$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft File: BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json) Hash identifier: bhHNP9isx52Zz5PM2nCQGRRGKR/Bz1fq3flkJN1ae8Y= Subject key identifier: 9E:CA:CF:FE:F7:DC:A0:8C:23:36:DB:0B:63:3C:2B:44:AA:DB:6D:99 Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 Certificate issuer: /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Certificate serial: 5705D13B47E1A2E41C83B443BC36E35CDC9B4018 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft Manifest number: 36 Signing time: Tue 02 Jun 2026 07:26:11 +0000 Manifest this update: Tue 02 Jun 2026 07:21:11 +0000 Manifest next update: Wed 03 Jun 2026 08:07:11 +0000 Files and hashes: 1: AS7497.roa (hash: A832uUP+f/DNseGkGA0iU/hJ1gqSTSRi/FkLKNe5Cas=) 2: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: wd9ZHzRixsNLzPkZY211V28f02s84m2iM0uTHEjNsgQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 08:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:05:d1:3b:47:e1:a2:e4:1c:83:b4:43:bc:36:e3:5c:dc:9b:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459 Validity Not Before: Jun 2 07:21:11 2026 GMT Not After : Jun 3 08:07:11 2026 GMT Subject: CN=9ECACFFEF7DCA08C2336DB0B633C2B44AADB6D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:72:35:0e:2f:b1:69:f2:88:96:eb:5b:b2: 98:a2:3b:06:fa:8c:ac:f9:0a:08:29:04:e2:12:61: 31:c1:0d:02:35:21:eb:42:bd:50:5d:b2:7f:d0:ff: 1c:dd:55:ed:64:f0:20:e2:27:ec:a9:fd:58:dd:a1: 7d:55:1b:49:6b:02:ac:af:62:79:36:be:7f:60:0a: 18:c8:95:62:f2:4b:1e:31:78:19:57:95:85:dc:ce: 6d:f2:50:7f:40:37:fa:7a:68:2f:21:eb:e1:89:84: c5:f3:bb:6e:9e:1a:7a:d0:40:c1:71:d6:bd:d4:5b: 32:49:62:e6:f7:39:4b:52:b7:16:43:2c:8f:64:a4: 70:97:e7:9c:bd:14:70:ed:76:56:d1:22:9b:c3:54: f0:a5:05:ab:c1:8d:7e:17:dc:a5:88:19:68:cb:5f: 07:f2:67:c4:27:a5:b1:02:aa:fb:9b:85:0f:df:57: 86:a9:51:8d:4f:02:21:e2:5c:12:2a:76:4f:41:21: 0f:b1:fd:a2:6e:28:0e:8f:1f:c4:8f:52:20:45:3a: 74:b4:51:fb:5b:7e:58:be:16:e5:3e:f4:bf:67:f7: fd:70:07:8b:cf:55:4f:1f:28:fd:33:30:bb:01:8e: 8e:a1:ef:7e:5e:2e:f1:e2:f0:05:b6:bd:64:25:d1: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CA:CF:FE:F7:DC:A0:8C:23:36:DB:0B:63:3C:2B:44:AA:DB:6D:99 X509v3 Authority Key Identifier: keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:b6:1c:f5:95:3e:30:50:f0:36:85:a0:6c:31:59:d5:5f:5b: eb:97:6f:63:9e:2a:8e:89:11:00:3a:ad:c1:05:ea:2b:01:ec: 97:50:92:e4:37:76:ae:16:b1:3b:f0:dd:ed:7c:64:04:d1:3e: f9:4f:84:b0:bf:74:d0:ef:52:df:00:97:4b:ba:80:3b:b2:68: 67:5b:4a:03:e4:05:84:66:3b:35:90:ad:dc:4a:f3:a8:c0:e5: 56:f0:9d:a0:1a:ad:f9:d8:1e:35:ec:d1:c8:43:b7:92:4f:03: 32:4a:91:1b:f6:b8:43:c3:6d:da:a3:05:76:63:b3:2e:d6:93: 99:98:a2:42:a5:19:49:97:da:43:62:be:b1:bf:2b:6c:29:7e: ac:a4:e7:37:fe:25:d5:d7:12:35:c5:60:7a:24:ef:37:ca:14: 14:46:46:68:04:3c:69:a3:06:47:24:6f:6b:7b:5c:65:be:9d: bd:4e:37:a4:1b:5f:72:c7:53:4c:d0:df:5d:2a:6c:91:1f:b8: 8a:e7:43:3c:af:4d:13:57:ad:86:dd:01:e7:5b:9a:03:f3:a5: 41:0c:55:91:10:ab:99:7c:02:3f:bb:7c:65:52:3a:23:e8:06: b9:7d:86:2e:1d:76:4d:54:a1:91:7f:7a:8a:d3:10:66:48:f4: b6:1f:6a:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVwXRO0fhouQcg7RDvDbjXNybQBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyhCRDFENDFCOTAz MkZGNTlDNDU1NTY0NDhDOEU0RUM5MUU1OTFGNDU5MB4XDTI2MDYwMjA3MjExMVoX DTI2MDYwMzA4MDcxMVowMzExMC8GA1UEAxMoOUVDQUNGRkVGN0RDQTA4QzIzMzZE QjBCNjMzQzJCNDRBQURCNkQ5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9+cjUOL7Fp8oiW61uymKI7BvqMrPkKCCkE4hJhMcENAjUh60K9UF2yf9D/ HN1V7WTwIOIn7Kn9WN2hfVUbSWsCrK9ieTa+f2AKGMiVYvJLHjF4GVeVhdzObfJQ f0A3+npoLyHr4YmExfO7bp4aetBAwXHWvdRbMkli5vc5S1K3FkMsj2SkcJfnnL0U cO12VtEim8NU8KUFq8GNfhfcpYgZaMtfB/JnxCelsQKq+5uFD99XhqlRjU8CIeJc Eip2T0EhD7H9om4oDo8fxI9SIEU6dLRR+1t+WL4W5T70v2f3/XAHi89VTx8o/TMw uwGOjqHvfl4u8eLwBba9ZCXRoHUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSeys/+ 99ygjCM22wtjPCtEqtttmTAfBgNVHSMEGDAWgBS9HUG5Ay/1nEVVZEjI5OyR5ZH0 WTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzAvQkQxRDQx QjkwMzJGRjU5QzQ1NTU2NDQ4QzhFNEVDOTFFNTkxRjQ1OS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdlIxQnVRTXY5 WnhGVldSSXlPVHNrZVdSOUZrLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8wL0JEMUQ0MUI5MDMyRkY1OUM0NTU1NjQ0OEM4RTRFQzkxRTU5MUY0 NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQDHthz1lT4wUPA2haBsMVnVX1vrl29jniqOiREAOq3BBeor AeyXUJLkN3auFrE78N3tfGQE0T75T4Swv3TQ71LfAJdLuoA7smhnW0oD5AWEZjs1 kK3cSvOowOVW8J2gGq352B417NHIQ7eSTwMySpEb9rhDw23aowV2Y7Mu1pOZmKJC pRlJl9pDYr6xvytsKX6spOc3/iXV1xI1xWB6JO83yhQURkZoBDxpowZHJG9re1xl vp29TjekG19yx1NM0N9dKmyRH7iK50M8r00TV62G3QHnW5oD86VBDFWREKuZfAI/ u3xlUjoj6Aa5fYYuHXZNVKGRf3qK0xBmSPS2H2q5 -----END CERTIFICATE-----Generated at Tue Jun 2 21:17:51 2026 by rpki-client