$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft (raw, json) Hash identifier: 1xN/cRhr/rgBIwGWBhJCsdFnoGM3srQXgEQQPQB8MNw= Subject key identifier: 5D:EF:DC:67:D7:15:39:CE:D5:07:8A:10:C6:67:5F:C6:37:C5:54:44 Authority key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Certificate issuer: /CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Certificate serial: 012902DF5E522AA0F5C13D83DBAFFBCC222437CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft Manifest number: 0D Signing time: Fri 29 May 2026 03:57:31 +0000 Manifest this update: Fri 29 May 2026 03:52:31 +0000 Manifest next update: Sat 30 May 2026 07:55:31 +0000 Files and hashes: 1: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl (hash: AQe83R3eXWbA5p46qF5fAwyDaEOYrxA+nsEPrqO3J78=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:29:02:df:5e:52:2a:a0:f5:c1:3d:83:db:af:fb:cc:22:24:37:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Validity Not Before: May 29 03:52:31 2026 GMT Not After : May 30 07:55:31 2026 GMT Subject: CN=5DEFDC67D71539CED5078A10C6675FC637C55444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:8a:9a:c8:dc:a5:ed:23:63:e5:21:c4:7f: 9d:77:fd:ea:8d:dc:7b:2c:8e:7a:66:b2:7b:a7:1b: 1f:25:df:33:da:6b:68:b8:c3:c2:d4:45:61:ff:b8: 4a:b5:bc:9b:89:2f:39:da:6f:ca:6e:d4:c5:9a:d4: 13:68:91:fc:5b:12:79:82:24:1e:a5:0d:c0:24:fc: a0:25:4e:93:77:0d:69:10:59:fb:d3:27:6a:ba:fc: 8d:2c:d0:01:c3:8b:3b:97:e8:31:cb:7a:09:1d:f4: 82:50:99:f9:7a:ff:ab:d1:74:a2:3e:aa:03:75:21: c3:26:8c:04:21:13:8c:9e:d6:22:ef:48:ea:3b:2f: 7f:b8:f0:fd:43:00:89:02:54:4d:6c:de:97:75:a6: 17:b6:cb:77:de:5e:07:68:d9:6b:f8:ed:34:c8:e2: 9a:38:48:d9:76:94:ee:0b:4f:45:55:d7:cc:3d:cc: 6b:b0:9f:ec:ee:d5:98:ff:43:36:73:65:81:1e:25: 27:55:44:f7:2d:eb:56:ed:37:dd:e2:ff:79:ec:b5: 51:85:53:65:b5:5d:11:99:76:a3:fb:48:3d:c6:50: c5:cf:3a:91:54:03:e5:d1:17:52:11:2a:5a:a4:83: bb:b4:bd:b8:2e:f0:86:fb:8b:ca:0a:7e:29:bc:c0: 23:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:DC:67:D7:15:39:CE:D5:07:8A:10:C6:67:5F:C6:37:C5:54:44 X509v3 Authority Key Identifier: keyid:33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:01:9f:7e:16:95:1b:5c:f2:9d:84:2e:fa:7d:5f:c4:44:50: 76:ff:5e:39:9f:60:0a:19:a2:de:9d:9d:75:75:d3:bd:e6:f4: c8:74:28:95:70:50:72:59:b3:df:82:1c:8f:5a:32:d5:59:14: c3:c0:7a:46:76:ad:7e:7f:00:7b:a3:0b:f9:09:6f:2d:46:e9: 78:32:05:54:55:95:60:42:64:b7:d8:fe:8c:3d:ff:6d:80:34: ba:6b:cc:02:aa:a7:1d:32:24:4d:1e:d3:a2:f0:69:73:00:85: e9:90:02:ff:ae:54:18:a8:95:42:4e:ee:99:67:27:77:5b:b7: 57:e2:e1:e0:42:91:33:99:99:1f:f1:de:05:72:06:21:81:e5: 80:55:f0:bd:34:d0:b0:2d:6c:b1:ec:a6:d8:b5:d5:2b:0d:83: ce:93:ce:ef:cb:8e:93:f8:1d:29:0e:ad:65:b8:98:c3:f4:0f: 85:f6:01:6e:72:a3:33:80:30:e2:09:db:13:3d:82:f3:77:21: c0:0b:23:da:a8:86:93:1a:50:12:3b:c0:19:57:24:36:95:a0: 7e:70:27:a1:c9:a8:2c:67:ff:b0:9e:4c:29:a9:f7:a1:1f:03: ba:96:48:e9:ad:d3:93:34:65:30:85:82:6a:47:f8:11:2c:88: 60:98:da:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUASkC315SKqD1wT2D26/7zCIkN88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURB MzNCNEMxODAeFw0yNjA1MjkwMzUyMzFaFw0yNjA1MzAwNzU1MzFaMDMxMTAvBgNV BAMTKDVERUZEQzY3RDcxNTM5Q0VENTA3OEExMEM2Njc1RkM2MzdDNTU0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwM4qayNyl7SNj5SHEf513/eqN 3HssjnpmsnunGx8l3zPaa2i4w8LURWH/uEq1vJuJLznab8pu1MWa1BNokfxbEnmC JB6lDcAk/KAlTpN3DWkQWfvTJ2q6/I0s0AHDizuX6DHLegkd9IJQmfl6/6vRdKI+ qgN1IcMmjAQhE4ye1iLvSOo7L3+48P1DAIkCVE1s3pd1phe2y3feXgdo2Wv47TTI 4po4SNl2lO4LT0VV18w9zGuwn+zu1Zj/QzZzZYEeJSdVRPct61btN93i/3nstVGF U2W1XRGZdqP7SD3GUMXPOpFUA+XRF1IRKlqkg7u0vbgu8Ib7i8oKfim8wCOVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXe/cZ9cVOc7VB4oQxmdfxjfFVEQwHwYDVR0j BBgwFoAUMzJpcq3v8psfX6FJJ8vr7aM7TBgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTMwMzU0NTgwNDM1NzY0OS8wLzMzMzI2OTcyQURFRkYyOUIxRjVGQTE0OTI3Q0JF QkVEQTMzQjRDMTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkzMDM1NDU4MDQzNTc2NDkvMC8zMzMyNjk3MkFERUZG MjlCMUY1RkExNDkyN0NCRUJFREEzM0I0QzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAGffhaVG1zy nYQu+n1fxERQdv9eOZ9gChmi3p2ddXXTveb0yHQolXBQclmz34Icj1oy1VkUw8B6 Rnatfn8Ae6ML+QlvLUbpeDIFVFWVYEJkt9j+jD3/bYA0umvMAqqnHTIkTR7TovBp cwCF6ZAC/65UGKiVQk7umWcnd1u3V+Lh4EKRM5mZH/HeBXIGIYHlgFXwvTTQsC1s seym2LXVKw2DzpPO78uOk/gdKQ6tZbiYw/QPhfYBbnKjM4Aw4gnbEz2C83chwAsj 2qiGkxpQEjvAGVckNpWgfnAnocmoLGf/sJ5MKan3oR8DupZI6a3TkzRlMIWCakf4 ESyIYJjavQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client