$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft File: BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json) Hash identifier: 5R9M3FUSKZlThqXCt7KcaZxo6ohwzEH+3e8n6WR2Gdo= Subject key identifier: C3:84:94:E4:8C:7D:37:95:F0:1A:9E:6A:52:8C:C3:36:DA:53:2D:00 Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 Certificate issuer: /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Certificate serial: 105B6B35E21CED1706FC7E19D7437F3780B930A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft Manifest number: D7 Signing time: Mon 12 Oct 2026 09:45:21 +0000 Manifest this update: Mon 12 Oct 2026 09:40:21 +0000 Manifest next update: Thu 15 Oct 2026 16:01:21 +0000 Files and hashes: 1: AS7497.roa (hash: u07x0HxtkCWmzc04mrkTJO7RBZFkYTQJYfpS7fTkNcw=) 2: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: b569TZE8pKWSq+pMIi3///26mF55CT04A6n5Fr4mzw0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5b:6b:35:e2:1c:ed:17:06:fc:7e:19:d7:43:7f:37:80:b9:30:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Validity Not Before: Oct 12 09:40:21 2026 GMT Not After : Oct 15 16:01:21 2026 GMT Subject: CN=C38494E48C7D3795F01A9E6A528CC336DA532D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:61:72:93:24:4b:72:b3:cb:48:49:90:6e: dc:28:5a:92:1a:4f:05:9c:fc:4a:15:64:de:6c:3c: 3d:e4:d2:25:16:89:d6:0e:ec:10:3e:35:f6:6b:32: e9:be:5c:4c:7e:b9:6f:22:4e:80:4d:c4:d8:13:30: e7:06:8b:ca:9f:4c:76:3f:48:93:af:34:da:e1:9e: e3:b3:22:19:82:9f:8f:d4:f8:dc:9e:f0:bc:4e:68: 3e:8d:6d:85:08:a9:b9:2f:de:25:56:1a:54:8a:4e: 2f:1d:d9:65:53:b6:6e:0e:4c:30:a9:7b:0d:be:af: 54:af:63:ee:5b:26:88:df:9d:16:ec:38:45:55:28: 15:e5:cd:e9:c7:0e:23:d7:e9:ee:e9:a9:bd:5a:2c: 6c:a3:f8:43:1d:be:a8:e8:42:65:c6:54:d2:d6:40: 10:b4:ac:06:fa:10:7c:05:87:1e:51:7f:33:6d:d6: 3a:68:4d:17:8a:b7:f7:62:3f:45:f9:a7:74:ec:6f: 4d:92:54:f1:bd:37:f4:cd:26:0b:c2:cc:ce:80:1e: 8f:db:a7:16:2b:c0:79:c6:a4:18:7e:54:b4:80:9d: f1:1d:07:fe:f8:bf:f3:e9:ed:a8:f8:d4:55:e9:6e: 0d:58:f2:d1:95:63:a4:4a:5f:37:5a:c3:a2:42:d5: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:94:E4:8C:7D:37:95:F0:1A:9E:6A:52:8C:C3:36:DA:53:2D:00 X509v3 Authority Key Identifier: keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f7:25:24:a4:24:12:7a:98:e6:f0:0f:13:38:fd:bc:c0:b2: fb:99:f0:41:14:60:95:65:5e:41:35:7b:4c:5c:ba:d7:b7:71: a9:31:5c:2a:af:74:01:35:74:71:38:b2:99:09:dc:eb:a1:14: ff:20:84:65:ed:3f:4a:44:55:36:6d:54:a9:42:b3:49:46:ac: 0b:c8:49:4f:4f:2f:55:2c:27:c4:d8:d9:a7:cf:2a:f0:48:46: fc:97:44:b3:9e:5f:c0:85:10:ff:66:8e:82:94:81:a1:57:f8: 8b:8d:57:1f:e8:e7:a6:1e:74:70:17:ec:b7:30:21:c0:6a:56: e4:ec:78:ed:36:a6:25:e5:a9:d5:c1:d4:18:9e:c5:6e:07:de: dc:0d:22:6c:b1:02:82:ea:53:6b:81:89:8a:3e:9c:92:13:7a: fc:e0:13:b1:5f:41:66:c9:42:05:9a:53:02:1f:3a:16:fe:f8: 4b:d6:ac:a7:93:c3:17:7f:71:7f:b7:03:9c:c0:40:2e:19:b0: ba:a5:fa:c8:38:50:eb:02:ef:e4:9b:1f:30:a2:ba:f3:fa:02: 87:a5:f4:d6:2a:54:2b:79:f2:83:c1:b0:20:61:11:04:d3:ed: 95:93:e4:1f:2e:33:b4:26:ef:8c:8f:29:c6:f4:7b:f1:09:94: 95:bd:a0:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEFtrNeIc7RcG/H4Z10N/N4C5MKMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyhCRDFENDFCOTAz MkZGNTlDNDU1NTY0NDhDOEU0RUM5MUU1OTFGNDU5MB4XDTI2MTAxMjA5NDAyMVoX DTI2MTAxNTE2MDEyMVowMzExMC8GA1UEAxMoQzM4NDk0RTQ4QzdEMzc5NUYwMUE5 RTZBNTI4Q0MzMzZEQTUzMkQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdMYXKTJEtys8tISZBu3ChakhpPBZz8ShVk3mw8PeTSJRaJ1g7sED419msy 6b5cTH65byJOgE3E2BMw5waLyp9Mdj9Ik6802uGe47MiGYKfj9T43J7wvE5oPo1t hQipuS/eJVYaVIpOLx3ZZVO2bg5MMKl7Db6vVK9j7lsmiN+dFuw4RVUoFeXN6ccO I9fp7umpvVosbKP4Qx2+qOhCZcZU0tZAELSsBvoQfAWHHlF/M23WOmhNF4q392I/ RfmndOxvTZJU8b039M0mC8LMzoAej9unFivAecakGH5UtICd8R0H/vi/8+ntqPjU VeluDVjy0ZVjpEpfN1rDokLVCqkCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTDhJTk jH03lfAanmpSjMM22lMtADAfBgNVHSMEGDAWgBS9HUG5Ay/1nEVVZEjI5OyR5ZH0 WTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzAvQkQxRDQx QjkwMzJGRjU5QzQ1NTU2NDQ4QzhFNEVDOTFFNTkxRjQ1OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdlIxQnVRTXY5 WnhGVldSSXlPVHNrZVdSOUZrLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8wL0JEMUQ0MUI5MDMyRkY1OUM0NTU1NjQ0OEM4RTRFQzkxRTU5MUY0 NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAj9yUkpCQSepjm8A8TOP28wLL7mfBBFGCVZV5BNXtMXLrX t3GpMVwqr3QBNXRxOLKZCdzroRT/IIRl7T9KRFU2bVSpQrNJRqwLyElPTy9VLCfE 2NmnzyrwSEb8l0Sznl/AhRD/Zo6ClIGhV/iLjVcf6OemHnRwF+y3MCHAalbk7Hjt NqYl5anVwdQYnsVuB97cDSJssQKC6lNrgYmKPpySE3r84BOxX0FmyUIFmlMCHzoW /vhL1qynk8MXf3F/twOcwEAuGbC6pfrIOFDrAu/kmx8worrz+gKHpfTWKlQrefKD wbAgYREE0+2Vk+QfLjO0Ju+MjynG9HvxCZSVvaAA -----END CERTIFICATE-----Generated at Tue Oct 13 08:17:25 2026 by rpki-client