$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: 1KZqXu7Ep/lwvpbo0a7A8qp7lPWiM/ZF5MKZ4dUIe3c= Subject key identifier: F9:C3:EE:80:8C:BD:27:76:83:41:9A:B3:07:9B:FA:CE:CC:A8:E3:68 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 39E66AE9C04B0BCF237829F1BBE25E7395362899 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 00:04:17 +0000 Manifest this update: Sun 12 Apr 2026 23:59:17 +0000 Manifest next update: Tue 14 Apr 2026 01:52:17 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: AOtqFYyDv8tHBnpYEjbxFoQlqwmgogZJy2c3VSwuNMI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e6:6a:e9:c0:4b:0b:cf:23:78:29:f1:bb:e2:5e:73:95:36:28:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Apr 12 23:59:17 2026 GMT Not After : Apr 14 01:52:17 2026 GMT Subject: CN=F9C3EE808CBD277683419AB3079BFACECCA8E368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:4d:3f:d2:32:17:e5:e7:12:d1:48:0f:af: 79:17:e8:f1:2d:55:ea:b3:6f:38:55:7f:eb:fa:c0: 2f:27:ac:b5:b8:62:8f:80:49:1a:2a:af:63:f5:da: e6:68:e9:8a:2c:a8:7b:64:52:ca:84:d8:cf:89:53: a9:94:75:c1:7f:90:8a:c7:e1:5c:74:9a:79:92:4f: e8:cc:01:8e:7a:77:e7:70:9c:5d:9c:77:d4:b6:b8: 78:55:38:35:f6:3d:87:43:c7:05:6b:13:2b:f5:2b: 1e:b5:3f:33:ef:36:0f:e8:af:4e:d9:2d:83:2a:fd: ae:9b:3d:17:fb:41:e1:69:8c:ee:f6:72:e4:2e:62: 3f:07:42:a8:ed:24:08:fb:ff:60:5c:41:69:ef:d3: 04:ad:8c:8f:24:a6:76:29:89:ff:5e:80:07:8d:d7: 0d:7a:39:04:85:b8:b8:43:17:58:0e:ff:ad:37:c6: 4d:bb:23:1a:53:07:03:2a:3f:3a:a0:6d:f9:ab:3a: 78:fd:e4:72:98:73:cd:f0:a3:fb:65:1f:76:04:b0: 2e:56:06:31:69:8c:4e:e7:e8:dc:13:61:41:ac:aa: 9b:d6:4c:e8:99:ae:c4:64:88:20:c3:66:b1:a1:b1: 45:84:36:ce:4d:f8:69:52:46:c7:09:52:ba:0d:76: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C3:EE:80:8C:BD:27:76:83:41:9A:B3:07:9B:FA:CE:CC:A8:E3:68 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6a:8d:f2:11:02:a0:e7:42:4b:5c:64:33:d6:8c:b1:7d:0e: 6e:da:ec:cf:01:d4:c2:57:9c:75:77:f3:40:cb:ef:16:d7:18: a9:62:af:ab:4d:0a:86:bc:a2:5e:50:ad:bf:f6:34:45:25:2f: 48:c8:67:3f:90:cb:d7:fb:4d:27:fd:cb:8d:46:3e:8f:5a:40: 73:c4:51:74:d3:18:c0:73:32:e1:50:aa:1e:f4:95:84:54:2e: b6:17:78:db:5e:86:7a:8e:87:d9:aa:33:fd:0f:d3:6c:72:d4: 52:1c:db:6d:c3:2f:2f:bb:81:d3:32:fa:91:9a:5c:83:c4:6e: 66:2e:36:1d:98:de:74:2a:33:f7:3b:65:ab:bf:eb:f3:d6:50: 32:ed:da:18:61:d8:7b:a2:c7:7c:00:2a:09:b7:aa:3e:75:a4: de:2c:c1:d4:15:15:c6:48:e4:a4:7e:68:0e:a8:e9:b5:7a:59: 01:05:39:77:33:80:fc:3c:e3:36:4e:4f:94:4f:2b:0f:a1:4d: 9a:0b:4b:9e:73:2a:6e:d6:f4:a6:97:c6:db:aa:8f:7f:67:b1: 63:a4:be:1b:cc:fb:e1:7b:5e:1d:1a:bd:be:82:4b:83:d2:3d: 2c:1e:f6:ee:1d:ac:b5:c5:e2:95:19:5a:95:42:15:28:d5:ca: 6f:b0:07:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOeZq6cBLC88jeCnxu+Jec5U2KJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA0MTIyMzU5MTdaFw0yNjA0MTQwMTUyMTdaMDMxMTAvBgNV BAMTKEY5QzNFRTgwOENCRDI3NzY4MzQxOUFCMzA3OUJGQUNFQ0NBOEUzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mE0/0jIX5ecS0UgPr3kX6PEt VeqzbzhVf+v6wC8nrLW4Yo+ASRoqr2P12uZo6YosqHtkUsqE2M+JU6mUdcF/kIrH 4Vx0mnmST+jMAY56d+dwnF2cd9S2uHhVODX2PYdDxwVrEyv1Kx61PzPvNg/or07Z LYMq/a6bPRf7QeFpjO72cuQuYj8HQqjtJAj7/2BcQWnv0wStjI8kpnYpif9egAeN 1w16OQSFuLhDF1gO/603xk27IxpTBwMqPzqgbfmrOnj95HKYc83wo/tlH3YEsC5W BjFpjE7n6NwTYUGsqpvWTOiZrsRkiCDDZrGhsUWENs5N+GlSRscJUroNdifDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+cPugIy9J3aDQZqzB5v6zsyo42gwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2qN8hECoOdC S1xkM9aMsX0ObtrszwHUwlecdXfzQMvvFtcYqWKvq00KhryiXlCtv/Y0RSUvSMhn P5DL1/tNJ/3LjUY+j1pAc8RRdNMYwHMy4VCqHvSVhFQuthd4216Geo6H2aoz/Q/T bHLUUhzbbcMvL7uB0zL6kZpcg8RuZi42HZjedCoz9ztlq7/r89ZQMu3aGGHYe6LH fAAqCbeqPnWk3izB1BUVxkjkpH5oDqjptXpZAQU5dzOA/DzjNk5PlE8rD6FNmgtL nnMqbtb0ppfG26qPf2exY6S+G8z74XteHRq9voJLg9I9LB727h2stcXilRlalUIV KNXKb7AHUw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:57:52 2026 by rpki-client