$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: qSGIW+n7Bmcqr8Y92hL07UH71mrfPL2E1uHdGPpkYvk= Subject key identifier: C0:65:6D:B6:41:62:60:E4:1E:26:3E:18:E5:73:0D:4C:B3:29:15:E7 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 3565897105CC0F73C34B0655794273056B35F417 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 03:28:28 +0000 Manifest this update: Thu 26 Mar 2026 03:23:28 +0000 Manifest next update: Fri 27 Mar 2026 06:08:28 +0000 Files and hashes: 1: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 2: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 3: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: 3y6fd3QmAzKibgpcEqC5MGtXntGPaI2+CtZSxj1z7KA=) 4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:65:89:71:05:cc:0f:73:c3:4b:06:55:79:42:73:05:6b:35:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Mar 26 03:23:28 2026 GMT Not After : Mar 27 06:08:28 2026 GMT Subject: CN=C0656DB6416260E41E263E18E5730D4CB32915E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:0f:db:a9:17:1d:d5:a2:62:26:03:2c:e2: ef:24:8d:d8:46:f9:e5:30:ca:cd:bd:76:ad:bd:8f: 7a:41:60:51:14:19:0f:d1:37:95:42:d9:7a:50:f4: 9c:bb:55:77:23:97:bd:d2:3d:21:77:8f:e6:1b:ed: 6b:26:0a:c6:19:75:da:3e:69:9b:fa:98:c0:52:8f: e6:5f:f2:20:45:5e:73:10:bb:d5:fc:00:97:04:fd: 4d:9a:fc:d6:e3:f0:f8:e1:37:33:d8:35:dc:f7:ea: 9c:9f:76:b9:e7:19:46:8f:14:4a:bc:65:38:f6:59: 49:8c:63:eb:7f:74:dd:81:cf:6d:28:a8:e3:5a:87: 10:e6:e7:8d:08:98:2b:5f:54:f6:ac:fb:b2:3c:b6: b3:38:5f:49:6d:60:2e:c5:9d:e6:96:dc:7b:9c:c2: 13:81:f2:76:67:7d:3b:38:b9:18:06:f3:4f:77:2c: 10:b3:08:91:b8:88:33:98:40:3c:e7:eb:6a:09:c8: a1:ca:6e:ee:82:f4:9f:06:f3:f4:fc:a0:ad:09:e4: f3:a0:be:27:3b:64:5c:f7:89:94:1a:3d:aa:23:12: f9:8b:21:9e:1a:3f:50:ab:d4:e5:e5:d8:e8:e4:91: a5:f5:9d:0d:9f:a6:67:c1:e5:f7:73:f8:ee:ae:2f: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:6D:B6:41:62:60:E4:1E:26:3E:18:E5:73:0D:4C:B3:29:15:E7 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:f0:a4:c0:50:54:f2:7c:fa:21:6e:c2:5f:33:fa:de:69: e3:e6:97:8c:8e:58:19:f1:34:cb:f5:52:3f:58:b8:dc:bb:fa: 8e:9c:09:ee:dd:64:67:df:f9:a5:88:03:50:a4:66:a8:10:4d: 5a:31:77:d9:f4:eb:ff:e6:c4:43:45:c3:05:0b:78:3d:4c:1e: aa:14:2a:d4:a5:2d:37:6e:fd:ee:48:02:59:aa:dc:7b:b9:45: 87:6f:6b:52:69:93:f7:f6:97:bd:07:68:bc:4a:3b:30:f1:3f: e8:27:4c:71:27:18:2a:a6:57:37:40:fa:41:1d:de:aa:a6:76: 2d:a0:db:1d:42:db:c2:70:a9:32:9f:39:ab:f3:41:3a:be:1a: 5d:94:d8:82:b4:3e:50:3e:26:45:c2:26:8f:07:3b:f5:c1:79: d4:60:5f:2d:61:67:50:bf:46:17:9f:dd:78:e0:ac:77:a7:f2: 8c:3b:4a:8d:0d:fe:5b:d0:4a:fe:45:f4:38:5e:35:cb:91:37: 11:16:5f:df:34:9f:2f:28:21:2b:68:3d:82:bd:3e:1b:d0:47: 72:4c:63:33:05:a1:0f:cf:2c:f7:61:b1:88:db:9f:c9:f5:9d: 54:f7:0c:f1:fd:d8:3f:87:d9:ec:ad:03:bd:34:28:0e:de:ef: bc:9b:84:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNWWJcQXMD3PDSwZVeUJzBWs19BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjAzMjYwMzIzMjhaFw0yNjAzMjcwNjA4MjhaMDMxMTAvBgNV BAMTKEMwNjU2REI2NDE2MjYwRTQxRTI2M0UxOEU1NzMwRDRDQjMyOTE1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ww/bqRcd1aJiJgMs4u8kjdhG +eUwys29dq29j3pBYFEUGQ/RN5VC2XpQ9Jy7VXcjl73SPSF3j+Yb7WsmCsYZddo+ aZv6mMBSj+Zf8iBFXnMQu9X8AJcE/U2a/Nbj8PjhNzPYNdz36pyfdrnnGUaPFEq8 ZTj2WUmMY+t/dN2Bz20oqONahxDm540ImCtfVPas+7I8trM4X0ltYC7FneaW3Huc whOB8nZnfTs4uRgG8093LBCzCJG4iDOYQDzn62oJyKHKbu6C9J8G8/T8oK0J5POg vic7ZFz3iZQaPaojEvmLIZ4aP1Cr1OXl2OjkkaX1nQ2fpmfB5fdz+O6uL4n1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwGVttkFiYOQeJj4Y5XMNTLMpFecwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXLwpMBQVPJ8 +iFuwl8z+t5p4+aXjI5YGfE0y/VSP1i43Lv6jpwJ7t1kZ9/5pYgDUKRmqBBNWjF3 2fTr/+bEQ0XDBQt4PUweqhQq1KUtN2797kgCWarce7lFh29rUmmT9/aXvQdovEo7 MPE/6CdMcScYKqZXN0D6QR3eqqZ2LaDbHULbwnCpMp85q/NBOr4aXZTYgrQ+UD4m RcImjwc79cF51GBfLWFnUL9GF5/deOCsd6fyjDtKjQ3+W9BK/kX0OF41y5E3ERZf 3zSfLyghK2g9gr0+G9BHckxjMwWhD88s92GxiNufyfWdVPcM8f3YP4fZ7K0DvTQo Dt7vvJuEkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:59 2026 by rpki-client