$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: l37KTfNYuJVLjB9dz2DDaXPyZGREwDYqtdWTjCNH0Qk= Subject key identifier: 8C:06:DE:5F:BD:B3:A2:30:1B:D2:9F:57:58:CC:A9:E3:D2:5C:FB:20 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 6DDEE8D35D0A90848C069E1B7951C2A8E99CD05D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 57 Signing time: Thu 26 Mar 2026 07:13:28 +0000 Manifest this update: Thu 26 Mar 2026 07:08:28 +0000 Manifest next update: Fri 27 Mar 2026 10:25:28 +0000 Files and hashes: 1: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 2: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 3: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 4: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: BW3w5gXn1eC6iv63dcZFrnnNE5IBMm0+gg1xxFiNNd0=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:de:e8:d3:5d:0a:90:84:8c:06:9e:1b:79:51:c2:a8:e9:9c:d0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Mar 26 07:08:28 2026 GMT Not After : Mar 27 10:25:28 2026 GMT Subject: CN=8C06DE5FBDB3A2301BD29F5758CCA9E3D25CFB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:d3:05:80:cf:15:78:f4:68:59:0e:85:7e: 3f:c7:a4:10:c9:d5:5c:79:d0:95:50:81:0d:c0:97: 7e:91:ab:c6:f4:a8:ba:b5:cd:0f:82:b1:63:d4:73: 4b:b9:69:e8:d3:ca:ce:48:ca:a0:ca:f9:12:6c:6e: 32:5d:ab:c9:4d:eb:33:17:99:0a:3e:67:5c:28:5e: fa:07:9b:a8:a9:45:69:b7:07:1d:78:e2:4e:9d:97: a0:48:a5:1f:2c:bf:a3:11:b3:a8:cd:ab:95:53:1b: 5e:66:09:ed:7b:d6:43:0f:c9:f8:b2:78:ed:38:04: 5e:cf:ce:b8:ce:39:81:98:4d:dd:5e:1d:c0:ea:42: c2:5b:5e:0a:b9:4e:95:a4:93:fe:2a:c8:4d:51:df: ce:a9:da:ad:4d:23:89:ee:e3:16:b5:45:eb:35:15: 42:ec:0f:c8:4f:c2:c8:ca:c9:3e:1b:04:85:1a:34: 5e:f5:bb:81:d1:de:2f:52:7b:57:e0:24:a0:cb:51: e7:85:31:ab:cd:6d:f3:af:5d:f1:7d:60:50:84:0c: 9e:5a:9d:53:23:75:da:a9:56:69:79:18:a8:33:1f: 60:da:11:5b:e5:b0:f8:dd:cc:ab:e8:79:60:ef:86: 81:89:7d:d7:b7:2c:37:c8:6f:29:8c:8c:0e:44:a4: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:DE:5F:BD:B3:A2:30:1B:D2:9F:57:58:CC:A9:E3:D2:5C:FB:20 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:20:e4:d3:8b:9c:c6:1b:c9:23:f8:5f:a7:4d:1c:76:df:0b: 44:6f:fe:77:84:b8:5b:85:6b:a1:7b:5d:76:04:57:19:e0:e9: 40:70:20:1a:11:b7:92:cb:5d:7a:39:11:b2:05:21:3d:d4:03: 66:55:16:04:4e:ca:2a:87:65:8b:15:a6:14:60:7a:69:d8:52: 79:1b:27:70:2f:d7:5d:38:5f:3c:75:55:8e:87:75:9b:85:c0: f9:b2:bf:3b:b2:fd:1e:81:26:06:7f:6b:dd:50:ba:06:86:bb: ae:61:fb:75:3b:91:55:34:2e:66:bd:2b:75:76:12:da:bd:51: b5:01:13:99:e6:6c:5f:83:ca:44:0d:90:80:f8:d8:a6:10:9f: b6:2e:75:69:9f:7c:e7:dd:5a:36:d6:34:1d:0a:01:02:92:3c: 17:94:4b:02:10:3d:d1:e2:0b:8b:49:c8:d6:0a:9e:fc:66:61: 28:d1:14:14:91:df:71:72:79:35:fe:f5:fd:54:56:19:a2:10: 7a:7e:8e:bb:82:5c:2f:26:01:f2:c9:36:24:54:81:30:2e:18: e9:38:31:c1:cc:89:ea:dc:75:18:df:2f:49:f2:32:c7:ac:8d: f5:40:08:e2:67:e4:14:f2:bc:d0:7b:16:3d:8a:91:38:9d:7c: d5:f8:e9:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbd7o010KkISMBp4beVHCqOmc0F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAzMjYwNzA4MjhaFw0yNjAzMjcxMDI1MjhaMDMxMTAvBgNV BAMTKDhDMDZERTVGQkRCM0EyMzAxQkQyOUY1NzU4Q0NBOUUzRDI1Q0ZCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+NMFgM8VePRoWQ6Ffj/HpBDJ 1Vx50JVQgQ3Al36Rq8b0qLq1zQ+CsWPUc0u5aejTys5IyqDK+RJsbjJdq8lN6zMX mQo+Z1woXvoHm6ipRWm3Bx144k6dl6BIpR8sv6MRs6jNq5VTG15mCe171kMPyfiy eO04BF7PzrjOOYGYTd1eHcDqQsJbXgq5TpWkk/4qyE1R386p2q1NI4nu4xa1Res1 FULsD8hPwsjKyT4bBIUaNF71u4HR3i9Se1fgJKDLUeeFMavNbfOvXfF9YFCEDJ5a nVMjddqpVml5GKgzH2DaEVvlsPjdzKvoeWDvhoGJfde3LDfIbymMjA5EpFtDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjAbeX72zojAb0p9XWMyp49Jc+yAwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiDk04ucxhvJ I/hfp00cdt8LRG/+d4S4W4VroXtddgRXGeDpQHAgGhG3kstdejkRsgUhPdQDZlUW BE7KKodlixWmFGB6adhSeRsncC/XXThfPHVVjod1m4XA+bK/O7L9HoEmBn9r3VC6 Boa7rmH7dTuRVTQuZr0rdXYS2r1RtQETmeZsX4PKRA2QgPjYphCfti51aZ98591a NtY0HQoBApI8F5RLAhA90eILi0nI1gqe/GZhKNEUFJHfcXJ5Nf71/VRWGaIQen6O u4JcLyYB8sk2JFSBMC4Y6TgxwcyJ6tx1GN8vSfIyx6yN9UAI4mfkFPK80HsWPYqR OJ181fjpRw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:02:09 2026 by rpki-client