$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: +oS9gjpRgBqN4Oe3hALHLD8+BndkJvax9DlS7dDTtiI= Subject key identifier: E0:77:E9:9C:50:8E:4E:B0:79:12:F8:5C:5E:3A:80:8F:A0:6D:03:C2 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 5222FE6B39A42474A471731BD0CD9AAA53570A24 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 99 Signing time: Tue 12 May 2026 23:15:49 +0000 Manifest this update: Tue 12 May 2026 23:10:49 +0000 Manifest next update: Thu 14 May 2026 02:18:49 +0000 Files and hashes: 1: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 2: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 3: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 4: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 5: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: YVOta2xJm6xoxRBmcSvTuc8y/fhFoDoNpZpGi7ryUVU=) 6: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:22:fe:6b:39:a4:24:74:a4:71:73:1b:d0:cd:9a:aa:53:57:0a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: May 12 23:10:49 2026 GMT Not After : May 14 02:18:49 2026 GMT Subject: CN=E077E99C508E4EB07912F85C5E3A808FA06D03C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:93:67:14:f7:f3:75:3f:96:83:bb:94:85: 29:c9:da:5b:1b:9d:16:d4:b0:e7:3b:26:87:c2:42: 38:c3:1f:0b:a2:56:25:aa:31:40:aa:51:ea:15:52: fb:df:96:15:62:59:a1:fe:8a:86:df:37:da:d5:b2: e2:5d:c4:0b:bf:9f:2b:1a:2c:0b:ed:2e:ec:78:f0: af:1c:fe:76:15:d3:f9:00:d5:ff:37:54:53:cd:e2: 68:3e:ca:0b:9d:ab:d0:3a:e3:62:93:e9:16:1e:7a: 7c:c8:70:d2:ed:fc:a3:a8:ef:0a:de:48:29:0e:96: 34:3e:3b:90:7c:71:35:e5:c0:73:bc:95:52:63:b6: 3d:95:85:b4:7a:01:f4:9e:75:96:48:c8:2e:64:27: 74:e4:82:15:4b:20:0e:b2:ae:b7:09:7d:2c:ed:8f: cf:3d:ab:6a:56:c6:47:65:71:cd:4d:55:93:a8:80: 93:7e:74:2e:28:c4:ab:3e:b2:fd:8d:36:4e:64:77: bb:4b:78:4d:4d:0d:ac:71:10:97:25:89:98:27:d3: b5:cf:13:ec:b4:f7:fe:59:15:10:20:a6:a0:46:cc: 91:31:71:30:8c:52:54:53:4c:0c:2b:41:c6:50:26: 2f:cc:a6:91:ff:78:d0:13:f7:c4:09:6c:22:22:ec: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:E9:9C:50:8E:4E:B0:79:12:F8:5C:5E:3A:80:8F:A0:6D:03:C2 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ff:5b:e6:4f:09:72:22:cd:d3:41:2e:11:e8:5e:ca:7b:1b: 6e:db:f9:ca:b7:b2:e7:f5:24:22:c4:5b:0a:1c:67:b4:1b:b1: 90:bd:50:65:0b:aa:b9:52:7e:71:a9:3d:84:62:63:2d:cc:df: ef:aa:2c:6a:bf:c3:d4:cf:ba:da:1e:a8:b3:50:18:c0:95:94: 3d:0d:91:fb:9c:79:db:96:3c:8b:da:6f:fe:c5:e6:79:50:bd: b0:aa:92:6b:fa:6e:ac:5d:b5:56:e8:d1:e6:b6:40:38:7f:25: ad:e8:ca:02:d7:d5:ea:f3:a4:2e:19:6f:2d:14:a6:a1:a3:fc: 65:46:b0:01:9b:df:a9:72:f3:fd:92:15:ae:18:29:2a:df:32: 88:9d:79:f1:26:ea:a8:0b:78:9b:bf:98:7a:50:23:8d:f4:76: 38:fc:90:cd:5e:93:1c:a0:7f:de:6c:1d:03:a9:af:75:ee:cf: 27:13:40:ba:d6:93:ba:c1:46:3a:9e:9b:6d:bd:53:02:bd:58: 77:e0:d2:9e:17:b5:32:e1:6f:c8:bd:e6:da:54:0d:13:2d:2e: 6b:62:29:91:e2:4c:35:ba:b1:61:57:e0:84:69:36:99:97:8a: b7:48:24:34:26:14:d9:c3:9a:fe:e9:58:b3:e1:2a:5d:5a:e6: c7:f7:d3:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUiL+azmkJHSkcXMb0M2aqlNXCiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA1MTIyMzEwNDlaFw0yNjA1MTQwMjE4NDlaMDMxMTAvBgNV BAMTKEUwNzdFOTlDNTA4RTRFQjA3OTEyRjg1QzVFM0E4MDhGQTA2RDAzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnJ5NnFPfzdT+Wg7uUhSnJ2lsb nRbUsOc7JofCQjjDHwuiViWqMUCqUeoVUvvflhViWaH+iobfN9rVsuJdxAu/nysa LAvtLux48K8c/nYV0/kA1f83VFPN4mg+ygudq9A642KT6RYeenzIcNLt/KOo7wre SCkOljQ+O5B8cTXlwHO8lVJjtj2VhbR6AfSedZZIyC5kJ3TkghVLIA6yrrcJfSzt j889q2pWxkdlcc1NVZOogJN+dC4oxKs+sv2NNk5kd7tLeE1NDaxxEJcliZgn07XP E+y09/5ZFRAgpqBGzJExcTCMUlRTTAwrQcZQJi/MppH/eNAT98QJbCIi7NTHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4HfpnFCOTrB5EvhcXjqAj6BtA8IwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnP9b5k8JciLN 00EuEeheynsbbtv5yrey5/UkIsRbChxntBuxkL1QZQuquVJ+cak9hGJjLczf76os ar/D1M+62h6os1AYwJWUPQ2R+5x525Y8i9pv/sXmeVC9sKqSa/purF21VujR5rZA OH8lrejKAtfV6vOkLhlvLRSmoaP8ZUawAZvfqXLz/ZIVrhgpKt8yiJ158SbqqAt4 m7+YelAjjfR2OPyQzV6THKB/3mwdA6mvde7PJxNAutaTusFGOp6bbb1TAr1Yd+DS nhe1MuFvyL3m2lQNEy0ua2IpkeJMNbqxYVfghGk2mZeKt0gkNCYU2cOa/ulYs+Eq XVrmx/fTOw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:41 2026 by rpki-client