$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: qbC7Fao0cZ3ehCOdENYV3OOwpqL5kGBFFFf5wtlAH+w= Subject key identifier: EA:B0:B9:F7:07:41:BC:D8:32:C8:CD:41:54:FE:20:10:D4:A6:1D:F0 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 6173FB6C63EF30CF94AE60BCD56F59BA1DD77BA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 58 Signing time: Wed 25 Mar 2026 19:03:27 +0000 Manifest this update: Wed 25 Mar 2026 18:58:27 +0000 Manifest next update: Thu 26 Mar 2026 21:27:27 +0000 Files and hashes: 1: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) 2: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: LIwr0WQv3JD8J9Pyb/y2TefqeXPNN0gYVPB92Wp2gEM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 21:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:73:fb:6c:63:ef:30:cf:94:ae:60:bc:d5:6f:59:ba:1d:d7:7b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Mar 25 18:58:27 2026 GMT Not After : Mar 26 21:27:27 2026 GMT Subject: CN=EAB0B9F70741BCD832C8CD4154FE2010D4A61DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:fc:84:52:4e:71:d2:7b:af:0f:0b:2d:31: d6:90:65:0b:75:a3:aa:c8:b0:b0:15:74:c5:fe:64: 1e:9a:b7:94:e5:7d:8f:a7:a4:48:ac:5c:92:e7:72: 60:52:e6:aa:a2:3c:a0:98:ce:fc:8c:0c:2f:3c:fb: 30:dd:90:14:6e:7b:a9:b5:80:3a:b0:6a:d5:49:e9: 45:95:1b:fd:d7:3e:78:35:46:c6:82:d0:62:fa:92: 37:1d:9b:fb:f3:2d:d4:2f:59:9c:c1:c8:0f:47:6d: a1:68:7d:94:e6:fa:0c:e3:e7:c9:30:e5:ad:9d:70: ed:13:ab:59:19:d6:7d:11:af:4e:e3:69:1a:4a:f6: 9b:e8:15:a6:4b:0e:72:bf:17:29:e2:2d:07:e9:f9: 39:60:59:90:b9:c3:e1:b4:3d:fc:48:be:46:3d:57: 48:f7:42:5f:8a:51:79:84:f6:b2:6a:0c:b9:7f:71: 7f:73:f7:a5:7c:90:6d:83:01:4e:ca:69:c7:02:22: 58:ac:d2:a3:24:85:ad:db:31:a9:ee:cb:64:a7:13: 5c:88:9e:48:70:8e:05:d4:07:94:b0:77:4c:50:29: 24:04:1a:2b:39:b5:79:5f:e8:ca:cc:2c:3b:71:d7: 15:ca:3f:d0:fc:b6:c7:06:50:81:d9:34:d5:7b:54: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:B9:F7:07:41:BC:D8:32:C8:CD:41:54:FE:20:10:D4:A6:1D:F0 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:dc:ea:0f:52:ad:79:d4:35:29:fb:46:46:a4:24:46:b6:3b: 0c:33:22:71:9c:a0:03:37:e2:38:44:d9:c8:7e:85:8b:c3:54: 6f:6c:ca:a4:b4:ee:6e:fd:29:ba:51:9d:95:06:b2:35:23:cd: c6:df:85:2d:24:db:bb:27:8f:51:b3:5a:f1:5c:20:2e:35:70: 63:d9:f5:4b:4d:9d:28:36:69:56:2b:a9:80:c1:2f:0e:53:db: ac:88:f6:b2:2d:0b:e1:44:9c:bc:2f:a8:5e:d7:9f:52:ea:0c: 11:2b:5e:7f:5b:b2:08:f1:3b:53:84:f1:a0:76:07:2d:37:b4: 3e:f4:6a:f5:95:b0:9c:83:bf:49:5e:30:3e:5d:03:4f:ba:f2: 75:63:bb:0a:e1:47:18:86:52:79:5d:b4:ef:df:9b:03:24:6d: ea:3f:6f:61:de:d9:0a:1d:f0:7d:95:c8:75:b9:77:31:81:f6: 07:c4:68:43:4d:92:5d:b7:2c:12:50:60:f1:5a:bb:98:03:9f: 0c:fd:e5:ea:50:fc:99:1b:5f:a7:17:e6:38:0d:ae:be:4e:a3: 4d:6b:f8:c0:39:8f:73:68:19:81:26:d3:bc:ea:92:7d:32:69: e5:08:f9:e9:be:b9:27:04:ec:fb:a2:40:4d:9f:46:b0:93:d0: 0e:05:d3:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYXP7bGPvMM+UrmC81W9Zuh3Xe6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjAzMjUxODU4MjdaFw0yNjAzMjYyMTI3MjdaMDMxMTAvBgNV BAMTKEVBQjBCOUY3MDc0MUJDRDgzMkM4Q0Q0MTU0RkUyMDEwRDRBNjFERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6PyEUk5x0nuvDwstMdaQZQt1 o6rIsLAVdMX+ZB6at5TlfY+npEisXJLncmBS5qqiPKCYzvyMDC88+zDdkBRue6m1 gDqwatVJ6UWVG/3XPng1RsaC0GL6kjcdm/vzLdQvWZzByA9HbaFofZTm+gzj58kw 5a2dcO0Tq1kZ1n0Rr07jaRpK9pvoFaZLDnK/FyniLQfp+TlgWZC5w+G0PfxIvkY9 V0j3Ql+KUXmE9rJqDLl/cX9z96V8kG2DAU7KaccCIlis0qMkha3bManuy2SnE1yI nkhwjgXUB5Swd0xQKSQEGis5tXlf6MrMLDtx1xXKP9D8tscGUIHZNNV7VM/BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6rC59wdBvNgyyM1BVP4gENSmHfAwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONzqD1KtedQ1 KftGRqQkRrY7DDMicZygAzfiOETZyH6Fi8NUb2zKpLTubv0pulGdlQayNSPNxt+F LSTbuyePUbNa8VwgLjVwY9n1S02dKDZpViupgMEvDlPbrIj2si0L4UScvC+oXtef UuoMEStef1uyCPE7U4TxoHYHLTe0PvRq9ZWwnIO/SV4wPl0DT7rydWO7CuFHGIZS eV2079+bAyRt6j9vYd7ZCh3wfZXIdbl3MYH2B8RoQ02SXbcsElBg8Vq7mAOfDP3l 6lD8mRtfpxfmOA2uvk6jTWv4wDmPc2gZgSbTvOqSfTJp5Qj56b65JwTs+6JATZ9G sJPQDgXTMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:18 2026 by rpki-client