$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: BEEtNMPA4feNuhyl2/tt9vpfShXZCqJ9Bi9BlcHBNGo= Subject key identifier: 94:FA:64:26:66:FC:59:68:2A:09:93:3E:05:EE:FC:9C:73:C7:68:21 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 074FFC6257ADED2E56FE533D0A5F8483CA8F3D86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 56 Signing time: Tue 21 Jul 2026 06:48:14 +0000 Manifest this update: Tue 21 Jul 2026 06:43:14 +0000 Manifest next update: Wed 22 Jul 2026 07:39:14 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: Qt1EiLZWcG60UCfFA0a0NG0ezk9GhAlycEWL/sRN+5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 07:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4f:fc:62:57:ad:ed:2e:56:fe:53:3d:0a:5f:84:83:ca:8f:3d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Jul 21 06:43:14 2026 GMT Not After : Jul 22 07:39:14 2026 GMT Subject: CN=94FA642666FC59682A09933E05EEFC9C73C76821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:5a:b5:cc:b2:67:fc:fc:bf:8e:71:ad:fe: 27:ea:12:09:2b:08:2b:d2:b3:d7:03:b8:15:aa:55: 75:86:37:05:6d:be:1b:07:7c:5b:ab:66:57:25:cd: 1f:8f:1f:80:88:30:71:99:7a:e5:6a:54:46:44:11: 1c:ed:ea:df:d7:47:cd:82:27:df:70:de:3d:ed:43: 1f:c3:2f:8e:5a:45:b4:10:b5:13:f4:64:2c:88:d4: 96:4e:0d:d6:d0:10:72:7a:ff:71:8c:f7:81:e9:48: ea:ed:fd:fd:b0:9d:72:eb:7e:66:61:ca:e3:6e:c5: 1e:42:34:76:42:23:97:44:cb:b0:9a:8a:ae:ab:6b: 90:4c:af:15:cd:79:f2:19:56:21:58:e1:bc:73:27: 8f:f8:53:b9:16:28:86:64:87:78:1a:66:13:dd:30: f1:b0:c1:ed:44:28:ba:07:4e:c3:94:e6:3f:c4:5c: da:a8:19:82:30:fc:ec:b9:ea:51:6b:73:ab:df:e0: b8:ed:70:84:91:b7:56:ea:dd:b8:c9:6c:07:a9:cf: a8:ef:a4:5a:d2:cd:bf:60:e1:05:9c:57:e8:fa:46: e1:36:85:e2:be:c2:66:10:71:a2:65:30:40:0a:03: bf:e2:37:bb:cb:0b:89:1b:b2:c7:ba:17:78:fb:44: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FA:64:26:66:FC:59:68:2A:09:93:3E:05:EE:FC:9C:73:C7:68:21 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:09:38:e5:6d:66:af:cf:21:99:3d:51:e0:51:61:0d:7e:16: 8d:70:e8:9d:be:d6:68:37:8e:95:81:60:f2:59:50:78:29:42: 22:26:70:62:f5:87:a6:27:89:b6:ff:09:58:09:2d:9e:fb:81: 0a:f9:f5:a6:31:ba:12:6b:3e:b8:a5:9d:b9:a2:64:4a:36:22: fa:ad:71:9a:67:75:4f:ff:c7:f2:d1:15:a9:c4:83:5b:70:84: 07:e9:5b:49:cf:d6:11:52:60:6e:ba:f7:96:e0:0f:d0:c9:88: 06:a8:14:51:94:2a:fb:92:c8:01:35:2b:b8:af:3a:c6:6b:f1: 25:9a:e8:ca:58:50:6a:08:15:88:9d:cd:1d:8a:ff:e7:b2:26: ee:f9:8c:5c:64:0e:2d:27:1e:91:86:55:3f:80:8b:81:28:61: 2b:7b:0f:f3:54:d5:67:63:26:5c:5b:d0:be:20:48:b0:8e:3c: c9:be:c1:b2:7d:7c:01:c8:bf:e9:c0:68:75:25:b8:26:13:37: a0:b3:28:28:64:38:c7:dd:4d:f5:f6:7a:86:3c:01:d1:79:81: ef:d5:33:0e:be:89:90:ed:51:f0:1f:d2:22:99:53:50:bc:42: 50:92:ab:90:eb:1b:d8:ee:c7:0c:d7:2c:82:17:ed:80:fc:e3: 33:e8:41:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB0/8Ylet7S5W/lM9Cl+Eg8qPPYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjA3MjEwNjQzMTRaFw0yNjA3MjIwNzM5MTRaMDMxMTAvBgNV BAMTKDk0RkE2NDI2NjZGQzU5NjgyQTA5OTMzRTA1RUVGQzlDNzNDNzY4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v1q1zLJn/Py/jnGt/ifqEgkr CCvSs9cDuBWqVXWGNwVtvhsHfFurZlclzR+PH4CIMHGZeuVqVEZEERzt6t/XR82C J99w3j3tQx/DL45aRbQQtRP0ZCyI1JZODdbQEHJ6/3GM94HpSOrt/f2wnXLrfmZh yuNuxR5CNHZCI5dEy7Caiq6ra5BMrxXNefIZViFY4bxzJ4/4U7kWKIZkh3gaZhPd MPGwwe1EKLoHTsOU5j/EXNqoGYIw/Oy56lFrc6vf4LjtcISRt1bq3bjJbAepz6jv pFrSzb9g4QWcV+j6RuE2heK+wmYQcaJlMEAKA7/iN7vLC4kbsse6F3j7RJq7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlPpkJmb8WWgqCZM+Be78nHPHaCEwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegk45W1mr88h mT1R4FFhDX4WjXDonb7WaDeOlYFg8llQeClCIiZwYvWHpieJtv8JWAktnvuBCvn1 pjG6Ems+uKWduaJkSjYi+q1xmmd1T//H8tEVqcSDW3CEB+lbSc/WEVJgbrr3luAP 0MmIBqgUUZQq+5LIATUruK86xmvxJZroylhQaggViJ3NHYr/57Im7vmMXGQOLSce kYZVP4CLgShhK3sP81TVZ2MmXFvQviBIsI48yb7Bsn18Aci/6cBodSW4JhM3oLMo KGQ4x91N9fZ6hjwB0XmB79UzDr6JkO1R8B/SIplTULxCUJKrkOsb2O7HDNcsghft gPzjM+hB2A== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:53 2026 by rpki-client