$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: fAOShOso2LTjF9RXLzeD62fFGzY9zNHxjqkyAtFb+v4= Subject key identifier: F1:98:55:9A:56:68:4C:17:EC:83:98:E6:91:CF:53:0B:D3:13:7A:3A Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 5A1F1E0772453DC94BD28AB34FF059186C3D6361 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 17 Signing time: Thu 04 Jun 2026 01:04:04 +0000 Manifest this update: Thu 04 Jun 2026 00:59:04 +0000 Manifest next update: Fri 05 Jun 2026 01:41:04 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: 66ZtJlHJaryLqui76Gp0eX/tuVg20xpU3hz17q4BE3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 01:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1f:1e:07:72:45:3d:c9:4b:d2:8a:b3:4f:f0:59:18:6c:3d:63:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Jun 4 00:59:04 2026 GMT Not After : Jun 5 01:41:04 2026 GMT Subject: CN=F198559A56684C17EC8398E691CF530BD3137A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:91:f9:43:ea:41:74:e8:38:08:70:b4:7d: b6:48:33:f0:83:c0:94:3a:d5:07:bf:08:56:c7:db: 86:50:18:f7:74:67:8a:1d:b7:91:c2:ef:fe:77:02: 43:7e:f4:47:45:6f:0d:69:cb:20:41:78:f7:c4:c1: 32:7a:b3:a4:37:75:54:ec:8b:e9:38:d2:88:70:fc: ae:8c:61:0d:64:6e:7e:80:c0:68:3b:91:1b:1c:4b: c0:0f:9d:50:e1:11:c7:68:65:15:b8:af:a6:99:53: 92:f0:ff:ab:9a:06:d8:d4:65:9c:08:be:44:20:d9: d2:15:50:1f:9e:9d:15:d8:1e:92:be:ec:7b:c7:b7: 39:f3:f3:d5:c5:96:cd:53:50:ec:7c:ce:10:da:11: aa:57:48:88:73:4d:6e:24:8b:d9:4d:62:9d:1d:58: 60:10:f0:0b:dc:73:91:9a:18:b5:22:8c:97:1a:23: 01:ec:61:62:a0:b6:a1:61:1b:b3:92:f8:2c:ac:59: e7:73:cc:43:42:28:52:28:f1:87:58:a4:cb:bd:f7: 32:66:60:76:15:26:d1:37:84:a7:c0:c5:ec:f3:a5: 5c:d7:19:5f:98:29:b3:7a:a1:ef:5c:02:b5:bd:cb: f3:2b:c8:11:01:ef:5a:5b:84:f1:6d:39:28:59:19: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:98:55:9A:56:68:4C:17:EC:83:98:E6:91:CF:53:0B:D3:13:7A:3A X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ee:f5:4f:13:79:50:b4:e1:17:d2:7a:db:09:e2:eb:66:51: 3d:ef:55:70:91:a4:e0:ff:a8:44:63:12:b5:3f:c6:67:8a:7d: 05:5b:f6:84:1b:b0:ee:c5:94:89:b9:e6:e4:50:ab:2a:d7:6c: 56:8d:4e:5c:b3:69:b7:93:46:c8:03:30:e4:09:76:e0:ec:f8: 8e:be:09:38:cb:6c:be:ed:30:36:bf:89:02:6f:67:b5:df:6f: 95:be:b1:2d:d7:09:62:cc:60:2a:58:dc:87:7b:a4:a1:10:f5: d7:a2:ce:e4:2a:04:29:32:93:c3:5c:38:3b:ec:c8:9b:93:83: 4f:85:71:b5:ab:96:a9:ac:fc:1e:f9:b2:7f:1b:23:1e:f6:47: 23:5a:6e:c9:cd:24:69:b4:e6:53:87:6b:a3:30:0c:9a:d1:57: 4b:02:84:52:5f:5d:73:59:fb:2c:a0:8c:7c:94:07:15:07:ca: 13:86:0a:a3:13:08:d2:5a:86:f2:eb:07:ae:e7:f4:7e:e7:e4: 4f:83:de:0b:2c:e2:53:28:62:e4:92:ea:df:0f:45:a2:02:82: 5d:f7:9b:1f:b7:9f:93:d6:82:e8:9f:95:4e:78:35:53:64:4a: 56:ae:8c:02:a4:a9:7a:4c:35:48:86:7c:cf:c4:f7:8e:78:65: 2f:df:de:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWh8eB3JFPclL0oqzT/BZGGw9Y2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjA2MDQwMDU5MDRaFw0yNjA2MDUwMTQxMDRaMDMxMTAvBgNV BAMTKEYxOTg1NTlBNTY2ODRDMTdFQzgzOThFNjkxQ0Y1MzBCRDMxMzdBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeC5H5Q+pBdOg4CHC0fbZIM/CD wJQ61Qe/CFbH24ZQGPd0Z4odt5HC7/53AkN+9EdFbw1pyyBBePfEwTJ6s6Q3dVTs i+k40ohw/K6MYQ1kbn6AwGg7kRscS8APnVDhEcdoZRW4r6aZU5Lw/6uaBtjUZZwI vkQg2dIVUB+enRXYHpK+7HvHtznz89XFls1TUOx8zhDaEapXSIhzTW4ki9lNYp0d WGAQ8Avcc5GaGLUijJcaIwHsYWKgtqFhG7OS+CysWedzzENCKFIo8YdYpMu99zJm YHYVJtE3hKfAxezzpVzXGV+YKbN6oe9cArW9y/MryBEB71pbhPFtOShZGbbHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8ZhVmlZoTBfsg5jmkc9TC9MTejowHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu71TxN5ULTh F9J62wni62ZRPe9VcJGk4P+oRGMStT/GZ4p9BVv2hBuw7sWUibnm5FCrKtdsVo1O XLNpt5NGyAMw5Al24Oz4jr4JOMtsvu0wNr+JAm9ntd9vlb6xLdcJYsxgKljch3uk oRD116LO5CoEKTKTw1w4O+zIm5ODT4VxtauWqaz8HvmyfxsjHvZHI1puyc0kabTm U4drozAMmtFXSwKEUl9dc1n7LKCMfJQHFQfKE4YKoxMI0lqG8usHruf0fufkT4Pe CyziUyhi5JLq3w9FogKCXfebH7efk9aC6J+VTng1U2RKVq6MAqSpekw1SIZ8z8T3 jnhlL9/eAw== -----END CERTIFICATE-----Generated at Thu Jun 4 15:02:43 2026 by rpki-client