$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: Y5yUc6UAHpv47apbkYJWI2efoZ6+QgQhSgqqCZ5phCU= Subject key identifier: 4B:74:AE:70:85:6E:3D:39:B2:89:30:0B:F6:8F:9A:37:0A:B9:AD:F4 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 63F56B6063150ACA2059AB2876F1E0E67A301D38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: AE Signing time: Fri 29 May 2026 02:22:27 +0000 Manifest this update: Fri 29 May 2026 02:17:27 +0000 Manifest next update: Sat 30 May 2026 05:34:27 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: AviyB7A1qYmYYQEZKtCGHF+3xbnqpMBVkH78alNmrIs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f5:6b:60:63:15:0a:ca:20:59:ab:28:76:f1:e0:e6:7a:30:1d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: May 29 02:17:27 2026 GMT Not After : May 30 05:34:27 2026 GMT Subject: CN=4B74AE70856E3D39B289300BF68F9A370AB9ADF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:cd:63:40:7a:d0:33:2c:04:e8:95:20:5d: c9:da:60:d7:c9:65:be:3c:29:0d:14:90:bc:81:9d: e2:5c:89:77:61:b0:a2:19:c6:9b:42:82:8d:63:c9: 95:58:bb:b2:7f:41:80:46:e8:a2:bc:aa:e5:16:57: 6e:83:55:2e:1c:26:bd:75:c1:17:f4:5b:2f:b0:2d: bd:87:49:0b:88:7d:14:41:43:4b:bb:5b:d0:0a:a6: 86:ec:06:3e:d7:c1:dd:70:6f:59:1e:e9:60:99:9c: 1b:94:c7:8f:d9:f0:57:74:6c:74:1b:49:4a:95:83: 32:eb:51:f4:c8:77:46:f3:19:e5:89:d7:5d:74:11: 32:27:ff:ec:c8:90:15:77:c8:14:92:4c:52:a5:c9: 95:b2:c0:8b:f9:c0:65:30:e9:a6:78:85:92:0e:1f: d5:de:1c:45:ae:35:0d:b5:e0:05:71:1c:36:83:ec: db:42:d4:bf:cb:d8:1e:b7:cd:8e:7e:cb:bb:ba:09: 68:c6:ed:a9:ac:15:79:99:d3:da:ee:7f:30:1a:1f: 06:9c:ad:ad:7b:8e:b7:a1:df:de:22:cf:9b:0d:64: 75:99:6e:23:9d:0f:5b:ea:a8:3f:ef:e1:e9:e0:a2: c3:9b:5e:0d:39:f5:c6:05:8d:9f:8f:33:6a:49:29: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:74:AE:70:85:6E:3D:39:B2:89:30:0B:F6:8F:9A:37:0A:B9:AD:F4 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:59:1c:c1:d4:96:9e:e6:d8:39:ac:83:c4:d0:65:d0:d2: 8d:fa:63:9b:c9:98:1f:b2:29:39:3a:fe:1f:62:33:58:dd:5c: fa:ee:b5:cc:d3:25:eb:c0:ed:17:88:c0:6c:90:3b:0f:a0:81: fb:30:e3:c0:64:12:b4:18:14:61:4d:0d:ef:8f:54:40:87:9f: 42:a7:50:39:57:7e:e0:73:29:bf:77:c8:64:af:42:07:86:71: 65:bf:b0:b7:b9:db:62:80:5b:62:bd:aa:2d:a5:a9:bf:c0:27: c6:18:82:03:53:f5:72:2b:1f:92:b2:a9:ae:0b:61:7f:67:12: da:11:c1:31:9e:95:7c:3b:6b:f6:b7:1a:99:e9:2a:6b:11:9a: 86:bf:55:f9:24:93:d2:f9:9d:d9:f1:ab:49:02:c1:ac:93:0a: 25:6f:91:0c:33:69:80:8f:3a:77:01:b3:66:3c:b0:e1:54:35: 76:55:ad:da:d8:ff:3e:ff:5b:7b:69:75:b5:be:77:ba:b1:cf: ba:39:ff:c0:05:df:95:01:ec:17:ff:4d:25:21:34:90:01:20: 36:78:8d:ec:f2:67:02:56:5a:f0:64:88:3b:1a:84:df:63:c2: 74:60:ea:45:dd:c1:63:74:80:4d:6b:68:98:24:f0:6f:35:23: 51:90:da:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY/VrYGMVCsogWasodvHg5nowHTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjA1MjkwMjE3MjdaFw0yNjA1MzAwNTM0MjdaMDMxMTAvBgNV BAMTKDRCNzRBRTcwODU2RTNEMzlCMjg5MzAwQkY2OEY5QTM3MEFCOUFERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKtM1jQHrQMywE6JUgXcnaYNfJ Zb48KQ0UkLyBneJciXdhsKIZxptCgo1jyZVYu7J/QYBG6KK8quUWV26DVS4cJr11 wRf0Wy+wLb2HSQuIfRRBQ0u7W9AKpobsBj7Xwd1wb1ke6WCZnBuUx4/Z8Fd0bHQb SUqVgzLrUfTId0bzGeWJ1110ETIn/+zIkBV3yBSSTFKlyZWywIv5wGUw6aZ4hZIO H9XeHEWuNQ214AVxHDaD7NtC1L/L2B63zY5+y7u6CWjG7amsFXmZ09rufzAaHwac ra17jreh394iz5sNZHWZbiOdD1vqqD/v4engosObXg059cYFjZ+PM2pJKQnfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS3SucIVuPTmyiTAL9o+aNwq5rfQwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASORZHMHUlp7m 2Dmsg8TQZdDSjfpjm8mYH7IpOTr+H2IzWN1c+u61zNMl68DtF4jAbJA7D6CB+zDj wGQStBgUYU0N749UQIefQqdQOVd+4HMpv3fIZK9CB4ZxZb+wt7nbYoBbYr2qLaWp v8AnxhiCA1P1cisfkrKprgthf2cS2hHBMZ6VfDtr9rcamekqaxGahr9V+SST0vmd 2fGrSQLBrJMKJW+RDDNpgI86dwGzZjyw4VQ1dlWt2tj/Pv9be2l1tb53urHPujn/ wAXflQHsF/9NJSE0kAEgNniN7PJnAlZa8GSIOxqE32PCdGDqRd3BY3SATWtomCTw bzUjUZDaTQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:50 2026 by rpki-client