$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: /cYAw30+s84JjV4XORhdD9YNMqevk57kqA5S8Hl3UvE= Subject key identifier: 14:F6:A7:42:45:02:C5:A6:7D:82:9C:0D:3F:A2:11:B1:20:E7:44:B8 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 27FCC5BF47063D5C80E6691FC595C9A2DBF734EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 0135 Signing time: Thu 24 Sep 2026 01:50:50 +0000 Manifest this update: Thu 24 Sep 2026 01:45:50 +0000 Manifest next update: Sun 27 Sep 2026 06:06:50 +0000 Files and hashes: 1: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 2: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 3: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 4: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: XdtPGtqLfnVgiuTJyNI7HUzXqmCl+lFiLJ40OuHnidQ=) 5: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 06:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fc:c5:bf:47:06:3d:5c:80:e6:69:1f:c5:95:c9:a2:db:f7:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Sep 24 01:45:50 2026 GMT Not After : Sep 27 06:06:50 2026 GMT Subject: CN=14F6A7424502C5A67D829C0D3FA211B120E744B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:42:a8:f7:e6:80:db:f1:57:95:c7:30:27: ef:f2:81:43:45:e9:d9:09:b3:b4:34:45:d3:d2:c9: ec:3f:da:8a:9f:a3:67:d4:5a:65:31:66:3b:a3:0a: ba:a8:c1:3e:9b:61:da:0e:89:d5:64:21:c4:eb:33: a0:9f:3b:01:00:4e:19:4e:da:f6:70:5c:fc:99:4a: 6e:90:95:62:7c:40:d7:3f:dc:1a:19:34:13:9c:ad: a2:5a:14:05:0b:03:b2:bb:96:f9:49:16:49:17:be: 05:30:d4:ef:4f:71:8e:6f:99:6f:fa:6d:9f:f2:78: 10:78:8f:0f:1c:4b:fa:31:50:2b:93:f2:e0:c8:30: c3:55:15:eb:d0:37:e2:75:44:39:7c:0c:b5:5b:30: 32:ee:ab:4a:b8:96:0f:28:98:dc:21:99:e6:76:0f: d5:94:49:47:20:00:a8:f2:58:fa:94:07:01:d0:0b: 62:aa:b1:7a:cd:d6:17:19:35:91:4f:01:9a:8a:5b: 63:12:72:a3:e1:42:eb:ad:4b:ff:de:72:aa:7e:3f: 1b:03:af:b0:68:30:cc:29:49:fa:13:7c:28:28:59: fa:a7:9a:41:30:eb:e8:e5:7b:59:64:a2:c0:84:6a: a6:4d:95:f2:2c:15:0f:94:ce:f0:15:de:64:d0:9c: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:A7:42:45:02:C5:A6:7D:82:9C:0D:3F:A2:11:B1:20:E7:44:B8 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f6:02:49:e4:5f:1d:fc:09:dc:3a:5d:a5:3d:b7:67:d7:0d: 17:05:d5:6d:f2:8f:dd:c6:73:1c:89:5c:96:de:e7:37:16:73: 31:db:08:1a:17:bd:97:b8:a5:27:40:92:20:54:f9:e7:31:c0: c5:a9:2e:a8:8f:d7:bb:20:f4:ce:ef:7b:3e:53:fb:53:30:91: 39:8d:6d:b2:00:58:45:05:2e:32:f2:88:5c:79:a8:07:38:7d: 5f:66:bf:99:45:95:35:46:99:6a:fe:9e:34:3d:67:87:5b:59: aa:c0:71:11:18:21:e6:3c:6e:44:fd:31:82:ed:c9:df:cf:39: d7:2d:99:d2:cb:ad:c9:7a:69:fc:af:2f:6c:2a:d5:7b:d7:81: b8:0c:b7:c5:71:99:15:e5:e2:6b:35:e3:16:1d:40:a1:cc:38: ee:15:85:70:48:1e:e4:0f:65:1c:90:4d:8b:a7:d0:51:79:89: e1:7d:a1:de:57:76:10:1e:49:7e:51:8b:4a:52:d0:26:c3:d3: c3:a7:5c:7e:5a:5f:9c:cc:c7:09:97:b1:d7:14:8c:3b:60:02: 4d:9d:36:b5:b5:e8:3c:e9:6b:f5:8b:15:86:8b:e2:f6:2c:fc: c4:a4:7d:86:0a:f7:33:63:20:f2:0c:30:58:59:79:a2:0e:b7: d6:27:b8:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ/zFv0cGPVyA5mkfxZXJotv3NO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA5MjQwMTQ1NTBaFw0yNjA5MjcwNjA2NTBaMDMxMTAvBgNV BAMTKDE0RjZBNzQyNDUwMkM1QTY3RDgyOUMwRDNGQTIxMUIxMjBFNzQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXtkKo9+aA2/FXlccwJ+/ygUNF 6dkJs7Q0RdPSyew/2oqfo2fUWmUxZjujCrqowT6bYdoOidVkIcTrM6CfOwEAThlO 2vZwXPyZSm6QlWJ8QNc/3BoZNBOcraJaFAULA7K7lvlJFkkXvgUw1O9PcY5vmW/6 bZ/yeBB4jw8cS/oxUCuT8uDIMMNVFevQN+J1RDl8DLVbMDLuq0q4lg8omNwhmeZ2 D9WUSUcgAKjyWPqUBwHQC2KqsXrN1hcZNZFPAZqKW2MScqPhQuutS//ecqp+PxsD r7BoMMwpSfoTfCgoWfqnmkEw6+jle1lkosCEaqZNlfIsFQ+UzvAV3mTQnK1JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFPanQkUCxaZ9gpwNP6IRsSDnRLgwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvYCSeRfHfwJ 3DpdpT23Z9cNFwXVbfKP3cZzHIlclt7nNxZzMdsIGhe9l7ilJ0CSIFT55zHAxaku qI/XuyD0zu97PlP7UzCROY1tsgBYRQUuMvKIXHmoBzh9X2a/mUWVNUaZav6eND1n h1tZqsBxERgh5jxuRP0xgu3J38851y2Z0sutyXpp/K8vbCrVe9eBuAy3xXGZFeXi azXjFh1Aocw47hWFcEge5A9lHJBNi6fQUXmJ4X2h3ld2EB5JflGLSlLQJsPTw6dc flpfnMzHCZex1xSMO2ACTZ02tbXoPOlr9YsVhovi9iz8xKR9hgr3M2Mg8gwwWFl5 og631ie4Iw== -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:49 2026 by rpki-client