$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: LOVW7cia07y6+//LabYP9Aw3qs0NVgWANBJZYHdv6TI= Subject key identifier: 99:A9:1D:F0:6D:57:6D:6B:57:15:F0:BE:D9:7B:47:12:05:80:64:EB Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 330E99D36A9B6DE705F84C73A29D22CE9FBD2284 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 99 Signing time: Wed 13 May 2026 08:51:03 +0000 Manifest this update: Wed 13 May 2026 08:46:03 +0000 Manifest next update: Thu 14 May 2026 11:29:03 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: ih8fctjqa4MuxVl90BgvHXrYC4lKJhO8yMj6VoYnXH0=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0e:99:d3:6a:9b:6d:e7:05:f8:4c:73:a2:9d:22:ce:9f:bd:22:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: May 13 08:46:03 2026 GMT Not After : May 14 11:29:03 2026 GMT Subject: CN=99A91DF06D576D6B5715F0BED97B4712058064EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:af:ae:9c:f7:2d:a5:ea:4b:66:2b:47:1d: 26:3b:4b:b8:d8:11:12:a9:ec:a7:e5:07:80:eb:6a: 21:1b:10:58:37:7d:2d:01:a6:aa:ea:61:f8:1c:01: 18:c4:82:14:7a:e5:11:71:38:aa:97:19:45:3f:47: eb:f1:e4:f3:c1:16:86:44:8e:a5:b9:2e:11:0c:d5: 7c:bb:d7:e1:66:4f:40:86:a7:cd:e3:90:b1:5a:50: 96:ea:95:03:ce:8a:8d:76:1b:81:b1:db:71:79:9f: e0:5b:4f:fb:d9:1b:d3:7d:cf:62:66:38:f9:e4:04: 19:66:0f:b5:91:e2:a8:88:d1:ca:09:5c:bf:63:fc: 40:ed:8d:1e:11:6d:5a:1a:bc:5e:c8:d4:f3:08:5f: 3a:7c:21:65:f3:2c:e4:86:68:82:ff:2a:03:a8:9c: f1:49:81:0e:e0:ee:8a:61:90:d0:d1:bf:d9:fb:4d: 4e:a6:4c:45:9b:0f:12:05:fc:18:35:e7:66:9c:07: ad:a4:46:27:28:60:2d:38:e3:7f:c1:fd:94:d6:8a: 34:da:21:1e:4b:f0:fb:40:46:ec:67:25:a6:52:30: 36:dd:56:42:9e:a8:d8:3a:cb:77:12:b5:73:00:c6: c8:ff:ba:ba:ca:cd:6c:f6:c9:6a:c2:3c:87:85:9d: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:1D:F0:6D:57:6D:6B:57:15:F0:BE:D9:7B:47:12:05:80:64:EB X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:b3:7c:46:c3:2e:25:2b:58:d6:d7:b6:6a:e6:f0:e0:7d: a4:08:60:a8:83:57:14:42:82:d5:cd:7c:b7:ee:3e:5d:af:44: cc:55:dc:39:b4:15:b1:cf:f2:10:57:89:bb:ff:79:0a:ad:a5: cb:c2:f9:4b:9a:0f:50:be:4f:67:a5:b8:67:a8:2b:0c:dd:25: 14:28:8d:86:4a:dc:ad:1b:c9:34:88:48:99:1f:65:c6:ad:88: 76:63:db:55:3f:e0:0f:94:3b:97:11:23:b8:7a:ba:14:94:d3: 8a:5c:65:ab:cd:8f:09:c9:21:85:b4:82:19:63:59:f4:97:08: 16:7e:c6:00:ff:d0:a6:d7:35:ed:23:76:67:9f:b7:fd:20:b5: e6:7c:08:4c:45:f2:e5:bc:55:b8:82:d5:b6:e5:f0:5f:64:60: 28:a1:25:09:d0:2e:46:fd:36:2d:87:83:2d:37:1b:f2:fa:63: d3:02:55:5d:ce:06:97:5a:57:ff:ec:ea:3e:c8:3a:b3:b1:21: a8:e1:37:c4:78:fd:74:1e:9f:9c:00:3f:bf:97:59:a5:8d:7e: dc:32:77:8a:67:71:0d:4b:80:b8:bd:2f:31:7c:06:3b:f7:b7: fe:a2:46:35:c0:e1:23:fc:b8:92:73:63:97:0e:d1:b0:59:04: cd:92:a2:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMw6Z02qbbecF+Exzop0izp+9IoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA1MTMwODQ2MDNaFw0yNjA1MTQxMTI5MDNaMDMxMTAvBgNV BAMTKDk5QTkxREYwNkQ1NzZENkI1NzE1RjBCRUQ5N0I0NzEyMDU4MDY0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTa+unPctpepLZitHHSY7S7jY ERKp7KflB4DraiEbEFg3fS0BpqrqYfgcARjEghR65RFxOKqXGUU/R+vx5PPBFoZE jqW5LhEM1Xy71+FmT0CGp83jkLFaUJbqlQPOio12G4Gx23F5n+BbT/vZG9N9z2Jm OPnkBBlmD7WR4qiI0coJXL9j/EDtjR4RbVoavF7I1PMIXzp8IWXzLOSGaIL/KgOo nPFJgQ7g7ophkNDRv9n7TU6mTEWbDxIF/Bg152acB62kRicoYC0443/B/ZTWijTa IR5L8PtARuxnJaZSMDbdVkKeqNg6y3cStXMAxsj/urrKzWz2yWrCPIeFncPHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmakd8G1XbWtXFfC+2XtHEgWAZOswHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHSzfEbDLiUr WNbXtmrm8OB9pAhgqINXFEKC1c18t+4+Xa9EzFXcObQVsc/yEFeJu/95Cq2ly8L5 S5oPUL5PZ6W4Z6grDN0lFCiNhkrcrRvJNIhImR9lxq2IdmPbVT/gD5Q7lxEjuHq6 FJTTilxlq82PCckhhbSCGWNZ9JcIFn7GAP/Qptc17SN2Z5+3/SC15nwITEXy5bxV uILVtuXwX2RgKKElCdAuRv02LYeDLTcb8vpj0wJVXc4Gl1pX/+zqPsg6s7EhqOE3 xHj9dB6fnAA/v5dZpY1+3DJ3imdxDUuAuL0vMXwGO/e3/qJGNcDhI/y4knNjlw7R sFkEzZKiDw== -----END CERTIFICATE-----Generated at Wed May 13 16:26:39 2026 by rpki-client