$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: 9lv5QVAxGtcPv6cJ5JI1wOXhwooEhoP2/vgyK7xuA9k= Subject key identifier: C3:88:40:54:D0:2D:B2:3D:9A:8E:4D:40:C0:34:04:53:9E:F7:A9:E6 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 2D050FDEE9D2A6A58A1510BEC139109EB6FC9265 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 013B Signing time: Mon 12 Oct 2026 12:16:56 +0000 Manifest this update: Mon 12 Oct 2026 12:11:56 +0000 Manifest next update: Fri 16 Oct 2026 00:05:56 +0000 Files and hashes: 1: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 2: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 4: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: 00CQhpTppuwMjzAkjhPu0URW/58YBgiEMwIYV3p0aI0=) 5: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 6: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:05:0f:de:e9:d2:a6:a5:8a:15:10:be:c1:39:10:9e:b6:fc:92:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Oct 12 12:11:56 2026 GMT Not After : Oct 16 00:05:56 2026 GMT Subject: CN=C3884054D02DB23D9A8E4D40C03404539EF7A9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:26:4b:ac:e3:91:82:c5:3b:59:24:67:99: f7:2c:61:af:51:ff:e0:05:8e:b5:78:50:79:f8:89: 8e:68:e4:ee:8a:67:2e:11:71:f8:48:ad:7f:c2:76: e4:7a:af:fe:bb:08:b5:e4:e6:04:79:60:52:1e:b7: 0e:95:bb:f9:78:27:25:b8:8e:0d:88:a1:0b:fc:e7: fc:11:f4:c0:09:8e:b5:60:d7:78:9c:26:72:8c:e8: 14:66:45:46:a5:94:25:99:cc:fd:02:75:c5:1d:26: fc:5a:7b:56:d3:3d:c1:88:f8:28:e7:86:5a:04:e2: 38:db:6f:98:77:2a:08:88:30:98:1e:cf:ca:21:f5: 2e:19:59:6e:94:bd:7f:85:7c:8e:ab:ed:de:21:d8: e9:6f:74:79:29:a7:2b:22:64:62:61:e3:cf:d7:ff: 90:2a:c8:56:a3:c3:3f:ab:ef:aa:08:ba:9d:50:ce: a0:be:79:b7:1e:02:64:5b:40:6b:06:3d:ec:4f:77: 08:78:9d:db:bb:db:df:fa:d1:03:7d:5e:58:13:f8: 9b:13:e6:9e:a6:80:02:f7:91:fb:cf:cf:df:1f:1c: 5d:92:5d:25:63:cf:b8:6f:81:25:b5:8f:7b:52:67: 91:84:8c:1d:d0:eb:0e:75:b1:16:1d:88:24:a3:62: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:88:40:54:D0:2D:B2:3D:9A:8E:4D:40:C0:34:04:53:9E:F7:A9:E6 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:34:94:25:e6:73:c0:ff:23:f5:82:56:86:22:8f:56:be:69: 56:39:4c:76:d0:af:03:91:1c:62:74:a7:7b:0f:e4:51:26:21: 70:d1:1f:f0:ae:e6:47:22:3a:16:1a:12:bc:40:6e:9a:16:e6: 14:fd:da:7d:4c:96:86:91:95:8d:01:ce:b1:13:c9:e3:2d:77: ae:5c:21:21:c2:4f:f3:0c:f1:63:06:91:38:f5:47:31:84:71: c4:ee:c7:24:ca:b4:64:bc:f2:52:64:88:7b:66:5f:bf:95:9d: 09:de:ea:52:8f:bc:d0:3a:3b:e6:1b:49:f4:f9:b9:ea:45:94: c4:13:0c:d1:73:68:64:ed:c1:d5:3b:c7:51:ee:6b:3e:10:4e: 93:d1:aa:34:15:5f:5d:66:3e:af:a6:44:b7:06:44:9d:c8:31: f5:cd:70:d1:94:33:c1:4f:7f:8a:dd:15:d5:b3:49:2b:52:4e: ee:8f:94:04:06:ba:89:e5:91:6e:66:2a:83:91:96:b8:ba:d9: b3:a7:ca:49:84:ef:ec:2a:f7:7a:8b:f5:fb:35:b3:f1:52:83: f5:8f:0d:3d:b3:6a:b7:ba:d5:78:ef:d9:c2:f8:ee:4e:fc:dc: 0c:e6:33:3f:90:47:91:23:d1:5f:e3:0e:23:0b:92:5e:47:33: 72:65:a6:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULQUP3unSpqWKFRC+wTkQnrb8kmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjEwMTIxMjExNTZaFw0yNjEwMTYwMDA1NTZaMDMxMTAvBgNV BAMTKEMzODg0MDU0RDAyREIyM0Q5QThFNEQ0MEMwMzQwNDUzOUVGN0E5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wyZLrOORgsU7WSRnmfcsYa9R /+AFjrV4UHn4iY5o5O6KZy4RcfhIrX/CduR6r/67CLXk5gR5YFIetw6Vu/l4JyW4 jg2IoQv85/wR9MAJjrVg13icJnKM6BRmRUallCWZzP0CdcUdJvxae1bTPcGI+Cjn hloE4jjbb5h3KgiIMJgez8oh9S4ZWW6UvX+FfI6r7d4h2OlvdHkppysiZGJh48/X /5AqyFajwz+r76oIup1QzqC+ebceAmRbQGsGPexPdwh4ndu729/60QN9XlgT+JsT 5p6mgAL3kfvPz98fHF2SXSVjz7hvgSW1j3tSZ5GEjB3Q6w51sRYdiCSjYmoLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw4hAVNAtsj2ajk1AwDQEU573qeYwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjSUJeZzwP8j 9YJWhiKPVr5pVjlMdtCvA5EcYnSnew/kUSYhcNEf8K7mRyI6FhoSvEBumhbmFP3a fUyWhpGVjQHOsRPJ4y13rlwhIcJP8wzxYwaROPVHMYRxxO7HJMq0ZLzyUmSIe2Zf v5WdCd7qUo+80Do75htJ9Pm56kWUxBMM0XNoZO3B1TvHUe5rPhBOk9GqNBVfXWY+ r6ZEtwZEncgx9c1w0ZQzwU9/it0V1bNJK1JO7o+UBAa6ieWRbmYqg5GWuLrZs6fK SYTv7Cr3eov1+zWz8VKD9Y8NPbNqt7rVeO/ZwvjuTvzcDOYzP5BHkSPRX+MOIwuS XkczcmWm/Q== -----END CERTIFICATE-----Generated at Wed Oct 14 13:20:00 2026 by rpki-client