$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json) Hash identifier: rIddkUSx/zCo9gZQKCBphiiikkHoSDkLiL0t1WMWmps= Subject key identifier: F6:36:B6:FB:46:63:30:F6:65:EC:30:9D:80:0B:CA:0B:EB:CF:0D:C2 Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Certificate serial: 514DD3AD743C8D8873BBE884169418B1E169D34A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft Manifest number: 8C Signing time: Thu 03 Sep 2026 14:58:36 +0000 Manifest this update: Thu 03 Sep 2026 14:53:36 +0000 Manifest next update: Sun 06 Sep 2026 17:24:36 +0000 Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: 58yuB1kQaBe0XFfshEpA4wt4ut532NCONYkxQ4oGF+o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4d:d3:ad:74:3c:8d:88:73:bb:e8:84:16:94:18:b1:e1:69:d3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2 Validity Not Before: Sep 3 14:53:36 2026 GMT Not After : Sep 6 17:24:36 2026 GMT Subject: CN=F636B6FB466330F665EC309D800BCA0BEBCF0DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:25:5e:8a:09:f1:67:af:ba:94:ae:3e:d3: d0:ca:7b:87:d7:61:77:8a:0a:22:dc:c6:20:60:5d: 06:09:d4:a5:9c:20:e2:0f:bf:93:61:f9:48:40:76: b4:6e:48:41:51:91:3b:6d:29:c7:97:c7:c8:bb:08: dd:94:7f:d3:6a:fd:b7:c5:63:73:c0:50:39:46:7b: 67:db:8e:a9:84:02:8b:b7:df:ad:78:19:d4:a5:68: af:f4:3e:b3:cb:e1:af:31:1f:42:27:1c:21:9d:af: da:18:71:3e:f2:4f:00:14:e8:3a:17:5b:2a:c3:03: 4b:72:1c:c9:be:34:4e:25:30:29:75:f7:ee:c4:ec: 01:02:95:e8:d9:d5:ff:c0:81:1d:c3:d8:1f:cb:16: 29:99:75:67:d4:62:38:d5:38:79:e5:6d:f2:5b:1d: 4b:d8:2e:3b:b2:66:50:0d:29:84:3f:81:1a:62:a7: 83:67:a3:9b:cb:b7:30:ed:08:45:33:e9:65:ce:a9: 14:b7:c2:2b:68:09:80:00:d9:7c:c0:96:3b:6b:01: ef:b9:12:2c:b0:e6:f7:19:71:cf:46:08:0f:6c:c7: a5:f7:40:bb:1e:9f:42:69:44:21:66:ea:20:cf:f1: bf:39:59:74:fc:67:9e:cc:bf:78:35:61:81:0d:93: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:36:B6:FB:46:63:30:F6:65:EC:30:9D:80:0B:CA:0B:EB:CF:0D:C2 X509v3 Authority Key Identifier: keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fc:44:63:a0:cb:6e:fe:59:56:31:7f:9b:10:23:77:18:3c: f2:38:05:7d:94:37:51:5b:ce:9a:98:ba:80:7c:70:b8:66:c9: 56:92:15:ae:4e:ca:94:13:21:bb:38:52:c5:53:95:55:e4:bb: 1a:69:e4:61:11:39:e5:e5:d9:ee:7e:7b:ea:04:c5:29:f4:fb: 84:f8:e8:ba:96:72:49:c0:45:c6:d8:6b:a9:16:30:c5:f1:38: 68:98:55:5d:33:d6:57:59:34:3a:86:4e:1c:51:85:5b:11:d2: 68:4e:49:6d:6a:b1:c9:3e:80:7b:7f:52:e0:82:2c:4a:7f:99: d5:70:5f:15:a1:d2:7e:93:6c:85:2a:e1:17:24:6f:a9:75:31: 7a:36:a7:72:9d:21:37:6b:86:03:54:53:4b:5e:24:2d:be:1d: e3:ed:d8:8e:5d:7d:5e:5b:48:d0:4a:78:b1:e6:f9:0e:34:a6: d4:a2:ba:6f:ac:e8:1e:30:51:af:49:23:c9:47:e2:60:8f:a8: cd:b2:d4:76:ab:f8:4a:d1:bc:f5:6e:de:9a:4c:95:eb:ca:fe: f8:dd:47:23:61:56:58:a3:70:64:4c:ba:58:8b:62:61:d2:6b: 98:35:e1:74:76:c4:46:46:f5:ea:79:24:ab:06:66:ed:a7:3e: 7e:bb:19:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUU3TrXQ8jYhzu+iEFpQYseFp00owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJD NURFNzZEMjAeFw0yNjA5MDMxNDUzMzZaFw0yNjA5MDYxNzI0MzZaMDMxMTAvBgNV BAMTKEY2MzZCNkZCNDY2MzMwRjY2NUVDMzA5RDgwMEJDQTBCRUJDRjBEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6CVeignxZ6+6lK4+09DKe4fX YXeKCiLcxiBgXQYJ1KWcIOIPv5Nh+UhAdrRuSEFRkTttKceXx8i7CN2Uf9Nq/bfF Y3PAUDlGe2fbjqmEAou33614GdSlaK/0PrPL4a8xH0InHCGdr9oYcT7yTwAU6DoX WyrDA0tyHMm+NE4lMCl19+7E7AEClejZ1f/AgR3D2B/LFimZdWfUYjjVOHnlbfJb HUvYLjuyZlANKYQ/gRpip4Nno5vLtzDtCEUz6WXOqRS3witoCYAA2XzAljtrAe+5 Eiyw5vcZcc9GCA9sx6X3QLsen0JpRCFm6iDP8b85WXT8Z57Mv3g1YYENk41tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9ja2+0ZjMPZl7DCdgAvKC+vPDcIwHwYDVR0j BBgwFoAUu00b+/AGrDZIr1sZV16S28XedtIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8wL0JCNEQxQkZCRjAwNkFDMzY0OEFGNUIxOTU3NUU5 MkRCQzVERTc2RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkI0RDFCRkJGMDA2QUMzNjQ4QUY1QjE5NTc1RTkyREJDNURFNzZEMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMC9CQjREMUJGQkYwMDZB QzM2NDhBRjVCMTk1NzVFOTJEQkM1REU3NkQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPxEY6DLbv5Z VjF/mxAjdxg88jgFfZQ3UVvOmpi6gHxwuGbJVpIVrk7KlBMhuzhSxVOVVeS7Gmnk YRE55eXZ7n576gTFKfT7hPjoupZyScBFxthrqRYwxfE4aJhVXTPWV1k0OoZOHFGF WxHSaE5JbWqxyT6Ae39S4IIsSn+Z1XBfFaHSfpNshSrhFyRvqXUxejancp0hN2uG A1RTS14kLb4d4+3Yjl19XltI0Ep4seb5DjSm1KK6b6zoHjBRr0kjyUfiYI+ozbLU dqv4StG89W7emkyV68r++N1HI2FWWKNwZEy6WItiYdJrmDXhdHbERkb16nkkqwZm 7ac+frsZGg== -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:42 2026 by rpki-client