$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: fISCmRtIKJc9ZRYaNcNpNzPjjTmNs7ylTL/3u1kBlgY= Subject key identifier: 2B:92:41:41:91:08:5B:45:74:12:DB:50:D3:62:F1:B4:A5:00:63:D0 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 07A469094F3B9F24DAE563F8566C7DBE4431F8C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 17:08:28 +0000 Manifest this update: Thu 26 Mar 2026 17:03:28 +0000 Manifest next update: Fri 27 Mar 2026 20:44:28 +0000 Files and hashes: 1: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 2: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 3: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: qi0OAyj5cSgwzm5Omg9Jdo7432DsLUF2Eh2qNZFtokM=) 4: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 5: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a4:69:09:4f:3b:9f:24:da:e5:63:f8:56:6c:7d:be:44:31:f8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Mar 26 17:03:28 2026 GMT Not After : Mar 27 20:44:28 2026 GMT Subject: CN=2B92414191085B457412DB50D362F1B4A50063D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:12:d3:b9:4d:19:79:2e:46:57:4a:a5:9d:9d: e6:6f:52:83:dd:ac:d5:55:85:c5:d7:f6:7b:e9:e8: 32:bb:f7:c2:c0:67:cc:76:96:52:8e:c9:b5:a6:93: 2a:7b:38:c3:b8:19:20:27:a2:af:c8:04:4b:dc:cb: ab:2f:2d:df:b6:7c:4a:9b:7c:c3:ee:c2:27:23:df: 46:a1:9b:7c:22:d5:6d:52:34:80:d1:a2:01:6a:b9: 44:99:9d:cc:47:aa:4c:b9:8b:2b:b5:6b:30:10:e7: 16:39:16:29:f3:d5:0f:ff:8a:d2:96:42:91:de:c8: 07:6c:f4:9a:94:85:ab:74:8f:d3:e1:3d:22:37:b6: 5b:4f:b6:a9:21:60:e0:50:60:5d:5a:a3:89:f9:29: df:61:81:48:e4:37:b6:8e:b3:bd:7f:0a:f1:9b:69: d5:1f:68:57:be:16:c9:c0:59:53:60:ef:7a:f2:67: aa:a6:37:75:11:ca:40:67:be:74:7c:cc:56:f0:72: 10:34:5e:9e:d6:6c:a3:fe:d5:62:b7:0a:47:39:e0: 10:b6:39:e9:b6:b8:e8:a2:6b:ca:7c:ca:92:a8:dc: 43:e3:40:b6:17:72:eb:3a:b6:c3:28:49:10:8d:25: 28:b1:ed:3d:62:3c:fd:08:e6:8f:9c:f9:2e:89:f9: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:41:41:91:08:5B:45:74:12:DB:50:D3:62:F1:B4:A5:00:63:D0 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:6f:62:1a:d2:a3:78:b8:c0:ed:2c:41:20:34:58:23:ed: 8d:c8:bd:6c:74:cb:8b:90:0d:cd:9e:d8:a0:16:8b:17:a0:35: 03:eb:ac:93:38:75:83:a5:7d:52:b2:1f:58:aa:f0:ee:a8:78: f8:96:e3:3a:5f:50:91:d8:8a:f8:92:6f:c9:cd:bf:e1:1c:3f: c9:11:ee:4a:5b:f3:cc:9c:f5:69:b7:c6:c7:0b:9a:0e:23:53: 7c:14:36:07:da:0d:ce:aa:0f:d4:19:ef:52:68:39:eb:df:cc: b8:b2:0c:62:39:b0:59:65:8b:71:48:8e:2c:34:f6:7e:c5:66: eb:9f:83:65:c0:6e:1d:e7:40:02:02:8d:dc:53:1e:d4:ff:af: 57:16:62:fa:d9:ac:f0:cb:b5:58:02:e1:31:59:60:d1:26:d5: 4f:dc:9d:27:24:5d:66:ae:7e:76:46:5c:e2:07:c6:7e:b0:c3: fd:5f:2f:76:71:48:0e:cc:77:96:26:a1:d7:14:c0:94:06:d9: 0c:94:a3:27:98:05:51:a6:a1:c6:1c:8a:f3:36:41:50:7a:21: 5e:17:2a:b0:81:f7:f2:97:3c:81:0a:9e:50:c1:80:1d:bb:33: 37:38:61:48:ad:dc:55:2b:9f:39:90:65:92:69:d2:48:bc:1f: 4c:08:e9:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB6RpCU87nyTa5WP4Vmx9vkQx+MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjAzMjYxNzAzMjhaFw0yNjAzMjcyMDQ0MjhaMDMxMTAvBgNV BAMTKDJCOTI0MTQxOTEwODVCNDU3NDEyREI1MEQzNjJGMUI0QTUwMDYzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEtO5TRl5LkZXSqWdneZvUoPd rNVVhcXX9nvp6DK798LAZ8x2llKOybWmkyp7OMO4GSAnoq/IBEvcy6svLd+2fEqb fMPuwicj30ahm3wi1W1SNIDRogFquUSZncxHqky5iyu1azAQ5xY5Finz1Q//itKW QpHeyAds9JqUhat0j9PhPSI3tltPtqkhYOBQYF1ao4n5Kd9hgUjkN7aOs71/CvGb adUfaFe+FsnAWVNg73ryZ6qmN3URykBnvnR8zFbwchA0Xp7WbKP+1WK3Ckc54BC2 Oem2uOiia8p8ypKo3EPjQLYXcus6tsMoSRCNJSix7T1iPP0I5o+c+S6J+R5zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK5JBQZEIW0V0EttQ02LxtKUAY9AwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmdvYhrSo3i4 wO0sQSA0WCPtjci9bHTLi5ANzZ7YoBaLF6A1A+uskzh1g6V9UrIfWKrw7qh4+Jbj Ol9QkdiK+JJvyc2/4Rw/yRHuSlvzzJz1abfGxwuaDiNTfBQ2B9oNzqoP1BnvUmg5 69/MuLIMYjmwWWWLcUiOLDT2fsVm65+DZcBuHedAAgKN3FMe1P+vVxZi+tms8Mu1 WALhMVlg0SbVT9ydJyRdZq5+dkZc4gfGfrDD/V8vdnFIDsx3liah1xTAlAbZDJSj J5gFUaahxhyK8zZBUHohXhcqsIH38pc8gQqeUMGAHbszNzhhSK3cVSufOZBlkmnS SLwfTAjp4g== -----END CERTIFICATE-----Generated at Fri Mar 27 03:45:25 2026 by rpki-client