$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: b+pBjqBHD0tbNqbCxS08+X0fu3IGipsB9wle/V65HF8= Subject key identifier: 77:C7:8F:46:47:2B:7F:67:CE:43:91:18:A6:FC:B3:2A:B0:FB:B9:CF Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 6AB5FF28F2A93815865CE0E8B6E1FB5EF1B2ADF9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: C3 Signing time: Sat 26 Sep 2026 05:38:12 +0000 Manifest this update: Sat 26 Sep 2026 05:33:12 +0000 Manifest next update: Tue 29 Sep 2026 15:18:12 +0000 Files and hashes: 1: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 2: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 3: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 4: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 5: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: ZPb4Z3vCQlQBZFqjtMg/60916+BXqqW0/SvVcysUYpM=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b5:ff:28:f2:a9:38:15:86:5c:e0:e8:b6:e1:fb:5e:f1:b2:ad:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Sep 26 05:33:12 2026 GMT Not After : Sep 29 15:18:12 2026 GMT Subject: CN=77C78F46472B7F67CE439118A6FCB32AB0FBB9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:ba:3d:2c:ef:ff:dc:4e:5f:7d:4d:62:e6: 6c:4f:5e:75:8a:b1:94:99:01:cc:c2:7e:81:ce:dc: 7c:10:a7:1d:f0:e4:7f:47:f0:54:c7:0e:0a:2a:ed: e5:fc:04:ac:1c:ba:1b:6b:0a:8f:e4:8e:36:a8:33: 5b:b4:47:51:76:c9:f4:ad:75:15:8d:14:8b:25:90: d0:24:11:d4:30:1a:05:c4:b1:5c:66:d9:02:ec:d0: e1:94:80:4f:c5:57:86:f5:48:49:ef:36:6c:ba:a3: 2f:55:11:9c:c3:8f:58:ad:50:f5:1d:17:ed:f6:46: c0:a9:69:5a:ae:cf:37:69:b9:4f:47:78:15:af:cd: af:f3:8f:6d:34:dd:db:3a:c2:1d:f5:3a:e2:64:34: ea:59:8d:1b:cb:c0:15:75:ae:a7:2b:b7:4f:7c:23: 11:a8:b4:a9:6b:32:ff:ed:e0:b3:84:93:2a:61:3c: 06:28:66:01:17:92:e1:36:3b:53:0e:5c:f2:7c:5b: 51:e8:a5:2e:80:3b:54:46:ce:ed:4e:15:e0:4e:c9: e7:e4:55:68:02:fc:c7:c1:5e:d8:60:36:1a:25:93: 83:e1:7e:88:2f:8c:fa:96:c1:05:fc:60:b1:b3:d9: 49:63:17:d6:aa:32:34:62:01:e8:20:72:30:1f:72: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C7:8F:46:47:2B:7F:67:CE:43:91:18:A6:FC:B3:2A:B0:FB:B9:CF X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:82:3e:e2:ef:cb:43:e4:6a:0f:38:73:6d:71:ce:66:8e:85: 4f:21:42:31:42:2b:bb:dc:de:5a:e7:81:66:ea:ac:07:48:43: 9a:e2:bf:ee:54:02:42:59:42:50:17:e7:30:ac:31:f2:61:d8: bb:91:a3:dc:07:05:e5:28:d1:ac:54:bb:ca:43:9c:67:b2:46: f3:17:c1:52:7b:e5:f3:b8:8e:fd:43:c9:6e:8f:de:1c:eb:d8: 54:87:d4:b8:e9:4a:5a:f9:99:8b:7e:71:fd:94:81:79:fa:23: c8:26:75:3a:0e:f9:35:6a:f9:11:4d:95:1b:8b:3f:4a:74:11: e9:b7:2c:35:fc:f9:4a:13:9a:10:cb:f0:03:17:1a:c9:f6:bf: 05:b4:66:16:59:51:60:b1:e7:58:82:49:0b:95:3a:dc:97:19: d2:d8:6d:ce:95:a7:91:90:e3:7a:6e:52:1c:1a:b0:13:b4:ac: 52:ab:6e:cf:40:a7:64:ec:f0:13:7c:58:32:ce:c0:65:51:16: 75:84:ee:cd:d8:77:df:af:f7:f4:16:dc:0a:d1:cf:ac:fd:fb: 47:35:77:9f:9b:a0:62:68:8f:99:a8:4b:fc:97:c7:d9:23:c1: bb:a6:b1:71:18:80:70:82:1a:2e:14:ed:6c:18:81:1f:86:d8: 31:de:76:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUarX/KPKpOBWGXODotuH7XvGyrfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA5MjYwNTMzMTJaFw0yNjA5MjkxNTE4MTJaMDMxMTAvBgNV BAMTKDc3Qzc4RjQ2NDcyQjdGNjdDRTQzOTExOEE2RkNCMzJBQjBGQkI5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH67o9LO//3E5ffU1i5mxPXnWK sZSZAczCfoHO3HwQpx3w5H9H8FTHDgoq7eX8BKwcuhtrCo/kjjaoM1u0R1F2yfSt dRWNFIslkNAkEdQwGgXEsVxm2QLs0OGUgE/FV4b1SEnvNmy6oy9VEZzDj1itUPUd F+32RsCpaVquzzdpuU9HeBWvza/zj2003ds6wh31OuJkNOpZjRvLwBV1rqcrt098 IxGotKlrMv/t4LOEkyphPAYoZgEXkuE2O1MOXPJ8W1HopS6AO1RGzu1OFeBOyefk VWgC/MfBXthgNholk4PhfogvjPqWwQX8YLGz2UljF9aqMjRiAeggcjAfcnQVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd8ePRkcrf2fOQ5EYpvyzKrD7uc8wHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoI+4u/LQ+Rq DzhzbXHOZo6FTyFCMUIru9zeWueBZuqsB0hDmuK/7lQCQllCUBfnMKwx8mHYu5Gj 3AcF5SjRrFS7ykOcZ7JG8xfBUnvl87iO/UPJbo/eHOvYVIfUuOlKWvmZi35x/ZSB efojyCZ1Og75NWr5EU2VG4s/SnQR6bcsNfz5ShOaEMvwAxcayfa/BbRmFllRYLHn WIJJC5U63JcZ0thtzpWnkZDjem5SHBqwE7SsUqtuz0CnZOzwE3xYMs7AZVEWdYTu zdh336/39BbcCtHPrP37RzV3n5ugYmiPmahL/JfH2SPBu6axcRiAcIIaLhTtbBiB H4bYMd52hw== -----END CERTIFICATE-----Generated at Sun Sep 27 01:23:30 2026 by rpki-client