2BLPXM XuB27vJPNioztTsg6sBqgVn0ZSBFLrwB3+iPdx70D44JkKH6budktPRTNEjzle9/ 8ypWxkS0oB+uG0//A13v1gOoV103GIyMqWBJp1RHMHD8XhOOlt4SNbGtrQn/5kON tEdm05tHTA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:11:51 2026 by rpki-client