$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json) Hash identifier: 8lA8qJ74IajiplAHkUxJJIBQK8hkZnqPVC7VcB6M3WQ= Subject key identifier: 6A:E0:8C:A9:48:41:EA:50:65:8A:C9:05:14:79:3C:C3:6B:7D:88:C4 Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Certificate serial: 7BF27C28F616125FDE8E237C3973101DE8104C23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft Manifest number: 3B Signing time: Tue 14 Jul 2026 04:35:27 +0000 Manifest this update: Tue 14 Jul 2026 04:30:27 +0000 Manifest next update: Wed 15 Jul 2026 07:47:27 +0000 Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: qU0NYayffSp89KHVDtKPJdfL36utphnK4uv5ggIBu3g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:7c:28:f6:16:12:5f:de:8e:23:7c:39:73:10:1d:e8:10:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1 Validity Not Before: Jul 14 04:30:27 2026 GMT Not After : Jul 15 07:47:27 2026 GMT Subject: CN=6AE08CA94841EA50658AC90514793CC36B7D88C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:12:a5:09:fd:0e:01:5d:c0:6e:f8:00:6f: d8:bf:a4:7d:ee:74:41:1a:f5:7d:60:b2:7d:b4:72: f1:6d:67:87:4b:34:82:08:3e:8e:be:b6:a4:a2:5f: b9:e1:39:2d:3f:d1:80:90:90:f1:11:ae:05:80:c0: 28:86:e2:18:0f:86:0d:71:d9:65:0a:c8:df:65:bd: 92:b6:b0:7d:9c:e8:eb:5a:94:88:00:2c:1a:a1:e6: 93:6f:50:ad:92:4c:95:a0:83:d6:be:32:3a:3f:82: 83:6a:a7:c7:ed:37:f9:40:8f:24:ee:11:d8:01:e3: 3a:a3:cc:01:f8:9b:9f:0c:5c:47:37:33:2d:8a:a3: 6c:85:d3:30:7c:a5:8f:6e:3d:08:01:b7:0f:39:82: 3a:9f:3a:87:73:b9:1d:d7:2e:12:5e:05:32:0e:cd: 49:88:c2:03:f7:66:49:30:d9:72:f6:73:cf:61:8c: 40:e6:1b:95:c8:c4:3a:7f:3e:02:f6:a8:f6:ca:e6: df:3f:c2:04:39:35:98:7b:f0:d2:9f:aa:6b:45:07: 34:b0:27:de:48:1c:60:92:1c:e8:09:15:f4:47:69: 53:7a:02:fe:e0:d0:68:26:1a:f4:8d:46:ad:fd:b7: 85:a1:ec:46:5e:bc:f1:7a:dc:4c:aa:ed:ff:e6:f5: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E0:8C:A9:48:41:EA:50:65:8A:C9:05:14:79:3C:C3:6B:7D:88:C4 X509v3 Authority Key Identifier: keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:92:82:db:2b:21:52:7c:cd:0e:21:5a:28:22:42:9e:51:5f: 51:4e:02:ef:78:bf:af:7a:ac:3d:35:b6:8f:c0:5d:5a:fe:e5: fc:65:dc:6b:40:8a:f1:90:0f:40:32:5e:c9:cb:c6:e5:cc:3a: 40:12:a6:a1:c3:97:e4:d5:20:de:8f:a9:3d:e7:55:a0:16:6d: 37:ff:1b:23:91:1b:19:60:5f:d4:d4:11:80:29:e7:94:89:5c: 9e:e7:7e:20:4a:dd:19:96:38:60:14:39:1e:35:83:85:0c:fc: e4:f4:e2:c9:53:3c:b6:f8:d6:f2:ab:e9:23:aa:3e:84:15:61: 99:ee:6c:fa:8e:ed:33:34:24:a9:f1:a6:5e:b6:0a:ae:ab:db: b0:c3:6e:74:6a:f3:78:cb:3d:fc:e9:40:a6:16:5c:67:38:d9: 35:6e:1a:0a:e3:1d:e1:7f:35:15:bd:da:e2:0d:e1:8c:61:e8: 21:4e:43:ad:b0:f4:0a:da:96:e4:be:1c:cd:79:e5:c4:65:08: 95:25:0c:42:4c:e6:bb:7a:4b:77:78:b1:c1:e9:98:49:0a:3a: 3a:fc:f8:41:60:dc:5e:1a:cf:42:81:14:f9:15:46:03:0c:3f: 95:d9:26:70:ea:15:c4:a4:41:bd:87:c1:a8:b8:53:a8:5c:bf: 39:0c:af:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe/J8KPYWEl/ejiN8OXMQHegQTCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdB RjI1QjBFMTAeFw0yNjA3MTQwNDMwMjdaFw0yNjA3MTUwNzQ3MjdaMDMxMTAvBgNV BAMTKDZBRTA4Q0E5NDg0MUVBNTA2NThBQzkwNTE0NzkzQ0MzNkI3RDg4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5hKlCf0OAV3AbvgAb9i/pH3u dEEa9X1gsn20cvFtZ4dLNIIIPo6+tqSiX7nhOS0/0YCQkPERrgWAwCiG4hgPhg1x 2WUKyN9lvZK2sH2c6OtalIgALBqh5pNvUK2STJWgg9a+Mjo/goNqp8ftN/lAjyTu EdgB4zqjzAH4m58MXEc3My2Ko2yF0zB8pY9uPQgBtw85gjqfOodzuR3XLhJeBTIO zUmIwgP3Zkkw2XL2c89hjEDmG5XIxDp/PgL2qPbK5t8/wgQ5NZh78NKfqmtFBzSw J95IHGCSHOgJFfRHaVN6Av7g0GgmGvSNRq39t4Wh7EZevPF63Eyq7f/m9fPbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUauCMqUhB6lBliskFFHk8w2t9iMQwHwYDVR0j BBgwFoAUsa9pl+nELqCG2Oqmtx/1Z68lsOEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY2MDgxMjUwNjk1NTc5Ny8wL0IxQUY2OTk3RTlDNDJFQTA4NkQ4RUFBNkI3MUZG NTY3QUYyNUIwRTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFBRjY5OTdFOUM0MkVBMDg2RDhFQUE2QjcxRkY1NjdBRjI1QjBFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NjA4MTI1MDY5NTU3OTcvMC9CMUFGNjk5N0U5QzQy RUEwODZEOEVBQTZCNzFGRjU2N0FGMjVCMEUxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJKC2yshUnzN DiFaKCJCnlFfUU4C73i/r3qsPTW2j8BdWv7l/GXca0CK8ZAPQDJeycvG5cw6QBKm ocOX5NUg3o+pPedVoBZtN/8bI5EbGWBf1NQRgCnnlIlcnud+IErdGZY4YBQ5HjWD hQz85PTiyVM8tvjW8qvpI6o+hBVhme5s+o7tMzQkqfGmXrYKrqvbsMNudGrzeMs9 /OlAphZcZzjZNW4aCuMd4X81Fb3a4g3hjGHoIU5DrbD0CtqW5L4czXnlxGUIlSUM Qkzmu3pLd3ixwemYSQo6Ovz4QWDcXhrPQoEU+RVGAww/ldkmcOoVxKRBvYfBqLhT qFy/OQyvoA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:04 2026 by rpki-client