$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: pk3Ol2mOJZ9/8LiRUk2X1cJ+Vd5Jej3IO8GBL4qkBfY= Subject key identifier: AE:7B:D1:5B:F8:F8:29:BD:F3:DD:59:27:44:F8:51:5F:3A:B8:F0:EB Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 1E34B489AFDACD9E8A1A3226529B1B6843C6EA8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: 67 Signing time: Wed 13 May 2026 11:41:04 +0000 Manifest this update: Wed 13 May 2026 11:36:04 +0000 Manifest next update: Thu 14 May 2026 15:15:04 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: iAkaMx/6+0tkXzVEvWv5T0jF4ThpwjKPf4jH1pGJa24=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:34:b4:89:af:da:cd:9e:8a:1a:32:26:52:9b:1b:68:43:c6:ea:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: May 13 11:36:04 2026 GMT Not After : May 14 15:15:04 2026 GMT Subject: CN=AE7BD15BF8F829BDF3DD592744F8515F3AB8F0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e9:c6:fd:f9:05:96:57:97:e3:0e:4e:d3:19: ff:93:b8:4d:6e:b6:ae:35:a0:85:23:84:c8:15:ed: 1c:14:ad:eb:11:74:0c:9d:02:95:d7:ff:86:5a:93: df:95:fd:b9:6e:99:e0:5d:09:8d:60:19:b3:fc:da: 22:dc:c0:1d:80:dd:86:84:54:db:d8:cf:23:3e:0c: 05:fa:23:6e:72:42:9f:16:b7:8e:c0:71:65:eb:40: 3d:a5:fd:05:1e:eb:e1:91:ef:4f:c4:93:c6:25:0c: f2:f4:26:23:2d:e9:38:c5:42:bb:df:d0:ac:9e:a5: 0f:2c:76:65:fa:89:85:0a:0c:36:2d:2d:48:9d:b9: 3f:1e:13:53:31:37:96:a8:51:69:e6:21:9b:f6:84: 28:5e:17:ad:04:30:b1:dc:aa:1b:8d:56:46:69:e9: d3:05:5f:34:01:69:0f:b4:6b:c2:95:c3:12:13:66: e0:2c:45:b4:19:05:87:81:8c:62:0e:a7:ae:6c:77: e8:34:71:f4:e8:89:8e:65:ca:26:a9:7e:be:2c:2e: 56:83:4d:27:11:ea:04:60:7f:5c:2b:05:81:7d:cd: aa:4a:d5:60:0e:ea:a7:d8:5b:9b:05:23:1d:f6:b6: 5d:5a:02:2b:3f:e1:70:90:9e:a1:37:74:f1:ea:77: 70:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7B:D1:5B:F8:F8:29:BD:F3:DD:59:27:44:F8:51:5F:3A:B8:F0:EB X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3d:36:67:5b:4b:15:28:97:ac:5e:6f:77:af:45:f1:83:ad: 46:2f:e9:60:5c:0a:1a:86:a5:69:a9:60:ae:ed:ac:22:1a:da: 04:32:54:76:89:ae:07:1e:46:a5:90:2a:ab:06:19:45:ef:7c: 6a:44:cf:21:80:e4:1e:1f:72:a7:c0:2f:ae:3c:cf:26:e0:a9: a1:83:fc:c3:8f:50:f9:6a:c1:d0:4f:39:17:96:15:ad:3f:60: 2a:df:2d:2c:c0:f1:1d:4e:f5:55:a3:73:31:c5:55:0f:7e:c0: 78:5c:d4:e1:80:41:76:8d:c5:72:6c:55:38:8a:8f:fa:01:38: 01:b6:e5:41:7b:82:b0:16:8a:aa:9b:8e:db:76:ea:c7:39:6a: 13:a4:87:9c:20:c0:a7:52:ab:4d:c2:d0:f4:c0:89:db:c6:5a: 53:df:71:66:fd:7c:34:7c:9a:ac:6f:db:e6:c9:78:47:30:49: 0e:60:49:4f:75:45:ed:dd:8c:c7:57:89:45:db:d8:76:ee:fc: 25:8d:50:9c:24:ba:a9:50:34:91:64:e7:3f:f5:89:87:d9:64: c3:0c:2b:f7:cf:42:f2:f7:2b:d8:3b:32:85:e6:99:2b:e4:45: ba:cc:a6:39:50:6d:df:58:4a:7d:c7:ab:e1:13:4b:1e:62:e8: 88:8b:02:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHjS0ia/azZ6KGjImUpsbaEPG6o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjA1MTMxMTM2MDRaFw0yNjA1MTQxNTE1MDRaMDMxMTAvBgNV BAMTKEFFN0JEMTVCRjhGODI5QkRGM0RENTkyNzQ0Rjg1MTVGM0FCOEYwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo6cb9+QWWV5fjDk7TGf+TuE1u tq41oIUjhMgV7RwUresRdAydApXX/4Zak9+V/blumeBdCY1gGbP82iLcwB2A3YaE VNvYzyM+DAX6I25yQp8Wt47AcWXrQD2l/QUe6+GR70/Ek8YlDPL0JiMt6TjFQrvf 0KyepQ8sdmX6iYUKDDYtLUiduT8eE1MxN5aoUWnmIZv2hCheF60EMLHcqhuNVkZp 6dMFXzQBaQ+0a8KVwxITZuAsRbQZBYeBjGIOp65sd+g0cfToiY5lyiapfr4sLlaD TScR6gRgf1wrBYF9zapK1WAO6qfYW5sFIx32tl1aAis/4XCQnqE3dPHqd3AhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrnvRW/j4Kb3z3VknRPhRXzq48OswHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz02Z1tLFSiX rF5vd69F8YOtRi/pYFwKGoalaalgru2sIhraBDJUdomuBx5GpZAqqwYZRe98akTP IYDkHh9yp8AvrjzPJuCpoYP8w49Q+WrB0E85F5YVrT9gKt8tLMDxHU71VaNzMcVV D37AeFzU4YBBdo3FcmxVOIqP+gE4AbblQXuCsBaKqpuO23bqxzlqE6SHnCDAp1Kr TcLQ9MCJ28ZaU99xZv18NHyarG/b5sl4RzBJDmBJT3VF7d2Mx1eJRdvYdu78JY1Q nCS6qVA0kWTnP/WJh9lkwwwr989C8vcr2DsyheaZK+RFusymOVBt31hKfcer4RNL HmLoiIsC+g== -----END CERTIFICATE-----Generated at Wed May 13 17:02:26 2026 by rpki-client