$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: vcjAettmfWydRHW8ZCDkoR1sckxFDYermG6YaMXiYSg= Subject key identifier: 37:96:0B:05:0A:0B:4B:2E:38:1E:A8:A4:9E:0E:5D:A6:5A:88:22:54 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 35F9F3F3AB86E351CE730FA5352FF7E65335977F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 88 Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 12:03:54 +0000 Files and hashes: 1: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) 2: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: UEW+V/METiPZ/NUeoyTRWSW2lKcv5Att1qYK29iarAQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f9:f3:f3:ab:86:e3:51:ce:73:0f:a5:35:2f:f7:e6:53:35:97:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 12:03:54 2026 GMT Subject: CN=37960B050A0B4B2E381EA8A49E0E5DA65A882254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:41:76:d6:af:99:4f:44:36:34:c7:e5:2f: 09:d7:02:b8:82:37:09:7d:d1:8a:f4:9b:8e:35:d4: 39:47:e6:fc:98:c3:bd:0e:91:7c:df:73:23:c3:3d: 6f:b8:9c:70:6f:71:8b:09:04:28:4d:be:b8:60:16: 55:09:f8:1c:b6:a6:42:7b:f3:57:a8:ff:61:1a:b4: 26:a3:8d:4b:93:9c:d8:24:2d:ab:be:8c:1e:c5:01: 95:33:2f:1a:78:63:56:24:bd:8c:14:e3:91:21:a3: 13:50:3f:5e:fb:bd:b0:fb:f6:bf:b4:a1:2e:3c:3f: 02:09:3f:7a:ba:f4:05:88:14:29:48:35:7f:a9:1d: e2:c0:3d:98:1e:fe:7f:a3:df:70:42:63:94:3f:40: b7:9c:ca:69:dc:25:51:d5:e0:34:ee:98:69:e7:10: 9e:31:c0:a0:ad:d0:7e:bd:9c:1b:aa:51:6d:7d:66: d6:40:60:9c:af:99:b8:77:80:05:71:d7:23:50:e3: 7b:74:78:21:82:fe:8f:32:24:cf:c9:ea:d2:e1:77: f6:b3:fa:9b:60:30:9d:c4:b1:09:2e:a2:d8:20:cc: 4e:e5:29:b2:0a:9a:1c:ed:6a:a8:1f:b8:16:82:9c: 66:27:85:ea:94:91:0b:72:6f:ae:cd:4d:e9:e3:c8: e6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:96:0B:05:0A:0B:4B:2E:38:1E:A8:A4:9E:0E:5D:A6:5A:88:22:54 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:48:87:5f:50:71:1d:4d:71:06:41:3e:04:1c:89:d9:fc:13: 0a:f4:5e:8c:6d:6c:da:db:a6:67:fb:11:98:df:4b:73:a9:75: 00:83:a5:41:3b:47:97:ac:f7:73:0a:26:b0:91:8a:f2:a2:15: 08:4f:03:52:96:00:c6:e4:8e:82:fc:53:91:2a:4a:c6:42:66: 0a:38:e4:2c:a0:be:5b:74:1b:da:a9:a8:b1:1d:cc:97:01:6a: 22:f1:7f:77:79:9d:e3:79:cd:42:be:01:b8:bf:cb:64:83:b6: b6:26:6b:8b:08:fc:69:26:99:70:39:d6:ec:6d:a6:0d:ec:c2: 79:e7:53:22:a6:44:00:42:c6:9b:50:45:ad:fe:25:f1:5a:78: 86:9f:8d:da:70:5b:2d:3e:fa:cf:b6:b0:dc:68:b5:0d:46:e4: 36:7f:69:2a:2c:c7:5a:c8:3c:5c:55:44:e6:94:4d:ca:56:3a: 98:59:4a:b1:a5:de:a2:db:47:24:49:1a:88:33:95:0c:40:6a: 1b:e5:df:e5:24:e2:cd:7b:6f:13:71:5b:14:54:63:ba:7e:35: 71:9d:ac:56:e9:33:62:ab:13:eb:12:cb:3a:c4:8b:34:49:1d: 7a:b9:80:7a:36:10:4f:fa:41:86:5c:04:ed:14:53:ad:52:bf: 8c:a2:ef:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNfnz86uG41HOcw+lNS/35lM1l38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjA4MjgwNjQyNTRaFw0yNjA4MzExMjAzNTRaMDMxMTAvBgNV BAMTKDM3OTYwQjA1MEEwQjRCMkUzODFFQThBNDlFMEU1REE2NUE4ODIyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibkF21q+ZT0Q2NMflLwnXAriC Nwl90Yr0m4411DlH5vyYw70OkXzfcyPDPW+4nHBvcYsJBChNvrhgFlUJ+By2pkJ7 81eo/2EatCajjUuTnNgkLau+jB7FAZUzLxp4Y1YkvYwU45EhoxNQP177vbD79r+0 oS48PwIJP3q69AWIFClINX+pHeLAPZge/n+j33BCY5Q/QLecymncJVHV4DTumGnn EJ4xwKCt0H69nBuqUW19ZtZAYJyvmbh3gAVx1yNQ43t0eCGC/o8yJM/J6tLhd/az +ptgMJ3EsQkuotggzE7lKbIKmhztaqgfuBaCnGYnheqUkQtyb67NTenjyOYrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN5YLBQoLSy44Hqikng5dplqIIlQwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0iHX1BxHU1x BkE+BByJ2fwTCvRejG1s2tumZ/sRmN9Lc6l1AIOlQTtHl6z3cwomsJGK8qIVCE8D UpYAxuSOgvxTkSpKxkJmCjjkLKC+W3Qb2qmosR3MlwFqIvF/d3md43nNQr4BuL/L ZIO2tiZriwj8aSaZcDnW7G2mDezCeedTIqZEAELGm1BFrf4l8Vp4hp+N2nBbLT76 z7aw3Gi1DUbkNn9pKizHWsg8XFVE5pRNylY6mFlKsaXeottHJEkaiDOVDEBqG+Xf 5STizXtvE3FbFFRjun41cZ2sVukzYqsT6xLLOsSLNEkdermAejYQT/pBhlwE7RRT rVK/jKLv4Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:58 2026 by rpki-client