$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft File: BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft (raw, json) Hash identifier: m6xVkmrSWuYy4E7yNOD9ei4VW9TTIDi8Rp6/Vyy4oow= Subject key identifier: 1A:CB:B2:19:14:50:FF:F4:B6:37:8D:04:5F:B1:3A:BD:F3:C6:54:73 Authority key identifier: BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06 Certificate issuer: /CN=BD637A9BB5A01C3B165E9F166CAB6CD626B43206 Certificate serial: 7DA89CFA7D88D9F474917CA0F43ED0ED942025A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft Manifest number: 0A Signing time: Wed 14 Oct 2026 06:58:39 +0000 Manifest this update: Wed 14 Oct 2026 06:53:39 +0000 Manifest next update: Sat 17 Oct 2026 08:29:39 +0000 Files and hashes: 1: BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl (hash: FLM5XCREqZgs2an0sGye5eCbC+jkJ+CCeTUVZ1qeyZw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 08:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a8:9c:fa:7d:88:d9:f4:74:91:7c:a0:f4:3e:d0:ed:94:20:25:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD637A9BB5A01C3B165E9F166CAB6CD626B43206 Validity Not Before: Oct 14 06:53:39 2026 GMT Not After : Oct 17 08:29:39 2026 GMT Subject: CN=1ACBB2191450FFF4B6378D045FB13ABDF3C65473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:0e:b7:b4:bc:01:4d:3a:02:9f:d0:70:f3: 5a:62:ae:33:74:7b:61:71:1a:9a:4d:8c:f0:9c:7e: d9:f5:5c:2b:10:6b:9a:35:81:75:71:21:5c:e4:7d: bf:e5:d9:ed:99:ba:e1:57:96:2d:01:81:1f:03:9f: 33:cf:4d:42:02:a4:cf:74:53:a6:32:71:58:e4:d9: ba:3d:78:e7:93:c5:59:8d:0e:56:16:4d:60:3d:83: e4:bb:b2:ff:3f:59:bf:c8:c4:b9:2d:38:f0:7d:30: 61:c0:35:24:6e:cb:5d:6f:45:17:b4:7b:4f:30:b5: d8:e0:98:80:ca:aa:23:93:a9:32:8a:8c:19:01:2f: 22:98:29:34:a1:18:51:d2:1a:89:51:90:4a:e3:1a: 2b:99:79:ba:f5:d5:93:71:fe:ed:7d:c7:91:5d:95: dc:db:77:34:ec:7c:81:b9:88:8c:33:64:6b:f9:d9: 9d:ab:5d:7f:03:0c:9e:33:1e:fd:01:d1:55:62:34: 72:23:fa:b8:c2:84:8e:96:61:38:d5:44:81:7b:68: b5:9c:cb:c4:e9:99:a5:9f:d2:8e:60:3a:52:b5:76: 58:79:d8:31:f2:2d:f4:e6:4b:d0:b5:30:a9:6e:8f: 71:8c:73:10:0e:74:ec:f9:3b:4c:e2:37:8f:12:7a: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CB:B2:19:14:50:FF:F4:B6:37:8D:04:5F:B1:3A:BD:F3:C6:54:73 X509v3 Authority Key Identifier: keyid:BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:17:57:41:77:49:df:50:85:5f:7f:e2:6a:9e:9d:df:4e:63: d3:35:81:78:9a:5f:ae:a0:d2:a1:f0:ed:de:11:cd:f5:25:93: ff:e1:77:e1:30:5f:ff:7f:44:51:c5:13:3f:ad:97:04:21:60: 2c:df:9e:8e:e4:eb:e4:28:5d:b2:b6:e4:1e:60:07:5a:50:01: 41:aa:b1:2c:2c:e8:55:b2:1d:d0:9a:20:51:c4:cb:cb:30:43: 26:50:21:1f:56:1e:c3:35:89:16:c2:74:d1:e2:44:8b:07:55: d2:2b:c8:4d:9e:78:6d:e1:48:52:75:95:4f:97:b9:2e:24:b9: 8f:80:22:5b:79:dd:36:3a:11:c7:8a:cb:da:bc:1c:44:ae:6a: ce:05:56:fb:7b:a0:49:db:9a:54:4c:0a:47:6d:1e:60:22:a1: 52:10:fc:ba:79:80:62:1e:7f:10:c1:4c:7f:80:66:4c:63:a6: 28:89:7a:b7:0a:f7:75:b6:8b:50:79:54:9b:c2:f7:41:b8:af: 2b:10:1b:55:35:4b:d7:c3:39:33:f6:b7:9f:16:fd:1d:7f:4a: 41:08:a8:bc:5b:b9:f8:5c:56:62:9a:37:54:6f:6f:71:3c:67: 48:ad:34:3d:93:77:60:a4:5f:bb:90:d4:61:c4:96:10:32:15: c0:9b:f6:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfaic+n2I2fR0kXyg9D7Q7ZQgJaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MzdBOUJCNUEwMUMzQjE2NUU5RjE2NkNBQjZDRDYy NkI0MzIwNjAeFw0yNjEwMTQwNjUzMzlaFw0yNjEwMTcwODI5MzlaMDMxMTAvBgNV BAMTKDFBQ0JCMjE5MTQ1MEZGRjRCNjM3OEQwNDVGQjEzQUJERjNDNjU0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpg63tLwBTToCn9Bw81pirjN0 e2FxGppNjPCcftn1XCsQa5o1gXVxIVzkfb/l2e2ZuuFXli0BgR8DnzPPTUICpM90 U6YycVjk2bo9eOeTxVmNDlYWTWA9g+S7sv8/Wb/IxLktOPB9MGHANSRuy11vRRe0 e08wtdjgmIDKqiOTqTKKjBkBLyKYKTShGFHSGolRkErjGiuZebr11ZNx/u19x5Fd ldzbdzTsfIG5iIwzZGv52Z2rXX8DDJ4zHv0B0VViNHIj+rjChI6WYTjVRIF7aLWc y8TpmaWf0o5gOlK1dlh52DHyLfTmS9C1MKluj3GMcxAOdOz5O0ziN48Set+HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGsuyGRRQ//S2N40EX7E6vfPGVHMwHwYDVR0j BBgwFoAUvWN6m7WgHDsWXp8WbKts1ia0MgYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 NTM0NDkwNzkyNjI0MTMzMS8wL0JENjM3QTlCQjVBMDFDM0IxNjVFOUYxNjZDQUI2 Q0Q2MjZCNDMyMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkQ2MzdBOUJCNUEwMUMzQjE2NUU5RjE2NkNBQjZDRDYyNkI0MzIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTUzNDQ5MDc5MjYyNDEzMzEvMC9CRDYzN0E5QkI1QTAx QzNCMTY1RTlGMTY2Q0FCNkNENjI2QjQzMjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxdXQXdJ31CF X3/iap6d305j0zWBeJpfrqDSofDt3hHN9SWT/+F34TBf/39EUcUTP62XBCFgLN+e juTr5ChdsrbkHmAHWlABQaqxLCzoVbId0JogUcTLyzBDJlAhH1YewzWJFsJ00eJE iwdV0ivITZ54beFIUnWVT5e5LiS5j4AiW3ndNjoRx4rL2rwcRK5qzgVW+3ugSdua VEwKR20eYCKhUhD8unmAYh5/EMFMf4BmTGOmKIl6twr3dbaLUHlUm8L3QbivKxAb VTVL18M5M/a3nxb9HX9KQQiovFu5+FxWYpo3VG9vcTxnSK00PZN3YKRfu5DUYcSW EDIVwJv2vA== -----END CERTIFICATE-----Generated at Thu Oct 15 13:46:23 2026 by rpki-client