$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json) Hash identifier: AfEQ2/uRSwbvAuwcb9fk+P3gTOv6fi9Q4oihfqOkzVA= Subject key identifier: BF:86:85:5F:F1:DA:71:83:7C:E7:D2:32:28:9C:57:9A:20:B5:4F:27 Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Certificate serial: 52D192661CB786304176FDFD438E5E0C28AC3C4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft Manifest number: 4A Signing time: Tue 21 Apr 2026 19:15:22 +0000 Manifest this update: Tue 21 Apr 2026 19:10:22 +0000 Manifest next update: Wed 22 Apr 2026 22:31:22 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: 9uRYnAO8nOSezCdPwOF/prKWQiweaPmO/eVQz7VBhus=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 16:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d1:92:66:1c:b7:86:30:41:76:fd:fd:43:8e:5e:0c:28:ac:3c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A Validity Not Before: Apr 21 19:10:22 2026 GMT Not After : Apr 22 22:31:22 2026 GMT Subject: CN=BF86855FF1DA71837CE7D232289C579A20B54F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:3e:68:f8:bd:14:22:cf:a8:69:e7:7d:64: 6a:09:98:18:4d:18:29:82:f5:a5:d5:be:07:e2:df: da:ca:df:84:98:5a:06:c7:43:16:01:20:03:c5:83: f7:f2:fe:0a:18:41:bd:06:39:f1:2a:63:dc:31:d7: 54:45:0a:b1:a6:5b:51:b7:bb:b4:76:05:68:ef:91: 76:cd:f7:1b:17:fe:f5:eb:09:c3:3b:22:59:08:8b: 45:ad:99:3c:4b:d4:0f:cd:74:79:bc:85:4e:c6:54: 39:d5:68:06:11:15:15:8c:6d:c0:61:fd:8f:36:4b: 2d:ce:77:1b:5f:2f:84:61:90:93:26:e3:d4:4e:a4: b3:47:a0:3a:ec:d4:8d:09:23:61:23:b0:f3:c5:43: 9c:7d:e8:d3:25:6f:4f:cf:46:91:bd:49:7e:90:69: 00:2a:c2:7d:f0:d8:38:db:2b:18:a3:85:e6:d6:1a: c8:14:b7:d9:92:7f:49:93:c4:86:e0:41:ea:26:69: f8:a8:c3:22:8d:9f:32:20:b9:82:16:c2:ce:44:0c: fd:3e:82:93:15:87:a6:4d:91:4b:d8:f1:05:89:53: 5c:eb:46:21:82:0e:22:ac:0f:bc:52:18:1e:85:eb: 1d:58:7b:c1:5c:93:f6:6c:ef:3f:16:b3:c4:8e:1d: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:86:85:5F:F1:DA:71:83:7C:E7:D2:32:28:9C:57:9A:20:B5:4F:27 X509v3 Authority Key Identifier: keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:a1:10:0a:ff:bf:3a:10:d9:da:88:6f:b4:f5:94:11:81: 34:2b:60:5f:0d:3b:8a:5f:5e:2f:0b:95:5a:c7:98:ce:84:fa: a5:b1:28:f0:89:ad:76:cd:51:0e:05:99:21:6c:d0:2a:0c:d0: 00:6e:7d:af:c2:ec:28:a6:3c:17:89:5d:d9:d0:25:83:55:04: 6a:b2:03:a3:b9:28:a6:3a:bb:4e:ae:ba:2d:8c:e1:ea:d8:54: 61:3d:de:a6:d6:4f:a5:20:b8:a2:2e:2e:37:9c:6d:56:10:80: 8d:5a:44:41:1b:cb:f5:af:16:ac:d7:4f:90:d4:ef:98:f3:d9: 91:a4:8f:8c:d0:d8:51:66:5b:84:20:69:d6:2d:f6:d1:6a:f7: 94:3f:8d:2a:c3:a6:c6:d7:68:9e:6e:91:32:ae:ab:c8:d3:e3: f2:da:38:e8:71:a9:48:a4:90:d6:c1:e8:bc:21:99:f5:b1:f6: 8d:4e:aa:ae:e4:8c:36:33:cd:2f:ca:a1:ca:fb:84:03:d1:24: c1:ac:75:92:50:3a:a7:57:67:4a:f8:82:2f:2b:f4:74:62:01: 15:3f:98:c7:68:e4:9b:a2:ff:76:16:8d:c0:45:e4:a1:e7:aa: 9f:92:ad:d2:3e:6f:3f:b2:66:42:b6:6d:72:fe:40:6e:f7:68: ee:00:67:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUtGSZhy3hjBBdv39Q45eDCisPEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZE NDYwOTQzQTAeFw0yNjA0MjExOTEwMjJaFw0yNjA0MjIyMjMxMjJaMDMxMTAvBgNV BAMTKEJGODY4NTVGRjFEQTcxODM3Q0U3RDIzMjI4OUM1NzlBMjBCNTRGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0z5o+L0UIs+oaed9ZGoJmBhN GCmC9aXVvgfi39rK34SYWgbHQxYBIAPFg/fy/goYQb0GOfEqY9wx11RFCrGmW1G3 u7R2BWjvkXbN9xsX/vXrCcM7IlkIi0WtmTxL1A/NdHm8hU7GVDnVaAYRFRWMbcBh /Y82Sy3OdxtfL4RhkJMm49ROpLNHoDrs1I0JI2EjsPPFQ5x96NMlb0/PRpG9SX6Q aQAqwn3w2DjbKxijhebWGsgUt9mSf0mTxIbgQeomafiowyKNnzIguYIWws5EDP0+ gpMVh6ZNkUvY8QWJU1zrRiGCDiKsD7xSGB6F6x1Ye8Fck/Zs7z8Ws8SOHWUDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv4aFX/HacYN859IyKJxXmiC1TycwHwYDVR0j BBgwFoAUi72vhj+9CVPZpWvClwfe79RglDowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTIzOTY2MDg5MjMyMzg0My8xLzhCQkRBRjg2M0ZCRDA5NTNEOUE1NkJDMjk3MDdE RUVGRDQ2MDk0M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzIvOEJCREFGODYzRkJEMDk1M0Q5QTU2QkMyOTcwN0RFRUZENDYwOTQzQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzkyMzk2NjA4OTIzMjM4NDMvMS84QkJEQUY4NjNGQkQw OTUzRDlBNTZCQzI5NzA3REVFRkQ0NjA5NDNBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+2hEAr/vzoQ 2dqIb7T1lBGBNCtgXw07il9eLwuVWseYzoT6pbEo8Imtds1RDgWZIWzQKgzQAG59 r8LsKKY8F4ld2dAlg1UEarIDo7kopjq7Tq66LYzh6thUYT3eptZPpSC4oi4uN5xt VhCAjVpEQRvL9a8WrNdPkNTvmPPZkaSPjNDYUWZbhCBp1i320Wr3lD+NKsOmxtdo nm6RMq6ryNPj8to46HGpSKSQ1sHovCGZ9bH2jU6qruSMNjPNL8qhyvuEA9Ekwax1 klA6p1dnSviCLyv0dGIBFT+Yx2jkm6L/dhaNwEXkoeeqn5Kt0j5vP7JmQrZtcv5A bvdo7gBntQ== -----END CERTIFICATE-----Generated at Wed Apr 22 00:25:22 2026 by rpki-client