$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: l5BRRJFoqZn+EWp3q6WMZ70tIQ2HSBt/fpxpNp5dTIo= Subject key identifier: 84:E5:59:E7:F7:3F:53:EF:89:78:D8:6F:E8:5D:D7:1F:81:B0:EC:3D Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 51426144D3E217A040DB83266CE735C8EC7C942E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 5B Signing time: Sat 25 Jul 2026 00:02:27 +0000 Manifest this update: Fri 24 Jul 2026 23:57:27 +0000 Manifest next update: Sun 26 Jul 2026 00:28:27 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: 9Z+V37O84yPz2/w5Vwa0RJvDH8zCQvPQUp3xGP1n5aY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:42:61:44:d3:e2:17:a0:40:db:83:26:6c:e7:35:c8:ec:7c:94:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Jul 24 23:57:27 2026 GMT Not After : Jul 26 00:28:27 2026 GMT Subject: CN=84E559E7F73F53EF8978D86FE85DD71F81B0EC3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:15:40:d6:72:9c:72:d3:61:cc:13:3d:de: 07:6a:79:95:09:a6:99:b4:69:7f:b9:22:c0:5e:07: 3e:b2:73:f2:e8:09:b7:ae:78:46:4a:05:0c:b8:22: 56:0b:6e:06:a6:0b:c1:69:c7:46:09:be:0e:8e:c4: 46:d7:5c:3d:5a:44:21:71:08:26:1c:a8:c0:d5:d9: a5:45:74:3d:19:cf:b1:eb:71:5f:06:6b:0e:b7:fd: 2f:49:25:ab:86:7b:f2:b3:83:00:73:a4:90:55:d2: 30:a3:eb:92:43:08:d3:83:b9:25:b1:dd:16:ea:13: 0e:65:b8:0b:b1:24:24:d0:80:67:d5:81:d3:b0:39: dd:61:7f:96:42:c5:e5:25:bc:2b:7f:df:41:d1:d9: a8:72:0b:b1:50:0f:6e:cd:6d:c0:90:31:7b:e2:08: f6:dd:ec:7a:e7:e3:64:c1:43:31:2b:f0:29:18:86: 84:4a:35:f9:73:51:c8:0e:85:ff:35:f3:d2:bb:fb: 76:cd:62:79:c3:bc:ab:e6:50:06:e1:c2:e8:23:00: ff:84:cc:74:ab:c4:4e:b1:6f:a5:50:19:fc:4a:94: 92:23:03:55:83:98:65:98:1a:23:72:46:46:ed:2a: 22:5a:42:64:c3:c5:0a:00:da:93:89:fe:d0:ce:2e: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E5:59:E7:F7:3F:53:EF:89:78:D8:6F:E8:5D:D7:1F:81:B0:EC:3D X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:7f:e7:44:13:96:59:fa:94:8b:51:4c:27:25:b3:30:71:fe: c8:75:4f:88:b7:d8:9a:86:e2:cc:04:a8:72:40:ba:81:8e:d9: d7:ab:9e:a9:de:45:6c:bd:6b:61:d4:ad:03:3f:47:80:f5:b8: 5d:da:72:78:68:9f:b3:c8:0e:b6:d7:3b:40:fc:cf:71:81:d0: 59:3e:4f:4c:24:75:91:ca:03:24:f9:e8:90:18:d1:ab:da:b6: a1:de:90:de:a9:1f:96:db:9a:d1:63:ba:07:0d:76:8c:8a:ac: d9:27:9b:2f:0b:dd:5c:38:7e:de:43:b5:5e:2b:23:c9:d5:df: 40:4b:d3:6e:1b:ed:c2:cc:c2:5a:14:c6:87:40:67:87:b2:e3: 27:dd:f3:c6:d5:22:f4:a0:50:0f:1d:9b:03:d8:fe:44:92:83: a2:b9:87:7a:d1:ab:ef:af:73:a9:b0:c3:a6:31:b5:29:81:9b: 88:7d:61:77:e2:38:a2:d3:37:9e:77:cc:c2:da:fc:5d:29:01: 5c:a3:11:29:3c:94:94:1a:11:7b:0f:a7:f6:d5:78:ed:ee:09: d3:74:73:bd:94:db:1c:2c:65:e9:1d:1d:87:61:e4:5b:01:b5: 90:62:07:31:62:e1:be:a5:44:33:59:83:49:53:62:86:a6:79: 96:72:f6:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUUJhRNPiF6BA24MmbOc1yOx8lC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjA3MjQyMzU3MjdaFw0yNjA3MjYwMDI4MjdaMDMxMTAvBgNV BAMTKDg0RTU1OUU3RjczRjUzRUY4OTc4RDg2RkU4NURENzFGODFCMEVDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGBVA1nKcctNhzBM93gdqeZUJ ppm0aX+5IsBeBz6yc/LoCbeueEZKBQy4IlYLbgamC8Fpx0YJvg6OxEbXXD1aRCFx CCYcqMDV2aVFdD0Zz7HrcV8Gaw63/S9JJauGe/KzgwBzpJBV0jCj65JDCNODuSWx 3RbqEw5luAuxJCTQgGfVgdOwOd1hf5ZCxeUlvCt/30HR2ahyC7FQD27NbcCQMXvi CPbd7Hrn42TBQzEr8CkYhoRKNflzUcgOhf8189K7+3bNYnnDvKvmUAbhwugjAP+E zHSrxE6xb6VQGfxKlJIjA1WDmGWYGiNyRkbtKiJaQmTDxQoA2pOJ/tDOLn0bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhOVZ5/c/U++JeNhv6F3XH4Gw7D0wHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzX/nRBOWWfqU i1FMJyWzMHH+yHVPiLfYmobizASockC6gY7Z16ueqd5FbL1rYdStAz9HgPW4Xdpy eGifs8gOttc7QPzPcYHQWT5PTCR1kcoDJPnokBjRq9q2od6Q3qkfltua0WO6Bw12 jIqs2SebLwvdXDh+3kO1XisjydXfQEvTbhvtwszCWhTGh0Bnh7LjJ93zxtUi9KBQ Dx2bA9j+RJKDormHetGr769zqbDDpjG1KYGbiH1hd+I4otM3nnfMwtr8XSkBXKMR KTyUlBoRew+n9tV47e4J03RzvZTbHCxl6R0dh2HkWwG1kGIHMWLhvqVEM1mDSVNi hqZ5lnL2JA== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:27 2026 by rpki-client