$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: 8gp35Mz7JSp4qd+DMYy5c549L2+pEy8wGHlRWxky7sQ= Subject key identifier: D3:7F:AF:25:40:EB:F3:86:2D:91:2D:6E:5D:B0:A5:B6:DC:1E:62:84 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 46A66B6765A3C77DB8FBC5E55F756BC0FC03E16D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 99 Signing time: Wed 13 May 2026 05:50:59 +0000 Manifest this update: Wed 13 May 2026 05:45:59 +0000 Manifest next update: Thu 14 May 2026 06:33:59 +0000 Files and hashes: 1: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: nTD/p3eIahvqTYTMqi8djVKJg0fHGdldZm1yW9X4suY=) 2: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 3: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) 4: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a6:6b:67:65:a3:c7:7d:b8:fb:c5:e5:5f:75:6b:c0:fc:03:e1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: May 13 05:45:59 2026 GMT Not After : May 14 06:33:59 2026 GMT Subject: CN=D37FAF2540EBF3862D912D6E5DB0A5B6DC1E6284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:ec:bc:b1:a1:1f:c5:ba:c2:f7:f9:6c:11: 4b:d7:a2:4c:7f:c3:08:e2:63:bf:86:d7:4d:99:59: fe:84:98:9b:3f:2e:ea:83:c7:fb:3b:f4:a8:6a:e7: 3a:ed:00:65:27:20:ec:9c:15:7e:37:4c:40:e6:2e: e0:d2:cc:97:a7:1f:a4:b3:8b:f1:67:80:54:3d:df: 62:2b:58:0d:55:be:84:05:3a:56:5d:a3:ba:f6:45: 71:5a:b4:e2:e7:b0:8e:e8:0f:c2:5d:e3:1b:d6:75: a8:09:7c:2c:4d:1c:f6:de:37:e9:e5:91:34:d0:de: 09:c8:43:0d:12:7e:b4:d8:35:7d:cc:d7:b9:8d:77: e7:0e:d5:86:ec:a7:24:7d:93:a0:2a:d4:58:f3:76: dd:ab:6a:22:eb:0a:05:41:6b:3b:5d:62:85:1c:85: e3:cc:08:a7:6c:cd:4f:ca:5b:46:4f:ef:2d:5e:02: 70:ad:86:01:62:3a:db:82:66:b6:26:a6:14:10:c3: 0a:a5:b2:ac:25:cb:7b:8f:74:be:f2:a3:16:6f:95: 18:c5:5f:4d:37:b5:aa:72:f2:cc:57:c5:44:cf:7f: f8:90:0c:15:fc:6d:d6:33:63:85:75:f7:2f:1a:3f: 12:af:f7:f6:8e:96:98:ab:34:5c:58:16:92:a7:63: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:AF:25:40:EB:F3:86:2D:91:2D:6E:5D:B0:A5:B6:DC:1E:62:84 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3e:fb:c7:1c:c5:17:fc:fa:38:96:c2:01:40:c3:bc:f3:cf: a7:ac:7f:42:ad:2e:1c:5d:25:37:1b:6d:0a:c0:64:b8:d9:09: c0:4e:70:93:3f:8b:f3:51:bb:2b:56:f5:50:80:14:24:ed:5c: bf:b4:82:da:ab:32:b7:07:ed:62:3c:27:a9:af:0a:24:33:40: 25:e8:b7:e4:a3:1d:9e:e7:56:36:97:1a:51:e6:58:d7:00:8d: 58:94:19:12:ae:07:ae:6e:42:ee:8f:d3:a1:f8:41:e5:50:40: a9:40:3d:ff:f4:68:33:b5:54:aa:f2:d9:3f:b3:3b:d0:90:fc: 6c:81:1b:a3:3f:e2:7a:13:7f:89:ab:ba:ce:23:78:e7:5a:32: b6:be:be:99:1c:81:5f:bf:79:22:30:45:68:19:94:b5:c0:a0: f4:c6:cb:66:ba:31:cb:68:37:76:13:04:d4:b1:20:8f:0f:4b: fc:d3:df:40:7c:6f:7c:c0:f6:73:a7:ec:d9:67:1f:04:f5:f2: e1:35:0c:0f:d2:7b:a0:83:2c:80:6d:d9:41:2a:bb:60:2c:d5: f2:c9:a7:a1:1a:b5:15:e9:80:06:47:3b:4b:fa:24:d9:d2:bb: 51:c5:9c:29:54:ac:07:38:93:fd:71:80:d9:c8:59:ab:4a:07: 6f:e8:b8:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURqZrZ2Wjx324+8XlX3VrwPwD4W0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA1MTMwNTQ1NTlaFw0yNjA1MTQwNjMzNTlaMDMxMTAvBgNV BAMTKEQzN0ZBRjI1NDBFQkYzODYyRDkxMkQ2RTVEQjBBNUI2REMxRTYyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ouy8saEfxbrC9/lsEUvXokx/ wwjiY7+G102ZWf6EmJs/LuqDx/s79Khq5zrtAGUnIOycFX43TEDmLuDSzJenH6Sz i/FngFQ932IrWA1VvoQFOlZdo7r2RXFatOLnsI7oD8Jd4xvWdagJfCxNHPbeN+nl kTTQ3gnIQw0SfrTYNX3M17mNd+cO1YbspyR9k6Aq1Fjzdt2raiLrCgVBaztdYoUc hePMCKdszU/KW0ZP7y1eAnCthgFiOtuCZrYmphQQwwqlsqwly3uPdL7yoxZvlRjF X003tapy8sxXxUTPf/iQDBX8bdYzY4V19y8aPxKv9/aOlpirNFxYFpKnYyotAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU03+vJUDr84YtkS1uXbClttweYoQwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqj77xxzFF/z6 OJbCAUDDvPPPp6x/Qq0uHF0lNxttCsBkuNkJwE5wkz+L81G7K1b1UIAUJO1cv7SC 2qsytwftYjwnqa8KJDNAJei35KMdnudWNpcaUeZY1wCNWJQZEq4Hrm5C7o/TofhB 5VBAqUA9//RoM7VUqvLZP7M70JD8bIEboz/iehN/iau6ziN451oytr6+mRyBX795 IjBFaBmUtcCg9MbLZroxy2g3dhME1LEgjw9L/NPfQHxvfMD2c6fs2WcfBPXy4TUM D9J7oIMsgG3ZQSq7YCzV8smnoRq1FemABkc7S/ok2dK7UcWcKVSsBziT/XGA2chZ q0oHb+i4ng== -----END CERTIFICATE-----Generated at Wed May 13 17:02:46 2026 by rpki-client