$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: rvg60KM4FGkRG9iGZM7/xuaWNy+0i/vzix8sRoKqSc4= Subject key identifier: 65:F5:4A:1F:F5:9C:23:F2:DD:49:94:9B:07:1B:A3:D7:B5:B2:22:0A Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 27FF645000D7F27C9B73A9F6CBB6BC4C3A52546A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 18:53:28 +0000 Manifest this update: Thu 26 Mar 2026 18:48:28 +0000 Manifest next update: Fri 27 Mar 2026 20:48:28 +0000 Files and hashes: 1: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: 0HXbnH5VfbgsfayEqjncf7mxQV8EiyoixMLMsFIt3Kg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ff:64:50:00:d7:f2:7c:9b:73:a9:f6:cb:b6:bc:4c:3a:52:54:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Mar 26 18:48:28 2026 GMT Not After : Mar 27 20:48:28 2026 GMT Subject: CN=65F54A1FF59C23F2DD49949B071BA3D7B5B2220A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ba:47:f9:d5:b0:3f:b8:3d:b5:91:3a:59:be: df:3f:c3:74:c1:a0:06:78:c0:ac:38:a0:fb:61:dd: f0:bd:c4:de:59:1e:8e:d7:dc:c8:2b:28:c5:c4:9a: 7f:04:b2:e2:e5:c1:d4:6d:c5:e9:39:fe:0d:08:2e: 07:d3:75:8b:9c:83:d2:e3:c4:0e:63:e1:ab:92:63: d7:97:d4:1d:9f:2c:b0:95:45:3e:b0:6e:0f:96:50: 41:ce:83:00:b6:3f:21:0d:79:9e:3c:c0:c7:72:0e: eb:ea:e2:85:f9:f4:f1:25:5a:42:d4:f0:f4:54:f8: ed:fa:fa:bd:50:97:a9:d7:e8:86:bf:73:22:27:4a: fc:97:56:8b:3f:1e:96:11:0e:39:eb:28:bf:5e:51: 67:53:a4:87:48:3d:72:97:af:ab:cd:38:6f:c0:1d: a8:5e:49:19:9d:d1:03:7f:30:8d:f7:7b:e7:7e:7b: 35:1b:28:c7:e4:36:e2:9d:80:63:29:9c:ba:ea:72: 50:85:5e:3e:71:78:b8:f0:80:56:5d:40:b1:ac:28: 28:83:16:cd:04:06:b9:22:8a:cb:49:39:ac:1b:0c: 40:c7:90:3c:d9:6c:1f:08:33:6e:e9:9a:cb:4d:e5: 4f:5c:c4:3c:30:53:70:64:0d:52:17:9b:ec:29:a0: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:4A:1F:F5:9C:23:F2:DD:49:94:9B:07:1B:A3:D7:B5:B2:22:0A X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:10:40:c0:fc:17:f1:f6:f5:f8:e4:01:4a:40:99:3a:96:b1: 5d:db:99:bb:81:87:76:e3:05:ce:dd:68:b1:1c:52:1d:10:3e: 52:a5:17:6a:be:a3:ae:d1:54:38:51:15:ee:db:f8:3a:ba:86: e8:a8:ee:59:6d:58:77:20:8e:cc:86:04:0b:2a:67:44:33:38: 0a:79:f3:82:96:bb:bd:41:74:43:37:0e:17:a8:2f:4c:03:a4: a5:f0:0e:a6:2e:27:97:a3:65:1e:1c:8a:f5:0a:fc:53:3f:ee: 14:df:64:77:e0:36:26:71:ee:e7:c1:7f:81:6b:f3:0d:70:1a: 21:fd:2c:31:d1:ec:fe:c2:9a:05:82:e3:4b:1b:8c:ae:f7:fe: d6:37:e2:b1:b8:76:f3:76:84:cb:af:bc:38:db:f1:58:94:9f: de:1c:44:86:2d:6e:db:2c:7f:21:19:2c:1e:2a:8c:85:d5:a9: 63:9f:4e:2b:f6:73:18:9f:5f:a1:3c:73:a4:8f:cc:f6:89:01: 41:86:57:ba:52:ee:d9:c2:f4:5b:a8:86:d1:92:12:04:b3:d5: dc:7f:ef:85:a8:cb:1c:a6:09:bb:bf:84:c1:f2:47:0c:e0:01: 1b:69:d6:a1:91:c1:91:34:14:48:8d:c2:92:27:e0:b7:b5:a0: 2f:3f:c2:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ/9kUADX8nybc6n2y7a8TDpSVGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjAzMjYxODQ4MjhaFw0yNjAzMjcyMDQ4MjhaMDMxMTAvBgNV BAMTKDY1RjU0QTFGRjU5QzIzRjJERDQ5OTQ5QjA3MUJBM0Q3QjVCMjIyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoukf51bA/uD21kTpZvt8/w3TB oAZ4wKw4oPth3fC9xN5ZHo7X3MgrKMXEmn8EsuLlwdRtxek5/g0ILgfTdYucg9Lj xA5j4auSY9eX1B2fLLCVRT6wbg+WUEHOgwC2PyENeZ48wMdyDuvq4oX59PElWkLU 8PRU+O36+r1Ql6nX6Ia/cyInSvyXVos/HpYRDjnrKL9eUWdTpIdIPXKXr6vNOG/A HaheSRmd0QN/MI33e+d+ezUbKMfkNuKdgGMpnLrqclCFXj5xeLjwgFZdQLGsKCiD Fs0EBrkiistJOawbDEDHkDzZbB8IM27pmstN5U9cxDwwU3BkDVIXm+wpoAxxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZfVKH/WcI/LdSZSbBxuj17WyIgowHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxBAwPwX8fb1 +OQBSkCZOpaxXduZu4GHduMFzt1osRxSHRA+UqUXar6jrtFUOFEV7tv4OrqG6Kju WW1YdyCOzIYECypnRDM4Cnnzgpa7vUF0QzcOF6gvTAOkpfAOpi4nl6NlHhyK9Qr8 Uz/uFN9kd+A2JnHu58F/gWvzDXAaIf0sMdHs/sKaBYLjSxuMrvf+1jfisbh283aE y6+8ONvxWJSf3hxEhi1u2yx/IRksHiqMhdWpY59OK/ZzGJ9foTxzpI/M9okBQYZX ulLu2cL0W6iG0ZISBLPV3H/vhajLHKYJu7+EwfJHDOABG2nWoZHBkTQUSI3Ckifg t7WgLz/CVw== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:58 2026 by rpki-client