$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: duq0kL1qdZpyx5yroiuGjMWY9rmOKIHpdaX1yKr4zKw= Subject key identifier: 9A:9A:24:67:32:A8:07:6E:90:68:6B:47:D2:56:8F:41:4E:1B:6C:BB Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 18D6A3D3A6E96BCA9F5CBCF39F6E4856B4BAD623 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 48 Signing time: Fri 24 Jul 2026 01:35:01 +0000 Manifest this update: Fri 24 Jul 2026 01:30:01 +0000 Manifest next update: Sat 25 Jul 2026 02:30:01 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: nJvTPxLxhLB+oRRM7WcjrdecDvBAlhwLoeP0JtdcQZs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:a3:d3:a6:e9:6b:ca:9f:5c:bc:f3:9f:6e:48:56:b4:ba:d6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Jul 24 01:30:01 2026 GMT Not After : Jul 25 02:30:01 2026 GMT Subject: CN=9A9A246732A8076E90686B47D2568F414E1B6CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:9d:86:70:28:39:b5:a6:fc:14:30:0a:2f: 98:6d:8f:dd:40:c0:5f:88:d5:45:fe:39:b1:e6:fd: cf:9d:d4:ce:86:ec:e8:34:b0:4f:83:aa:57:a1:2c: ec:e8:0b:79:9b:09:be:c0:7c:ca:48:d3:aa:fa:e8: db:1d:98:79:b7:9d:1a:e4:c0:73:6c:66:28:02:f0: ee:7b:c7:2a:e9:d8:e9:df:63:e8:bd:5c:f7:c0:26: a7:0c:0f:e7:61:e3:94:3b:80:fa:81:da:4a:6c:ae: 87:01:de:72:0d:dd:91:1f:77:f8:f5:57:a5:e8:f8: 7a:bb:92:55:40:ba:bc:cb:68:d1:ba:32:3b:64:14: de:cf:73:35:bb:c8:a8:1b:fc:ea:9c:62:a0:a9:73: 0b:8f:b2:3a:8b:da:fe:22:7c:6b:6b:dd:a3:6b:55: 13:8f:a8:57:be:f8:de:c9:9c:f5:c3:20:b6:15:7b: 5b:ec:7e:40:00:b6:e2:23:55:b7:31:42:fd:41:21: 0f:c7:cf:91:2c:91:fb:0a:c7:66:29:53:50:a6:79: a2:d4:a0:25:bb:04:9a:e3:26:1e:ac:ae:7f:ba:b5: 23:2a:a8:74:f2:b4:53:ea:9d:2d:67:72:9d:fa:02: 82:6c:c8:65:bf:0f:0d:92:d6:36:a9:1b:28:ef:4f: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9A:24:67:32:A8:07:6E:90:68:6B:47:D2:56:8F:41:4E:1B:6C:BB X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a2:4b:4d:d6:fc:26:f5:c6:19:f6:22:90:d6:d9:3c:c2:cb: 8a:13:c7:41:94:fa:37:70:1a:54:78:49:99:a9:21:36:d2:24: 8b:c0:24:82:bc:9c:81:6b:72:a1:e7:72:f8:e2:43:67:67:48: cd:aa:b2:92:94:ce:d7:9b:08:de:1f:ff:dd:b0:3c:74:30:63: 84:b9:09:60:0b:72:06:15:76:73:6b:bb:66:1b:46:f7:d7:b1: d6:35:4f:1e:29:a8:c6:a6:ac:73:67:2a:c2:79:33:21:18:09: 60:1d:30:89:a7:1d:6a:d4:8b:82:06:5d:9d:9d:26:7e:c5:7f: c4:d3:82:0d:da:b9:ad:66:b1:1d:d6:db:73:ec:da:a2:7a:e5: 6a:ce:d6:39:7d:71:82:38:aa:56:09:97:f7:aa:37:ac:98:af: 37:c4:d5:d7:b2:91:99:af:ad:fb:8b:82:8d:fc:46:9f:be:c4: 92:aa:27:25:9c:51:2f:04:f9:07:40:9e:04:d7:0c:39:93:15: 90:56:31:32:2b:5f:00:3e:80:24:f5:35:f8:24:46:cd:98:f8: d3:80:8e:9d:20:70:19:21:7b:17:38:32:25:05:22:90:82:28: 03:c1:c4:23:1b:fa:1d:21:95:ff:a7:83:0c:db:29:a0:a1:27: 5a:ce:92:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGNaj06bpa8qfXLzzn25IVrS61iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjA3MjQwMTMwMDFaFw0yNjA3MjUwMjMwMDFaMDMxMTAvBgNV BAMTKDlBOUEyNDY3MzJBODA3NkU5MDY4NkI0N0QyNTY4RjQxNEUxQjZDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAZ2GcCg5tab8FDAKL5htj91A wF+I1UX+ObHm/c+d1M6G7Og0sE+DqlehLOzoC3mbCb7AfMpI06r66NsdmHm3nRrk wHNsZigC8O57xyrp2OnfY+i9XPfAJqcMD+dh45Q7gPqB2kpsrocB3nIN3ZEfd/j1 V6Xo+Hq7klVAurzLaNG6MjtkFN7PczW7yKgb/OqcYqCpcwuPsjqL2v4ifGtr3aNr VROPqFe++N7JnPXDILYVe1vsfkAAtuIjVbcxQv1BIQ/Hz5EskfsKx2YpU1CmeaLU oCW7BJrjJh6srn+6tSMqqHTytFPqnS1ncp36AoJsyGW/Dw2S1japGyjvTx1JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmpokZzKoB26QaGtH0laPQU4bbLswHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKJLTdb8JvXG GfYikNbZPMLLihPHQZT6N3AaVHhJmakhNtIki8AkgrycgWtyoedy+OJDZ2dIzaqy kpTO15sI3h//3bA8dDBjhLkJYAtyBhV2c2u7ZhtG99ex1jVPHimoxqasc2cqwnkz IRgJYB0wiacdatSLggZdnZ0mfsV/xNOCDdq5rWaxHdbbc+zaonrlas7WOX1xgjiq VgmX96o3rJivN8TV17KRma+t+4uCjfxGn77EkqonJZxRLwT5B0CeBNcMOZMVkFYx MitfAD6AJPU1+CRGzZj404COnSBwGSF7FzgyJQUikIIoA8HEIxv6HSGV/6eDDNsp oKEnWs6SMg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:22:33 2026 by rpki-client