$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: J39SfftYnHzlfw0D9ODO3SYKAcolDpjxNBfqqmDZ5DE= Subject key identifier: 0B:FB:85:C7:10:A1:07:D0:AE:91:07:F6:18:53:FF:D2:EE:B8:35:17 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 45ED442243B055AFBE21DB02C7B782B964E979E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: EC Signing time: Tue 14 Jul 2026 16:26:39 +0000 Manifest this update: Tue 14 Jul 2026 16:21:39 +0000 Manifest next update: Wed 15 Jul 2026 18:55:39 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: mctk4O7vAgi+GYIPZwGLTm4GC7V7zPF8jweJNrEe3d0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ed:44:22:43:b0:55:af:be:21:db:02:c7:b7:82:b9:64:e9:79:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Jul 14 16:21:39 2026 GMT Not After : Jul 15 18:55:39 2026 GMT Subject: CN=0BFB85C710A107D0AE9107F61853FFD2EEB83517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:23:a1:04:f7:e2:ec:64:58:de:41:39:b9: d5:66:93:5f:98:7f:42:8b:57:1b:eb:cd:7f:7c:88: 48:fe:93:65:7c:e3:a8:7d:0e:d2:6a:cc:09:00:79: f0:8a:e4:f2:80:86:4c:46:9d:e9:fa:6c:05:83:97: 11:2d:e3:8e:1b:0d:59:d2:80:e5:6e:f4:da:ed:b2: de:37:31:91:58:d8:df:f9:85:aa:dc:86:6a:03:28: 6a:b1:a6:bd:d6:ab:4a:4d:53:ca:76:31:31:84:8a: 1c:aa:ca:da:e4:da:57:eb:ad:e4:ab:82:0a:ac:63: d6:3a:9a:5f:e2:97:34:33:1f:76:a1:db:b4:98:7b: bf:c2:40:ba:64:d5:af:d0:2a:d7:80:3a:e7:9b:51: 6b:e4:71:2a:9a:4a:19:96:ee:03:08:14:53:d4:74: c9:16:55:51:67:a0:a3:78:ed:dd:4f:bd:c7:12:f1: ad:46:e6:e3:1e:47:9f:f4:c8:d8:4d:c6:1c:77:12: c3:7b:fa:02:eb:f3:e7:94:5b:67:8c:63:2e:60:bc: fa:c0:b8:62:75:7d:c5:c1:bb:20:1f:a2:6a:7a:56: 25:a4:8b:88:ae:c6:33:3c:a7:be:44:fb:a8:da:30: 9e:c3:c6:91:fb:ac:02:4e:67:49:b7:b0:08:fb:49: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:85:C7:10:A1:07:D0:AE:91:07:F6:18:53:FF:D2:EE:B8:35:17 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4b:f4:ec:f0:71:09:59:ca:e0:43:c0:a2:ee:25:61:b1:c3: 4c:9f:a3:c7:d0:37:2b:03:dd:8a:e2:a5:d2:02:3b:2f:94:49: b2:4e:8b:76:bf:6e:59:50:a1:8d:c5:2a:7f:3a:0a:ab:b5:67: 72:96:b2:05:1d:e7:72:f9:4b:b4:69:ae:6d:0d:48:31:55:73: b7:8f:b9:2a:12:a1:69:74:bd:50:3d:d0:b2:5f:72:c9:68:df: b8:62:8c:2e:b1:90:7a:21:b1:54:d7:38:22:3f:a3:4f:cc:8f: a5:9e:0d:b4:f9:c5:19:57:2a:85:db:21:10:24:7c:ef:a2:53: e3:22:fb:37:d6:92:30:fb:05:f1:81:77:c8:08:a0:54:ff:d0: fc:1c:c4:e6:12:d9:03:4d:a1:87:81:d4:b0:b1:80:10:f2:30: 59:83:36:a8:f6:a5:23:44:84:df:14:05:2e:6a:ab:30:f0:32: 53:e0:a2:25:5e:83:7a:f7:87:44:ea:ba:61:d0:87:2f:93:ca: 9e:d7:35:da:84:21:e7:94:7e:76:f9:55:20:9c:c4:35:41:ed: da:20:68:79:ae:1b:6a:f0:45:b4:fb:f8:0d:c0:2e:df:ad:36: c5:ee:98:5c:7f:40:9c:a2:07:f7:b0:93:fa:e9:7d:57:63:88: 24:85:b7:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURe1EIkOwVa++IdsCx7eCuWTpeegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA3MTQxNjIxMzlaFw0yNjA3MTUxODU1MzlaMDMxMTAvBgNV BAMTKDBCRkI4NUM3MTBBMTA3RDBBRTkxMDdGNjE4NTNGRkQyRUVCODM1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvSOhBPfi7GRY3kE5udVmk1+Y f0KLVxvrzX98iEj+k2V846h9DtJqzAkAefCK5PKAhkxGnen6bAWDlxEt444bDVnS gOVu9Nrtst43MZFY2N/5harchmoDKGqxpr3Wq0pNU8p2MTGEihyqytrk2lfrreSr ggqsY9Y6ml/ilzQzH3ah27SYe7/CQLpk1a/QKteAOuebUWvkcSqaShmW7gMIFFPU dMkWVVFnoKN47d1PvccS8a1G5uMeR5/0yNhNxhx3EsN7+gLr8+eUW2eMYy5gvPrA uGJ1fcXBuyAfomp6ViWki4iuxjM8p75E+6jaMJ7DxpH7rAJOZ0m3sAj7SdabAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC/uFxxChB9CukQf2GFP/0u64NRcwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0v07PBxCVnK 4EPAou4lYbHDTJ+jx9A3KwPdiuKl0gI7L5RJsk6Ldr9uWVChjcUqfzoKq7Vncpay BR3ncvlLtGmubQ1IMVVzt4+5KhKhaXS9UD3Qsl9yyWjfuGKMLrGQeiGxVNc4Ij+j T8yPpZ4NtPnFGVcqhdshECR876JT4yL7N9aSMPsF8YF3yAigVP/Q/BzE5hLZA02h h4HUsLGAEPIwWYM2qPalI0SE3xQFLmqrMPAyU+CiJV6DeveHROq6YdCHL5PKntc1 2oQh55R+dvlVIJzENUHt2iBoea4bavBFtPv4DcAu3602xe6YXH9AnKIH97CT+ul9 V2OIJIW3ig== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:38 2026 by rpki-client