$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: WGAUbjbLVQI1GjMmCwmDGN/X91ackxlVUBSMcePqPHs= Subject key identifier: C0:74:FE:DB:30:2A:FE:3D:E6:44:B3:8E:96:9D:38:C5:9C:14:C0:4B Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 6C1A6E389717617A82BDB37EE6772A4A451E6222 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: 27 Signing time: Thu 26 Mar 2026 12:38:28 +0000 Manifest this update: Thu 26 Mar 2026 12:33:28 +0000 Manifest next update: Fri 27 Mar 2026 14:56:28 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: qCIUDRamXtiTugO7B5dt1ngyQ4Zjrj2GMKOEhHTbh2w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1a:6e:38:97:17:61:7a:82:bd:b3:7e:e6:77:2a:4a:45:1e:62:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: Mar 26 12:33:28 2026 GMT Not After : Mar 27 14:56:28 2026 GMT Subject: CN=C074FEDB302AFE3DE644B38E969D38C59C14C04B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:ca:62:f7:66:ba:cc:54:2c:be:7a:d3:c7: cb:29:d9:19:a7:a4:f5:88:fd:b7:a2:39:a1:34:79: 1a:c2:ef:87:93:e5:db:bf:53:16:60:f9:be:bc:52: 37:d1:30:60:84:6a:ac:cf:6e:98:ce:9a:8e:ca:40: dd:ed:e1:b8:fc:f0:e7:77:08:10:c2:19:43:1a:3b: 34:b6:b3:44:52:76:54:d8:4f:73:81:28:1d:7d:11: 94:6e:f2:63:e5:0c:74:bb:18:19:2f:3c:5b:9b:5c: d7:f3:3e:e7:68:d7:4d:b3:0f:0a:9a:4a:09:a3:8f: 63:74:25:25:23:ea:95:c4:b0:66:72:d4:c9:08:16: 68:3f:be:19:87:b9:1f:24:e7:09:3a:52:2b:4f:93: fd:53:50:e1:50:7e:71:63:fc:47:fd:98:20:f5:40: a2:5a:e4:85:f2:cd:81:43:00:5a:d8:01:b0:02:7e: 56:f6:0d:2e:db:dc:13:3d:05:a9:78:2e:2a:c2:ea: d5:22:a0:25:7d:4a:d0:86:62:30:37:31:53:44:6e: 11:51:8f:9f:bd:e8:4e:c7:8f:2d:71:8a:73:8d:8a: 7a:7c:67:a7:1c:8a:4b:3c:1d:f2:b8:2a:ee:61:1b: 5c:be:0c:0b:f2:86:f1:50:38:ba:22:9a:7e:f2:65: 48:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:FE:DB:30:2A:FE:3D:E6:44:B3:8E:96:9D:38:C5:9C:14:C0:4B X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:91:54:e4:55:9a:15:83:f1:40:a6:cd:22:ba:92:27:3f: 8a:54:da:ed:7b:3f:e4:31:95:6e:70:80:c5:e4:96:4e:16:db: c9:c1:83:28:d4:72:60:e3:7c:26:6b:90:52:d5:13:7e:4a:a7: e1:d9:f9:b2:38:f5:0c:1b:ea:7b:2d:72:db:81:c0:66:1c:11: 83:f7:cf:cb:d9:12:73:7f:44:53:8e:6d:76:75:8f:b3:c4:66: b9:40:a7:9d:b8:ca:93:17:49:1e:7f:49:6d:18:ae:5a:56:a0: dd:0c:98:4d:30:7c:5d:a8:79:b6:fc:ed:3b:00:30:25:dd:5b: 85:83:94:3c:85:54:1e:48:2b:4d:a1:69:34:c6:70:25:a2:65: 47:b5:e5:ef:d8:80:01:86:c7:a2:88:5d:14:87:da:3f:d4:d1: 3c:96:a5:75:fd:51:52:8e:7d:f2:48:18:3e:e0:c4:69:ce:73: 50:c8:1a:69:47:cf:49:40:40:90:b3:83:56:2e:e6:5b:02:82: a9:dc:a3:73:8f:97:d0:ef:0e:49:07:c7:e4:a2:a6:81:a2:c0: d0:fd:84:9a:cc:be:c9:29:b1:01:66:d3:e1:ff:29:59:86:86: 74:ee:29:aa:ee:eb:aa:e0:bc:44:78:89:11:91:61:25:70:d9: a9:a7:e5:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbBpuOJcXYXqCvbN+5ncqSkUeYiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjAzMjYxMjMzMjhaFw0yNjAzMjcxNDU2MjhaMDMxMTAvBgNV BAMTKEMwNzRGRURCMzAyQUZFM0RFNjQ0QjM4RTk2OUQzOEM1OUMxNEMwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKMpi92a6zFQsvnrTx8sp2Rmn pPWI/beiOaE0eRrC74eT5du/UxZg+b68UjfRMGCEaqzPbpjOmo7KQN3t4bj88Od3 CBDCGUMaOzS2s0RSdlTYT3OBKB19EZRu8mPlDHS7GBkvPFubXNfzPudo102zDwqa Sgmjj2N0JSUj6pXEsGZy1MkIFmg/vhmHuR8k5wk6UitPk/1TUOFQfnFj/Ef9mCD1 QKJa5IXyzYFDAFrYAbACflb2DS7b3BM9Bal4LirC6tUioCV9StCGYjA3MVNEbhFR j5+96E7Hjy1xinONinp8Z6cciks8HfK4Ku5hG1y+DAvyhvFQOLoimn7yZUhXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwHT+2zAq/j3mRLOOlp04xZwUwEswHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyaRVORVmhWD 8UCmzSK6kic/ilTa7Xs/5DGVbnCAxeSWThbbycGDKNRyYON8JmuQUtUTfkqn4dn5 sjj1DBvqey1y24HAZhwRg/fPy9kSc39EU45tdnWPs8RmuUCnnbjKkxdJHn9JbRiu Wlag3QyYTTB8Xah5tvztOwAwJd1bhYOUPIVUHkgrTaFpNMZwJaJlR7Xl79iAAYbH oohdFIfaP9TRPJaldf1RUo598kgYPuDEac5zUMgaaUfPSUBAkLODVi7mWwKCqdyj c4+X0O8OSQfH5KKmgaLA0P2Emsy+ySmxAWbT4f8pWYaGdO4pqu7rquC8RHiJEZFh JXDZqaflpQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:19:59 2026 by rpki-client