$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: Mdf+h+9LaW7UDVbBKSYsTEsDm14qrfLWGt9Z2OxcbEs= Subject key identifier: 06:4E:C1:B8:E9:96:D6:99:94:E3:65:CD:FC:54:08:E4:B2:51:89:96 Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 25B9FC3B33E79B1EC5B167F0ACF1DA106B01AD7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 8C Signing time: Fri 16 Oct 2026 01:17:03 +0000 Manifest this update: Fri 16 Oct 2026 01:12:03 +0000 Manifest next update: Mon 19 Oct 2026 08:16:03 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: u6ocoGy/ORFWNrNfTQMTuvTnJnSrezBi9pjXljuHnT0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 08:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b9:fc:3b:33:e7:9b:1e:c5:b1:67:f0:ac:f1:da:10:6b:01:ad:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Oct 16 01:12:03 2026 GMT Not After : Oct 19 08:16:03 2026 GMT Subject: CN=064EC1B8E996D69994E365CDFC5408E4B2518996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:85:58:05:14:69:77:8b:33:d4:dc:3a:83: c2:41:b9:79:3f:99:9f:ee:7e:c5:cd:bb:ae:7b:40: 23:8e:70:dc:0e:3d:c4:8f:b2:c4:82:6b:d0:dc:01: 9d:d4:f8:b7:ac:9f:66:03:9f:f8:d6:b8:a6:08:14: 95:fa:94:36:59:3d:5b:10:5f:24:4a:25:f3:61:17: d6:0a:d4:c3:d4:01:a7:0d:a7:24:21:80:f9:f4:20: 26:2f:e0:af:0b:9e:70:0c:cc:0f:b2:43:e9:68:29: 24:9a:fe:aa:7f:88:1c:dc:57:fd:c3:09:97:a4:59: 19:ed:1d:9d:4c:53:6f:f9:17:e5:01:4a:9f:79:f2: 63:04:28:5e:19:1f:16:ae:2e:8b:36:eb:8d:36:f9: 59:7f:d3:1b:64:54:f4:63:62:6d:53:cd:8b:fd:e3: 76:ec:9d:86:9c:f1:a3:6d:fe:8f:fa:ec:20:8c:f8: 15:28:ad:cd:61:e8:5d:f7:e5:2d:78:2e:5a:ef:7e: ea:b8:72:ce:49:cc:82:7c:f7:e4:34:e7:48:94:21: 43:ad:ba:a7:82:55:62:df:2e:da:d4:d3:6c:37:67: 5d:cd:f3:fa:3a:b5:1a:bb:b0:bd:4c:0c:ed:c9:8e: 2f:0c:22:e4:c6:1d:3f:76:6a:dd:67:cb:c0:7f:37: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4E:C1:B8:E9:96:D6:99:94:E3:65:CD:FC:54:08:E4:B2:51:89:96 X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9e:cc:32:27:76:03:e1:1a:82:61:5a:fa:cd:00:18:10:68: 0a:74:32:48:db:f4:62:9f:1f:22:2f:32:cd:66:02:e0:90:01: 8b:ae:31:0a:5c:85:3f:07:be:73:e6:98:96:00:ce:70:a2:8d: 3f:26:ad:61:41:72:29:87:a8:7b:71:3e:45:4c:44:51:e3:cc: a9:13:bf:4e:b4:75:e5:30:3a:63:f1:04:8a:75:5e:04:56:8d: 24:80:37:05:0a:7a:23:80:c9:46:b4:b4:f6:79:65:ad:d3:58: 59:53:21:b0:c8:f2:70:5c:08:bb:d5:63:ef:e2:22:68:a4:ea: ea:23:a9:f3:6c:2c:a7:4b:f6:06:bd:9e:6e:11:41:91:a3:4a: b7:0e:cc:15:8f:2f:64:58:55:8c:3d:63:8b:c8:aa:2e:69:1a: e0:90:c3:4e:b9:2f:7f:33:6f:0d:f0:b4:26:d3:18:71:9f:ed: 1f:b8:2a:81:4a:2e:14:60:04:d2:99:22:34:6d:2b:59:b5:f1: 77:a6:6f:ac:f1:8b:38:16:c8:1d:61:e8:81:2d:22:14:e2:82: b8:eb:9d:82:d6:c4:74:b3:be:b4:4c:5a:4e:b7:e8:e3:3c:a0: e0:8c:fe:70:37:51:8b:6f:10:a3:ea:e0:f1:fd:b0:6f:16:e3: 18:42:3a:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJbn8OzPnmx7FsWfwrPHaEGsBrX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjEwMTYwMTEyMDNaFw0yNjEwMTkwODE2MDNaMDMxMTAvBgNV BAMTKDA2NEVDMUI4RTk5NkQ2OTk5NEUzNjVDREZDNTQwOEU0QjI1MTg5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwoVYBRRpd4sz1Nw6g8JBuXk/ mZ/ufsXNu657QCOOcNwOPcSPssSCa9DcAZ3U+Lesn2YDn/jWuKYIFJX6lDZZPVsQ XyRKJfNhF9YK1MPUAacNpyQhgPn0ICYv4K8LnnAMzA+yQ+loKSSa/qp/iBzcV/3D CZekWRntHZ1MU2/5F+UBSp958mMEKF4ZHxauLos26402+Vl/0xtkVPRjYm1TzYv9 43bsnYac8aNt/o/67CCM+BUorc1h6F335S14Llrvfuq4cs5JzIJ89+Q050iUIUOt uqeCVWLfLtrU02w3Z13N8/o6tRq7sL1MDO3Jji8MIuTGHT92at1ny8B/N3d1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBk7BuOmW1pmU42XN/FQI5LJRiZYwHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg57MMid2A+Ea gmFa+s0AGBBoCnQySNv0Yp8fIi8yzWYC4JABi64xClyFPwe+c+aYlgDOcKKNPyat YUFyKYeoe3E+RUxEUePMqRO/TrR15TA6Y/EEinVeBFaNJIA3BQp6I4DJRrS09nll rdNYWVMhsMjycFwIu9Vj7+IiaKTq6iOp82wsp0v2Br2ebhFBkaNKtw7MFY8vZFhV jD1ji8iqLmka4JDDTrkvfzNvDfC0JtMYcZ/tH7gqgUouFGAE0pkiNG0rWbXxd6Zv rPGLOBbIHWHogS0iFOKCuOudgtbEdLO+tExaTrfo4zyg4Iz+cDdRi28Qo+rg8f2w bxbjGEI6hg== -----END CERTIFICATE-----Generated at Sun Oct 18 09:23:24 2026 by rpki-client