$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: IwsuDeLhQSGxlZmgTNzQ3XNdHvkwQEegZNhY2dzDGsI= Subject key identifier: DF:9E:97:3B:FD:2F:77:76:3F:A8:A1:3C:1E:EB:A1:DA:5C:F8:B3:8E Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 561278DBD6FA738817216E481266B14A93AD2770 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: DA Signing time: Sun 25 Oct 2026 20:27:58 +0000 Manifest this update: Sun 25 Oct 2026 20:22:58 +0000 Manifest next update: Wed 28 Oct 2026 23:57:58 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: aCneZ54SZ1i12CaBdtQAlgX8sGJbfKGARnPyni8JaT0=) 2: AS4847.roa (hash: nuSY6+frDMEdAAT8bzwajeQyRxhduchPsSLgOeZbGPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 23:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:12:78:db:d6:fa:73:88:17:21:6e:48:12:66:b1:4a:93:ad:27:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Oct 25 20:22:58 2026 GMT Not After : Oct 28 23:57:58 2026 GMT Subject: CN=DF9E973BFD2F77763FA8A13C1EEBA1DA5CF8B38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:12:15:19:92:01:84:e5:00:72:f9:d8:13: 60:3e:b0:56:9d:11:28:8c:57:7e:e8:0f:2f:7d:7f: fa:8d:a6:1f:b0:0f:7a:fb:28:63:23:5b:3d:63:e8: 54:f9:34:02:ad:fb:63:eb:a7:98:dc:71:e9:fc:e4: 0c:82:fe:c9:85:43:79:48:d2:96:8e:42:23:c8:7d: 75:30:cf:e6:9e:82:ff:21:b1:ee:d7:43:a7:82:f5: 33:1a:10:64:d3:3f:9d:1b:7b:36:6d:f7:8f:19:0c: ac:aa:41:d1:7f:bb:7b:a2:9a:2d:ff:d4:83:9b:35: 91:ee:c6:f3:63:4e:87:14:94:95:a8:00:47:7d:f1: 75:3a:b5:86:49:1c:dc:17:85:3e:9c:db:45:1a:00: ec:08:8c:54:4b:83:ca:96:88:c4:78:ae:a7:38:45: 8f:05:cd:1f:72:7d:0b:ff:12:f7:fc:75:03:f7:48: 8e:ab:55:48:db:bb:33:b8:4f:27:44:5e:1c:40:59: b7:b3:11:00:6e:d8:a7:b8:00:79:f3:c3:99:d6:6e: 92:d7:69:66:75:16:34:fc:fa:6a:8a:da:ff:00:68: 2a:89:72:18:3f:b5:55:e5:b2:b1:32:89:fb:e2:c5: d5:40:58:78:45:75:89:cc:e4:c0:60:87:91:bf:20: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9E:97:3B:FD:2F:77:76:3F:A8:A1:3C:1E:EB:A1:DA:5C:F8:B3:8E X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:c0:a2:bd:0e:8f:a5:26:b6:12:36:10:d6:8f:0e:73:b2: 62:44:5e:c1:52:42:d6:67:83:da:b4:59:a3:f6:5e:c0:e6:f6: bd:13:8a:aa:c0:3d:07:ad:b9:d4:e3:06:1b:ef:3c:dd:08:69: 6f:f6:b8:ff:27:5a:85:34:30:a4:56:0b:5c:7c:9e:aa:cb:25: 67:d1:28:ae:4d:6b:62:70:97:f9:5e:1a:a9:c9:6b:d2:bf:c8: e6:0b:30:f9:e3:2e:d4:01:a9:f4:84:f5:7d:0b:0b:93:57:f3: 00:84:b1:07:ac:b2:fa:f5:c3:98:fd:9e:c0:fc:48:0a:a3:0c: 5c:01:22:b3:e5:aa:7e:98:3e:67:0a:21:ab:c5:f8:4a:5a:a1: 67:db:56:af:7a:ce:a1:79:d4:03:e0:05:26:24:02:20:a2:e4: 42:60:33:0d:ad:5c:fb:69:ea:38:64:02:a0:4d:2f:1b:c1:00: ae:a0:13:9e:30:73:c4:e3:09:3c:e6:fc:90:60:91:50:2c:d1: 46:e9:32:84:cf:58:58:ca:54:6e:fa:de:3c:6c:86:2f:35:6c: c3:81:43:31:92:b4:d9:e8:14:25:4b:ae:4b:ae:57:48:4b:04: 6f:2f:6e:50:c6:3d:68:f3:fc:a6:45:16:aa:09:94:7e:d7:1b: 1c:55:55:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVhJ429b6c4gXIW5IEmaxSpOtJ3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjEwMjUyMDIyNThaFw0yNjEwMjgyMzU3NThaMDMxMTAvBgNV BAMTKERGOUU5NzNCRkQyRjc3NzYzRkE4QTEzQzFFRUJBMURBNUNGOEIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg1RIVGZIBhOUAcvnYE2A+sFad ESiMV37oDy99f/qNph+wD3r7KGMjWz1j6FT5NAKt+2Prp5jccen85AyC/smFQ3lI 0paOQiPIfXUwz+aegv8hse7XQ6eC9TMaEGTTP50bezZt948ZDKyqQdF/u3uimi3/ 1IObNZHuxvNjTocUlJWoAEd98XU6tYZJHNwXhT6c20UaAOwIjFRLg8qWiMR4rqc4 RY8FzR9yfQv/Evf8dQP3SI6rVUjbuzO4TydEXhxAWbezEQBu2Ke4AHnzw5nWbpLX aWZ1FjT8+mqK2v8AaCqJchg/tVXlsrEyifvixdVAWHhFdYnM5MBgh5G/IFIdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU356XO/0vd3Y/qKE8Huuh2lz4s44wHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtrAor0Oj6Um thI2ENaPDnOyYkRewVJC1meD2rRZo/ZewOb2vROKqsA9B6251OMGG+883Qhpb/a4 /ydahTQwpFYLXHyeqsslZ9Eork1rYnCX+V4aqclr0r/I5gsw+eMu1AGp9IT1fQsL k1fzAISxB6yy+vXDmP2ewPxICqMMXAEis+Wqfpg+Zwohq8X4SlqhZ9tWr3rOoXnU A+AFJiQCIKLkQmAzDa1c+2nqOGQCoE0vG8EArqATnjBzxOMJPOb8kGCRUCzRRuky hM9YWMpUbvrePGyGLzVsw4FDMZK02egUJUuuS65XSEsEby9uUMY9aPP8pkUWqgmU ftcbHFVVgg== -----END CERTIFICATE-----Generated at Tue Oct 27 23:11:28 2026 by rpki-client