$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json) Hash identifier: WpCoEz5cZUC6Fe2qtfa3sNw9WRLnhpiu9tHScUVImOU= Subject key identifier: 15:06:A3:BE:00:AE:91:BD:02:82:FE:3F:B9:90:FA:E3:AB:FB:84:82 Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Certificate serial: 4495BAD59C62FB9B9A8177945A1A8AF8D5825157 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft Manifest number: 3C Signing time: Fri 29 May 2026 02:17:27 +0000 Manifest this update: Fri 29 May 2026 02:12:27 +0000 Manifest next update: Sat 30 May 2026 04:45:27 +0000 Files and hashes: 1: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=) 2: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=) 3: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=) 4: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: 5fasDCClzvZNB+xgkpTzd3mv0x0l6piqKPXuBb5xNTI=) 5: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=) 6: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=) 7: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=) 8: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 04:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:95:ba:d5:9c:62:fb:9b:9a:81:77:94:5a:1a:8a:f8:d5:82:51:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Validity Not Before: May 29 02:12:27 2026 GMT Not After : May 30 04:45:27 2026 GMT Subject: CN=1506A3BE00AE91BD0282FE3FB990FAE3ABFB8482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:90:75:65:87:3e:ad:ea:89:59:af:f9:74:07: 43:9e:49:3d:0d:3f:8b:59:86:54:73:02:32:26:f2: b1:86:6f:60:61:f4:41:cf:5b:f4:ea:b5:9a:00:03: c7:11:2e:79:57:7e:bc:fe:ff:26:5b:2a:26:82:32: 26:ae:d0:7e:cd:bd:77:1f:47:2a:44:28:39:3e:e7: 85:96:6d:b4:02:e1:f8:19:0c:ad:15:1e:64:6f:ae: 44:a1:b9:02:4f:cb:fb:96:b0:20:8e:c4:ee:ae:61: a7:84:ec:0a:0d:64:e1:5c:bc:2b:74:a5:57:ac:90: 83:b5:01:9b:c3:05:ee:2a:85:47:df:b0:9a:2a:05: 2e:65:02:70:86:01:9b:85:d4:6c:ca:54:a3:0a:71: ff:4c:af:5c:22:a9:91:5d:d1:50:3f:2d:cf:92:1f: f8:4f:3f:20:aa:f3:8e:55:67:d2:f7:6a:fa:2d:0d: ed:26:22:01:bf:8e:15:47:14:cc:83:c2:f8:a0:8c: 97:8f:06:ae:b6:32:e5:38:39:78:be:61:d9:75:95: 71:5f:40:e0:4a:f1:c2:2c:53:0e:01:53:80:25:b8: d9:1e:47:44:7e:b2:39:83:d4:89:43:f0:7e:52:17: 14:00:ec:6c:f7:a1:6e:96:ee:e2:de:0e:54:19:21: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:A3:BE:00:AE:91:BD:02:82:FE:3F:B9:90:FA:E3:AB:FB:84:82 X509v3 Authority Key Identifier: keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:07:d5:50:a6:bf:4d:7a:ed:c3:d5:0d:ac:d9:b3:7b:5a:30: 16:71:cb:f4:cd:ee:61:8b:9e:a8:5f:a0:da:b5:a4:de:2c:f1: b1:71:fd:27:d7:58:39:9c:83:a1:01:73:8c:89:d2:4e:82:d4: 50:6e:9e:a4:a7:c2:46:5e:93:58:23:d8:ca:71:5b:c6:7d:f5: 0a:6e:d4:3f:6f:5c:37:a7:c8:55:7c:6e:1a:7a:73:f5:d7:b9: 3a:35:17:7f:ad:c9:c4:a2:03:ae:04:b8:12:7a:73:a4:00:6f: cd:c8:a2:5c:b3:0f:18:4a:e8:77:32:a5:83:8d:8a:32:58:eb: 48:33:5a:fd:6f:02:e3:da:e9:5c:92:2b:0d:52:af:6a:60:c9: ae:99:cb:c2:64:d2:eb:71:83:39:81:ff:91:8a:57:19:97:42: 83:89:43:aa:26:08:32:8c:20:94:d7:45:d8:19:33:ac:cf:2f: 74:56:a1:91:66:64:ee:4d:b5:b7:6a:5a:f5:80:cf:7c:a5:23: d1:bc:db:32:77:72:ef:88:06:ed:91:17:95:a7:af:31:5e:c8: 9c:e3:81:3e:32:ad:c0:c7:47:dc:40:90:53:cd:86:8b:1d:c6: 58:96:5b:5b:ed:c4:1a:18:ec:0b:f6:eb:8a:ce:e9:14:80:2c: 0d:08:57:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURJW61Zxi+5uagXeUWhqK+NWCUVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgy RjlCQTZDRTAeFw0yNjA1MjkwMjEyMjdaFw0yNjA1MzAwNDQ1MjdaMDMxMTAvBgNV BAMTKDE1MDZBM0JFMDBBRTkxQkQwMjgyRkUzRkI5OTBGQUUzQUJGQjg0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkHVlhz6t6olZr/l0B0OeST0N P4tZhlRzAjIm8rGGb2Bh9EHPW/TqtZoAA8cRLnlXfrz+/yZbKiaCMiau0H7NvXcf RypEKDk+54WWbbQC4fgZDK0VHmRvrkShuQJPy/uWsCCOxO6uYaeE7AoNZOFcvCt0 pVeskIO1AZvDBe4qhUffsJoqBS5lAnCGAZuF1GzKVKMKcf9Mr1wiqZFd0VA/Lc+S H/hPPyCq845VZ9L3avotDe0mIgG/jhVHFMyDwvigjJePBq62MuU4OXi+Ydl1lXFf QOBK8cIsUw4BU4AluNkeR0R+sjmD1IlD8H5SFxQA7Gz3oW6W7uLeDlQZIV3rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFQajvgCukb0Cgv4/uZD646v7hIIwHwYDVR0j BBgwFoAUgzNVqqtHejodL2SZc7SDmC+bps4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjY1MTY1MC8wLzgzMzM1NUFBQUI0NzdBM0ExRDJGNjQ5OTczQjQ4 Mzk4MkY5QkE2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI2NTE2NTAvMC84MzMzNTVBQUFCNDc3 QTNBMUQyRjY0OTk3M0I0ODM5ODJGOUJBNkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgfVUKa/TXrt w9UNrNmze1owFnHL9M3uYYueqF+g2rWk3izxsXH9J9dYOZyDoQFzjInSToLUUG6e pKfCRl6TWCPYynFbxn31Cm7UP29cN6fIVXxuGnpz9de5OjUXf63JxKIDrgS4Enpz pABvzciiXLMPGErodzKlg42KMljrSDNa/W8C49rpXJIrDVKvamDJrpnLwmTS63GD OYH/kYpXGZdCg4lDqiYIMowglNdF2BkzrM8vdFahkWZk7k21t2pa9YDPfKUj0bzb Mndy74gG7ZEXlaevMV7InOOBPjKtwMdH3ECQU82Gix3GWJZbW+3EGhjsC/bris7p FIAsDQhXgA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:44 2026 by rpki-client