$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: BQO8gUNXQQ8/DuQmvIdOCdJkS0nYN+2pa5FUyt2iuy4= Subject key identifier: 8A:A9:FB:8D:EE:54:EB:1F:57:57:20:2F:B7:3F:02:DC:0F:F7:8F:B7 Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 1031724DE86EF2A681A1543C0522348380F5C133 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: 45 Signing time: Fri 17 Apr 2026 21:29:48 +0000 Manifest this update: Fri 17 Apr 2026 21:24:48 +0000 Manifest next update: Sun 19 Apr 2026 00:56:48 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: otgG9EqTw/PSxGisC7+r4yfxY0zrH6ObXsWLLoevyuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:31:72:4d:e8:6e:f2:a6:81:a1:54:3c:05:22:34:83:80:f5:c1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: Apr 17 21:24:48 2026 GMT Not After : Apr 19 00:56:48 2026 GMT Subject: CN=8AA9FB8DEE54EB1F5757202FB73F02DC0FF78FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:94:dc:5f:a5:5b:31:73:4c:e3:0d:d8:a7: ee:0d:86:b9:63:d7:0f:b1:ca:d4:45:cd:15:16:96: 40:6c:08:dc:6e:f9:6f:7c:85:85:04:0a:d4:4b:15: 9c:fd:97:70:37:2e:ed:79:91:23:cb:2a:aa:97:8b: db:f2:9b:a6:f0:80:b5:f9:da:09:70:bb:21:13:dc: c0:5a:9a:53:88:68:22:55:1c:39:3d:1c:e0:72:97: 7e:8b:6b:05:61:d4:c1:00:f2:74:74:d4:93:92:a9: f7:46:b1:c8:09:fe:dc:57:3f:b6:dd:d7:49:f4:bd: be:a9:27:50:a3:38:1d:c4:bd:7e:01:31:bd:4c:ea: f2:89:13:b1:54:13:ae:c5:ee:53:b2:59:85:cf:56: 1f:df:0b:a8:bb:6e:57:44:54:56:c7:9b:3c:43:8b: 43:fa:fb:c3:82:1a:6e:50:6c:64:65:a0:1f:1d:a7: 7e:84:de:ad:e0:18:c8:20:c9:e7:0b:a6:f3:e6:02: 23:d0:8b:b2:60:cc:4b:10:bd:27:3d:9b:7c:84:df: 41:e6:70:d6:bb:4c:17:e7:77:24:f5:68:cd:7e:ce: aa:e0:1f:23:8e:6f:86:98:36:0e:00:80:1e:83:a0: 22:ad:59:7e:67:f7:1a:29:42:4b:bb:70:ba:75:5b: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:FB:8D:EE:54:EB:1F:57:57:20:2F:B7:3F:02:DC:0F:F7:8F:B7 X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:50:e2:ed:7c:ff:84:c8:cd:b8:b9:36:db:26:c4:24:88:6f: 3f:4b:d1:0d:7d:b5:fb:5f:9e:bf:60:aa:2f:75:5c:ec:6b:fe: 5a:db:b5:74:8d:0c:f1:68:ee:08:c9:10:e5:21:4e:ea:f1:8b: 85:d9:1c:a6:0c:1f:8d:24:0f:a9:0b:22:60:71:24:cc:f7:b3: c1:74:fd:9f:eb:c4:d8:89:c9:4a:33:86:bb:52:55:4e:1a:e0: 5f:56:3f:d8:de:9d:f3:65:84:af:8f:a5:6f:40:4f:fd:65:45: ac:91:1a:68:9a:cf:70:a4:b8:c9:47:f5:70:f7:af:01:87:10: ba:45:32:9c:6f:de:bf:c0:17:b6:ea:01:e9:2e:2a:26:59:ae: a6:83:76:57:11:92:ee:e2:57:86:17:e8:5b:7b:21:bb:eb:88: 0c:77:46:f8:22:ee:c7:e2:20:86:62:62:f4:76:26:67:08:f0: 99:f3:28:ff:7b:bf:11:18:22:b2:ca:19:a6:13:c7:7f:fb:cb: 87:62:ff:a3:55:25:10:bf:bf:e6:44:6e:27:39:f8:d3:0c:f4: c1:1c:2d:01:6c:38:04:93:b0:8c:81:c2:d6:68:2e:1f:b2:97: 9e:f2:50:9a:9f:cc:02:21:e4:b2:df:9d:3e:be:34:fd:66:40: 03:8c:8b:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEDFyTehu8qaBoVQ8BSI0g4D1wTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjA0MTcyMTI0NDhaFw0yNjA0MTkwMDU2NDhaMDMxMTAvBgNV BAMTKDhBQTlGQjhERUU1NEVCMUY1NzU3MjAyRkI3M0YwMkRDMEZGNzhGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFX5TcX6VbMXNM4w3Yp+4Nhrlj 1w+xytRFzRUWlkBsCNxu+W98hYUECtRLFZz9l3A3Lu15kSPLKqqXi9vym6bwgLX5 2glwuyET3MBamlOIaCJVHDk9HOByl36LawVh1MEA8nR01JOSqfdGscgJ/txXP7bd 10n0vb6pJ1CjOB3EvX4BMb1M6vKJE7FUE67F7lOyWYXPVh/fC6i7bldEVFbHmzxD i0P6+8OCGm5QbGRloB8dp36E3q3gGMggyecLpvPmAiPQi7JgzEsQvSc9m3yE30Hm cNa7TBfndyT1aM1+zqrgHyOOb4aYNg4AgB6DoCKtWX5n9xopQku7cLp1W2CfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiqn7je5U6x9XVyAvtz8C3A/3j7cwHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv1Di7Xz/hMjN uLk22ybEJIhvP0vRDX21+1+ev2CqL3Vc7Gv+Wtu1dI0M8WjuCMkQ5SFO6vGLhdkc pgwfjSQPqQsiYHEkzPezwXT9n+vE2InJSjOGu1JVThrgX1Y/2N6d82WEr4+lb0BP /WVFrJEaaJrPcKS4yUf1cPevAYcQukUynG/ev8AXtuoB6S4qJlmupoN2VxGS7uJX hhfoW3shu+uIDHdG+CLux+IghmJi9HYmZwjwmfMo/3u/ERgissoZphPHf/vLh2L/ o1UlEL+/5kRuJzn40wz0wRwtAWw4BJOwjIHC1mguH7KXnvJQmp/MAiHkst+dPr40 /WZAA4yLGQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:25 2026 by rpki-client