$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: mPVfeDX0govstFVr2IT0/rALVj6s1s1LKqNrPrmLC/8= Subject key identifier: 7B:9C:2C:F9:87:FD:DD:7A:62:4A:92:57:2E:89:2D:BB:D3:A6:AD:F5 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 408923E47C0C979914A2E5532B25DCEAAD70C64D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 23 Signing time: Sat 13 Jun 2026 23:12:26 +0000 Manifest this update: Sat 13 Jun 2026 23:07:26 +0000 Manifest next update: Sun 14 Jun 2026 23:46:26 +0000 Files and hashes: 1: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) 2: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: Av35Jh/Ynp58nyVvUiddhZALDDiOk7ahrrmDXeymWhg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:89:23:e4:7c:0c:97:99:14:a2:e5:53:2b:25:dc:ea:ad:70:c6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Jun 13 23:07:26 2026 GMT Not After : Jun 14 23:46:26 2026 GMT Subject: CN=7B9C2CF987FDDD7A624A92572E892DBBD3A6ADF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:8c:c3:46:d1:34:ac:94:f0:79:b9:b5:85: b2:54:0b:f6:7e:59:a4:11:96:59:7c:13:19:b8:fa: 72:90:1e:84:3c:ad:96:a6:75:1d:0a:ea:b6:8a:50: cf:4d:3b:7c:e8:05:7e:68:e2:66:ac:81:00:7a:0a: 16:02:3e:da:68:1b:38:16:83:64:77:a6:27:37:78: a3:dc:52:54:2c:74:42:a2:5c:8f:e4:dd:d2:02:94: 37:c4:ab:ca:c2:4a:37:c9:2b:33:12:b4:42:e0:09: 55:24:ca:c1:a6:4c:ab:9a:4b:07:d3:f6:2d:5c:e3: fa:ab:af:ec:5b:16:66:78:cc:b8:a4:cf:a7:ee:af: 27:64:d7:49:1a:7a:fa:04:f4:bc:a8:a6:32:51:c9: cd:75:01:9f:4b:a1:b4:a5:7a:8d:53:b9:a2:01:00: bb:4f:80:a0:89:c2:96:cc:e4:d5:48:42:1a:24:ba: 55:10:87:d0:48:cc:27:27:d6:d5:19:46:df:ed:db: 66:93:16:5c:22:dd:04:f8:71:2f:88:4a:05:f6:ba: 07:60:f0:5b:7c:2f:9d:28:16:c2:8c:50:62:b6:2d: 3a:78:15:10:2a:b0:b4:68:f6:b7:20:26:c5:35:0c: 83:b6:ef:97:0d:7c:c3:63:36:b6:89:51:aa:fa:e0: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9C:2C:F9:87:FD:DD:7A:62:4A:92:57:2E:89:2D:BB:D3:A6:AD:F5 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:49:7b:29:b0:88:e3:3a:b5:48:87:7e:9a:0a:16:1a:b5:bf: dd:8b:d7:18:16:a5:23:48:ce:c3:8f:b8:e8:c0:c6:04:92:1f: 7a:e8:b3:80:07:36:28:60:e3:4f:42:8a:ce:43:02:38:2e:4e: df:b3:49:6d:3e:99:0f:10:aa:34:6c:4b:98:17:8c:8f:7b:88: 25:26:46:8b:4b:dd:4c:e7:56:78:17:67:98:ab:6c:4c:c6:dd: bf:f9:bf:d4:cb:70:89:ab:9a:fe:72:09:57:f0:49:51:de:8c: fd:c2:6f:0e:2b:13:19:e2:b9:f3:94:42:73:d5:3f:d6:3d:11: 6b:9f:09:97:3b:83:30:c7:61:ef:7b:61:7c:d8:f4:7b:f0:b8: 00:28:48:e5:4e:79:18:99:23:02:7f:cd:76:94:31:09:be:04: 63:68:b2:9e:dc:bf:dc:f4:dc:a6:b1:64:b4:13:ee:47:64:00: 58:31:4b:4f:62:42:0b:ba:ef:59:da:7f:75:33:6a:3b:08:c6: 65:1c:bd:c7:11:8c:d3:ec:56:1c:37:ac:fd:1c:94:9c:dd:3b: fa:4c:74:92:40:ff:9b:14:78:38:28:e4:c8:77:75:0f:f0:70: db:e3:d7:ca:fd:1d:13:87:a1:42:0a:04:48:5a:3c:fb:a2:95: 2e:d8:a0:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQIkj5HwMl5kUouVTKyXc6q1wxk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjA2MTMyMzA3MjZaFw0yNjA2MTQyMzQ2MjZaMDMxMTAvBgNV BAMTKDdCOUMyQ0Y5ODdGREREN0E2MjRBOTI1NzJFODkyREJCRDNBNkFERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq4zDRtE0rJTwebm1hbJUC/Z+ WaQRlll8Exm4+nKQHoQ8rZamdR0K6raKUM9NO3zoBX5o4masgQB6ChYCPtpoGzgW g2R3pic3eKPcUlQsdEKiXI/k3dIClDfEq8rCSjfJKzMStELgCVUkysGmTKuaSwfT 9i1c4/qrr+xbFmZ4zLikz6furydk10kaevoE9LyopjJRyc11AZ9LobSleo1TuaIB ALtPgKCJwpbM5NVIQhokulUQh9BIzCcn1tUZRt/t22aTFlwi3QT4cS+ISgX2ugdg 8Ft8L50oFsKMUGK2LTp4FRAqsLRo9rcgJsU1DIO275cNfMNjNraJUar64K41AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe5ws+Yf93XpiSpJXLoktu9OmrfUwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkl7KbCI4zq1 SId+mgoWGrW/3YvXGBalI0jOw4+46MDGBJIfeuizgAc2KGDjT0KKzkMCOC5O37NJ bT6ZDxCqNGxLmBeMj3uIJSZGi0vdTOdWeBdnmKtsTMbdv/m/1Mtwiaua/nIJV/BJ Ud6M/cJvDisTGeK585RCc9U/1j0Ra58JlzuDMMdh73thfNj0e/C4AChI5U55GJkj An/NdpQxCb4EY2iynty/3PTcprFktBPuR2QAWDFLT2JCC7rvWdp/dTNqOwjGZRy9 xxGM0+xWHDes/RyUnN07+kx0kkD/mxR4OCjkyHd1D/Bw2+PXyv0dE4ehQgoESFo8 +6KVLtigPg== -----END CERTIFICATE-----Generated at Sun Jun 14 05:31:04 2026 by rpki-client