$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft File: BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json) Hash identifier: 41D8/1ltkTJ5G9O/cE/8GfXEzv/kiDOg0tjtLfimBGU= Subject key identifier: 01:A3:BA:DA:F8:9C:26:59:DE:4D:C8:50:6A:9D:20:CA:73:61:D5:40 Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 Certificate issuer: /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Certificate serial: 1925E41E4DDF12520436A618536A7D4B4F87B4DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft Manifest number: D9 Signing time: Sat 17 Oct 2026 00:08:56 +0000 Manifest this update: Sat 17 Oct 2026 00:03:56 +0000 Manifest next update: Tue 20 Oct 2026 09:06:56 +0000 Files and hashes: 1: AS7497.roa (hash: u07x0HxtkCWmzc04mrkTJO7RBZFkYTQJYfpS7fTkNcw=) 2: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: LZGs8odgyxC92HhEAuQ1xY8fFF1EYx3vMuV2myQjqA0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 09:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:25:e4:1e:4d:df:12:52:04:36:a6:18:53:6a:7d:4b:4f:87:b4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Validity Not Before: Oct 17 00:03:56 2026 GMT Not After : Oct 20 09:06:56 2026 GMT Subject: CN=01A3BADAF89C2659DE4DC8506A9D20CA7361D540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6f:b9:77:57:6a:fb:8c:d4:77:b7:ce:dc:4c: 14:45:c0:3e:ba:84:2e:a2:ae:38:25:68:d1:88:83: 29:62:0f:22:e5:43:e5:c1:5e:32:9c:61:37:6e:9d: 52:7f:18:4f:da:c8:e9:20:33:9b:e6:e6:e5:3d:3f: d3:0e:39:78:b6:0d:b3:fd:17:23:04:f6:7c:9c:97: 0b:5b:c4:f1:56:6e:62:17:72:7a:88:d1:f8:52:26: 9a:3a:22:6c:77:82:25:46:a8:dc:03:1f:05:44:17: 0b:a6:82:b6:7c:58:65:be:2c:fc:08:37:04:e0:3d: fd:25:ae:1a:0f:32:d2:25:f9:b1:c6:1b:84:de:3c: 0c:9f:0e:e8:ac:99:36:60:74:be:ba:6c:21:bc:c2: bd:17:e6:88:77:8e:d3:8d:9a:62:49:31:15:49:31: 96:01:ce:7f:c0:55:8a:3a:18:13:de:4d:53:7e:24: ea:04:95:4e:4d:61:84:c9:15:d1:86:eb:4f:e6:45: 33:41:47:bb:64:c8:71:ad:43:3a:2d:e6:8a:80:1f: 54:ce:b1:ff:de:14:63:49:ea:64:35:6e:90:19:0e: 1a:c7:01:99:2d:d8:49:1a:8f:34:f1:5e:bb:b4:3a: 8a:93:f4:54:92:70:67:0b:28:a1:77:de:26:ee:a4: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A3:BA:DA:F8:9C:26:59:DE:4D:C8:50:6A:9D:20:CA:73:61:D5:40 X509v3 Authority Key Identifier: keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:dc:a9:0e:a5:57:1e:c8:2e:37:14:30:89:06:9e:39:d0:96: ac:7c:54:c7:46:e0:17:9d:e4:c8:de:5a:af:cf:58:63:7d:a3: 77:a2:c7:88:77:f6:8f:3e:da:27:41:43:3f:ac:b3:fa:b6:c1: 37:14:54:6b:2d:e1:de:a0:02:16:87:b4:05:d4:f7:51:11:8f: 67:49:29:e3:4f:00:74:67:3c:2d:25:e4:99:26:61:ba:8a:11: b5:8d:4d:b7:45:92:bc:59:cb:57:9c:c7:39:45:c1:10:6c:61: 33:af:ea:30:58:70:69:0e:2f:d7:ef:69:a0:76:8f:e3:04:7a: fc:84:1e:ed:a6:39:dd:6b:d7:b8:df:fd:ad:95:4f:2d:37:42: c4:f6:4b:f2:6c:61:5a:c3:d7:4c:43:66:10:3a:ac:29:9f:73: 37:6d:03:d0:79:56:66:1b:e3:7a:d9:cb:37:9c:6b:8f:19:6d: 44:0b:6c:bd:d4:d9:41:f5:98:63:56:cd:60:50:a3:32:8c:43: 62:c2:97:0c:2b:7a:cf:bb:c6:4e:9e:80:40:6b:1a:d8:47:c4: 1f:0b:92:9e:fe:9e:d7:bd:ad:d2:7f:e2:c2:6b:08:ca:d8:1e: e7:7b:29:fa:81:a9:c4:96:cc:a6:d7:5d:77:b2:33:88:84:c3: c0:15:e6:b1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGSXkHk3fElIENqYYU2p9S0+HtNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyhCRDFENDFCOTAz MkZGNTlDNDU1NTY0NDhDOEU0RUM5MUU1OTFGNDU5MB4XDTI2MTAxNzAwMDM1NloX DTI2MTAyMDA5MDY1NlowMzExMC8GA1UEAxMoMDFBM0JBREFGODlDMjY1OURFNERD ODUwNkE5RDIwQ0E3MzYxRDU0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5vuXdXavuM1He3ztxMFEXAPrqELqKuOCVo0YiDKWIPIuVD5cFeMpxhN26d Un8YT9rI6SAzm+bm5T0/0w45eLYNs/0XIwT2fJyXC1vE8VZuYhdyeojR+FImmjoi bHeCJUao3AMfBUQXC6aCtnxYZb4s/Ag3BOA9/SWuGg8y0iX5scYbhN48DJ8O6KyZ NmB0vrpsIbzCvRfmiHeO042aYkkxFUkxlgHOf8BVijoYE95NU34k6gSVTk1hhMkV 0YbrT+ZFM0FHu2TIca1DOi3mioAfVM6x/94UY0nqZDVukBkOGscBmS3YSRqPNPFe u7Q6ipP0VJJwZwsooXfeJu6kvAcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQBo7ra +JwmWd5NyFBqnSDKc2HVQDAfBgNVHSMEGDAWgBS9HUG5Ay/1nEVVZEjI5OyR5ZH0 WTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzAvQkQxRDQx QjkwMzJGRjU5QzQ1NTU2NDQ4QzhFNEVDOTFFNTkxRjQ1OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdlIxQnVRTXY5 WnhGVldSSXlPVHNrZVdSOUZrLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8wL0JEMUQ0MUI5MDMyRkY1OUM0NTU1NjQ0OEM4RTRFQzkxRTU5MUY0 NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBt3KkOpVceyC43FDCJBp450JasfFTHRuAXneTI3lqvz1hj faN3oseId/aPPtonQUM/rLP6tsE3FFRrLeHeoAIWh7QF1PdREY9nSSnjTwB0Zzwt JeSZJmG6ihG1jU23RZK8WctXnMc5RcEQbGEzr+owWHBpDi/X72mgdo/jBHr8hB7t pjnda9e43/2tlU8tN0LE9kvybGFaw9dMQ2YQOqwpn3M3bQPQeVZmG+N62cs3nGuP GW1EC2y91NlB9ZhjVs1gUKMyjENiwpcMK3rPu8ZOnoBAaxrYR8QfC5Ke/p7Xva3S f+LCawjK2B7neyn6ganElsym1113sjOIhMPAFeax -----END CERTIFICATE-----Generated at Sat Oct 17 12:47:06 2026 by rpki-client