$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: cKmCsBUX7UczbNydEoFJDxVWsIRCdhzXS0qZX6r4Y74= Subject key identifier: 84:81:92:AE:60:B9:9C:5F:32:26:A1:D6:84:8C:97:93:19:E3:FB:D3 Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 5A39DC2BEBB81367C830A1C5CC66F40FFD18349B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: 90 Signing time: Thu 23 Jul 2026 20:09:27 +0000 Manifest this update: Thu 23 Jul 2026 20:04:27 +0000 Manifest next update: Fri 24 Jul 2026 22:29:27 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: FqAPY+liLn4KY+eKPqpd5WpyqTL+c27C+MgQMW+rW1g=) 2: AS4847.roa (hash: 3iSNNi2FuNtir737Ugji4/SXTB5NeQgm9GdlYenOm+U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:39:dc:2b:eb:b8:13:67:c8:30:a1:c5:cc:66:f4:0f:fd:18:34:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Jul 23 20:04:27 2026 GMT Not After : Jul 24 22:29:27 2026 GMT Subject: CN=848192AE60B99C5F3226A1D6848C979319E3FBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:7d:e9:cc:b0:5a:13:16:6b:4f:77:01:09: 88:7c:7e:82:7d:bb:21:a4:ba:12:d5:ec:e8:e7:74: d6:50:7b:ad:78:d2:19:02:45:35:60:35:b6:c3:22: 1d:ed:01:75:50:88:5b:7c:d2:52:c1:f4:8e:22:5f: 39:f9:e7:f7:b5:c5:6b:bc:3e:12:7d:ad:d9:15:2d: 57:0a:b3:16:ad:d3:b2:df:64:2d:40:77:44:15:f5: 6d:a3:4b:f2:e4:09:4b:39:ee:94:6d:1b:cf:d9:b3: c0:bf:46:28:6a:e4:d5:6f:48:1b:f8:b7:80:43:64: a4:f8:f5:67:c4:61:14:42:83:b0:c5:cc:b6:a9:1b: d7:d6:d1:23:b6:d5:01:58:79:d4:9f:fd:48:e7:00: 68:45:95:41:2d:3f:65:6a:26:49:ed:15:f2:5a:a6: 58:91:0b:0b:72:9a:0f:a9:0a:a2:c1:f1:83:fa:d1: fe:70:9a:72:cb:3c:bc:f2:3b:c4:fc:82:0d:8c:86: 5f:a8:81:3c:a5:dc:c8:17:49:2d:07:14:7b:aa:23: 4d:ad:d9:b1:84:6e:76:43:84:d9:9a:4c:39:b2:65: 83:21:1c:80:7c:d7:d1:c2:5c:2d:15:26:61:19:9c: b3:47:2c:73:4f:72:60:e5:6b:11:4c:5c:36:ab:68: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:81:92:AE:60:B9:9C:5F:32:26:A1:D6:84:8C:97:93:19:E3:FB:D3 X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a7:1c:6b:f1:b2:55:39:97:b1:f5:a1:03:b7:30:4a:b4:73: 04:53:84:1e:d2:08:50:15:8d:58:05:a4:02:9e:37:b2:65:46: 48:c4:1f:1b:a9:f2:c5:37:f3:ca:93:e9:c1:6b:d3:30:cc:a2: 46:8d:05:61:dd:af:75:bb:49:95:0b:fe:f2:1c:2b:ed:93:78: cb:c7:57:9f:ec:d7:6f:71:e7:0c:4a:2b:b8:6a:82:a0:b4:76: c0:f7:f6:55:3d:fa:04:55:af:bf:75:0b:f7:71:55:dc:19:ff: 83:30:76:41:f2:86:08:ad:40:49:40:06:44:2e:95:1d:9f:18: f7:0f:74:18:68:38:e8:a6:fc:0e:0b:27:61:d4:1e:87:f8:00: 76:e8:07:64:d2:0f:8b:0f:97:46:93:01:68:d3:ef:d0:c7:f8: a4:a3:5a:00:a1:8e:95:c8:b5:be:70:c7:72:44:f0:8e:bb:a0: dc:0f:81:41:41:03:2b:2e:28:d7:bb:39:36:6e:97:20:51:a2: 73:17:53:ed:48:17:52:fe:8f:46:53:f5:c5:35:23:80:3e:86: 44:6b:77:df:b1:74:fa:c7:e4:d5:83:2b:78:fd:75:85:fb:c7: 1c:3c:77:19:8b:6b:82:2d:b7:8c:14:40:6b:ee:09:0d:11:ce: 6f:32:a0:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWjncK+u4E2fIMKHFzGb0D/0YNJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjA3MjMyMDA0MjdaFw0yNjA3MjQyMjI5MjdaMDMxMTAvBgNV BAMTKDg0ODE5MkFFNjBCOTlDNUYzMjI2QTFENjg0OEM5NzkzMTlFM0ZCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmX3pzLBaExZrT3cBCYh8foJ9 uyGkuhLV7OjndNZQe6140hkCRTVgNbbDIh3tAXVQiFt80lLB9I4iXzn55/e1xWu8 PhJ9rdkVLVcKsxat07LfZC1Ad0QV9W2jS/LkCUs57pRtG8/Zs8C/Rihq5NVvSBv4 t4BDZKT49WfEYRRCg7DFzLapG9fW0SO21QFYedSf/UjnAGhFlUEtP2VqJkntFfJa pliRCwtymg+pCqLB8YP60f5wmnLLPLzyO8T8gg2Mhl+ogTyl3MgXSS0HFHuqI02t 2bGEbnZDhNmaTDmyZYMhHIB819HCXC0VJmEZnLNHLHNPcmDlaxFMXDaraGJhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhIGSrmC5nF8yJqHWhIyXkxnj+9MwHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKcca/GyVTmX sfWhA7cwSrRzBFOEHtIIUBWNWAWkAp43smVGSMQfG6nyxTfzypPpwWvTMMyiRo0F Yd2vdbtJlQv+8hwr7ZN4y8dXn+zXb3HnDEoruGqCoLR2wPf2VT36BFWvv3UL93FV 3Bn/gzB2QfKGCK1ASUAGRC6VHZ8Y9w90GGg46Kb8DgsnYdQeh/gAdugHZNIPiw+X RpMBaNPv0Mf4pKNaAKGOlci1vnDHckTwjrug3A+BQUEDKy4o17s5Nm6XIFGicxdT 7UgXUv6PRlP1xTUjgD6GRGt337F0+sfk1YMreP11hfvHHDx3GYtrgi23jBRAa+4J DRHObzKgMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:30:53 2026 by rpki-client