$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: CbPTfokMjJc6jmNJwSauun4O6UNv2clIKfW2cm2vT3w= Subject key identifier: EF:E8:A7:D7:1D:A9:16:5D:7F:DE:4B:08:B1:94:E7:92:1A:BC:0C:CA Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 4C985023A14BD066238E2A63888691E86624E1AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 4F Signing time: Wed 29 Jul 2026 11:54:17 +0000 Manifest this update: Wed 29 Jul 2026 11:49:17 +0000 Manifest next update: Thu 30 Jul 2026 13:46:17 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: kvmWakrjfo6+sD5De5rHo5PMGZykU7L2RZsDzaPQ8gY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:98:50:23:a1:4b:d0:66:23:8e:2a:63:88:86:91:e8:66:24:e1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Jul 29 11:49:17 2026 GMT Not After : Jul 30 13:46:17 2026 GMT Subject: CN=EFE8A7D71DA9165D7FDE4B08B194E7921ABC0CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:b3:d1:9f:78:fe:f7:4d:63:d9:04:16:20: 26:fb:05:5b:33:6c:be:d5:68:72:2d:0f:17:ac:9e: 32:90:f9:1c:87:36:0a:bc:fd:cf:85:53:80:f4:bc: ab:af:35:09:64:db:79:b4:d4:0d:3d:50:b3:68:63: cf:2c:a9:4a:69:14:98:3e:76:62:5d:7d:91:ba:f4: 65:8b:11:f9:cd:19:a1:30:fe:b2:6b:af:d1:c1:e5: ec:a5:99:a7:61:28:2e:eb:c1:e3:97:a9:f5:c5:f6: f0:02:89:6e:69:27:94:d2:4c:4a:c1:02:2e:ed:24: d4:47:6a:0f:79:5c:8f:87:bc:64:8d:8a:e7:db:78: 8e:7b:b2:73:45:e7:dc:7f:38:97:90:4e:11:55:1d: 0a:ca:00:43:94:23:fb:bf:c8:8d:c1:6f:74:0e:ce: 6c:f9:d0:51:9c:1a:21:2f:32:42:af:cf:1f:6c:14: 30:30:57:0c:13:6e:99:f2:87:56:98:cd:42:a1:71: 02:43:e5:f8:c6:1c:ad:91:32:2d:82:3e:f1:91:e2: b1:21:5a:c1:71:cf:74:ea:cd:76:a9:40:1d:59:7a: 8d:24:b0:53:07:99:48:10:73:e1:d6:41:50:8c:27: 38:12:85:1d:56:49:db:fe:a6:63:c0:b8:69:04:a9: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:A7:D7:1D:A9:16:5D:7F:DE:4B:08:B1:94:E7:92:1A:BC:0C:CA X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:57:fb:61:cf:26:fd:28:01:1c:82:0e:b1:48:f4:e1:d3:94: ed:bb:c1:aa:32:46:09:e0:17:31:ec:93:94:8a:0a:1b:41:5b: ec:82:eb:07:d8:8b:ba:72:f5:80:56:5a:5b:2a:77:f5:4d:72: 63:32:1b:00:19:8c:5e:d3:e8:87:41:2c:4f:7f:00:33:72:a4: 2d:0e:d1:3d:ca:46:df:1c:68:f8:84:5f:91:00:e7:84:6e:e4: 44:74:f9:69:89:44:26:12:98:25:1b:b4:ab:36:a8:2d:c1:0f: 7b:ab:0d:30:9d:e8:d0:52:2f:4c:41:67:ee:de:69:38:ca:cb: 74:eb:bb:1b:67:ab:a2:50:50:a6:b9:be:3b:31:6b:97:ad:2b: a7:47:fb:4b:21:36:9e:a8:77:1c:5e:61:45:c3:91:d5:d9:c7: 15:ca:fc:e6:76:24:da:5a:bd:f1:38:4b:71:f8:ae:09:11:c4: 71:6a:7e:2d:fb:e2:bf:75:9d:2b:ae:4f:5d:f9:69:c1:33:01: 59:a5:1e:42:e2:a1:35:8c:02:95:d3:06:fa:5b:71:2e:34:c4: f6:d0:d3:ee:80:fd:f5:4e:74:63:48:f2:c0:9e:5f:77:75:a8: 1f:7b:b9:40:a9:68:8c:63:fa:0a:ba:a4:71:de:f3:cb:82:7d: d2:13:df:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTJhQI6FL0GYjjipjiIaR6GYk4a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjA3MjkxMTQ5MTdaFw0yNjA3MzAxMzQ2MTdaMDMxMTAvBgNV BAMTKEVGRThBN0Q3MURBOTE2NUQ3RkRFNEIwOEIxOTRFNzkyMUFCQzBDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRrPRn3j+901j2QQWICb7BVsz bL7VaHItDxesnjKQ+RyHNgq8/c+FU4D0vKuvNQlk23m01A09ULNoY88sqUppFJg+ dmJdfZG69GWLEfnNGaEw/rJrr9HB5eylmadhKC7rweOXqfXF9vACiW5pJ5TSTErB Ai7tJNRHag95XI+HvGSNiufbeI57snNF59x/OJeQThFVHQrKAEOUI/u/yI3Bb3QO zmz50FGcGiEvMkKvzx9sFDAwVwwTbpnyh1aYzUKhcQJD5fjGHK2RMi2CPvGR4rEh WsFxz3TqzXapQB1Zeo0ksFMHmUgQc+HWQVCMJzgShR1WSdv+pmPAuGkEqZTbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7+in1x2pFl1/3ksIsZTnkhq8DMowHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslf7Yc8m/SgB HIIOsUj04dOU7bvBqjJGCeAXMeyTlIoKG0Fb7ILrB9iLunL1gFZaWyp39U1yYzIb ABmMXtPoh0EsT38AM3KkLQ7RPcpG3xxo+IRfkQDnhG7kRHT5aYlEJhKYJRu0qzao LcEPe6sNMJ3o0FIvTEFn7t5pOMrLdOu7G2erolBQprm+OzFrl60rp0f7SyE2nqh3 HF5hRcOR1dnHFcr85nYk2lq98ThLcfiuCRHEcWp+Lfviv3WdK65PXflpwTMBWaUe QuKhNYwCldMG+ltxLjTE9tDT7oD99U50Y0jywJ5fd3WoH3u5QKlojGP6Crqkcd7z y4J90hPfyg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:55 2026 by rpki-client