$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: AevGavrB186wMG2BMFuvxY9v0IHfk0K+mqk3+LSUchY= Subject key identifier: 15:E0:88:56:A2:0F:77:24:1B:BD:0E:5A:CE:DE:08:4E:1E:71:78:63 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 2C900128CEFDDA5A0BC720C63406A0108622D23E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 9C Signing time: Mon 12 Oct 2026 10:21:51 +0000 Manifest this update: Mon 12 Oct 2026 10:16:51 +0000 Manifest next update: Thu 15 Oct 2026 21:31:51 +0000 Files and hashes: 1: 3130332e3134392e3234342e302f32332d3233203d3e20313334373630.roa (hash: 0zkN+f0JOwqtezRzLLt6DnniDUvLcCSNJS4SvCiXzgc=) 2: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: LdvijX7ndoWOI+875OSaO3kLJsFB+Ab92Q/36sLBF8Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:90:01:28:ce:fd:da:5a:0b:c7:20:c6:34:06:a0:10:86:22:d2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: Oct 12 10:16:51 2026 GMT Not After : Oct 15 21:31:51 2026 GMT Subject: CN=15E08856A20F77241BBD0E5ACEDE084E1E717863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:63:d8:b5:d1:72:96:05:c4:fd:54:d8:a2: 74:ef:76:53:e0:26:3c:e2:19:b7:c1:7c:ca:8b:64: 57:22:e6:1c:21:03:56:de:1c:43:f4:eb:02:17:be: 88:d3:1d:79:b4:a9:10:1b:08:c1:2a:f7:c7:2d:94: cb:16:de:e4:8e:66:c7:52:b1:98:c4:7a:76:d7:48: 1d:f9:dd:03:7c:a4:28:ab:ae:b5:b0:82:a2:e3:04: 23:9c:ac:4c:dd:50:51:f3:f6:ae:27:75:51:de:ec: 98:5a:45:4d:d9:80:4a:5b:62:1e:72:32:f1:98:df: 0d:f0:96:7d:1c:2f:89:26:73:b7:65:61:80:59:58: 63:a3:fa:45:b1:de:06:27:32:27:e2:a9:6c:83:1a: 4f:ed:b5:28:7c:6f:8c:f8:f6:6b:d6:49:b5:e1:fd: 11:3c:0e:e6:26:52:9b:19:84:cf:73:ae:e1:35:5d: 80:f0:3a:52:b0:5f:3d:69:6d:14:61:76:36:7d:55: 13:b6:ca:0b:5f:31:35:93:33:99:87:89:2f:85:6e: 5e:32:95:ab:cc:5f:37:9a:aa:da:50:73:b5:8e:c6: ec:22:78:fa:c1:91:20:f2:2d:06:cc:cb:2c:79:65: 35:fc:99:c9:87:2f:0d:b5:d6:b9:b8:b7:cc:c5:81: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E0:88:56:A2:0F:77:24:1B:BD:0E:5A:CE:DE:08:4E:1E:71:78:63 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:88:fb:80:12:27:5a:c9:96:02:bc:be:3b:e2:6a:16:b9:e8: 73:97:a0:ac:d2:38:3c:51:08:5a:ff:fb:bb:ab:ec:64:34:b2: 4f:39:97:11:49:65:b7:89:ea:79:4f:d9:68:2b:ac:f4:87:aa: ff:89:69:30:57:da:21:5b:7b:82:4f:25:45:2a:db:1e:34:7e: 62:b7:72:b0:38:09:11:c7:8a:66:d8:20:ca:05:ef:6c:27:6f: 92:f5:a8:d4:ff:f8:5a:2c:c0:0c:56:6d:61:f8:34:3c:05:2e: cd:af:15:96:d2:b3:eb:55:71:53:7f:24:97:6f:92:6d:88:a7: c5:29:40:3e:cd:a7:27:ae:61:ca:5c:00:57:8e:42:41:b9:c7: f3:06:02:84:b7:39:43:58:48:f4:14:99:ff:f2:36:8c:63:fa: 2a:8d:89:d5:c9:13:de:c4:7b:a2:f2:cb:e6:15:91:8a:ca:cc: fd:86:45:c8:fb:4a:e4:5b:87:32:84:21:fe:a0:fd:64:30:8c: 93:01:d2:f8:e7:50:b4:df:7d:ef:ce:a0:fc:51:7f:13:72:73: ac:56:66:2a:ff:38:e8:f1:67:dd:9b:6a:8d:f3:ad:70:d0:69: 7f:de:76:53:fe:7e:5f:a3:c1:e0:a9:d4:a0:aa:65:54:34:56: 98:5c:40:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULJABKM792loLxyDGNAagEIYi0j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjEwMTIxMDE2NTFaFw0yNjEwMTUyMTMxNTFaMDMxMTAvBgNV BAMTKDE1RTA4ODU2QTIwRjc3MjQxQkJEMEU1QUNFREUwODRFMUU3MTc4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYWPYtdFylgXE/VTYonTvdlPg JjziGbfBfMqLZFci5hwhA1beHEP06wIXvojTHXm0qRAbCMEq98ctlMsW3uSOZsdS sZjEenbXSB353QN8pCirrrWwgqLjBCOcrEzdUFHz9q4ndVHe7JhaRU3ZgEpbYh5y MvGY3w3wln0cL4kmc7dlYYBZWGOj+kWx3gYnMifiqWyDGk/ttSh8b4z49mvWSbXh /RE8DuYmUpsZhM9zruE1XYDwOlKwXz1pbRRhdjZ9VRO2ygtfMTWTM5mHiS+Fbl4y lavMXzeaqtpQc7WOxuwiePrBkSDyLQbMyyx5ZTX8mcmHLw211rm4t8zFgSvHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFeCIVqIPdyQbvQ5azt4ITh5xeGMwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoj7gBInWsmW Ary+O+JqFrnoc5egrNI4PFEIWv/7u6vsZDSyTzmXEUllt4nqeU/ZaCus9Ieq/4lp MFfaIVt7gk8lRSrbHjR+YrdysDgJEceKZtggygXvbCdvkvWo1P/4WizADFZtYfg0 PAUuza8VltKz61VxU38kl2+SbYinxSlAPs2nJ65hylwAV45CQbnH8wYChLc5Q1hI 9BSZ//I2jGP6Ko2J1ckT3sR7ovLL5hWRisrM/YZFyPtK5FuHMoQh/qD9ZDCMkwHS +OdQtN99786g/FF/E3JzrFZmKv846PFn3ZtqjfOtcNBpf952U/5+X6PB4KnUoKpl VDRWmFxA/Q== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:50 2026 by rpki-client