$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: TGRjF7BjJkzduH45qEM7fS+1y2G/79DY3So6HxkNCUI= Subject key identifier: 84:61:10:56:03:C7:55:A3:0B:2A:BD:4C:3A:5A:9F:FA:62:7F:15:31 Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 4EBA6E739725CB3816C3A68D214BC1C8FB441008 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 8B Signing time: Wed 14 Oct 2026 00:43:21 +0000 Manifest this update: Wed 14 Oct 2026 00:38:21 +0000 Manifest next update: Sat 17 Oct 2026 01:12:21 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: 9xBhSOs5Sxhxr6bQV5bJgIKzKBRPDS6eMMPM4U31R+Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 01:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ba:6e:73:97:25:cb:38:16:c3:a6:8d:21:4b:c1:c8:fb:44:10:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Oct 14 00:38:21 2026 GMT Not After : Oct 17 01:12:21 2026 GMT Subject: CN=8461105603C755A30B2ABD4C3A5A9FFA627F1531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:cf:c7:03:82:4a:2b:e7:4d:a0:f4:53:3c: 46:f6:13:21:fb:77:31:71:e0:b6:4c:e5:81:ca:a0: e8:a0:0a:97:4c:f4:48:36:17:07:e5:6a:1f:97:3d: da:97:e1:94:e5:5f:eb:10:bf:66:08:45:93:d2:fa: ca:f4:b0:f4:41:21:aa:0f:70:37:38:bd:0a:42:2f: 0a:f2:0a:06:ff:92:3e:4d:af:bd:ce:d7:e3:95:ad: 9c:50:e0:e3:99:0d:1e:10:90:4f:19:79:3f:bf:0a: da:f8:7e:e3:2b:1e:b9:c0:8e:fc:23:67:f8:52:f8: d6:4f:53:80:20:7a:0b:de:df:af:5b:12:f1:a7:e9: f4:8f:10:90:6e:f7:96:14:59:ef:59:74:3a:c7:07: 9f:84:a4:be:03:66:90:31:01:8d:39:8f:72:3c:b8: 93:c8:91:1b:eb:ce:2d:f6:1f:5b:04:2c:5d:35:0a: 01:00:4c:66:c5:af:2e:0d:ea:c0:43:1e:6e:44:83: 3c:02:5c:ab:fb:ea:42:f6:05:d5:5e:a7:62:1e:bc: 61:54:67:1a:8a:08:a3:fc:73:d2:cf:cf:17:e5:11: 73:fd:8f:45:6a:14:0f:ca:74:53:a3:9f:59:00:5f: 4a:c5:b6:5c:62:87:98:95:6f:d8:4b:1e:52:bb:5e: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:61:10:56:03:C7:55:A3:0B:2A:BD:4C:3A:5A:9F:FA:62:7F:15:31 X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4d:21:a0:0e:96:a5:b4:ad:16:5b:22:2c:50:61:e0:9c:45: cf:2a:f2:38:aa:5d:ea:b3:a8:a4:bf:bb:44:75:4f:8a:6b:67: bd:73:f1:8e:a7:bd:01:4b:d7:13:4a:dc:b6:04:9e:a6:c4:8b: 65:71:91:05:02:47:7d:8a:ad:21:89:7b:ec:4b:d1:3f:a2:f7: c3:8f:77:a3:73:34:c7:e5:7c:29:c3:48:ca:8b:84:07:7e:29: 05:be:3c:5b:41:af:c4:2c:ff:da:8c:d4:c0:f7:72:e8:d7:3f: fe:e1:c5:67:ec:1f:2c:3a:23:ad:d6:0a:98:04:33:68:51:96: fa:40:49:12:a2:0c:df:e3:aa:31:92:c6:20:b7:06:f5:f5:17: f8:bb:9a:85:3c:18:1e:b4:ac:3c:a0:9f:4e:79:e9:7a:15:2f: a9:f8:08:68:5a:25:6e:7b:d4:eb:3f:96:82:72:50:d2:84:12: d6:77:99:a0:ac:98:88:d6:cb:dd:d8:a1:28:37:19:52:4e:bb: 7c:8e:fb:20:56:cb:86:61:eb:db:6d:71:10:80:9c:a1:f0:cc: 02:8f:ff:39:38:af:9d:9b:bf:ee:a6:fd:ea:bb:22:9e:c0:18: a0:cc:4a:05:64:ae:5f:93:81:33:d5:ff:2f:b3:d0:88:42:89: 60:92:4d:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTrpuc5clyzgWw6aNIUvByPtEEAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjEwMTQwMDM4MjFaFw0yNjEwMTcwMTEyMjFaMDMxMTAvBgNV BAMTKDg0NjExMDU2MDNDNzU1QTMwQjJBQkQ0QzNBNUE5RkZBNjI3RjE1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJIM/HA4JKK+dNoPRTPEb2EyH7 dzFx4LZM5YHKoOigCpdM9Eg2Fwflah+XPdqX4ZTlX+sQv2YIRZPS+sr0sPRBIaoP cDc4vQpCLwryCgb/kj5Nr73O1+OVrZxQ4OOZDR4QkE8ZeT+/Ctr4fuMrHrnAjvwj Z/hS+NZPU4Agegve369bEvGn6fSPEJBu95YUWe9ZdDrHB5+EpL4DZpAxAY05j3I8 uJPIkRvrzi32H1sELF01CgEATGbFry4N6sBDHm5EgzwCXKv76kL2BdVep2IevGFU ZxqKCKP8c9LPzxflEXP9j0VqFA/KdFOjn1kAX0rFtlxih5iVb9hLHlK7XjqHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhGEQVgPHVaMLKr1MOlqf+mJ/FTEwHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE0hoA6WpbSt FlsiLFBh4JxFzyryOKpd6rOopL+7RHVPimtnvXPxjqe9AUvXE0rctgSepsSLZXGR BQJHfYqtIYl77EvRP6L3w493o3M0x+V8KcNIyouEB34pBb48W0GvxCz/2ozUwPdy 6Nc//uHFZ+wfLDojrdYKmAQzaFGW+kBJEqIM3+OqMZLGILcG9fUX+LuahTwYHrSs PKCfTnnpehUvqfgIaFolbnvU6z+WgnJQ0oQS1neZoKyYiNbL3dihKDcZUk67fI77 IFbLhmHr221xEICcofDMAo//OTivnZu/7qb96rsinsAYoMxKBWSuX5OBM9X/L7PQ iEKJYJJNfA== -----END CERTIFICATE-----Generated at Wed Oct 14 10:12:41 2026 by rpki-client