$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: HWmbiaOIESDC34S3pm5T1rnqbDwpZX2SMsNwykko/vc= Subject key identifier: A2:01:8B:53:3D:79:F2:E5:A3:75:8F:60:3E:F7:CD:1E:98:95:4E:E5 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 2D9C55B16347CE38284976AFEB899C2288F66A32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: F9 Signing time: Thu 23 Jul 2026 15:54:03 +0000 Manifest this update: Thu 23 Jul 2026 15:49:03 +0000 Manifest next update: Fri 24 Jul 2026 16:33:03 +0000 Files and hashes: 1: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: ide98IiDqRsMDHSO6U5pktOoCUv9zaqPternHoSDdLI=) 3: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 4: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 5: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9c:55:b1:63:47:ce:38:28:49:76:af:eb:89:9c:22:88:f6:6a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Jul 23 15:49:03 2026 GMT Not After : Jul 24 16:33:03 2026 GMT Subject: CN=A2018B533D79F2E5A3758F603EF7CD1E98954EE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:55:19:56:fe:9c:04:a9:09:17:b8:7a:4b: 66:3f:6a:1e:30:fa:c7:d3:f6:10:94:94:83:55:36: d0:17:c8:45:a9:bd:98:5b:41:d7:b6:b5:d2:05:4f: 6f:03:a1:72:f5:49:4e:cf:bc:f8:05:9f:6f:64:e9: 26:6d:6f:da:7f:c2:e7:47:f9:6f:b2:1c:0c:8a:35: 8f:c5:5f:79:d9:eb:72:c6:3d:24:5f:77:8c:9c:c5: eb:5a:25:53:0d:21:cf:da:cd:81:9b:2a:07:5e:7f: 3d:09:66:83:73:08:98:c7:05:53:38:04:38:23:34: c7:db:39:09:3c:3e:b7:f2:95:0c:ef:8f:71:b8:4b: 35:27:eb:37:dc:57:2e:18:b7:e4:a2:1b:5b:83:5a: 95:1e:a7:b4:75:6c:73:b4:5f:b5:a3:8e:36:b0:a3: 7d:bc:09:9f:72:0a:67:98:7e:f0:fa:cc:a8:29:9a: ec:e1:3e:f8:1d:8b:ba:e6:75:38:f3:df:8c:87:4a: 9b:9d:20:b2:20:1f:b7:26:c1:6c:6c:fb:15:ad:1e: 4e:bd:08:06:9f:8c:a8:eb:e7:12:cd:da:2b:65:9a: a9:a2:b5:30:a6:a7:d7:91:94:db:65:b8:15:34:e4: e9:60:fd:c3:f1:aa:d3:79:58:25:ba:c2:d9:dd:f5: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:8B:53:3D:79:F2:E5:A3:75:8F:60:3E:F7:CD:1E:98:95:4E:E5 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:46:30:8b:f4:49:b7:97:23:83:b6:d4:38:a0:e6:48:42:a1: 56:5e:56:57:a7:16:7f:0a:64:f0:09:e5:81:e7:c6:ee:ab:f8: 60:4b:8b:af:5e:a2:2d:65:2b:08:87:63:41:92:32:1f:f6:a6: 3c:48:5a:6c:57:ed:f6:d6:85:bc:35:16:a1:15:78:4b:30:fe: c2:f5:13:b3:b9:35:15:47:c6:bf:6e:de:01:f5:62:a8:2a:ed: bd:da:a3:56:ac:7e:4a:31:de:31:fa:c8:d0:ba:18:32:d3:57: a4:7c:32:b3:00:7d:d7:2e:2a:cb:3f:88:68:f4:e4:9e:01:25: f6:2b:86:de:bd:90:cc:25:9b:e3:d5:e7:14:8e:9d:d3:a4:15: fe:71:7b:90:c9:df:a8:af:e3:42:a1:4f:22:de:9c:3f:d8:97: 5f:d9:11:21:6e:7e:bf:0a:a9:78:0b:10:33:15:09:72:46:3e: fc:7c:cc:0f:ae:9d:c9:e6:c8:1c:81:4a:56:70:1a:b2:2f:d8: eb:8e:39:ff:7a:3e:a2:95:1b:bf:e6:93:d9:84:0a:20:f1:c5: 15:2b:a4:7f:f4:6c:cf:2c:5a:91:cf:33:b8:c9:1e:70:26:f2: 3e:ae:60:0a:f3:c4:f2:8e:80:20:6e:68:66:6c:ba:0d:74:28: 33:b2:a7:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULZxVsWNHzjgoSXav64mcIoj2ajIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA3MjMxNTQ5MDNaFw0yNjA3MjQxNjMzMDNaMDMxMTAvBgNV BAMTKEEyMDE4QjUzM0Q3OUYyRTVBMzc1OEY2MDNFRjdDRDFFOTg5NTRFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlYFUZVv6cBKkJF7h6S2Y/ah4w +sfT9hCUlINVNtAXyEWpvZhbQde2tdIFT28DoXL1SU7PvPgFn29k6SZtb9p/wudH +W+yHAyKNY/FX3nZ63LGPSRfd4ycxetaJVMNIc/azYGbKgdefz0JZoNzCJjHBVM4 BDgjNMfbOQk8PrfylQzvj3G4SzUn6zfcVy4Yt+SiG1uDWpUep7R1bHO0X7Wjjjaw o328CZ9yCmeYfvD6zKgpmuzhPvgdi7rmdTjz34yHSpudILIgH7cmwWxs+xWtHk69 CAafjKjr5xLN2itlmqmitTCmp9eRlNtluBU05Olg/cPxqtN5WCW6wtnd9d0RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUogGLUz158uWjdY9gPvfNHpiVTuUwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUYwi/RJt5cj g7bUOKDmSEKhVl5WV6cWfwpk8AnlgefG7qv4YEuLr16iLWUrCIdjQZIyH/amPEha bFft9taFvDUWoRV4SzD+wvUTs7k1FUfGv27eAfViqCrtvdqjVqx+SjHeMfrI0LoY MtNXpHwyswB91y4qyz+IaPTkngEl9iuG3r2QzCWb49XnFI6d06QV/nF7kMnfqK/j QqFPIt6cP9iXX9kRIW5+vwqpeAsQMxUJckY+/HzMD66dyebIHIFKVnAasi/Y6445 /3o+opUbv+aT2YQKIPHFFSukf/Rszyxakc8zuMkecCbyPq5gCvPE8o6AIG5oZmy6 DXQoM7Knfg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:01:23 2026 by rpki-client