$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: 9nFF1O59LeiFlHsreLMi1wh/j3bsF2VlHVCtFxG4XPM= Subject key identifier: D1:EA:FF:49:18:F3:74:DE:1F:16:9F:E8:5B:88:1A:25:02:EC:42:AE Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 34A1C047039B6C83B8BDF4AAF9EA81B0FCDC2887 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 99 Signing time: Tue 12 May 2026 06:20:25 +0000 Manifest this update: Tue 12 May 2026 06:15:25 +0000 Manifest next update: Wed 13 May 2026 09:49:25 +0000 Files and hashes: 1: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 2: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 3: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 4: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: mpNtAxiX7uuFmdjWzk6SWN6IojKJgM9Rndvl9Z5Q8u0=) 5: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a1:c0:47:03:9b:6c:83:b8:bd:f4:aa:f9:ea:81:b0:fc:dc:28:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: May 12 06:15:25 2026 GMT Not After : May 13 09:49:25 2026 GMT Subject: CN=D1EAFF4918F374DE1F169FE85B881A2502EC42AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:cf:47:b4:e1:6b:b2:14:9c:39:c4:c6:c3: 51:1c:a0:07:f6:1c:d2:dc:40:45:14:3d:3e:31:04: d7:a7:0f:cb:85:35:6c:7a:31:d8:ce:cd:55:31:8a: 22:3e:f5:e1:f6:13:f1:32:42:7a:b2:74:b6:2a:be: ba:b3:07:50:87:0c:6a:93:05:81:60:b9:35:bb:04: e6:71:75:12:2a:79:53:6d:c3:b3:10:04:c1:e0:e1: 69:a7:2b:75:22:75:49:27:78:21:cb:01:5d:1d:66: 99:11:f4:c2:b9:4e:fe:65:50:b3:a3:03:59:9c:5d: a9:bf:18:48:93:f9:d0:bc:a3:85:29:11:9d:b4:83: 22:3d:40:87:88:30:b1:24:c5:85:d1:af:a7:04:c0: e1:23:2e:2c:aa:94:44:97:4b:37:1a:73:e6:7a:4c: 3b:a2:2d:f8:0d:6f:47:16:a6:c0:7b:89:37:0c:dc: 47:7b:37:f3:d2:09:42:73:fc:a3:a8:ce:f5:63:77: 8d:9c:fb:86:57:f1:60:28:06:fd:51:9e:5b:d3:08: 9c:a2:3f:0a:90:4e:ca:ed:6c:66:7c:35:0c:56:5f: c0:cf:1a:76:6e:2e:45:c4:c5:fc:e3:59:ab:dc:13: 7f:bc:96:ad:ed:a2:60:92:75:42:43:d1:74:4d:92: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EA:FF:49:18:F3:74:DE:1F:16:9F:E8:5B:88:1A:25:02:EC:42:AE X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:94:3f:45:ed:fa:4d:6a:86:63:26:dc:fe:2a:a1:90:70:de: 38:f8:27:c4:3f:f9:83:fb:4a:45:51:e7:01:0c:9c:3c:66:9c: ac:aa:18:87:4f:e7:e2:29:a4:45:26:2c:83:1c:11:a6:9a:48: 12:61:a5:d7:b1:e9:40:29:da:8c:01:f2:b5:7b:f4:1b:52:fd: bc:a4:e2:5d:ed:52:8d:76:3e:9e:20:85:23:4d:26:6c:22:e2: 01:2d:c9:e7:84:0b:70:6d:2e:1e:7c:b7:e7:87:b3:62:05:98: 8f:d1:49:e1:71:89:8d:98:e0:75:01:3c:53:c3:28:27:58:79: 0a:1c:6c:59:6f:8a:9e:6e:0d:1c:95:cb:2a:0e:3a:43:18:d5: 26:63:68:93:a2:07:96:1d:29:12:4e:9f:b5:79:72:91:f8:ae: 91:a8:ef:cf:d8:b5:aa:ea:31:87:ba:e3:65:55:0c:fa:3d:bb: 8f:bb:22:97:2a:a5:94:7d:26:3b:51:98:3f:f4:f2:53:75:cf: 03:dd:49:2b:ec:d3:fb:85:6e:c3:f1:90:36:a9:40:97:ad:d1: 6e:af:43:38:68:df:84:35:67:14:67:5e:bb:21:c2:ee:ef:6e: 6f:ce:27:0c:95:66:97:df:9a:a1:96:e0:19:57:62:d2:6d:a0: 93:fc:b6:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNKHARwObbIO4vfSq+eqBsPzcKIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA1MTIwNjE1MjVaFw0yNjA1MTMwOTQ5MjVaMDMxMTAvBgNV BAMTKEQxRUFGRjQ5MThGMzc0REUxRjE2OUZFODVCODgxQTI1MDJFQzQyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs5c9HtOFrshScOcTGw1EcoAf2 HNLcQEUUPT4xBNenD8uFNWx6MdjOzVUxiiI+9eH2E/EyQnqydLYqvrqzB1CHDGqT BYFguTW7BOZxdRIqeVNtw7MQBMHg4WmnK3UidUkneCHLAV0dZpkR9MK5Tv5lULOj A1mcXam/GEiT+dC8o4UpEZ20gyI9QIeIMLEkxYXRr6cEwOEjLiyqlESXSzcac+Z6 TDuiLfgNb0cWpsB7iTcM3Ed7N/PSCUJz/KOozvVjd42c+4ZX8WAoBv1RnlvTCJyi PwqQTsrtbGZ8NQxWX8DPGnZuLkXExfzjWavcE3+8lq3tomCSdUJD0XRNklvhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0er/SRjzdN4fFp/oW4gaJQLsQq4wHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5Q/Re36TWqG Yybc/iqhkHDeOPgnxD/5g/tKRVHnAQycPGacrKoYh0/n4imkRSYsgxwRpppIEmGl 17HpQCnajAHytXv0G1L9vKTiXe1SjXY+niCFI00mbCLiAS3J54QLcG0uHny354ez YgWYj9FJ4XGJjZjgdQE8U8MoJ1h5ChxsWW+Knm4NHJXLKg46QxjVJmNok6IHlh0p Ek6ftXlykfiukajvz9i1quoxh7rjZVUM+j27j7silyqllH0mO1GYP/TyU3XPA91J K+zT+4Vuw/GQNqlAl63Rbq9DOGjfhDVnFGdeuyHC7u9ub84nDJVml9+aoZbgGVdi 0m2gk/y22Q== -----END CERTIFICATE-----Generated at Wed May 13 01:27:30 2026 by rpki-client