$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft File: BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json) Hash identifier: gCC6Dup2MkPcd3jDsHaJcZbDd5FVigOvDgrm3AcOGyk= Subject key identifier: EC:79:2A:49:95:FC:90:2F:D6:F1:22:52:1B:B1:EC:1C:2C:60:76:4C Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 Certificate issuer: /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Certificate serial: 1BDACE02519DD1EEAC6023841820E09136B107E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft Manifest number: CD Signing time: Sat 26 Sep 2026 06:33:07 +0000 Manifest this update: Sat 26 Sep 2026 06:28:07 +0000 Manifest next update: Tue 29 Sep 2026 13:59:07 +0000 Files and hashes: 1: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: tdte/7C6b8i2cEV9OKnQ19nze0Bkt+FvU3wxDVMDhgI=) 2: AS7497.roa (hash: RypUkRNnXyhWVjdoJcBxLs+B0UtYxvqCNFVbM+wF2Cw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 13:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:da:ce:02:51:9d:d1:ee:ac:60:23:84:18:20:e0:91:36:b1:07:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Validity Not Before: Sep 26 06:28:07 2026 GMT Not After : Sep 29 13:59:07 2026 GMT Subject: CN=EC792A4995FC902FD6F122521BB1EC1C2C60764C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:76:58:2b:fa:0f:bf:bb:1d:a3:e8:94:62: a1:28:8f:c6:9c:f7:29:96:e2:19:3c:15:44:37:7e: a1:1a:fa:29:15:6d:7c:ca:39:24:f7:27:fb:a9:29: 3d:64:04:02:f0:14:b8:87:f2:ab:bb:3d:9b:2b:4c: 66:49:0a:27:f7:be:52:e2:1d:d2:7a:a2:b5:c3:93: bd:5d:a5:87:bb:78:aa:f2:8f:a2:7e:c8:90:b9:46: e0:dc:77:8a:c6:75:74:1f:bb:f8:b5:bd:2d:94:bd: 45:09:58:08:d9:19:88:ec:35:0d:78:e6:de:c0:7c: d2:6c:2a:fc:b2:43:f3:eb:79:40:3a:0a:90:1f:9f: 0b:e9:a5:55:39:08:e8:17:64:82:b9:69:e2:ec:ce: 69:1b:bb:cf:ce:7d:39:ab:8a:25:b4:94:22:fa:d8: 78:a9:f9:70:b8:43:a5:45:c8:fa:f8:c2:bb:d3:c5: c5:39:28:41:35:9d:6f:89:e4:3c:b0:65:31:33:af: 04:28:fc:89:fc:c2:0f:69:59:43:bf:39:85:5f:f1: bf:b8:11:0d:26:b6:09:dd:d6:20:cc:2e:32:2f:e7: 12:8b:43:52:72:e4:7e:c2:f8:a3:2d:9e:d1:1a:52: aa:62:97:7b:02:e5:16:8a:d4:b3:cd:ac:d3:2e:a2: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:79:2A:49:95:FC:90:2F:D6:F1:22:52:1B:B1:EC:1C:2C:60:76:4C X509v3 Authority Key Identifier: keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:04:c3:e4:9e:6b:f4:7c:61:6a:b1:fa:c1:84:c0:3b:19: 9c:aa:a7:68:61:22:07:6f:41:c3:2a:d0:e4:69:fa:4c:47:50: 2e:7b:db:09:0a:af:40:64:73:bd:71:83:1e:72:54:8d:f0:3c: a7:f0:0e:d8:25:f3:c9:b6:2f:72:bd:45:0f:8a:8e:a8:04:fc: d8:c8:8c:2e:17:1f:e1:83:ca:33:78:ad:51:e2:8d:d1:e1:b7: 8b:ae:d8:40:c8:cf:a9:74:89:1e:e3:a0:e7:46:bc:8e:44:af: 33:ef:48:77:a1:56:54:ef:54:fb:9c:0b:93:e9:8b:9f:74:7a: 2b:e1:46:f1:de:e2:08:36:94:bd:0a:ab:26:0f:cb:57:30:7a: 6d:dc:45:c9:6c:31:e2:44:5d:2d:a9:9c:86:a9:4d:6a:0a:ee: 95:39:ef:1e:f1:59:f1:49:bf:00:ea:c8:aa:a8:b2:ba:d2:a7: a0:51:55:f9:e2:bd:55:b6:06:6b:2b:0d:c1:24:60:15:2d:2e: 1c:b6:84:6b:77:4c:57:4f:5f:a2:be:db:47:0c:c8:11:fe:c6: 51:7c:18:aa:9d:d2:49:92:9a:da:55:05:ca:03:16:11:c6:b6: 81:d2:54:5d:60:e1:2b:4a:d4:52:88:83:44:ac:af:20:19:73: 36:3c:3f:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG9rOAlGd0e6sYCOEGCDgkTaxB+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyhCRDFENDFCOTAz MkZGNTlDNDU1NTY0NDhDOEU0RUM5MUU1OTFGNDU5MB4XDTI2MDkyNjA2MjgwN1oX DTI2MDkyOTEzNTkwN1owMzExMC8GA1UEAxMoRUM3OTJBNDk5NUZDOTAyRkQ2RjEy MjUyMUJCMUVDMUMyQzYwNzY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuidlgr+g+/ux2j6JRioSiPxpz3KZbiGTwVRDd+oRr6KRVtfMo5JPcn+6kp PWQEAvAUuIfyq7s9mytMZkkKJ/e+UuId0nqitcOTvV2lh7t4qvKPon7IkLlG4Nx3 isZ1dB+7+LW9LZS9RQlYCNkZiOw1DXjm3sB80mwq/LJD8+t5QDoKkB+fC+mlVTkI 6Bdkgrlp4uzOaRu7z859OauKJbSUIvrYeKn5cLhDpUXI+vjCu9PFxTkoQTWdb4nk PLBlMTOvBCj8ifzCD2lZQ785hV/xv7gRDSa2Cd3WIMwuMi/nEotDUnLkfsL4oy2e 0RpSqmKXewLlForUs82s0y6iay0CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTseSpJ lfyQL9bxIlIbsewcLGB2TDAfBgNVHSMEGDAWgBS9HUG5Ay/1nEVVZEjI5OyR5ZH0 WTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzAvQkQxRDQx QjkwMzJGRjU5QzQ1NTU2NDQ4QzhFNEVDOTFFNTkxRjQ1OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdlIxQnVRTXY5 WnhGVldSSXlPVHNrZVdSOUZrLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8wL0JEMUQ0MUI5MDMyRkY1OUM0NTU1NjQ0OEM4RTRFQzkxRTU5MUY0 NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA2IATD5J5r9HxharH6wYTAOxmcqqdoYSIHb0HDKtDkafpM R1Aue9sJCq9AZHO9cYMeclSN8Dyn8A7YJfPJti9yvUUPio6oBPzYyIwuFx/hg8oz eK1R4o3R4beLrthAyM+pdIke46DnRryORK8z70h3oVZU71T7nAuT6YufdHor4Ubx 3uIINpS9CqsmD8tXMHpt3EXJbDHiRF0tqZyGqU1qCu6VOe8e8VnxSb8A6siqqLK6 0qegUVX54r1VtgZrKw3BJGAVLS4ctoRrd0xXT1+ivttHDMgR/sZRfBiqndJJkpra VQXKAxYRxraB0lRdYOErStRSiINErK8gGXM2PD/p -----END CERTIFICATE-----Generated at Sat Sep 26 13:35:32 2026 by rpki-client