$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: X3RksusYpGRHJXsAnDVWV/nrIaF6Sj6VBrM047wp1oI= Subject key identifier: A5:33:5C:FF:95:A4:E8:00:C4:99:34:47:54:98:B0:AE:1D:14:51:D6 Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 5CD58A675A3A94612A0F53517EB3EEDDE50F8294 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: 07 Signing time: Mon 02 Mar 2026 15:33:17 +0000 Manifest this update: Mon 02 Mar 2026 15:28:17 +0000 Manifest next update: Tue 03 Mar 2026 16:37:17 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: 7sSQ7BnMXTLK3ZnMGWfWffM5y7Xm1ELT7zw9f6XfszA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:8a:67:5a:3a:94:61:2a:0f:53:51:7e:b3:ee:dd:e5:0f:82:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: Mar 2 15:28:17 2026 GMT Not After : Mar 3 16:37:17 2026 GMT Subject: CN=A5335CFF95A4E800C49934475498B0AE1D1451D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:db:e9:de:2a:6b:c4:80:f4:3c:be:11:ea: d1:0f:e4:c2:7d:20:68:d0:a9:a0:87:c5:10:10:db: 4d:b8:9f:86:56:ac:0b:8f:ad:fa:57:e3:f9:41:75: 62:dd:9f:32:42:ce:d9:6b:5d:3b:df:d0:06:41:51: 6c:6b:9c:a3:3c:d2:f8:04:bc:4d:bd:bf:3e:9b:54: 2e:45:21:40:c4:95:6d:15:62:13:ea:a4:50:ca:fc: 2e:c4:65:5f:19:ce:e7:ca:d8:2e:b1:3e:11:5c:de: 82:32:92:02:74:1a:d8:7a:05:c5:c4:61:03:bd:9a: 5b:5b:27:8a:f5:9c:09:4b:7c:4f:b6:43:43:3a:73: ec:0d:af:25:0e:50:1a:44:5e:2b:87:32:4c:14:e0: f3:96:e5:90:60:cf:1c:ef:db:bb:6c:5c:de:07:e2: 60:65:b0:74:4c:30:1a:3d:c4:cd:4b:81:e4:21:36: f0:b6:ec:d3:03:ed:82:16:ea:ec:ac:93:b0:bf:98: 14:62:bb:b2:60:a2:e0:86:0d:91:cb:e3:dd:c6:f5: b2:39:c6:c5:e4:96:c7:6c:76:51:fb:0a:a1:9a:a5: 83:1b:94:43:02:07:1c:41:c8:01:cb:90:86:52:5e: bc:b7:fa:d9:7c:30:eb:5a:9c:41:eb:7e:76:4a:ae: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:5C:FF:95:A4:E8:00:C4:99:34:47:54:98:B0:AE:1D:14:51:D6 X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2d:e6:b9:3f:b4:6a:5b:85:2b:df:44:73:74:ba:78:10:57: 39:4c:57:cb:7d:01:f8:0d:09:7b:2d:3c:1e:47:4e:ee:87:e8: 4b:fe:d6:3b:13:11:4b:5e:e9:45:24:99:e7:87:70:d3:6a:fb: 53:a9:c0:cf:c7:37:30:bb:df:85:4c:01:e4:78:8c:b8:91:bf: 14:01:ed:f3:95:b0:17:9b:d8:c7:3d:fd:3b:a2:be:69:5e:52: c6:4f:02:61:13:6b:87:c5:8f:ef:df:f9:c7:82:9e:cd:0e:7d: f1:2d:cd:fe:e3:9b:d5:3e:7e:6b:4b:0a:52:df:a1:78:67:40: b3:2f:e2:52:b5:39:5c:95:37:43:45:f0:87:0d:d1:b9:f9:b3: e8:9e:26:54:35:24:7e:a2:54:5d:24:2f:e8:87:65:b2:7a:75: 3d:4c:b6:5b:dc:b1:01:01:99:b3:8f:17:54:ba:2a:c6:f3:9b: 5c:0b:f5:ce:4b:4e:83:86:92:c7:b3:d3:2a:cc:17:c8:36:a9: 72:e3:78:8a:f2:52:d5:34:9f:1e:8c:33:ee:3d:cb:f7:ad:ec: d9:07:f1:4e:23:2a:44:be:09:61:d1:59:e0:8e:53:56:8c:4c: f1:3b:5e:f6:84:c5:5d:d3:a3:86:7e:f1:62:c3:8f:b7:66:db: 65:76:55:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXNWKZ1o6lGEqD1NRfrPu3eUPgpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjAzMDIxNTI4MTdaFw0yNjAzMDMxNjM3MTdaMDMxMTAvBgNV BAMTKEE1MzM1Q0ZGOTVBNEU4MDBDNDk5MzQ0NzU0OThCMEFFMUQxNDUxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaNvp3iprxID0PL4R6tEP5MJ9 IGjQqaCHxRAQ2024n4ZWrAuPrfpX4/lBdWLdnzJCztlrXTvf0AZBUWxrnKM80vgE vE29vz6bVC5FIUDElW0VYhPqpFDK/C7EZV8ZzufK2C6xPhFc3oIykgJ0Gth6BcXE YQO9mltbJ4r1nAlLfE+2Q0M6c+wNryUOUBpEXiuHMkwU4POW5ZBgzxzv27tsXN4H 4mBlsHRMMBo9xM1LgeQhNvC27NMD7YIW6uysk7C/mBRiu7JgouCGDZHL493G9bI5 xsXklsdsdlH7CqGapYMblEMCBxxByAHLkIZSXry3+tl8MOtanEHrfnZKrucZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpTNc/5Wk6ADEmTRHVJiwrh0UUdYwHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATi3muT+0aluF K99Ec3S6eBBXOUxXy30B+A0Jey08HkdO7ofoS/7WOxMRS17pRSSZ54dw02r7U6nA z8c3MLvfhUwB5HiMuJG/FAHt85WwF5vYxz39O6K+aV5Sxk8CYRNrh8WP79/5x4Ke zQ598S3N/uOb1T5+a0sKUt+heGdAsy/iUrU5XJU3Q0Xwhw3Rufmz6J4mVDUkfqJU XSQv6Idlsnp1PUy2W9yxAQGZs48XVLoqxvObXAv1zktOg4aSx7PTKswXyDapcuN4 ivJS1TSfHowz7j3L963s2QfxTiMqRL4JYdFZ4I5TVoxM8Tte9oTFXdOjhn7xYsOP t2bbZXZV5A== -----END CERTIFICATE-----Generated at Mon Mar 2 23:06:21 2026 by rpki-client