$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: O/gfeDjypo7tBca/25yomOq6rcwq5tDi6IzeFgCNZLc= Subject key identifier: 26:DD:E4:22:A6:BE:8B:66:5A:4A:E0:56:8C:74:53:42:0B:5B:7B:F5 Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 110FD5626AF0828C2658F32EBD9A5BFB0D904618 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: 47 Signing time: Fri 29 May 2026 17:28:03 +0000 Manifest this update: Fri 29 May 2026 17:23:03 +0000 Manifest next update: Sat 30 May 2026 21:14:03 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: lh3V9BgF6kYYgMkU7LnSeCqOMPZPA+EwyaL2EsWT3IU=) 2: AS4847.roa (hash: 3iSNNi2FuNtir737Ugji4/SXTB5NeQgm9GdlYenOm+U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:d5:62:6a:f0:82:8c:26:58:f3:2e:bd:9a:5b:fb:0d:90:46:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: May 29 17:23:03 2026 GMT Not After : May 30 21:14:03 2026 GMT Subject: CN=26DDE422A6BE8B665A4AE0568C7453420B5B7BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:38:db:00:b7:b8:0f:da:59:90:17:4f:55: 24:13:34:f7:f9:15:b4:40:28:ad:b3:cb:22:5f:7f: 92:60:46:1c:5c:d4:65:29:18:32:c1:ea:ad:85:53: fe:b3:00:bb:b9:d1:49:16:e3:b3:4b:3a:b7:0d:e7: 94:95:a5:1a:c5:18:94:cf:c5:16:3a:1b:62:9f:46: e5:90:1c:e8:c2:95:cf:0e:6f:c0:62:58:c4:a5:eb: 7f:1d:78:e6:ad:d8:17:6b:f8:c1:41:e1:95:ce:83: 1d:eb:08:4b:f0:7d:e7:b2:4c:e9:f2:e2:60:af:9c: c3:7f:17:95:66:4f:77:e1:8a:f1:7f:8d:d1:c1:1d: 81:b5:3d:1f:7f:cd:21:ef:66:a9:78:65:0c:17:f2: 92:72:4d:71:8d:98:39:20:7a:42:09:54:ae:89:3c: 3a:56:f6:02:f2:49:1b:e5:2a:7b:6d:47:46:f2:e5: f6:08:08:fb:4f:af:29:54:04:4b:61:e8:36:ab:87: 07:af:b2:d1:df:79:c8:57:7b:4b:00:25:ac:24:3e: b5:df:d4:6d:9c:a9:2f:8c:31:a5:16:e4:30:77:a5: 17:de:41:95:31:7a:5d:b7:8b:3d:4b:8d:61:41:1f: 61:32:09:15:d0:55:7b:b6:96:a4:8f:36:bd:97:de: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DD:E4:22:A6:BE:8B:66:5A:4A:E0:56:8C:74:53:42:0B:5B:7B:F5 X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:34:ed:c0:df:90:8a:b7:3e:eb:2f:a8:e7:f5:2b:a2:92:ba: 02:b8:6a:6a:f3:8d:76:1f:4b:68:81:06:9f:81:4a:78:1a:28: fc:65:72:9f:59:60:95:d8:6e:1f:8b:84:06:d3:3b:7c:b0:4e: b9:29:fc:a0:b3:1d:34:1b:2b:f3:9f:de:09:1c:67:2b:f5:17: 97:df:78:c9:e9:b6:e4:52:69:64:bf:24:1a:73:2e:3c:c8:31: b7:18:65:9b:14:27:65:85:9c:0f:6e:71:08:b1:ab:72:1e:2d: 12:90:b8:db:99:37:b7:b8:bd:4c:54:7f:fe:c1:26:aa:60:c8: 5e:7d:18:fe:2d:dd:5b:ca:01:35:9f:ae:58:91:98:dc:db:c0: 31:2a:b7:0d:bf:b3:be:9a:38:ac:b3:bc:b8:29:a5:4a:20:ac: b5:5f:d6:ef:63:49:b1:54:8a:47:dc:cc:d5:51:f3:c0:05:c9: 74:49:5a:30:bb:12:7f:7e:c1:42:0b:3e:ea:cd:05:4a:36:42: fa:09:47:7e:03:f6:01:bf:f4:f4:1b:92:82:5c:1c:01:e8:da: 09:a6:29:34:31:33:7f:10:84:5c:4b:d9:96:a6:92:ec:ac:4c: 09:56:7b:f9:65:57:bd:5b:36:03:a0:03:80:45:96:b7:47:4e: 2b:39:88:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEQ/VYmrwgowmWPMuvZpb+w2QRhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjA1MjkxNzIzMDNaFw0yNjA1MzAyMTE0MDNaMDMxMTAvBgNV BAMTKDI2RERFNDIyQTZCRThCNjY1QTRBRTA1NjhDNzQ1MzQyMEI1QjdCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWjjbALe4D9pZkBdPVSQTNPf5 FbRAKK2zyyJff5JgRhxc1GUpGDLB6q2FU/6zALu50UkW47NLOrcN55SVpRrFGJTP xRY6G2KfRuWQHOjClc8Ob8BiWMSl638deOat2Bdr+MFB4ZXOgx3rCEvwfeeyTOny 4mCvnMN/F5VmT3fhivF/jdHBHYG1PR9/zSHvZql4ZQwX8pJyTXGNmDkgekIJVK6J PDpW9gLySRvlKnttR0by5fYICPtPrylUBEth6DarhwevstHfechXe0sAJawkPrXf 1G2cqS+MMaUW5DB3pRfeQZUxel23iz1LjWFBH2EyCRXQVXu2lqSPNr2X3olxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJt3kIqa+i2ZaSuBWjHRTQgtbe/UwHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxzTtwN+Qirc+ 6y+o5/UropK6ArhqavONdh9LaIEGn4FKeBoo/GVyn1lgldhuH4uEBtM7fLBOuSn8 oLMdNBsr85/eCRxnK/UXl994yem25FJpZL8kGnMuPMgxtxhlmxQnZYWcD25xCLGr ch4tEpC425k3t7i9TFR//sEmqmDIXn0Y/i3dW8oBNZ+uWJGY3NvAMSq3Db+zvpo4 rLO8uCmlSiCstV/W72NJsVSKR9zM1VHzwAXJdElaMLsSf37BQgs+6s0FSjZC+glH fgP2Ab/09BuSglwcAejaCaYpNDEzfxCEXEvZlqaS7KxMCVZ7+WVXvVs2A6ADgEWW t0dOKzmIiA== -----END CERTIFICATE-----Generated at Fri May 29 22:03:38 2026 by rpki-client