$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft File: EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft (raw, json) Hash identifier: xXj+ywAUNwjCOPuDQGGS1fAuekrunKQvAYn75km4ZIU= Subject key identifier: 84:E1:32:75:47:BB:42:FF:73:E1:4C:5E:8B:89:1D:22:F4:38:87:7B Authority key identifier: EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF Certificate issuer: /CN=EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF Certificate serial: 2DFA87FAB12A10D99AF106611E04E6E695116DDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft Manifest number: 0C Signing time: Thu 15 Oct 2026 08:46:34 +0000 Manifest this update: Thu 15 Oct 2026 08:41:34 +0000 Manifest next update: Sun 18 Oct 2026 18:40:34 +0000 Files and hashes: 1: EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl (hash: J3kgawJRioK6+aRuxm7K3Q+LIATu1If7LKjoYCQbFtY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:87:fa:b1:2a:10:d9:9a:f1:06:61:1e:04:e6:e6:95:11:6d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF Validity Not Before: Oct 15 08:41:34 2026 GMT Not After : Oct 18 18:40:34 2026 GMT Subject: CN=84E1327547BB42FF73E14C5E8B891D22F438877B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:6f:ca:57:66:30:a4:05:7e:f7:c5:aa:d4: f8:1a:29:b9:89:9c:1f:53:e6:b9:d2:17:0a:84:b9: 79:0a:05:0c:85:59:17:ff:ac:77:9e:9c:d2:18:4f: 16:68:21:57:b2:6b:38:67:27:49:c1:f9:54:d3:a4: 77:18:ac:2d:c2:93:47:83:88:56:6d:8a:59:d6:2e: 48:2e:9e:5b:2f:01:0b:5b:e5:d7:58:a8:70:9d:3a: 5f:3c:ba:b7:9e:5a:a6:14:6b:b6:f8:d8:c5:21:df: b5:2a:70:87:68:2a:a4:e2:4c:62:29:3a:d6:30:bf: 80:af:f9:78:a2:b6:21:8e:00:2c:8d:d2:26:c4:20: 21:75:1f:9d:7f:1b:fc:dc:cb:a5:60:77:41:34:31: 81:43:05:f3:00:02:a5:94:c3:ec:54:99:de:ea:e9: f9:3c:2d:fb:99:c1:c5:7e:d9:bf:68:11:26:2e:70: 71:89:ea:b6:47:11:b9:e8:49:43:3e:44:43:92:e8: f0:8d:3f:81:57:dc:06:63:ec:e4:84:12:97:56:97: b0:6d:ac:6c:53:1d:f4:54:ed:eb:43:26:2a:d8:6b: 29:e0:a9:cd:a7:07:f8:79:bc:c5:2b:f8:ac:88:62: d5:9c:b3:e3:c6:75:73:c1:12:94:d4:3f:8b:1e:8d: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E1:32:75:47:BB:42:FF:73:E1:4C:5E:8B:89:1D:22:F4:38:87:7B X509v3 Authority Key Identifier: keyid:EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:ee:60:ef:34:f1:20:a8:7d:ae:fd:d5:f8:df:26:51:24: ab:f4:d5:d0:cf:84:8d:68:97:d1:54:69:1a:ec:ce:19:65:31: 67:85:20:3c:52:69:c2:00:23:71:04:4f:a7:14:8d:24:fc:5c: 3f:8d:ce:03:68:0a:7a:4c:a7:78:1e:e9:9d:a3:4b:cc:91:c2: 7d:11:39:e2:65:f8:75:1a:53:69:cc:b0:9a:91:e4:14:5a:88: 4a:0d:05:1a:f1:fe:cc:47:10:e9:6b:62:43:9f:f0:a2:00:84: e2:2f:c4:e0:26:43:49:31:a0:e5:ba:86:3a:53:58:e0:9a:09: 38:31:38:7c:33:af:3d:61:d8:43:59:fa:9a:57:fa:bb:3c:04: 06:3f:dd:02:78:45:c2:6b:be:89:83:cc:51:9e:d6:62:4d:cf: e6:f5:23:f6:8c:fb:d0:4a:16:72:02:bd:dc:9a:4d:ac:98:b3: 23:e2:5a:03:99:c4:cc:13:8a:0c:54:a2:e9:8b:03:5f:5a:52: d0:97:5c:48:bc:91:b5:61:ba:ff:5e:91:f6:7f:39:ef:68:06: 42:75:45:f3:f9:f6:d3:de:c7:12:e3:42:fe:bc:0d:08:6f:e4: 5a:53:91:74:eb:2a:05:82:b0:1f:86:ab:36:af:64:2d:30:b9: 5b:30:b8:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULfqH+rEqENma8QZhHgTm5pURbdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzM0Y4NzJEOUJDNTg0NUQ3OUZDNUFDQkNGOUU4MEM1 M0IzNzdFRjAeFw0yNjEwMTUwODQxMzRaFw0yNjEwMTgxODQwMzRaMDMxMTAvBgNV BAMTKDg0RTEzMjc1NDdCQjQyRkY3M0UxNEM1RThCODkxRDIyRjQzODg3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQIm/KV2YwpAV+98Wq1PgaKbmJ nB9T5rnSFwqEuXkKBQyFWRf/rHeenNIYTxZoIVeyazhnJ0nB+VTTpHcYrC3Ck0eD iFZtilnWLkgunlsvAQtb5ddYqHCdOl88ureeWqYUa7b42MUh37UqcIdoKqTiTGIp OtYwv4Cv+XiitiGOACyN0ibEICF1H51/G/zcy6Vgd0E0MYFDBfMAAqWUw+xUmd7q 6fk8LfuZwcV+2b9oESYucHGJ6rZHEbnoSUM+REOS6PCNP4FX3AZj7OSEEpdWl7Bt rGxTHfRU7etDJirYayngqc2nB/h5vMUr+KyIYtWcs+PGdXPBEpTUP4sejSQ5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhOEydUe7Qv9z4Uxei4kdIvQ4h3swHwYDVR0j BBgwFoAU7DP4ctm8WEXXn8WsvPnoDFOzd+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 Mzk1ODAwMjkwMjk1ODEyMy8wL0VDMzNGODcyRDlCQzU4NDVENzlGQzVBQ0JDRjlF ODBDNTNCMzc3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUMzM0Y4NzJEOUJDNTg0NUQ3OUZDNUFDQkNGOUU4MEM1M0IzNzdFRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTM5NTgwMDI5MDI5NTgxMjMvMC9FQzMzRjg3MkQ5QkM1 ODQ1RDc5RkM1QUNCQ0Y5RTgwQzUzQjM3N0VGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmnuYO808SCo fa791fjfJlEkq/TV0M+EjWiX0VRpGuzOGWUxZ4UgPFJpwgAjcQRPpxSNJPxcP43O A2gKekyneB7pnaNLzJHCfRE54mX4dRpTacywmpHkFFqISg0FGvH+zEcQ6WtiQ5/w ogCE4i/E4CZDSTGg5bqGOlNY4JoJODE4fDOvPWHYQ1n6mlf6uzwEBj/dAnhFwmu+ iYPMUZ7WYk3P5vUj9oz70EoWcgK93JpNrJizI+JaA5nEzBOKDFSi6YsDX1pS0Jdc SLyRtWG6/16R9n8572gGQnVF8/n2097HEuNC/rwNCG/kWlORdOsqBYKwH4arNq9k LTC5WzC4/w== -----END CERTIFICATE-----Generated at Thu Oct 15 11:54:56 2026 by rpki-client