$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft File: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft (raw, json) Hash identifier: snr48BWERawWOieAWKUeOsvUwXPgfEziAznbWJN0aDw= Subject key identifier: 31:6C:AA:E0:95:1E:E9:DC:F4:93:E2:64:BB:68:CA:58:F1:1F:05:38 Authority key identifier: 32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13 Certificate issuer: /CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13 Certificate serial: 05B770ACA648C054041298CBC3CAAC128743B905 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft Manifest number: 0F Signing time: Thu 15 Oct 2026 12:26:47 +0000 Manifest this update: Thu 15 Oct 2026 12:21:47 +0000 Manifest next update: Sun 18 Oct 2026 21:43:47 +0000 Files and hashes: 1: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl (hash: YpvQaU9wK3hQSoCmVQuAyXOzJdFbDodZxqthopD6n4I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b7:70:ac:a6:48:c0:54:04:12:98:cb:c3:ca:ac:12:87:43:b9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13 Validity Not Before: Oct 15 12:21:47 2026 GMT Not After : Oct 18 21:43:47 2026 GMT Subject: CN=316CAAE0951EE9DCF493E264BB68CA58F11F0538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:63:21:fa:9f:af:52:8a:45:e1:04:1b:3a: f7:5f:3a:2d:97:c6:2e:9a:3c:12:08:4e:3b:2a:e3: 28:01:57:ac:66:8c:85:42:0a:40:ec:86:d7:cf:cc: cd:17:da:99:7f:cc:bb:bd:33:a1:10:c9:41:ca:ee: 00:af:73:50:3a:cf:67:ba:3f:ed:3c:4a:b9:ee:0a: ac:4c:16:55:b9:ae:bb:ba:d0:18:1a:66:52:65:c8: e6:75:c0:6f:f9:63:00:64:a7:05:31:86:d6:96:db: 63:73:92:ce:4b:5f:76:ea:15:cb:34:5c:08:a4:7b: ec:10:49:50:64:fc:c1:85:9e:52:6c:80:0b:c6:1c: 94:94:41:e1:a0:0c:9e:62:1d:26:9e:1e:ed:e2:b9: 26:55:b0:67:c5:75:49:63:72:1e:59:9b:5b:f5:2e: 64:5f:7a:95:60:69:0d:cc:98:c5:9e:0d:40:d3:4e: 58:8f:c9:aa:fc:63:20:8a:ce:74:e9:52:39:e0:7c: bd:7b:9e:a0:71:44:56:1e:b6:6a:9c:e9:b3:ef:5e: 99:c6:8f:ea:fe:02:83:8f:8a:5f:52:ca:03:44:e4: 1c:b2:07:f1:b7:80:a3:fa:ec:9e:18:e6:a6:47:93: d8:e5:dd:fd:d1:ee:e8:1c:10:3d:2d:e8:e0:af:9f: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6C:AA:E0:95:1E:E9:DC:F4:93:E2:64:BB:68:CA:58:F1:1F:05:38 X509v3 Authority Key Identifier: keyid:32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:07:6b:44:8f:ca:97:15:18:df:cb:3d:91:b4:5d:8f:c7:9e: d3:34:3d:1e:65:12:dc:26:8b:80:3a:1a:cd:4a:74:66:db:95: 0c:8e:2c:ec:73:a3:19:f8:7f:6d:95:d3:f2:39:f3:32:74:fb: 81:c2:69:c7:11:d2:74:05:81:d4:7f:15:95:e6:32:0c:d6:d4: 42:50:58:fc:a7:2f:61:10:92:58:05:b9:5b:1c:54:9d:be:9b: a0:75:f8:2b:6d:0e:52:6d:38:f7:5e:5c:41:3c:df:85:2a:df: 8c:91:3c:e7:b0:4f:46:ba:8c:12:dd:02:3d:71:a4:85:fc:34: e7:b0:22:c8:97:9e:a5:f3:1e:54:a0:7a:42:3f:14:c8:53:a8: 04:e3:34:a1:ff:63:e5:ce:2c:a7:9d:90:c5:8d:b7:7f:e7:4e: af:74:32:58:39:6c:a5:98:0d:79:e6:d3:c2:80:55:16:b3:9f: d2:70:4a:c5:3c:56:30:a2:77:6d:97:7f:63:13:93:a1:a4:16: 2d:5d:2f:a9:f3:46:cc:ea:92:f2:91:cc:56:a4:54:e1:23:f1: fa:a3:35:4e:2a:92:ab:fa:33:9d:1b:d7:0a:99:31:95:13:00: 89:12:a2:fc:55:db:da:17:6c:74:65:1b:fc:dd:04:ae:3f:5b: d0:5c:fe:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBbdwrKZIwFQEEpjLw8qsEodDuQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJCRjgyMDBBMzZCNkRBQzEzNzREMDVFREIzMDk3RDcw MUYzQkMxMzAeFw0yNjEwMTUxMjIxNDdaFw0yNjEwMTgyMTQzNDdaMDMxMTAvBgNV BAMTKDMxNkNBQUUwOTUxRUU5RENGNDkzRTI2NEJCNjhDQTU4RjExRjA1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIw2Mh+p+vUopF4QQbOvdfOi2X xi6aPBIITjsq4ygBV6xmjIVCCkDshtfPzM0X2pl/zLu9M6EQyUHK7gCvc1A6z2e6 P+08SrnuCqxMFlW5rru60BgaZlJlyOZ1wG/5YwBkpwUxhtaW22Nzks5LX3bqFcs0 XAike+wQSVBk/MGFnlJsgAvGHJSUQeGgDJ5iHSaeHu3iuSZVsGfFdUljch5Zm1v1 LmRfepVgaQ3MmMWeDUDTTliPyar8YyCKznTpUjngfL17nqBxRFYetmqc6bPvXpnG j+r+AoOPil9SygNE5ByyB/G3gKP67J4Y5qZHk9jl3f3R7ugcED0t6OCvn+tXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMWyq4JUe6dz0k+Jku2jKWPEfBTgwHwYDVR0j BBgwFoAUMr+CAKNrbawTdNBe2zCX1wHzvBMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 MjA0ODA0NTM2MjI0OTc3My8wLzMyQkY4MjAwQTM2QjZEQUMxMzc0RDA1RURCMzA5 N0Q3MDFGM0JDMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJCRjgyMDBBMzZCNkRBQzEzNzREMDVFREIzMDk3RDcwMUYzQkMxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTIwNDgwNDUzNjIyNDk3NzMvMC8zMkJGODIwMEEzNkI2 REFDMTM3NEQwNUVEQjMwOTdENzAxRjNCQzEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgdrRI/KlxUY 38s9kbRdj8ee0zQ9HmUS3CaLgDoazUp0ZtuVDI4s7HOjGfh/bZXT8jnzMnT7gcJp xxHSdAWB1H8VleYyDNbUQlBY/KcvYRCSWAW5WxxUnb6boHX4K20OUm04915cQTzf hSrfjJE857BPRrqMEt0CPXGkhfw057AiyJeepfMeVKB6Qj8UyFOoBOM0of9j5c4s p52QxY23f+dOr3QyWDlspZgNeebTwoBVFrOf0nBKxTxWMKJ3bZd/YxOToaQWLV0v qfNGzOqS8pHMVqRU4SPx+qM1TiqSq/oznRvXCpkxlRMAiRKi/FXb2hdsdGUb/N0E rj9b0Fz+dw== -----END CERTIFICATE-----Generated at Thu Oct 15 15:28:06 2026 by rpki-client