$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: VBDSItF1yJzyG+Ajl7xViXXT6p7Nwq7cFMVbs+4vEqw= Subject key identifier: 7C:70:4E:91:81:ED:3F:80:40:41:99:3B:26:A0:41:74:6C:A5:C5:E3 Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 77BD0C86153ACBF67EB4B20DEBD46E3020E258C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: 97 Signing time: Wed 29 Jul 2026 04:23:24 +0000 Manifest this update: Wed 29 Jul 2026 04:18:24 +0000 Manifest next update: Thu 30 Jul 2026 07:30:24 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: sEIoUS8NHprCMu3Eb762n0PB+qSJHENs2LF/5vrbbpg=) 2: AS4847.roa (hash: 3iSNNi2FuNtir737Ugji4/SXTB5NeQgm9GdlYenOm+U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bd:0c:86:15:3a:cb:f6:7e:b4:b2:0d:eb:d4:6e:30:20:e2:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Jul 29 04:18:24 2026 GMT Not After : Jul 30 07:30:24 2026 GMT Subject: CN=7C704E9181ED3F804041993B26A041746CA5C5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:6c:70:a4:af:24:73:a9:04:e6:33:2a:27: 57:1c:84:16:b6:3f:45:6f:80:d9:8d:59:c2:c5:1b: fe:74:4d:8a:52:3e:fd:03:fc:2a:46:92:e3:98:bc: 12:6b:d6:d8:59:3e:56:bd:50:52:4b:47:b9:77:e5: 0e:b1:4e:28:09:c9:c5:2b:14:b5:18:31:9d:a4:4a: 69:3c:9c:67:2f:82:22:8d:64:5c:2a:11:9d:a7:2b: 8c:02:1e:76:08:b8:86:bd:5c:cd:50:fc:53:13:19: 1e:46:28:31:c8:38:30:6e:b6:72:f4:9c:00:95:f9: fe:f2:62:89:58:43:16:cc:81:59:9b:48:c2:01:06: 6c:62:3d:21:ad:3d:96:03:52:b6:da:14:69:ad:cf: e1:24:f5:93:ba:b7:fb:0b:1e:c8:3b:93:4d:e0:8b: fa:08:22:56:5c:7d:ae:ff:90:61:1f:4d:34:f6:da: 3b:b0:55:01:2e:e2:8d:0e:36:69:11:18:81:70:e0: 27:ea:15:aa:c6:e5:08:13:0f:c9:0f:c0:64:2f:ee: 7a:13:18:61:9d:db:3c:08:d3:3e:44:36:5d:62:8f: bc:95:89:f8:74:0e:bf:fc:35:fc:8d:76:8c:49:d8: 5f:85:a5:19:ba:d3:46:62:33:4c:eb:37:b6:47:69: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:70:4E:91:81:ED:3F:80:40:41:99:3B:26:A0:41:74:6C:A5:C5:E3 X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f9:63:1c:6c:15:91:fb:9d:49:56:64:c3:da:6b:e4:42:99: ee:02:53:31:ac:1f:32:20:54:8e:9f:12:6b:36:b8:ec:35:28: 40:7e:42:f1:db:01:07:99:44:b6:af:c6:09:65:d4:ce:4b:66: ac:a4:c4:39:53:ec:96:0e:42:de:66:f6:7e:7c:46:25:0e:fa: 7a:c5:b3:a9:77:a2:b9:29:51:b2:d9:7b:97:32:16:9a:a4:5c: 8e:d7:e8:47:6d:14:49:d0:d8:02:bd:63:a8:70:b5:61:e5:ac: 21:fa:ac:e0:e1:83:96:60:6f:55:fc:32:ff:ba:48:36:fb:31: ab:61:1c:5c:79:27:6a:81:52:80:2c:01:f2:01:ee:4d:4e:06: 81:4c:99:d4:84:c0:95:9b:39:92:3d:ba:9f:9b:45:3d:04:73: 02:81:54:88:dd:42:56:82:d7:ac:17:4b:ab:f8:d4:bd:38:23: f8:3c:57:0b:cf:dc:8b:0e:4f:51:17:88:c3:9e:4b:52:50:5b: aa:ca:a7:76:f1:d2:a8:d1:1b:1e:c7:6c:c5:13:14:bf:6c:97: 73:d9:a7:a5:54:a2:60:bb:a3:61:e2:b6:c1:7c:62:f0:80:e0: 23:a2:46:c3:ff:bb:8f:83:68:2c:4f:12:5a:9f:11:58:98:fa: 31:fd:03:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd70MhhU6y/Z+tLIN69RuMCDiWMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjA3MjkwNDE4MjRaFw0yNjA3MzAwNzMwMjRaMDMxMTAvBgNV BAMTKDdDNzA0RTkxODFFRDNGODA0MDQxOTkzQjI2QTA0MTc0NkNBNUM1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoWxwpK8kc6kE5jMqJ1cchBa2 P0VvgNmNWcLFG/50TYpSPv0D/CpGkuOYvBJr1thZPla9UFJLR7l35Q6xTigJycUr FLUYMZ2kSmk8nGcvgiKNZFwqEZ2nK4wCHnYIuIa9XM1Q/FMTGR5GKDHIODButnL0 nACV+f7yYolYQxbMgVmbSMIBBmxiPSGtPZYDUrbaFGmtz+Ek9ZO6t/sLHsg7k03g i/oIIlZcfa7/kGEfTTT22juwVQEu4o0ONmkRGIFw4CfqFarG5QgTD8kPwGQv7noT GGGd2zwI0z5ENl1ij7yVifh0Dr/8NfyNdoxJ2F+FpRm600ZiM0zrN7ZHaXflAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfHBOkYHtP4BAQZk7JqBBdGylxeMwHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfljHGwVkfud SVZkw9pr5EKZ7gJTMawfMiBUjp8Saza47DUoQH5C8dsBB5lEtq/GCWXUzktmrKTE OVPslg5C3mb2fnxGJQ76esWzqXeiuSlRstl7lzIWmqRcjtfoR20USdDYAr1jqHC1 YeWsIfqs4OGDlmBvVfwy/7pINvsxq2EcXHknaoFSgCwB8gHuTU4GgUyZ1ITAlZs5 kj26n5tFPQRzAoFUiN1CVoLXrBdLq/jUvTgj+DxXC8/ciw5PUReIw55LUlBbqsqn dvHSqNEbHsdsxRMUv2yXc9mnpVSiYLujYeK2wXxi8IDgI6JGw/+7j4NoLE8SWp8R WJj6Mf0DuQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:14:22 2026 by rpki-client