$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: uqTRqvfH/82xsdql/D6IqclDwdFXZLi2HGGKgzw1pJM= Subject key identifier: 8A:EC:3C:5A:96:58:7F:90:60:D6:7B:1D:12:BB:DA:AD:B6:93:3C:3E Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 55C5BC3BF33629E7BE016798A2CB715993A1538C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: 5A Signing time: Sat 13 Jun 2026 08:46:36 +0000 Manifest this update: Sat 13 Jun 2026 08:41:36 +0000 Manifest next update: Sun 14 Jun 2026 11:21:36 +0000 Files and hashes: 1: AS4847.roa (hash: 3iSNNi2FuNtir737Ugji4/SXTB5NeQgm9GdlYenOm+U=) 2: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: dlUGL/StHa9gpQxYn5Yh/DOl3ph5T17SOFximTylLrY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c5:bc:3b:f3:36:29:e7:be:01:67:98:a2:cb:71:59:93:a1:53:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Jun 13 08:41:36 2026 GMT Not After : Jun 14 11:21:36 2026 GMT Subject: CN=8AEC3C5A96587F9060D67B1D12BBDAADB6933C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:40:d2:fb:8e:a7:58:49:b6:fb:67:93:ce: 21:bf:01:44:0a:57:e7:8d:ab:f2:be:45:a3:fd:a0: 9a:83:df:e4:f8:72:63:ae:90:bb:41:97:6d:56:30: ae:82:60:1e:c4:7d:68:c8:56:4b:99:87:a9:bf:ba: e4:5b:4e:45:e1:44:8e:5c:58:bf:33:16:dd:8f:2f: 05:89:07:f1:69:fe:b2:0e:f6:d9:3b:b1:db:43:cd: b7:15:d8:bb:65:a1:52:2e:0f:3c:44:3a:7c:4a:f9: d1:07:a8:32:4f:a6:40:89:b2:d5:da:fd:e1:b1:b5: fc:7e:93:27:f2:eb:c8:a7:30:40:30:15:98:8c:49: d9:48:85:32:c0:93:70:d9:c1:0b:62:e5:8d:4a:f1: 59:a8:d9:57:db:8f:81:6e:7e:96:19:ad:7c:69:23: fa:7a:35:28:ba:4f:f9:f5:01:e4:fc:ee:d1:96:c7: 26:c8:bd:60:eb:47:79:2b:57:7b:61:38:29:ef:e4: bf:30:bf:4b:84:bb:cf:eb:76:6e:20:19:b7:e3:9d: 2c:3c:6b:65:19:00:41:4e:7d:f8:04:ba:3c:a2:ca: 81:37:2e:66:85:e6:da:29:bb:eb:86:e8:a5:c9:8e: ae:48:65:73:7e:c4:fc:6b:d9:ff:d8:7b:ef:10:2d: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:3C:5A:96:58:7F:90:60:D6:7B:1D:12:BB:DA:AD:B6:93:3C:3E X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ff:5b:0d:3b:50:da:94:02:12:88:a4:9a:ca:43:fc:cd:b4: b1:24:85:d3:25:d1:9f:e0:33:7d:71:c1:f6:f0:09:27:28:4c: 84:75:78:d8:db:5f:3c:41:56:3c:a0:c3:28:12:86:78:cb:ad: 1f:49:c1:ec:38:1e:45:37:2e:6e:ce:8c:8f:fc:62:ad:59:e4: cf:05:81:d4:89:84:66:a3:90:35:64:cc:f3:74:15:45:8e:48: c2:2d:50:37:85:8a:a4:d8:e6:e4:97:95:e3:33:9b:75:bf:13: 3d:e9:4c:e8:fc:b9:69:1e:98:42:8e:32:dd:d9:63:36:41:ce: 33:e0:df:13:41:71:4e:b7:de:30:d5:67:ca:42:1d:2e:14:14: e0:74:74:7f:ed:41:39:2d:92:7a:82:14:34:2b:0d:bf:6b:e3: 79:2d:8d:6f:5b:d8:73:51:64:94:f6:f0:43:f1:40:6e:2c:8f: ec:df:08:54:20:69:21:3f:53:71:c9:13:18:9b:72:77:be:0a: 00:c5:c6:24:81:47:72:bb:1e:87:83:53:a7:bc:5d:85:78:fb: d8:81:4d:64:4e:92:79:e7:d0:23:12:87:23:ae:56:6a:85:d1: c9:2a:a4:05:3b:8e:91:0a:57:d6:aa:f9:04:00:ce:5b:a0:b3: 79:61:c3:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVcW8O/M2Kee+AWeYostxWZOhU4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjA2MTMwODQxMzZaFw0yNjA2MTQxMTIxMzZaMDMxMTAvBgNV BAMTKDhBRUMzQzVBOTY1ODdGOTA2MEQ2N0IxRDEyQkJEQUFEQjY5MzNDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyEDS+46nWEm2+2eTziG/AUQK V+eNq/K+RaP9oJqD3+T4cmOukLtBl21WMK6CYB7EfWjIVkuZh6m/uuRbTkXhRI5c WL8zFt2PLwWJB/Fp/rIO9tk7sdtDzbcV2LtloVIuDzxEOnxK+dEHqDJPpkCJstXa /eGxtfx+kyfy68inMEAwFZiMSdlIhTLAk3DZwQti5Y1K8Vmo2Vfbj4FufpYZrXxp I/p6NSi6T/n1AeT87tGWxybIvWDrR3krV3thOCnv5L8wv0uEu8/rdm4gGbfjnSw8 a2UZAEFOffgEujyiyoE3LmaF5topu+uG6KXJjq5IZXN+xPxr2f/Ye+8QLdA9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiuw8WpZYf5Bg1nsdErvarbaTPD4wHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/9bDTtQ2pQC EoikmspD/M20sSSF0yXRn+AzfXHB9vAJJyhMhHV42NtfPEFWPKDDKBKGeMutH0nB 7DgeRTcubs6Mj/xirVnkzwWB1ImEZqOQNWTM83QVRY5Iwi1QN4WKpNjm5JeV4zOb db8TPelM6Py5aR6YQo4y3dljNkHOM+DfE0FxTrfeMNVnykIdLhQU4HR0f+1BOS2S eoIUNCsNv2vjeS2Nb1vYc1FklPbwQ/FAbiyP7N8IVCBpIT9TcckTGJtyd74KAMXG JIFHcrseh4NTp7xdhXj72IFNZE6SeefQIxKHI65WaoXRySqkBTuOkQpX1qr5BADO W6CzeWHDng== -----END CERTIFICATE-----Generated at Sun Jun 14 02:27:03 2026 by rpki-client