$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft File: BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft (raw, json) Hash identifier: 3C6lw0IKpujELQeawuRZtNFUaxelQCT2LMnO0+rRMYk= Subject key identifier: 23:47:96:49:AE:10:17:AD:86:F7:6A:A9:C1:4C:03:4D:72:CB:45:A3 Authority key identifier: BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06 Certificate issuer: /CN=BD637A9BB5A01C3B165E9F166CAB6CD626B43206 Certificate serial: 6F74BC20B8245D9063D43AA5E836AC04E32EAE25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft Manifest number: 09 Signing time: Mon 12 Oct 2026 06:01:41 +0000 Manifest this update: Mon 12 Oct 2026 05:56:41 +0000 Manifest next update: Thu 15 Oct 2026 06:53:41 +0000 Files and hashes: 1: BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl (hash: nat7ukFYI0duR2IjZAoWssUxBU4Djiivr4RCERsn5fU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:74:bc:20:b8:24:5d:90:63:d4:3a:a5:e8:36:ac:04:e3:2e:ae:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD637A9BB5A01C3B165E9F166CAB6CD626B43206 Validity Not Before: Oct 12 05:56:41 2026 GMT Not After : Oct 15 06:53:41 2026 GMT Subject: CN=23479649AE1017AD86F76AA9C14C034D72CB45A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:34:e3:a6:02:2d:24:94:24:f1:fb:02:c5: e7:50:27:c5:2b:b7:d3:3f:79:8b:53:ad:7c:3f:15: e4:62:84:72:87:ee:36:d6:41:f4:cc:5e:c2:91:43: bb:b9:22:ff:ba:1b:83:f8:c4:52:cf:7f:60:ac:c8: 28:20:e4:b2:10:43:89:ee:cb:e8:ad:7c:48:59:ac: 35:b1:6c:54:b6:ee:17:31:56:c0:18:82:40:67:a7: 8f:37:17:7a:26:19:0c:59:d4:ae:52:89:e7:f0:a5: 57:27:4f:6d:7d:2d:7b:02:f4:ec:b7:0c:7e:37:a8: 35:79:c9:2a:cb:98:8d:3e:3a:0b:9d:6a:ff:5d:7b: 8d:39:c6:b7:5f:34:fb:8b:91:3a:ba:3d:4a:89:2e: c8:7e:bd:c8:7a:60:13:e5:9e:cc:02:34:0e:11:38: 2c:08:4e:8d:d8:78:c5:ea:4d:20:df:8d:a8:59:d1: 45:a6:18:55:94:9e:c2:44:70:5a:34:19:16:1b:86: a8:cc:6e:e3:39:d7:d0:6f:94:ed:11:4e:93:51:99: 90:49:31:86:f5:f4:52:d5:41:0e:92:ca:86:8e:ee: c5:cf:df:1e:a6:97:d5:cd:64:a6:50:46:97:31:d6: 53:45:a5:63:be:ac:d6:07:7f:0c:bd:08:29:d9:73: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:47:96:49:AE:10:17:AD:86:F7:6A:A9:C1:4C:03:4D:72:CB:45:A3 X509v3 Authority Key Identifier: keyid:BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:81:f0:a2:af:67:b8:71:a1:93:35:01:cf:c0:87:01:45: 8b:18:50:0a:53:84:e2:53:e3:6d:09:cb:52:f5:0b:bc:4e:75: 8c:fd:8b:68:8b:8b:04:11:81:51:cb:3e:a1:77:1b:6d:03:5b: 55:c8:f7:7f:d6:a4:d4:94:c5:cd:9b:2d:dd:b1:87:7d:7d:66: 69:3f:3c:78:4d:6a:15:24:24:cc:80:77:68:95:eb:01:9b:64: f2:09:da:0c:48:27:e5:72:bc:e1:09:e6:09:c8:cb:b7:89:0b: ff:81:e0:22:14:cf:01:86:ce:37:22:b9:80:a4:1d:aa:d8:fd: 21:70:cc:25:82:09:70:54:3f:f8:97:35:9f:f7:1b:c4:c4:63: 27:1f:17:c6:ca:74:20:9d:ca:7b:3b:eb:8f:98:66:3f:75:4f: 38:ea:5d:53:8e:73:b4:72:c7:b2:d7:38:20:2a:32:6d:2c:f3: f5:20:df:b4:7c:76:71:63:5c:94:77:f8:a6:f6:0d:85:d4:15: 28:d0:bc:5f:b2:e2:37:e6:43:29:58:e6:d6:d5:46:2e:8c:90: 47:e8:ca:49:f9:bc:de:07:ea:58:2a:e1:6a:72:0e:37:a2:56: 23:66:0b:94:ff:b7:d9:3d:a6:d2:d6:d8:07:af:44:fa:88:29: 31:76:b6:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb3S8ILgkXZBj1Dql6DasBOMuriUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MzdBOUJCNUEwMUMzQjE2NUU5RjE2NkNBQjZDRDYy NkI0MzIwNjAeFw0yNjEwMTIwNTU2NDFaFw0yNjEwMTUwNjUzNDFaMDMxMTAvBgNV BAMTKDIzNDc5NjQ5QUUxMDE3QUQ4NkY3NkFBOUMxNEMwMzRENzJDQjQ1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyzTjpgItJJQk8fsCxedQJ8Ur t9M/eYtTrXw/FeRihHKH7jbWQfTMXsKRQ7u5Iv+6G4P4xFLPf2CsyCgg5LIQQ4nu y+itfEhZrDWxbFS27hcxVsAYgkBnp483F3omGQxZ1K5SiefwpVcnT219LXsC9Oy3 DH43qDV5ySrLmI0+Ogudav9de405xrdfNPuLkTq6PUqJLsh+vch6YBPlnswCNA4R OCwITo3YeMXqTSDfjahZ0UWmGFWUnsJEcFo0GRYbhqjMbuM519BvlO0RTpNRmZBJ MYb19FLVQQ6SyoaO7sXP3x6ml9XNZKZQRpcx1lNFpWO+rNYHfwy9CCnZc3SVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI0eWSa4QF62G92qpwUwDTXLLRaMwHwYDVR0j BBgwFoAUvWN6m7WgHDsWXp8WbKts1ia0MgYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 NTM0NDkwNzkyNjI0MTMzMS8wL0JENjM3QTlCQjVBMDFDM0IxNjVFOUYxNjZDQUI2 Q0Q2MjZCNDMyMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkQ2MzdBOUJCNUEwMUMzQjE2NUU5RjE2NkNBQjZDRDYyNkI0MzIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTUzNDQ5MDc5MjYyNDEzMzEvMC9CRDYzN0E5QkI1QTAx QzNCMTY1RTlGMTY2Q0FCNkNENjI2QjQzMjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQyB8KKvZ7hx oZM1Ac/AhwFFixhQClOE4lPjbQnLUvULvE51jP2LaIuLBBGBUcs+oXcbbQNbVcj3 f9ak1JTFzZst3bGHfX1maT88eE1qFSQkzIB3aJXrAZtk8gnaDEgn5XK84QnmCcjL t4kL/4HgIhTPAYbONyK5gKQdqtj9IXDMJYIJcFQ/+Jc1n/cbxMRjJx8Xxsp0IJ3K ezvrj5hmP3VPOOpdU45ztHLHstc4ICoybSzz9SDftHx2cWNclHf4pvYNhdQVKNC8 X7LiN+ZDKVjm1tVGLoyQR+jKSfm83gfqWCrhanION6JWI2YLlP+32T2m0tbYB69E +ogpMXa2iQ== -----END CERTIFICATE-----Generated at Mon Oct 12 19:49:34 2026 by rpki-client