$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: kZVBgdeDe76mwR036efXVJeLh/YRVo8EQS79o8DCZhs= Subject key identifier: CE:8C:9E:E4:64:DF:46:7B:DE:EE:72:4D:56:26:30:6A:1B:EE:30:2B Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 1EDD2DEC194A9733992125CA42BB5AA35A0FC7F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: D5 Signing time: Wed 14 Oct 2026 06:58:40 +0000 Manifest this update: Wed 14 Oct 2026 06:53:40 +0000 Manifest next update: Sat 17 Oct 2026 07:14:40 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: lglyNGLtNB3HHdmQ6W6gz9NMgAkwP6IN9yDPKJYD1jc=) 2: AS4847.roa (hash: nuSY6+frDMEdAAT8bzwajeQyRxhduchPsSLgOeZbGPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:2d:ec:19:4a:97:33:99:21:25:ca:42:bb:5a:a3:5a:0f:c7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Oct 14 06:53:40 2026 GMT Not After : Oct 17 07:14:40 2026 GMT Subject: CN=CE8C9EE464DF467BDEEE724D5626306A1BEE302B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:5a:55:67:23:82:a1:c0:70:7a:cf:f0:53: b9:2d:11:3a:48:9b:e0:8b:57:05:4f:b1:f8:f1:30: b9:7e:61:c8:97:18:d3:05:22:9a:62:29:9b:a6:eb: 79:6a:7e:66:40:ec:bf:9e:79:a0:dd:c4:9d:f7:06: 3c:40:b3:6a:85:f2:cb:6e:f6:e7:82:37:22:c7:bb: cf:d5:32:29:07:b5:b2:40:56:1b:d6:41:02:f6:16: 2a:0e:3c:aa:87:4b:d3:7f:f4:42:0a:c5:e5:7a:6b: da:66:2d:8e:94:aa:4c:4c:75:c8:c2:99:d0:9b:00: 15:95:21:45:8e:1e:e1:aa:da:bf:af:8f:77:af:15: a7:11:db:56:b3:42:95:03:28:57:35:8a:26:c9:17: 2b:8c:4e:3a:fd:2e:9b:ab:5a:b2:cf:39:d2:1f:ea: d7:51:a2:f3:91:92:1a:e3:bf:59:e8:8d:a2:85:19: de:a0:d4:53:b7:3c:a3:b9:02:01:33:c0:ab:0d:d8: c5:38:c4:d2:97:f4:2b:57:a4:d9:f2:76:b3:38:09: f2:9b:6c:fc:69:ab:59:5a:47:64:35:84:c4:7b:2a: ed:a6:f0:7e:cd:45:79:47:30:14:fb:b9:a5:a7:a3: c4:1c:e1:4a:40:fd:64:12:e7:12:6d:3b:3d:9a:85: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8C:9E:E4:64:DF:46:7B:DE:EE:72:4D:56:26:30:6A:1B:EE:30:2B X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:39:05:6c:e7:b4:24:33:20:f6:48:87:13:71:43:25:08:27: 46:ea:fd:ae:f5:6c:7d:b1:30:5a:21:da:9d:ff:ff:6c:8e:30: 3e:3e:31:76:80:1a:54:80:96:2b:fa:58:9c:0b:24:57:0d:56: c4:3f:ce:80:ad:a8:85:99:88:db:f4:0a:c5:82:8b:77:3f:a1: a7:1f:1f:82:cd:ba:31:ac:94:44:ea:b0:94:2e:9a:3f:8d:df: 34:7c:91:23:ca:ed:2c:66:f1:d7:33:f9:76:84:b3:dc:a5:9f: bf:98:a9:b6:12:12:f8:66:18:64:bc:b4:00:d1:e0:23:8c:e4: 18:d9:60:f5:ba:30:e7:51:4f:60:7e:7a:8f:e3:64:e4:9b:ce: 5e:1d:09:0d:e2:f8:54:32:5a:ba:65:dc:0c:89:f5:a4:1b:c6: db:12:5b:f0:2a:be:18:ad:d9:b6:4c:a1:c7:92:5b:30:eb:e8: 5f:3f:a1:4b:82:62:3b:74:bf:68:1e:cb:7e:77:3c:9e:fc:17: 2f:52:e1:67:96:d2:e1:4f:6a:0e:40:32:64:72:2e:5d:d9:f2: f4:b9:d1:c1:7d:f8:00:47:2d:bf:73:cf:12:54:a7:40:d3:78: e4:7e:50:20:b2:58:31:33:97:0a:f4:41:6f:21:72:5b:c6:b1: 8a:f1:81:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHt0t7BlKlzOZISXKQrtao1oPx/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjEwMTQwNjUzNDBaFw0yNjEwMTcwNzE0NDBaMDMxMTAvBgNV BAMTKENFOEM5RUU0NjRERjQ2N0JERUVFNzI0RDU2MjYzMDZBMUJFRTMwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9lpVZyOCocBwes/wU7ktETpI m+CLVwVPsfjxMLl+YciXGNMFIppiKZum63lqfmZA7L+eeaDdxJ33BjxAs2qF8stu 9ueCNyLHu8/VMikHtbJAVhvWQQL2FioOPKqHS9N/9EIKxeV6a9pmLY6UqkxMdcjC mdCbABWVIUWOHuGq2r+vj3evFacR21azQpUDKFc1iibJFyuMTjr9LpurWrLPOdIf 6tdRovORkhrjv1nojaKFGd6g1FO3PKO5AgEzwKsN2MU4xNKX9CtXpNnydrM4CfKb bPxpq1laR2Q1hMR7Ku2m8H7NRXlHMBT7uaWno8Qc4UpA/WQS5xJtOz2ahdNlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzoye5GTfRnve7nJNViYwahvuMCswHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzkFbOe0JDMg 9kiHE3FDJQgnRur9rvVsfbEwWiHanf//bI4wPj4xdoAaVICWK/pYnAskVw1WxD/O gK2ohZmI2/QKxYKLdz+hpx8fgs26MayUROqwlC6aP43fNHyRI8rtLGbx1zP5doSz 3KWfv5ipthIS+GYYZLy0ANHgI4zkGNlg9bow51FPYH56j+Nk5JvOXh0JDeL4VDJa umXcDIn1pBvG2xJb8Cq+GK3Ztkyhx5JbMOvoXz+hS4JiO3S/aB7Lfnc8nvwXL1Lh Z5bS4U9qDkAyZHIuXdny9LnRwX34AEctv3PPElSnQNN45H5QILJYMTOXCvRBbyFy W8axivGB8Q== -----END CERTIFICATE-----Generated at Thu Oct 15 18:37:29 2026 by rpki-client