$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: A0pjDC+wnwgtPcYgqNw4AXZC492hVhdNkKq7J4P45go= Subject key identifier: 30:06:6B:CE:0E:BB:0E:9F:56:D5:F9:17:1F:C5:3F:F1:38:95:9E:B5 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 16D8ECF0977BD035051466F5200C166BF217E9A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 61 Signing time: Wed 29 Jul 2026 07:53:50 +0000 Manifest this update: Wed 29 Jul 2026 07:48:50 +0000 Manifest next update: Thu 30 Jul 2026 09:07:50 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: S5SRqBHSWwnlHWrF3tTb+VKpYMX/QCwEDNH1zByuGx8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d8:ec:f0:97:7b:d0:35:05:14:66:f5:20:0c:16:6b:f2:17:e9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Jul 29 07:48:50 2026 GMT Not After : Jul 30 09:07:50 2026 GMT Subject: CN=30066BCE0EBB0E9F56D5F9171FC53FF138959EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:fc:32:48:eb:97:16:b8:0f:59:9d:1a:b7: f5:4f:28:3a:38:a1:6c:7f:0c:f0:68:78:08:ff:1f: 1a:cb:b5:b1:17:25:5c:3c:96:5e:39:a0:28:f7:88: e6:d2:ca:df:90:9c:c4:8b:cc:c2:b8:fc:1d:1c:1c: ec:73:aa:5a:5f:e9:24:f0:8a:3a:16:2a:72:07:b1: df:2e:4e:ae:32:3c:e5:4d:77:90:cf:eb:32:10:53: fc:e6:27:d5:72:87:6b:49:fb:0a:42:5a:f3:48:e8: b8:73:5f:cc:a4:a9:8a:91:44:b9:fb:fc:6d:9b:50: c4:b9:e9:df:63:dd:12:1a:c8:17:f9:fa:18:25:f2: 80:58:fa:15:37:58:d6:78:91:11:f8:5e:3f:3b:db: d2:0e:28:a1:49:27:d0:ac:ae:0c:08:35:0b:c9:2b: ea:35:e7:b5:29:98:a6:52:0e:d4:b1:78:66:7d:67: 6f:7e:a7:c5:16:90:c0:a3:f0:7e:5f:8d:12:96:b0: cd:43:30:f8:35:95:92:fa:8e:b9:57:f3:30:4b:6a: fb:96:f7:81:b9:77:6e:d9:25:c6:96:dd:75:aa:e2: d3:68:a4:63:b1:8f:ea:8f:49:72:26:2d:4a:ec:9e: 8f:21:ec:0f:61:73:b0:42:5e:1a:f0:18:37:2b:2e: 6a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:6B:CE:0E:BB:0E:9F:56:D5:F9:17:1F:C5:3F:F1:38:95:9E:B5 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:bf:89:28:5a:70:00:b5:a6:08:70:10:56:56:56:45:95:7c: fc:b2:1c:d2:9b:f0:7b:a5:4f:9e:05:8b:32:20:d7:71:91:23: b4:9e:a0:00:21:e8:14:e5:d4:11:38:60:65:96:1d:10:dc:3e: d8:14:26:c2:4e:e5:20:57:19:58:1e:b0:61:43:59:64:9c:87: c5:3f:ec:90:23:75:a4:90:60:8a:25:49:77:e6:c4:61:97:4a: e5:ec:62:7f:f9:aa:78:0f:e4:5c:3d:30:e8:59:e3:c4:da:ef: 41:89:67:af:11:fe:54:af:be:c8:04:68:c0:c0:ca:65:3d:bb: 6e:e3:03:51:09:a3:c4:02:c3:f4:4d:1a:92:ab:af:c5:70:22: 77:d0:d1:18:de:63:ff:43:0f:21:64:09:30:4a:f9:e7:0d:30: 1b:d6:cb:05:ef:01:e8:c0:27:f6:10:ee:d9:cd:3d:67:ac:93: b3:83:65:0c:c2:50:b0:af:43:b9:b2:40:f9:6a:29:44:4f:cf: 63:06:82:2f:d9:4a:e2:db:8f:71:eb:b0:53:17:88:e5:c2:bd: b0:1a:6c:07:4f:b9:0b:c5:db:57:56:65:68:9c:67:d7:96:a2: d5:69:ac:03:97:c7:92:21:c2:92:2f:c1:9d:ed:69:39:af:95: d4:c5:f7:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFtjs8Jd70DUFFGb1IAwWa/IX6aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjA3MjkwNzQ4NTBaFw0yNjA3MzAwOTA3NTBaMDMxMTAvBgNV BAMTKDMwMDY2QkNFMEVCQjBFOUY1NkQ1RjkxNzFGQzUzRkYxMzg5NTlFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+fwySOuXFrgPWZ0at/VPKDo4 oWx/DPBoeAj/HxrLtbEXJVw8ll45oCj3iObSyt+QnMSLzMK4/B0cHOxzqlpf6STw ijoWKnIHsd8uTq4yPOVNd5DP6zIQU/zmJ9Vyh2tJ+wpCWvNI6LhzX8ykqYqRRLn7 /G2bUMS56d9j3RIayBf5+hgl8oBY+hU3WNZ4kRH4Xj8729IOKKFJJ9CsrgwINQvJ K+o157UpmKZSDtSxeGZ9Z29+p8UWkMCj8H5fjRKWsM1DMPg1lZL6jrlX8zBLavuW 94G5d27ZJcaW3XWq4tNopGOxj+qPSXImLUrsno8h7A9hc7BCXhrwGDcrLmqRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMAZrzg67Dp9W1fkXH8U/8TiVnrUwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2L+JKFpwALWm CHAQVlZWRZV8/LIc0pvwe6VPngWLMiDXcZEjtJ6gACHoFOXUEThgZZYdENw+2BQm wk7lIFcZWB6wYUNZZJyHxT/skCN1pJBgiiVJd+bEYZdK5exif/mqeA/kXD0w6Fnj xNrvQYlnrxH+VK++yARowMDKZT27buMDUQmjxALD9E0akquvxXAid9DRGN5j/0MP IWQJMEr55w0wG9bLBe8B6MAn9hDu2c09Z6yTs4NlDMJQsK9DubJA+WopRE/PYwaC L9lK4tuPceuwUxeI5cK9sBpsB0+5C8XbV1ZlaJxn15ai1WmsA5fHkiHCki/Bne1p Oa+V1MX3VQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:35:03 2026 by rpki-client