$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft File: BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json) Hash identifier: 5uBy8WlAuGRUhqOD2XviLxb9TUO1LBJe3rkvJefqnY0= Subject key identifier: 5A:CD:42:A5:43:E6:A4:7B:28:2B:F7:97:5F:7C:B2:B8:FB:3F:4B:E6 Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 Certificate issuer: /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Certificate serial: 5B3BE87A14AA33DB50A45D102B8FB6BDBC29236D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft Manifest number: 86 Signing time: Thu 23 Jul 2026 14:01:27 +0000 Manifest this update: Thu 23 Jul 2026 13:56:27 +0000 Manifest next update: Fri 24 Jul 2026 14:13:27 +0000 Files and hashes: 1: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: Xh/dcF65ZkNBoNRv3sSir1/KrnQzzFHf198GS3SSu/0=) 2: AS7497.roa (hash: j57rZSZiJ0J8Rj4UciwSQrvA4GxhmFZ+b+nBd2VG6aA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3b:e8:7a:14:aa:33:db:50:a4:5d:10:2b:8f:b6:bd:bc:29:23:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Validity Not Before: Jul 23 13:56:27 2026 GMT Not After : Jul 24 14:13:27 2026 GMT Subject: CN=5ACD42A543E6A47B282BF7975F7CB2B8FB3F4BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:01:df:75:15:4a:ea:9d:97:b3:73:e6:95: 97:f8:88:54:cd:ff:9c:d2:ab:03:cf:8e:a7:4e:e2: df:82:37:5c:d0:a3:04:e5:01:3d:65:de:36:ad:46: 5c:8f:da:ae:86:8e:ef:df:82:c9:b1:b9:0b:cc:e7: 15:54:2d:84:2e:06:0e:0a:ef:9a:5e:8e:fb:28:4a: ad:da:49:c7:5e:8d:78:31:0a:5a:4b:72:7b:6e:e9: 24:f1:ed:29:29:58:57:ea:1a:6e:81:05:9b:88:b0: d4:89:7e:3b:17:1e:ff:89:b9:f0:3c:2a:b8:66:f2: 55:c6:da:31:13:59:07:05:1a:f2:6c:fa:47:80:78: ff:d7:23:12:ce:01:f7:ba:ee:38:df:5c:b7:4c:8f: 38:35:1d:3a:14:0f:49:f5:9c:bc:34:1b:da:5c:7c: 20:41:ab:a1:fa:8b:7c:7c:ba:e2:2d:c3:32:33:12: cb:e3:54:a2:33:84:d5:52:c8:b6:fc:89:06:14:c9: 99:e7:a0:9a:e3:32:73:f0:b7:3c:c8:bf:9d:b7:78: 7d:04:65:40:07:02:a3:f3:58:06:d6:0f:57:98:60: eb:15:7b:4e:fc:d6:44:23:4c:93:0b:35:59:bc:fd: 7b:8a:55:1b:50:05:d9:48:15:b4:2e:a3:b0:a5:2a: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:42:A5:43:E6:A4:7B:28:2B:F7:97:5F:7C:B2:B8:FB:3F:4B:E6 X509v3 Authority Key Identifier: keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:2e:3f:77:20:01:03:78:44:d8:f0:40:cd:da:01:62:63: b2:2e:74:17:e1:d9:11:13:72:8d:0c:e6:be:f2:49:2c:3e:04: 03:3d:13:63:17:f8:f0:bf:16:4d:5a:35:d6:6a:59:06:4d:69: 69:56:de:02:08:ff:6e:e1:9d:6e:7c:34:91:50:55:a3:2a:1d: 1a:4d:81:97:bb:7a:ea:db:98:55:6a:81:d4:c3:2e:ce:90:a1: 1e:92:52:ae:ac:3f:f0:dd:4e:15:e8:36:07:df:e4:79:21:35: 81:c0:0a:aa:90:54:a5:5e:bc:9a:ea:77:61:2b:dd:d4:eb:5a: f2:b8:8d:e5:ac:fb:c5:bd:12:b0:0c:11:1a:ce:a5:a7:31:75: ef:52:3f:24:7a:35:ba:b2:39:7c:f7:82:38:01:06:82:a0:dd: 39:68:86:d5:2e:c1:bd:50:8b:d3:31:1b:3a:34:19:cf:9a:d4: cd:e8:56:a1:05:64:f8:e9:24:98:7e:32:13:ba:59:77:4a:05: 46:97:3c:11:ef:8d:b1:e3:c8:a6:35:e9:98:65:bc:a0:8f:dd: 40:a4:aa:90:3f:d6:5a:c4:24:af:cc:07:4e:b7:12:e4:8c:37: 8d:fa:92:fe:d7:a2:4c:f6:53:6b:83:b4:c6:34:fc:4f:59:08: 40:de:20:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWzvoehSqM9tQpF0QK4+2vbwpI20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyhCRDFENDFCOTAz MkZGNTlDNDU1NTY0NDhDOEU0RUM5MUU1OTFGNDU5MB4XDTI2MDcyMzEzNTYyN1oX DTI2MDcyNDE0MTMyN1owMzExMC8GA1UEAxMoNUFDRDQyQTU0M0U2QTQ3QjI4MkJG Nzk3NUY3Q0IyQjhGQjNGNEJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+mAd91FUrqnZezc+aVl/iIVM3/nNKrA8+Op07i34I3XNCjBOUBPWXeNq1G XI/aroaO79+CybG5C8znFVQthC4GDgrvml6O+yhKrdpJx16NeDEKWktye27pJPHt KSlYV+oaboEFm4iw1Il+Oxce/4m58DwquGbyVcbaMRNZBwUa8mz6R4B4/9cjEs4B 97ruON9ct0yPODUdOhQPSfWcvDQb2lx8IEGrofqLfHy64i3DMjMSy+NUojOE1VLI tvyJBhTJmeegmuMyc/C3PMi/nbd4fQRlQAcCo/NYBtYPV5hg6xV7TvzWRCNMkws1 Wbz9e4pVG1AF2UgVtC6jsKUqxt0CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRazUKl Q+akeygr95dffLK4+z9L5jAfBgNVHSMEGDAWgBS9HUG5Ay/1nEVVZEjI5OyR5ZH0 WTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzAvQkQxRDQx QjkwMzJGRjU5QzQ1NTU2NDQ4QzhFNEVDOTFFNTkxRjQ1OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdlIxQnVRTXY5 WnhGVldSSXlPVHNrZVdSOUZrLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8wL0JEMUQ0MUI5MDMyRkY1OUM0NTU1NjQ0OEM4RTRFQzkxRTU5MUY0 NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBv9S4/dyABA3hE2PBAzdoBYmOyLnQX4dkRE3KNDOa+8kks PgQDPRNjF/jwvxZNWjXWalkGTWlpVt4CCP9u4Z1ufDSRUFWjKh0aTYGXu3rq25hV aoHUwy7OkKEeklKurD/w3U4V6DYH3+R5ITWBwAqqkFSlXrya6ndhK93U61ryuI3l rPvFvRKwDBEazqWnMXXvUj8kejW6sjl894I4AQaCoN05aIbVLsG9UIvTMRs6NBnP mtTN6FahBWT46SSYfjITull3SgVGlzwR742x48imNemYZbygj91ApKqQP9ZaxCSv zAdOtxLkjDeN+pL+16JM9lNrg7TGNPxPWQhA3iBR -----END CERTIFICATE-----Generated at Thu Jul 23 23:16:44 2026 by rpki-client