$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: a3GYUHm2fDLC1FQs3xRambUZ0fClrACu49nyJM9bgxk= Subject key identifier: 6E:00:17:C5:3B:44:34:BC:E1:BA:34:6B:79:C0:41:67:5B:33:56:20 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 330676EBE49A8ABF20B18117C82938D143892298 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 22:42:20 +0000 Manifest this update: Fri 24 Jul 2026 22:37:20 +0000 Manifest next update: Sat 25 Jul 2026 23:28:20 +0000 Files and hashes: 1: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 2: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: LSnBvT0H/rq+8tHouyZqNtj6ub51mfEkSzYjMhXnteQ=) 3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 4: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 5: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 6: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:06:76:eb:e4:9a:8a:bf:20:b1:81:17:c8:29:38:d1:43:89:22:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Jul 24 22:37:20 2026 GMT Not After : Jul 25 23:28:20 2026 GMT Subject: CN=6E0017C53B4434BCE1BA346B79C041675B335620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:e7:9c:8b:b1:fb:d3:8f:42:dd:88:a3:66: 24:df:30:62:c2:4f:42:6a:29:38:74:ce:72:87:77: c4:ec:31:b9:6f:ca:56:7e:b2:ef:61:9a:43:a1:a6: da:a7:9e:92:4d:6f:68:83:bf:2d:5b:83:4b:f4:9d: a9:5f:85:d5:59:1d:17:ed:00:a1:c9:d6:38:da:df: 6f:45:5d:ea:12:56:be:ed:e8:64:93:10:84:5c:8e: b6:dc:40:a7:44:94:3a:e5:7e:b3:53:4d:47:3b:b7: 98:c8:e0:10:02:7d:df:5a:8f:cc:a2:dc:80:19:68: d2:55:9d:fc:53:e6:c9:fb:c4:86:88:33:3f:16:61: a3:cc:54:42:59:8a:95:65:30:6b:cb:65:be:a0:42: 5c:bc:8a:f7:9a:f4:fb:0f:21:51:e2:70:11:99:99: 86:6e:50:bd:c3:00:4b:89:bc:6a:75:6a:f8:e9:c3: 51:40:e8:97:b5:f2:bc:1c:1a:80:69:9e:cd:c6:3a: d9:df:ce:6f:72:e9:99:e2:13:89:09:da:cc:a0:b0: 8c:26:71:62:68:be:44:42:35:6b:5e:df:c0:29:6b: 3c:b5:2c:f1:85:95:ce:c0:d5:2c:04:64:a3:f0:9b: 44:4c:54:d9:f5:d6:3b:28:c1:c9:4e:4f:91:50:e5: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:00:17:C5:3B:44:34:BC:E1:BA:34:6B:79:C0:41:67:5B:33:56:20 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a6:f4:07:ba:66:08:6b:8c:96:94:f4:fd:4d:71:cf:b4:dd: 86:61:b4:f4:e6:2b:0e:c1:29:34:d3:e9:d1:74:27:4e:4c:ae: ab:61:16:f7:85:61:c5:59:63:fc:33:cc:68:ee:be:20:09:a6: a9:57:66:7e:3f:8c:04:b1:24:fd:a5:18:fa:60:e6:8d:a5:f3: 9f:84:70:26:3e:93:b2:a3:b4:52:e2:56:ce:f2:6d:c8:c5:97: 80:30:84:53:b0:13:7d:f5:73:6f:88:ab:4e:60:47:62:e5:7c: 66:2c:13:c7:c0:c4:89:c2:18:8a:63:f9:2c:30:a6:e7:f2:c8: f5:c6:80:6a:c3:ec:e1:db:05:b9:6d:19:9a:69:2b:2b:a2:45: 02:ee:0b:ac:cb:48:de:2a:84:84:56:e4:45:1f:b7:7e:3c:33: 0e:89:b4:72:c5:cd:49:0e:70:8a:07:93:1d:8c:67:22:0d:00: 5f:6c:ce:a3:83:62:93:2a:2c:04:0c:e6:98:0b:4c:3e:ae:e8: 01:3c:cb:fc:8b:5b:93:62:21:e5:1a:0c:2b:2f:48:67:81:1f: 0c:23:17:de:d2:f7:24:4a:69:cc:1f:fd:64:9c:45:cd:95:1a: ca:68:3d:3e:93:fc:ca:1a:4f:76:db:30:bf:32:2f:81:7f:f3: 82:fa:8d:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMwZ26+Sair8gsYEXyCk40UOJIpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA3MjQyMjM3MjBaFw0yNjA3MjUyMzI4MjBaMDMxMTAvBgNV BAMTKDZFMDAxN0M1M0I0NDM0QkNFMUJBMzQ2Qjc5QzA0MTY3NUIzMzU2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClheeci7H7049C3YijZiTfMGLC T0JqKTh0znKHd8TsMblvylZ+su9hmkOhptqnnpJNb2iDvy1bg0v0nalfhdVZHRft AKHJ1jja329FXeoSVr7t6GSTEIRcjrbcQKdElDrlfrNTTUc7t5jI4BACfd9aj8yi 3IAZaNJVnfxT5sn7xIaIMz8WYaPMVEJZipVlMGvLZb6gQly8ivea9PsPIVHicBGZ mYZuUL3DAEuJvGp1avjpw1FA6Je18rwcGoBpns3GOtnfzm9y6ZniE4kJ2sygsIwm cWJovkRCNWte38Apazy1LPGFlc7A1SwEZKPwm0RMVNn11jsowclOT5FQ5f+fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbgAXxTtENLzhujRrecBBZ1szViAwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKb0B7pmCGuM lpT0/U1xz7TdhmG09OYrDsEpNNPp0XQnTkyuq2EW94VhxVlj/DPMaO6+IAmmqVdm fj+MBLEk/aUY+mDmjaXzn4RwJj6TsqO0UuJWzvJtyMWXgDCEU7ATffVzb4irTmBH YuV8ZiwTx8DEicIYimP5LDCm5/LI9caAasPs4dsFuW0ZmmkrK6JFAu4LrMtI3iqE hFbkRR+3fjwzDom0csXNSQ5wigeTHYxnIg0AX2zOo4NikyosBAzmmAtMPq7oATzL /Itbk2Ih5RoMKy9IZ4EfDCMX3tL3JEppzB/9ZJxFzZUaymg9PpP8yhpPdtswvzIv gX/zgvqNkw== -----END CERTIFICATE-----Generated at Sat Jul 25 00:49:51 2026 by rpki-client