$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: t/9ha+nA5Ph17d+fYpLNONLgaQfMK1VTvf2yUzd7rvw= Subject key identifier: 6D:F7:40:8C:A8:43:4E:7A:05:42:75:45:46:3D:9F:AD:7D:82:9F:95 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 39036B4809AC519DE94DDAF30C87BD5038B46AE5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: A4 Signing time: Mon 26 Oct 2026 02:28:20 +0000 Manifest this update: Mon 26 Oct 2026 02:23:20 +0000 Manifest next update: Thu 29 Oct 2026 13:31:20 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: z6dOr5DlLwdbtt7g2gSboYSITAk/mGQ8TbveCIAGNfs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 13:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:03:6b:48:09:ac:51:9d:e9:4d:da:f3:0c:87:bd:50:38:b4:6a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Oct 26 02:23:20 2026 GMT Not After : Oct 29 13:31:20 2026 GMT Subject: CN=6DF7408CA8434E7A05427545463D9FAD7D829F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:1d:0f:df:b7:76:22:9c:0e:0c:49:bb:0e: 0e:80:0f:06:73:59:00:2b:41:c9:f4:dd:9f:ce:11: 61:84:82:03:86:b5:b0:e5:dd:ea:24:e1:6c:51:62: be:2b:7c:42:5c:00:d0:7f:83:ac:4f:0b:42:de:29: 5f:b4:22:05:f9:27:33:11:e7:71:fc:fe:d7:22:f3: 6c:ef:e5:6d:e5:2c:33:5d:22:1b:4e:80:97:51:64: 6a:b9:00:65:e3:19:33:f5:20:2e:22:8c:37:3b:eb: ef:53:eb:e7:a2:d8:02:0d:9a:f8:0d:52:18:66:4c: 52:ab:9f:80:dd:2f:89:8d:35:26:8d:73:54:72:c0: fe:cf:dc:2c:e8:72:c5:44:93:80:57:77:9e:0e:38: f2:ef:e6:a7:2f:7e:11:f6:26:97:95:88:aa:0b:59: 2b:f0:6e:87:6b:af:7e:5b:a1:29:d1:74:6c:87:2a: 2b:3d:0d:9d:a3:f6:9c:69:93:f9:1e:f1:d8:de:38: 19:4f:02:f4:8e:28:61:37:9d:e3:3a:7e:f9:e6:29: d1:8f:91:4d:fe:67:4c:56:1e:4f:98:4c:16:86:e1: 7a:6c:b0:7b:31:70:28:32:df:bc:ec:04:c6:d0:d7: 8f:7b:86:cd:1a:91:d9:3f:87:21:4b:4a:49:c9:08: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F7:40:8C:A8:43:4E:7A:05:42:75:45:46:3D:9F:AD:7D:82:9F:95 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:62:0b:c8:1c:88:e7:f7:65:ea:ee:b6:03:f7:17:e7:bf:ed: 2d:0c:78:ae:61:1b:fe:18:c2:52:da:88:08:2a:97:1b:8e:7e: a6:f4:b2:41:c9:07:7b:d4:9d:d3:5f:e9:c6:21:9a:44:78:54: b2:3e:67:bc:30:00:af:d6:ca:c7:3e:e6:ed:11:c9:0d:19:f9: 6d:54:a5:09:3a:75:94:a7:db:0c:87:09:e8:64:c3:05:e0:a8: 0b:44:d1:d4:41:49:72:86:21:86:80:22:b8:69:30:b7:10:68: cc:7f:e5:cd:0f:76:9a:47:4e:e4:73:c7:b1:07:b5:83:1a:69: 86:27:1f:24:21:7c:73:79:cd:81:fd:df:a5:7d:60:e6:8e:02: ef:00:d8:9b:d5:cb:f8:07:59:be:05:e2:1c:3f:4e:52:68:07: 71:e3:06:a3:d0:47:02:53:1a:61:52:a2:e1:2a:e5:8d:f9:f9: b4:4a:05:9a:eb:d8:35:30:d6:82:79:55:34:ea:9e:3f:83:00: c1:b3:c6:39:00:00:ea:7d:ba:e7:6a:88:1e:3b:88:ec:2b:cf: 85:d0:8f:4b:c5:be:e2:dd:45:b2:70:cb:77:b2:0a:ad:fd:c0: 9a:44:55:74:bc:9f:65:8d:a4:a0:2d:1e:b9:03:5e:06:bc:4e: 5a:1a:92:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOQNrSAmsUZ3pTdrzDIe9UDi0auUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjEwMjYwMjIzMjBaFw0yNjEwMjkxMzMxMjBaMDMxMTAvBgNV BAMTKDZERjc0MDhDQTg0MzRFN0EwNTQyNzU0NTQ2M0Q5RkFEN0Q4MjlGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4h0P37d2IpwODEm7Dg6ADwZz WQArQcn03Z/OEWGEggOGtbDl3eok4WxRYr4rfEJcANB/g6xPC0LeKV+0IgX5JzMR 53H8/tci82zv5W3lLDNdIhtOgJdRZGq5AGXjGTP1IC4ijDc76+9T6+ei2AINmvgN UhhmTFKrn4DdL4mNNSaNc1RywP7P3CzocsVEk4BXd54OOPLv5qcvfhH2JpeViKoL WSvwbodrr35boSnRdGyHKis9DZ2j9pxpk/ke8djeOBlPAvSOKGE3neM6fvnmKdGP kU3+Z0xWHk+YTBaG4XpssHsxcCgy37zsBMbQ1497hs0akdk/hyFLSknJCGbFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbfdAjKhDTnoFQnVFRj2frX2Cn5UwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWILyByI5/dl 6u62A/cX57/tLQx4rmEb/hjCUtqICCqXG45+pvSyQckHe9Sd01/pxiGaRHhUsj5n vDAAr9bKxz7m7RHJDRn5bVSlCTp1lKfbDIcJ6GTDBeCoC0TR1EFJcoYhhoAiuGkw txBozH/lzQ92mkdO5HPHsQe1gxpphicfJCF8c3nNgf3fpX1g5o4C7wDYm9XL+AdZ vgXiHD9OUmgHceMGo9BHAlMaYVKi4Srljfn5tEoFmuvYNTDWgnlVNOqeP4MAwbPG OQAA6n2652qIHjuI7CvPhdCPS8W+4t1FsnDLd7IKrf3AmkRVdLyfZY2koC0euQNe BrxOWhqSaQ== -----END CERTIFICATE-----Generated at Tue Oct 27 17:30:53 2026 by rpki-client