$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: bn8kqKrEr+Y8day7TFXTKrxbRLaPNVKebo3SKYqiTT8= Subject key identifier: 2E:12:60:FD:9A:4B:30:55:A4:0A:C8:97:E9:8A:4E:92:33:0A:B0:00 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 0E2CCFE8DD156D85A1EF6834F7AC506726724FEA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 9E Signing time: Tue 13 Oct 2026 03:32:41 +0000 Manifest this update: Tue 13 Oct 2026 03:27:41 +0000 Manifest next update: Fri 16 Oct 2026 05:13:41 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: e/HmR2u+v8kYWoLZJ0G9d5Ss7Rz+Dpdpy+EHoAclZnc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 05:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2c:cf:e8:dd:15:6d:85:a1:ef:68:34:f7:ac:50:67:26:72:4f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Oct 13 03:27:41 2026 GMT Not After : Oct 16 05:13:41 2026 GMT Subject: CN=2E1260FD9A4B3055A40AC897E98A4E92330AB000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:02:f1:33:84:2a:51:9b:62:ce:ba:10:aa: 18:78:a0:03:ca:7a:63:c7:cc:ff:e8:33:60:15:5f: 2e:40:6b:3d:66:39:6a:aa:d4:52:08:da:58:eb:a3: 29:88:ba:b4:d4:2e:55:eb:8b:3e:31:af:92:e3:4e: f3:33:20:19:22:9b:bb:d5:cc:59:a9:1d:5a:d4:7f: 40:1d:fa:16:d8:08:14:04:7e:f1:81:0c:d5:e6:1e: 9e:38:32:b2:79:f1:a9:4a:96:7c:91:49:53:0d:1a: 48:0a:c3:15:87:db:d0:4a:40:96:0d:98:54:91:97: 79:ff:e0:d2:56:82:21:af:fb:74:75:cb:ef:6d:8f: ef:dd:c0:6c:d1:19:e5:78:a6:eb:89:e9:94:89:2d: 6d:53:fb:8f:ec:3f:08:e7:81:a3:7b:91:98:e9:cb: ef:db:aa:fb:7a:43:56:91:1d:50:1c:72:7a:8d:56: 61:b4:89:93:c1:66:f5:e5:d2:3f:16:5f:7e:24:ad: 94:c4:05:16:99:2a:a5:53:c6:7d:25:28:a4:09:6d: c0:bd:8b:de:c3:77:54:45:3f:0d:58:c1:f6:c8:66: b9:39:e1:25:4c:92:36:a7:e4:6e:f0:bd:e6:86:9b: 38:b9:d7:95:17:ba:89:30:27:fc:09:27:db:31:a3: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:60:FD:9A:4B:30:55:A4:0A:C8:97:E9:8A:4E:92:33:0A:B0:00 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:a3:11:c4:5f:49:ae:4c:c3:0d:57:a6:25:1e:c8:06:bb:91: 52:28:85:7f:2a:16:be:3a:65:50:a7:1b:d8:64:22:8c:4f:6a: 2c:c7:33:0e:e2:84:95:c4:89:2d:05:d3:0c:32:96:26:4d:10: c0:9c:e2:e8:68:c4:b2:d9:3f:94:33:81:dc:0a:be:28:e4:ca: ff:2c:90:3b:9a:d2:82:bd:1f:1c:62:49:c7:b8:90:8a:74:8d: 64:ee:d6:90:9c:63:4d:ea:ec:dc:f5:1a:49:0c:0d:31:cb:18: 33:51:81:9d:aa:b4:87:8b:c5:53:2e:1b:db:5a:4f:5e:05:3e: 5e:52:51:83:1f:c1:65:9e:31:61:02:4d:a4:97:df:e7:40:8b: 48:4f:2d:a9:c7:84:ac:c3:fa:61:b4:af:2e:e2:4b:55:00:aa: 8d:e4:5b:69:bd:98:de:b1:3e:b7:f9:c4:5e:d5:cc:b3:c3:c3: 38:73:43:27:fc:9a:1f:97:fb:64:44:7c:57:3e:3f:cb:62:db: e4:e9:9c:7c:22:cb:6e:5c:0f:1a:af:e2:7b:e9:5a:48:4c:2d: a8:bd:04:dc:93:08:0f:7e:06:fe:23:f0:c2:9d:b2:a4:20:62: d2:e5:60:94:b3:05:88:e6:db:53:aa:91:82:93:6c:ed:92:0a: a2:70:18:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDizP6N0VbYWh72g096xQZyZyT+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjEwMTMwMzI3NDFaFw0yNjEwMTYwNTEzNDFaMDMxMTAvBgNV BAMTKDJFMTI2MEZEOUE0QjMwNTVBNDBBQzg5N0U5OEE0RTkyMzMwQUIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHALxM4QqUZtizroQqhh4oAPK emPHzP/oM2AVXy5Aaz1mOWqq1FII2ljroymIurTULlXriz4xr5LjTvMzIBkim7vV zFmpHVrUf0Ad+hbYCBQEfvGBDNXmHp44MrJ58alKlnyRSVMNGkgKwxWH29BKQJYN mFSRl3n/4NJWgiGv+3R1y+9tj+/dwGzRGeV4puuJ6ZSJLW1T+4/sPwjngaN7kZjp y+/bqvt6Q1aRHVAccnqNVmG0iZPBZvXl0j8WX34krZTEBRaZKqVTxn0lKKQJbcC9 i97Dd1RFPw1YwfbIZrk54SVMkjan5G7wveaGmzi515UXuokwJ/wJJ9sxo6x1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULhJg/ZpLMFWkCsiX6YpOkjMKsAAwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA26MRxF9JrkzD DVemJR7IBruRUiiFfyoWvjplUKcb2GQijE9qLMczDuKElcSJLQXTDDKWJk0QwJzi 6GjEstk/lDOB3Aq+KOTK/yyQO5rSgr0fHGJJx7iQinSNZO7WkJxjTers3PUaSQwN McsYM1GBnaq0h4vFUy4b21pPXgU+XlJRgx/BZZ4xYQJNpJff50CLSE8tqceErMP6 YbSvLuJLVQCqjeRbab2Y3rE+t/nEXtXMs8PDOHNDJ/yaH5f7ZER8Vz4/y2Lb5Omc fCLLblwPGq/ie+laSEwtqL0E3JMID34G/iPwwp2ypCBi0uVglLMFiObbU6qRgpNs 7ZIKonAY7w== -----END CERTIFICATE-----Generated at Wed Oct 14 17:30:34 2026 by rpki-client