$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: 3VX202/mt5P5lfXX4a6hn9HsTbrH7ppqdTVaZirj7B0= Subject key identifier: 74:A4:6D:21:92:C3:1F:74:08:AD:4E:3D:33:2B:15:47:DA:4B:E8:E3 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 038FAB7136C453262B9E3DB1CC9420BD2B6B8631 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 97 Signing time: Wed 13 May 2026 03:55:55 +0000 Manifest this update: Wed 13 May 2026 03:50:55 +0000 Manifest next update: Thu 14 May 2026 07:38:55 +0000 Files and hashes: 1: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 2: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 3: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: /3TnfDEPS7eXvIBFMiS7UZpYwSvJgIdJrjeMUsJC27k=) 4: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8f:ab:71:36:c4:53:26:2b:9e:3d:b1:cc:94:20:bd:2b:6b:86:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: May 13 03:50:55 2026 GMT Not After : May 14 07:38:55 2026 GMT Subject: CN=74A46D2192C31F7408AD4E3D332B1547DA4BE8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:39:8a:df:8f:41:ef:8c:3b:0c:85:03:10: 75:d6:21:f1:7f:60:69:af:63:82:28:29:02:af:c5: 9c:a9:59:49:cf:a5:30:54:07:5d:a7:96:fd:05:10: 06:15:80:29:fa:15:63:26:ee:40:f9:56:b4:0d:cc: 71:99:db:a7:35:5e:a8:6d:1f:38:ff:5b:a1:76:93: 57:a2:cc:db:99:ab:e9:fb:3b:ef:e6:ab:63:cc:32: a3:4d:56:c2:51:17:9b:04:35:ca:96:12:06:2b:f9: 43:d4:87:53:21:49:3d:bd:c7:cf:35:b4:df:2e:bb: ba:4d:dc:e4:c4:34:54:a0:85:8b:bf:4c:cd:b7:c7: 23:9e:19:64:40:de:48:1c:84:18:2e:f8:cb:fb:24: 60:06:1a:f4:49:64:2e:12:f4:4f:a7:d1:be:fb:3b: a4:e3:ad:b2:cc:fa:39:81:81:81:92:92:f7:fd:37: b6:81:2a:82:7b:1f:0b:ab:15:f1:bf:82:e3:44:15: 4e:32:87:fe:8d:00:e4:42:68:77:48:e6:40:ec:67: b4:77:c6:2d:90:33:fa:1d:95:b5:d3:bd:e3:c0:aa: 8a:9c:d3:01:4e:c5:10:12:e3:35:fd:2e:f7:0d:02: 0c:4c:11:48:30:5d:eb:4c:5f:db:03:d3:4e:d1:18: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:6D:21:92:C3:1F:74:08:AD:4E:3D:33:2B:15:47:DA:4B:E8:E3 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d8:cc:46:f0:29:f3:08:2e:6a:ba:98:48:62:b1:a8:64:28: 7e:f6:9b:87:5d:79:60:77:5c:55:85:2c:07:7e:a2:c8:ee:7c: de:47:d6:3b:05:12:fd:d0:8f:9d:b9:a6:b3:96:70:10:3c:24: f5:b6:4c:d2:03:64:78:18:7a:d2:20:a7:52:fc:9e:4a:37:91: e1:7b:7e:36:97:d0:b1:51:4f:aa:71:8e:2b:8e:63:36:f6:64: 33:ef:54:12:ad:6e:5b:18:46:5e:33:af:75:18:57:19:0a:9f: 8e:62:ac:1b:d4:0e:46:09:4a:75:8f:fd:21:79:6f:7e:2c:77: c3:1c:a0:c7:b6:0a:1a:4c:bb:81:1f:66:50:8a:0f:8f:fc:c6: 7d:80:93:d3:56:b4:7c:b9:6b:c9:fb:e6:6b:25:ac:3f:47:0f: b3:cd:0f:b7:a2:6f:a2:e3:86:3a:88:98:d5:42:32:6c:10:33: d8:c3:c3:b4:71:a9:af:31:07:ed:5e:6a:56:ad:b2:f9:98:53: bc:90:4b:82:67:df:9f:d1:c1:c9:dd:86:b2:b5:39:3c:f3:d6: 2b:e5:b5:bc:3c:a6:fe:9b:70:bb:06:b5:b4:09:8d:82:a7:26: e0:c0:5d:ae:f9:92:28:04:16:6e:2d:ad:08:33:26:c3:d5:b9: 07:2e:7f:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA4+rcTbEUyYrnj2xzJQgvStrhjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA1MTMwMzUwNTVaFw0yNjA1MTQwNzM4NTVaMDMxMTAvBgNV BAMTKDc0QTQ2RDIxOTJDMzFGNzQwOEFENEUzRDMzMkIxNTQ3REE0QkU4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWzmK349B74w7DIUDEHXWIfF/ YGmvY4IoKQKvxZypWUnPpTBUB12nlv0FEAYVgCn6FWMm7kD5VrQNzHGZ26c1Xqht Hzj/W6F2k1eizNuZq+n7O+/mq2PMMqNNVsJRF5sENcqWEgYr+UPUh1MhST29x881 tN8uu7pN3OTENFSghYu/TM23xyOeGWRA3kgchBgu+Mv7JGAGGvRJZC4S9E+n0b77 O6TjrbLM+jmBgYGSkvf9N7aBKoJ7HwurFfG/guNEFU4yh/6NAORCaHdI5kDsZ7R3 xi2QM/odlbXTvePAqoqc0wFOxRAS4zX9LvcNAgxMEUgwXetMX9sD007RGAz/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdKRtIZLDH3QIrU49MysVR9pL6OMwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtjMRvAp8wgu arqYSGKxqGQofvabh115YHdcVYUsB36iyO583kfWOwUS/dCPnbmms5ZwEDwk9bZM 0gNkeBh60iCnUvyeSjeR4Xt+NpfQsVFPqnGOK45jNvZkM+9UEq1uWxhGXjOvdRhX GQqfjmKsG9QORglKdY/9IXlvfix3wxygx7YKGky7gR9mUIoPj/zGfYCT01a0fLlr yfvmayWsP0cPs80Pt6JvouOGOoiY1UIybBAz2MPDtHGprzEH7V5qVq2y+ZhTvJBL gmffn9HByd2GsrU5PPPWK+W1vDym/ptwuwa1tAmNgqcm4MBdrvmSKAQWbi2tCDMm w9W5By5/hQ== -----END CERTIFICATE-----Generated at Wed May 13 16:48:48 2026 by rpki-client