$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft File: BDDC344D20BB4907F3D292B6962387327540E65E.mft (raw, json) Hash identifier: jih1mOkOZcEzFb4H4hKt567JWCwNNPCFXoVGb70tOdE= Subject key identifier: E1:16:36:D2:FA:C0:F3:DD:A6:78:0D:63:B5:59:C9:F3:CA:58:EE:C6 Authority key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E Certificate issuer: /CN=BDDC344D20BB4907F3D292B6962387327540E65E Certificate serial: 7F0394463BEB0A26C11D0939FC53C384A3557FC7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft Manifest number: C0 Signing time: Fri 28 Aug 2026 06:48:21 +0000 Manifest this update: Fri 28 Aug 2026 06:43:21 +0000 Manifest next update: Mon 31 Aug 2026 15:56:21 +0000 Files and hashes: 1: BDDC344D20BB4907F3D292B6962387327540E65E.crl (hash: oa9H+u/Cugze7mk1HlT/OJGjL7yubM2zgBRBWrMhmps=) 2: AS4847.roa (hash: nuSY6+frDMEdAAT8bzwajeQyRxhduchPsSLgOeZbGPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:03:94:46:3b:eb:0a:26:c1:1d:09:39:fc:53:c3:84:a3:55:7f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDDC344D20BB4907F3D292B6962387327540E65E Validity Not Before: Aug 28 06:43:21 2026 GMT Not After : Aug 31 15:56:21 2026 GMT Subject: CN=E11636D2FAC0F3DDA6780D63B559C9F3CA58EEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:aa:c2:a3:e3:e5:e7:bf:dd:e4:30:e0:10: 02:35:8a:d5:cb:0c:e2:09:d3:99:92:bb:95:51:a3: 94:08:06:6b:56:1a:31:75:1b:0c:e8:de:d5:75:96: a1:e4:16:4d:5d:a6:31:86:91:92:58:5a:71:f6:d9: 94:86:6d:58:d5:82:13:09:2d:ee:bf:fb:6c:2c:48: b7:aa:9c:6f:eb:35:6a:4b:fe:fa:ef:4a:52:8a:13: 0f:33:3a:7d:64:a2:86:ac:83:b9:e0:0a:66:50:40: 4f:d5:68:ba:1a:45:02:06:20:21:9d:9d:4a:26:ba: d5:89:ac:26:64:80:24:16:cf:52:06:7d:2d:0f:4b: 61:d4:1d:4e:db:c9:74:2d:2d:d6:d1:ba:84:a9:0d: d4:cf:03:03:7c:aa:3e:0c:b5:93:c9:d5:fb:c3:55: 0b:b4:c9:8e:70:df:7b:c0:ec:42:ff:d1:72:0b:16: da:9a:43:5a:4c:51:6a:4a:86:4d:21:01:33:a9:66: c0:28:c1:9e:a6:94:52:56:6c:da:5b:7f:17:e8:e4: da:3c:e2:82:bc:fa:15:00:8e:81:c9:ed:81:74:af: ca:7f:d2:52:51:58:67:bf:51:6b:41:32:2f:8c:00: 15:38:16:d3:b5:96:78:b8:75:cc:f6:d1:51:29:7d: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:16:36:D2:FA:C0:F3:DD:A6:78:0D:63:B5:59:C9:F3:CA:58:EE:C6 X509v3 Authority Key Identifier: keyid:BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e1:27:c0:2f:ac:2f:35:24:d6:d9:9d:16:11:0d:07:8d:68: 8f:c2:86:e3:84:cc:bd:5c:59:49:ce:8f:41:05:12:38:9e:42: 7b:d3:3a:27:06:70:5d:86:ad:7d:87:40:4e:0d:23:92:a3:dc: 2b:f5:68:6c:b8:5b:41:fa:3a:10:d1:ac:0c:ab:f3:81:ca:90: c5:ba:fd:ea:b6:b7:af:a6:1b:60:e4:87:17:ec:e8:82:e3:f8: 85:52:b3:a4:d5:83:98:37:1d:77:e0:38:e5:94:b7:59:fd:22: cc:40:fc:43:ea:91:35:63:50:d3:4b:6b:b2:e6:45:e1:46:33: 91:db:c6:35:03:ad:e3:eb:5d:9a:ef:32:bc:67:30:94:64:a1: 87:c4:d8:e4:7e:2d:e1:33:21:7b:c7:cc:33:9c:18:7d:ce:eb: c8:fa:8a:6d:23:d0:1e:6f:a7:cc:47:b6:93:e7:cd:5c:39:d5: a4:e7:2f:c1:f6:a6:bc:af:e3:21:0a:24:8a:fe:06:36:b6:8e: e3:c3:24:76:ff:f2:ff:4a:0c:73:52:f3:b8:40:29:9f:f5:35: b4:da:dc:d6:8e:3c:a4:32:68:24:fb:6c:6e:50:93:7a:e0:95: 28:a5:cb:46:8a:c8:e1:d3:0f:e7:53:e0:06:0b:df:30:4a:3d: 11:ed:0b:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfwOURjvrCibBHQk5/FPDhKNVf8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3 NTQwRTY1RTAeFw0yNjA4MjgwNjQzMjFaFw0yNjA4MzExNTU2MjFaMDMxMTAvBgNV BAMTKEUxMTYzNkQyRkFDMEYzRERBNjc4MEQ2M0I1NTlDOUYzQ0E1OEVFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfarCo+Pl57/d5DDgEAI1itXL DOIJ05mSu5VRo5QIBmtWGjF1Gwzo3tV1lqHkFk1dpjGGkZJYWnH22ZSGbVjVghMJ Le6/+2wsSLeqnG/rNWpL/vrvSlKKEw8zOn1kooasg7ngCmZQQE/VaLoaRQIGICGd nUomutWJrCZkgCQWz1IGfS0PS2HUHU7byXQtLdbRuoSpDdTPAwN8qj4MtZPJ1fvD VQu0yY5w33vA7EL/0XILFtqaQ1pMUWpKhk0hATOpZsAowZ6mlFJWbNpbfxfo5No8 4oK8+hUAjoHJ7YF0r8p/0lJRWGe/UWtBMi+MABU4FtO1lni4dcz20VEpfcFXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4RY20vrA892meA1jtVnJ88pY7sYwHwYDVR0j BBgwFoAUvdw0TSC7SQfz0pK2liOHMnVA5l4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2NjkwMDc0Ny8xL0JEREMzNDREMjBCQjQ5MDdGM0QyOTJCNjk2MjM4 NzMyNzU0MEU2NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkREQzM0NEQyMEJCNDkwN0YzRDI5MkI2OTYyMzg3MzI3NTQwRTY1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5MDA3NDcvMS9CRERDMzQ0RDIwQkI0 OTA3RjNEMjkyQjY5NjIzODczMjc1NDBFNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+EnwC+sLzUk 1tmdFhENB41oj8KG44TMvVxZSc6PQQUSOJ5Ce9M6JwZwXYatfYdATg0jkqPcK/Vo bLhbQfo6ENGsDKvzgcqQxbr96ra3r6YbYOSHF+zoguP4hVKzpNWDmDcdd+A45ZS3 Wf0izED8Q+qRNWNQ00trsuZF4UYzkdvGNQOt4+tdmu8yvGcwlGShh8TY5H4t4TMh e8fMM5wYfc7ryPqKbSPQHm+nzEe2k+fNXDnVpOcvwfamvK/jIQokiv4GNraO48Mk dv/y/0oMc1LzuEApn/U1tNrc1o48pDJoJPtsblCTeuCVKKXLRorI4dMP51PgBgvf MEo9Ee0LIA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:59 2026 by rpki-client