$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: PUuQrob6nRj6hJkMTtm9wrbdlYKtmFBoSI24Q7YGqig= Subject key identifier: A4:F4:59:1E:47:6F:2D:A7:00:40:95:76:DD:A2:6C:33:03:E2:25:68 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 6410FFDE94CCCAB495403D25D4F62EAA7FB0DC66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: A0 Signing time: Sat 17 Oct 2026 14:34:00 +0000 Manifest this update: Sat 17 Oct 2026 14:29:00 +0000 Manifest next update: Tue 20 Oct 2026 16:56:00 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: YdbbSarencISR2O3+ZhT7I/fAc7rvxp2FDlzRHaIhNs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 16:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:10:ff:de:94:cc:ca:b4:95:40:3d:25:d4:f6:2e:aa:7f:b0:dc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Oct 17 14:29:00 2026 GMT Not After : Oct 20 16:56:00 2026 GMT Subject: CN=A4F4591E476F2DA700409576DDA26C3303E22568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:30:10:46:97:5b:5a:20:82:15:c9:c1:b2: 9d:8c:ad:70:88:49:99:2d:b3:76:31:0c:a0:f7:d0: 31:65:0c:a7:03:3d:1e:25:d6:35:1d:81:df:f0:07: 6b:5a:86:77:fe:e5:f0:6c:c2:52:aa:76:8d:cb:c1: 89:16:d1:c1:c6:a5:be:c0:a1:ca:2b:0d:1f:e1:9c: 5d:d4:78:de:be:e3:cd:0c:ff:c7:06:9b:5d:4f:d4: c9:96:4f:3e:54:46:57:ee:4f:68:bb:fe:40:7d:bb: c5:64:de:f4:13:65:1d:a3:53:b9:f5:af:55:23:73: f4:fd:f4:bb:df:9b:f2:df:44:d9:c4:1e:d9:3d:9f: 0e:fb:16:77:79:15:1a:d8:fc:69:a4:cb:79:96:a6: ed:f7:dc:a2:ac:fa:50:64:31:fc:89:c1:1c:85:28: 5c:70:c8:11:f2:9c:28:a4:4f:ef:69:1e:be:24:25: cf:16:0a:00:91:eb:ae:03:ac:40:3f:c2:da:8e:9d: ce:1b:b4:c9:56:95:89:37:d6:2a:d2:e8:3b:91:fb: a8:c1:f7:dc:27:d5:3a:15:c5:b3:ac:8d:95:dc:85: df:3a:ab:9e:1d:bb:42:0b:3a:5d:3e:60:31:31:22: 5c:6e:ed:16:fa:d6:cd:22:99:30:94:0c:7c:81:20: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:59:1E:47:6F:2D:A7:00:40:95:76:DD:A2:6C:33:03:E2:25:68 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bd:f6:8a:af:17:c0:c4:e9:38:a8:9b:c7:c0:66:67:1b:1a: 88:a8:42:b1:4d:1c:2f:10:1d:7c:65:b2:95:4b:be:67:b6:4e: 46:8b:16:e9:5e:05:c4:c2:36:a1:d7:b7:03:25:42:c8:fe:c9: d1:8c:3e:28:bc:e2:2b:a4:5d:3f:0e:92:d2:6c:9d:ca:57:93: 2b:dc:46:ed:25:d0:f8:3c:ed:fa:d5:ff:2a:6a:e4:1f:f0:26: cd:02:f0:b0:c5:43:78:b4:df:bb:f2:3b:a8:9c:93:38:ac:51: 44:5d:8b:6b:95:36:af:49:d0:ef:94:4b:72:3f:11:fc:0c:0f: 38:5b:0b:7a:68:b8:82:22:bf:1f:8a:bc:c4:66:66:2b:0c:2f: fc:fd:6a:3b:6c:d2:b4:a2:a1:95:f2:88:3b:1e:e4:02:0b:1c: fc:26:39:78:f4:6a:f2:6e:cb:00:75:b8:9e:a3:f6:c3:a6:87: c6:30:fe:d7:e1:f9:66:d8:a3:4e:7b:35:f0:d5:72:a3:dd:ab: b4:04:4d:80:f7:46:a1:3a:29:b3:a0:4a:d4:cd:8c:5c:97:f3: 3e:69:ab:70:19:cc:0d:7a:50:ef:6d:fa:8b:f5:ee:89:5b:c2: 8d:cd:c5:6f:be:a8:ab:d2:a8:55:c3:d7:57:36:ac:6e:c5:0c: 06:7a:df:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZBD/3pTMyrSVQD0l1PYuqn+w3GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjEwMTcxNDI5MDBaFw0yNjEwMjAxNjU2MDBaMDMxMTAvBgNV BAMTKEE0RjQ1OTFFNDc2RjJEQTcwMDQwOTU3NkREQTI2QzMzMDNFMjI1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCTAQRpdbWiCCFcnBsp2MrXCI SZkts3YxDKD30DFlDKcDPR4l1jUdgd/wB2tahnf+5fBswlKqdo3LwYkW0cHGpb7A ocorDR/hnF3UeN6+480M/8cGm11P1MmWTz5URlfuT2i7/kB9u8Vk3vQTZR2jU7n1 r1Ujc/T99Lvfm/LfRNnEHtk9nw77Fnd5FRrY/Gmky3mWpu333KKs+lBkMfyJwRyF KFxwyBHynCikT+9pHr4kJc8WCgCR664DrEA/wtqOnc4btMlWlYk31irS6DuR+6jB 99wn1ToVxbOsjZXchd86q54du0ILOl0+YDExIlxu7Rb61s0imTCUDHyBIJg5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpPRZHkdvLacAQJV23aJsMwPiJWgwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEb32iq8XwMTp OKibx8BmZxsaiKhCsU0cLxAdfGWylUu+Z7ZORosW6V4FxMI2ode3AyVCyP7J0Yw+ KLziK6RdPw6S0mydyleTK9xG7SXQ+Dzt+tX/KmrkH/AmzQLwsMVDeLTfu/I7qJyT OKxRRF2La5U2r0nQ75RLcj8R/AwPOFsLemi4giK/H4q8xGZmKwwv/P1qO2zStKKh lfKIOx7kAgsc/CY5ePRq8m7LAHW4nqP2w6aHxjD+1+H5ZtijTns18NVyo92rtARN gPdGoTops6BK1M2MXJfzPmmrcBnMDXpQ7236i/XuiVvCjc3Fb76oq9KoVcPXVzas bsUMBnrfmQ== -----END CERTIFICATE-----Generated at Mon Oct 19 06:41:34 2026 by rpki-client