$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: 7hKVtRxK0TQ7bg8v3toZuWbDcNHEXgDztin+uah9nDk= Subject key identifier: 62:68:D9:17:B6:69:BD:27:EC:22:AE:95:5C:DE:D3:A3:25:78:C4:0B Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 5A2F4B514D34F764BB922282B59002562091BD8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: FA Signing time: Fri 24 Jul 2026 23:12:24 +0000 Manifest this update: Fri 24 Jul 2026 23:07:24 +0000 Manifest next update: Sun 26 Jul 2026 01:30:24 +0000 Files and hashes: 1: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: gRVhCQkde71iBZ4Ub1yzO6o51wbFuedzTMXwClaTZQ8=) 2: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2f:4b:51:4d:34:f7:64:bb:92:22:82:b5:90:02:56:20:91:bd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Jul 24 23:07:24 2026 GMT Not After : Jul 26 01:30:24 2026 GMT Subject: CN=6268D917B669BD27EC22AE955CDED3A32578C40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:23:f9:2c:b7:d2:72:6d:3f:8f:fb:cd:27:87: 7a:66:a3:b3:d2:e0:70:73:97:1c:78:a5:e6:60:ff: b9:0f:86:08:a2:22:2f:0b:ca:43:a4:8c:c1:57:3b: 20:6c:dd:aa:3e:a3:f3:33:91:f9:ab:7f:89:87:ec: 30:ca:af:45:10:98:37:96:b7:bf:67:22:f4:52:c7: d0:68:27:49:71:12:54:de:24:9f:1b:45:e9:62:f4: fb:25:c1:71:ee:17:b1:d6:e2:dc:f9:17:bc:7b:81: 05:fd:5b:e3:4b:34:80:f5:f3:0c:3a:ed:92:d0:e0: 38:8c:14:df:37:11:52:b7:b1:e0:21:0a:59:0e:11: 4c:e2:ba:7b:dd:5f:01:bd:4b:31:d8:5d:5a:80:e1: ed:fa:48:a8:ab:c7:7a:06:c5:fd:b9:5a:ec:d6:0e: ad:6d:5c:34:f1:94:ba:63:ef:1c:6a:95:4e:f0:2f: af:2f:07:4b:99:e7:5a:5f:c3:1c:63:6d:cf:77:ad: 5c:a4:dc:b9:8f:cc:23:d6:4e:29:78:94:07:c9:8e: 9c:fb:c9:59:02:07:1d:26:ee:71:e3:55:dd:de:24: a3:6d:76:ce:17:3f:dd:e9:7f:63:69:72:05:45:bd: 46:56:76:54:f3:c3:db:97:56:5c:fd:ec:0a:ca:19: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:D9:17:B6:69:BD:27:EC:22:AE:95:5C:DE:D3:A3:25:78:C4:0B X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d4:fd:9b:4b:28:90:b2:0f:ba:97:33:f8:b7:23:c0:64:fd: de:86:e9:58:95:f8:15:4b:d3:cd:ac:b9:3e:c6:16:83:88:85: 31:84:46:d1:00:39:ca:bf:96:5f:b8:13:1b:7e:84:2a:b9:f0: 2e:34:9a:e3:49:d4:ab:8b:1c:f5:4f:3c:24:bb:ac:b1:b8:38: c9:9f:25:df:b8:d3:66:1c:09:bc:6b:02:29:20:33:75:a0:6f: 27:3f:e3:35:92:70:bd:e3:aa:be:18:94:88:73:5f:44:8a:9c: 63:81:0c:1a:13:3d:e8:5b:e0:2a:02:cc:d9:38:a7:ff:bc:cf: 4a:10:2a:52:c6:c1:a1:d2:d1:b6:e2:f2:b6:3a:f2:65:24:46: fb:10:1a:45:2c:7d:63:40:7a:ce:c6:fb:27:fe:f3:62:60:5f: c2:78:dc:41:0c:ac:4c:19:b5:49:98:77:8f:4b:41:69:b0:8f: 4c:52:2a:b8:88:a9:bb:28:15:4f:17:54:54:9b:eb:58:43:ff: e8:14:4e:c9:6a:79:56:e6:cc:32:36:dd:4e:13:08:e2:5e:5f: 3d:59:24:04:93:4e:54:f8:2a:f1:03:14:6d:12:13:52:18:08: b2:6e:c6:36:44:9e:2a:7f:83:d0:01:91:14:83:3f:d0:7d:39: 4e:64:63:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWi9LUU0092S7kiKCtZACViCRvYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA3MjQyMzA3MjRaFw0yNjA3MjYwMTMwMjRaMDMxMTAvBgNV BAMTKDYyNjhEOTE3QjY2OUJEMjdFQzIyQUU5NTVDREVEM0EzMjU3OEM0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOI/kst9JybT+P+80nh3pmo7PS 4HBzlxx4peZg/7kPhgiiIi8LykOkjMFXOyBs3ao+o/Mzkfmrf4mH7DDKr0UQmDeW t79nIvRSx9BoJ0lxElTeJJ8bReli9PslwXHuF7HW4tz5F7x7gQX9W+NLNID18ww6 7ZLQ4DiMFN83EVK3seAhClkOEUziunvdXwG9SzHYXVqA4e36SKirx3oGxf25WuzW Dq1tXDTxlLpj7xxqlU7wL68vB0uZ51pfwxxjbc93rVyk3LmPzCPWTil4lAfJjpz7 yVkCBx0m7nHjVd3eJKNtds4XP93pf2NpcgVFvUZWdlTzw9uXVlz97ArKGZWRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYmjZF7ZpvSfsIq6VXN7ToyV4xAswHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtT9m0sokLIP upcz+LcjwGT93obpWJX4FUvTzay5PsYWg4iFMYRG0QA5yr+WX7gTG36EKrnwLjSa 40nUq4sc9U88JLussbg4yZ8l37jTZhwJvGsCKSAzdaBvJz/jNZJwveOqvhiUiHNf RIqcY4EMGhM96FvgKgLM2Tin/7zPShAqUsbBodLRtuLytjryZSRG+xAaRSx9Y0B6 zsb7J/7zYmBfwnjcQQysTBm1SZh3j0tBabCPTFIquIipuygVTxdUVJvrWEP/6BRO yWp5VubMMjbdThMI4l5fPVkkBJNOVPgq8QMUbRITUhgIsm7GNkSeKn+D0AGRFIM/ 0H05TmRjIQ== -----END CERTIFICATE-----Generated at Sat Jul 25 01:03:09 2026 by rpki-client