$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json) Hash identifier: LC+yms4uXhUQXF085LIw62pe6ZrqB8tLDnAgOaP48hg= Subject key identifier: 08:1B:84:92:EC:E8:DB:B4:DC:8A:42:3E:5F:59:A8:E1:8D:50:4B:73 Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Certificate serial: 29820B2CC4FAC777EEE251B0B9191ECD76045B55 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft Manifest number: 013D Signing time: Tue 13 Oct 2026 03:47:42 +0000 Manifest this update: Tue 13 Oct 2026 03:42:42 +0000 Manifest next update: Fri 16 Oct 2026 09:31:42 +0000 Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: lYuSvfqYYbZDjze+ir34/u4jFZPo1chP0agwAbH/spA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:82:0b:2c:c4:fa:c7:77:ee:e2:51:b0:b9:19:1e:cd:76:04:5b:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6 Validity Not Before: Oct 13 03:42:42 2026 GMT Not After : Oct 16 09:31:42 2026 GMT Subject: CN=081B8492ECE8DBB4DC8A423E5F59A8E18D504B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:8d:aa:87:0c:73:ce:b4:1a:9b:40:85:1b: 51:c4:b6:20:bf:5e:ab:c4:ae:9f:f7:a0:bb:ca:97: f6:eb:25:a2:c9:68:ae:a2:2b:a5:3b:b7:47:71:92: 17:f4:f9:e2:b9:88:a9:3f:b7:18:5d:95:bc:63:30: e6:f6:5b:83:53:0c:b4:56:5e:76:4f:a0:dd:53:f9: 25:d4:c3:dc:b1:04:81:70:fc:9e:e1:1b:d7:c5:f9: 26:3b:be:da:3b:ee:e0:de:9c:31:2f:7b:ff:ec:2c: a1:16:aa:6a:c6:91:22:3f:57:97:c9:be:7f:ab:76: a0:99:d1:5f:8e:f4:d1:e3:32:76:a6:a3:d8:82:85: 34:a4:f3:da:c3:92:c2:1a:c3:41:c9:c3:56:4e:a9: 7b:e5:d7:fe:de:48:39:11:e1:f3:47:9d:bf:69:ad: aa:85:28:9f:fd:5d:76:3f:be:c5:4f:a1:11:f2:97: ac:e1:7d:ce:98:f5:93:e8:09:27:1b:38:e9:50:9d: 73:46:7c:f2:db:d0:a9:89:e3:c7:dd:ea:9c:fd:2a: b6:15:c1:89:88:63:95:86:06:be:1c:b2:28:67:79: a3:26:30:ad:7d:29:b4:6f:d1:47:a4:ea:80:79:27: 20:1b:d5:42:4e:38:8e:fc:8e:f6:15:21:fe:61:8e: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1B:84:92:EC:E8:DB:B4:DC:8A:42:3E:5F:59:A8:E1:8D:50:4B:73 X509v3 Authority Key Identifier: keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:51:68:cf:ac:ab:64:e3:e9:30:3c:47:b7:90:6a:9c:be:09: f0:94:31:20:be:fa:3b:12:42:79:ce:ce:7b:a6:1f:61:75:5e: 9a:5d:80:ed:63:33:80:da:5a:0d:1d:15:35:74:78:51:78:59: 83:9d:85:c1:ae:95:3b:3a:82:7e:3b:b7:9c:f2:46:15:e3:ec: 37:b7:96:86:c9:97:1f:da:11:a9:32:02:95:7d:aa:46:9b:4e: b0:03:63:e4:56:30:8e:38:39:60:0c:8f:92:75:f6:9f:4e:ae: 6c:8b:88:df:49:dc:75:a9:04:c1:6e:11:1a:a4:77:c3:e4:7f: 8b:d2:b4:bc:b4:ec:f7:56:09:60:86:4c:54:2b:a9:90:74:5a: 8c:48:9f:fb:d7:2f:7d:b7:49:ca:7f:61:d4:23:4f:c6:97:2d: 21:e4:71:a4:af:6b:18:f1:2f:d0:0a:0f:09:7e:87:05:24:08: 88:b4:1b:3a:55:79:9f:8c:e3:9d:c6:33:4e:27:66:e7:5f:21: 4c:6a:1c:ec:93:5e:28:bb:4d:0e:e9:16:3f:24:1e:67:ca:6d: ce:2e:40:81:0b:76:c3:16:35:0d:d9:54:3d:67:72:3d:98:18: 6d:3a:3b:1c:ca:8c:4d:ec:b6:c3:c1:dd:56:f7:70:6b:85:33: 25:d1:d4:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKYILLMT6x3fu4lGwuRkezXYEW1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNF Njg1QkFBNjAeFw0yNjEwMTMwMzQyNDJaFw0yNjEwMTYwOTMxNDJaMDMxMTAvBgNV BAMTKDA4MUI4NDkyRUNFOERCQjREQzhBNDIzRTVGNTlBOEUxOEQ1MDRCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDax42qhwxzzrQam0CFG1HEtiC/ XqvErp/3oLvKl/brJaLJaK6iK6U7t0dxkhf0+eK5iKk/txhdlbxjMOb2W4NTDLRW XnZPoN1T+SXUw9yxBIFw/J7hG9fF+SY7vto77uDenDEve//sLKEWqmrGkSI/V5fJ vn+rdqCZ0V+O9NHjMnamo9iChTSk89rDksIaw0HJw1ZOqXvl1/7eSDkR4fNHnb9p raqFKJ/9XXY/vsVPoRHyl6zhfc6Y9ZPoCScbOOlQnXNGfPLb0KmJ48fd6pz9KrYV wYmIY5WGBr4csihneaMmMK19KbRv0Uek6oB5JyAb1UJOOI78jvYVIf5hjt0xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCBuEkuzo27TcikI+X1mo4Y1QS3MwHwYDVR0j BBgwFoAUgzKwmjheVBwWauYujyoRk+aFuqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8wLzgzMzJCMDlBMzg1RTU0MUMxNjZBRTYyRThGMkEx MTkzRTY4NUJBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMkIwOUEzODVFNTQxQzE2NkFFNjJFOEYyQTExOTNFNjg1QkFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMC84MzMyQjA5QTM4NUU1 NDFDMTY2QUU2MkU4RjJBMTE5M0U2ODVCQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlFoz6yrZOPp MDxHt5BqnL4J8JQxIL76OxJCec7Oe6YfYXVeml2A7WMzgNpaDR0VNXR4UXhZg52F wa6VOzqCfju3nPJGFePsN7eWhsmXH9oRqTIClX2qRptOsANj5FYwjjg5YAyPknX2 n06ubIuI30ncdakEwW4RGqR3w+R/i9K0vLTs91YJYIZMVCupkHRajEif+9cvfbdJ yn9h1CNPxpctIeRxpK9rGPEv0AoPCX6HBSQIiLQbOlV5n4zjncYzTidm518hTGoc 7JNeKLtNDukWPyQeZ8ptzi5AgQt2wxY1DdlUPWdyPZgYbTo7HMqMTey2w8HdVvdw a4UzJdHUKg== -----END CERTIFICATE-----Generated at Wed Oct 14 18:51:10 2026 by rpki-client