$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: fsKlERkTPXoQXaHVR1OTtXsS8LFtSOdPzxBR9g+Wr/g= Subject key identifier: AD:71:67:FD:EC:B1:D4:24:D7:5B:11:67:5D:3B:F7:52:31:90:0C:9C Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 4B67520136D55C83DBEAFD9CE787800A7A2A6E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 76 Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 09:50:54 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: i9Qcr62zYX/CVeaNcjCo3KtZbAWSyJKVERQIGraU+P0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:67:52:01:36:d5:5c:83:db:ea:fd:9c:e7:87:80:0a:7a:2a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 09:50:54 2026 GMT Subject: CN=AD7167FDECB1D424D75B11675D3BF75231900C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:8a:c0:3c:0b:4a:e1:23:67:bc:e8:c7:b2: 03:0d:43:1d:89:aa:c0:82:69:c5:ae:d3:88:50:0c: cd:87:2e:8d:4a:b8:ed:e9:08:e1:f3:2f:74:5a:8f: 98:8e:1c:57:55:59:a0:8d:10:f3:a5:2f:37:6b:c3: ba:4b:2a:a1:0c:c5:c2:8a:8d:de:47:06:ed:59:73: 93:20:08:26:48:6e:aa:b1:7a:0e:b3:b8:af:d1:a1: c8:ef:1e:e4:82:f9:7f:9a:92:53:8b:04:ad:ed:d4: 0b:89:a1:b7:2d:83:7d:bb:be:db:5d:36:16:84:66: ef:f5:34:cf:41:4d:f7:00:27:4e:b3:3b:36:53:d6: 5d:b8:5b:16:e9:fe:35:b5:3b:d5:26:d7:25:43:45: e1:f0:72:5a:b3:78:0e:35:a9:e7:70:4f:cc:ee:51: 03:36:0f:6f:1c:f0:2d:a1:89:a5:5a:0c:50:3e:8e: 61:4f:47:63:56:db:15:68:ba:9d:73:05:f0:f3:8a: c7:8c:89:d7:05:e0:3d:90:4a:48:76:f2:42:9c:7f: 0a:9d:af:10:10:9a:0c:8c:d0:bb:25:32:43:79:17: ad:5c:d2:d7:d7:38:b4:a4:35:4e:d3:51:5d:54:5f: 13:45:85:a7:9c:f2:13:e3:71:f0:ff:5f:0d:84:04: c2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:67:FD:EC:B1:D4:24:D7:5B:11:67:5D:3B:F7:52:31:90:0C:9C X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ad:f6:74:28:d7:07:8a:fe:9f:92:30:8c:3f:2f:01:53:2e: 73:05:9e:f3:e0:42:c0:6a:fa:c1:85:3c:f8:bb:6e:aa:b6:37: 71:91:b4:ee:12:88:23:b3:3e:e1:5f:76:34:54:5e:6f:f0:fa: 3f:2c:34:5f:f4:4e:1a:0a:1b:47:d8:5a:c6:86:96:b4:10:b8: 2d:83:e9:6c:db:3e:23:db:75:9b:4a:8b:57:d0:18:f3:25:cd: e3:ca:9e:a8:74:d1:75:b5:d8:d2:17:55:2c:17:ae:df:bb:cc: a6:1a:10:b6:70:eb:7c:e1:0e:60:b1:ad:14:57:dd:8c:c7:d0: 51:01:4b:c6:69:9c:e5:8f:84:7d:3f:bd:68:06:20:c2:0d:6d: 6b:f1:4d:c9:4f:95:1e:92:1f:47:2e:ad:cd:f2:0d:a2:1f:89: ed:44:8a:83:14:1c:51:75:b0:1b:bc:6f:5e:c4:dd:51:90:29: 64:a2:0b:83:1c:b3:de:98:0a:a5:91:a2:1c:a4:e7:d4:46:e6: 4a:5a:b4:92:b1:45:12:6a:58:18:10:62:1b:f8:cd:2f:ce:0e: 7c:80:50:84:59:ec:24:41:a1:95:89:7d:89:63:6d:75:b0:9a: 77:94:06:4d:0f:01:09:d5:ad:0b:3b:86:bb:9a:15:8e:6c:3c: eb:78:13:0b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITS2dSATbVXIPb6v2c54eACnoqbjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCMUFGNjk5N0U5QzQyRUEwODZEOEVBQTZCNzFGRjU2N0FG MjVCMEUxMB4XDTI2MDgyODA2NDI1NFoXDTI2MDgzMTA5NTA1NFowMzExMC8GA1UE AxMoQUQ3MTY3RkRFQ0IxRDQyNEQ3NUIxMTY3NUQzQkY3NTIzMTkwMEM5QzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTaisA8C0rhI2e86MeyAw1DHYmq wIJpxa7TiFAMzYcujUq47ekI4fMvdFqPmI4cV1VZoI0Q86UvN2vDuksqoQzFwoqN 3kcG7VlzkyAIJkhuqrF6DrO4r9GhyO8e5IL5f5qSU4sEre3UC4mhty2Dfbu+2102 FoRm7/U0z0FN9wAnTrM7NlPWXbhbFun+NbU71SbXJUNF4fByWrN4DjWp53BPzO5R AzYPbxzwLaGJpVoMUD6OYU9HY1bbFWi6nXMF8POKx4yJ1wXgPZBKSHbyQpx/Cp2v EBCaDIzQuyUyQ3kXrVzS19c4tKQ1TtNRXVRfE0WFp5zyE+Nx8P9fDYQEwvsCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBStcWf97LHUJNdbEWddO/dSMZAMnDAfBgNVHSME GDAWgBSxr2mX6cQuoIbY6qa3H/VnryWw4TAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEz NjYwODEyNTA2OTU1Nzk3LzAvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1 NjdBRjI1QjBFMS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9CMUFGNjk5N0U5QzQyRUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTExMzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJF QTA4NkQ4RUFBNkI3MUZGNTY3QUYyNUIwRTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYrfZ0KNcHiv6f kjCMPy8BUy5zBZ7z4ELAavrBhTz4u26qtjdxkbTuEogjsz7hX3Y0VF5v8Po/LDRf 9E4aChtH2FrGhpa0ELgtg+ls2z4j23WbSotX0BjzJc3jyp6odNF1tdjSF1UsF67f u8ymGhC2cOt84Q5gsa0UV92Mx9BRAUvGaZzlj4R9P71oBiDCDW1r8U3JT5Uekh9H Lq3N8g2iH4ntRIqDFBxRdbAbvG9exN1RkClkoguDHLPemAqlkaIcpOfURuZKWrSS sUUSalgYEGIb+M0vzg58gFCEWewkQaGViX2JY211sJp3lAZNDwEJ1a0LO4a7mhWO bDzreBML -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:22 2026 by rpki-client