$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: mR0dBE8I/SJQffPYAHBePZ3BwZtaHGGrLwESNXwocbg= Subject key identifier: 81:D5:C6:42:F4:5D:AD:4E:2E:A8:D0:CD:62:E3:B8:D2:0C:5F:43:53 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 3C822F7F422FBF6BD8CF50C58B406F7F15D6F990 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 87 Signing time: Fri 24 Jul 2026 05:20:27 +0000 Manifest this update: Fri 24 Jul 2026 05:15:26 +0000 Manifest next update: Sat 25 Jul 2026 06:50:26 +0000 Files and hashes: 1: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: 2Cba/48y0t1LLIyxHeNgb2HAYBE0fpXd3lNMJSFc+XI=) 2: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 3: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 4: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 5: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:82:2f:7f:42:2f:bf:6b:d8:cf:50:c5:8b:40:6f:7f:15:d6:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Jul 24 05:15:26 2026 GMT Not After : Jul 25 06:50:26 2026 GMT Subject: CN=81D5C642F45DAD4E2EA8D0CD62E3B8D20C5F4353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:a7:1b:20:00:c1:8f:2a:f6:13:c2:6c:c8: 5d:dd:89:b9:52:65:2d:63:2f:7a:64:84:94:71:78: 64:d1:74:bf:71:35:0e:fd:78:47:67:72:79:32:10: 5f:7a:6b:b0:4f:d1:99:ae:85:cd:79:21:91:0b:f8: eb:6d:37:46:e6:b6:9d:19:84:83:a4:74:e7:48:1c: 19:49:b8:a2:91:60:75:d8:b6:d6:59:02:1d:1c:fd: 6e:ca:85:37:45:43:50:00:67:cc:2d:53:a1:57:49: 74:61:5e:d8:d1:e2:67:5c:cd:1a:da:81:82:3f:c0: 36:20:e7:77:37:b6:79:94:82:b3:63:f6:db:8b:09: 05:06:8d:58:fd:81:a9:40:23:c6:a9:c0:52:8f:41: 89:2f:de:3b:40:2a:1b:6c:8f:93:0d:f1:0a:a7:ec: bd:f8:af:7d:db:87:69:ac:94:24:81:2e:f0:30:04: 63:d3:fd:ee:f6:3e:9f:71:d8:0a:bb:a5:a8:67:57: aa:39:7b:6c:86:3e:f1:4b:aa:54:98:aa:38:b1:62: 7b:59:18:36:c2:82:a5:ce:77:aa:38:c4:21:fa:99: d9:e0:c3:b4:af:1d:e2:be:dc:20:e3:14:da:8a:27: 8a:b1:3f:16:f2:ed:b0:70:be:fe:35:d3:11:56:a8: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:C6:42:F4:5D:AD:4E:2E:A8:D0:CD:62:E3:B8:D2:0C:5F:43:53 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:12:a8:31:3b:f4:81:07:46:6b:30:33:1d:e1:25:71:10:cd: 59:00:19:b1:9b:5e:88:a6:c8:1f:4a:7c:b7:2d:8d:cf:1e:80: 12:e6:5a:35:f4:06:24:4b:7b:68:b5:4a:69:f8:2f:5a:0f:25: a3:39:cf:99:ab:ce:92:3b:cd:f3:2c:2d:74:c7:d5:26:f1:58: 8a:49:82:ad:aa:08:9f:b3:6d:9e:ea:82:dd:41:a6:61:07:a3: 32:5c:c3:1e:44:61:8f:de:aa:49:97:68:ca:76:2e:d8:19:c5: c4:fd:57:f4:59:66:82:97:33:44:56:a3:61:2c:87:24:b4:3c: 3a:4f:db:ea:37:f3:b8:87:f4:7d:28:03:3d:21:df:a8:81:18: 8a:7f:01:76:1a:cd:55:3e:c7:cc:e0:65:39:6e:74:21:06:0b: 26:56:28:b5:17:6b:c5:c1:af:d9:13:f1:b6:6b:e6:74:e2:d9: 98:9b:07:8f:09:57:cf:eb:66:df:59:86:c5:05:d2:aa:a1:14: aa:5e:f3:be:1b:e2:2d:e1:63:99:d8:f6:b6:00:14:f7:f7:44: 72:62:de:0c:31:c3:2a:83:6c:45:13:b7:cd:c4:11:4b:3f:0b: 93:03:db:55:2a:fe:ac:30:81:26:91:c9:19:f3:56:ed:4a:ee: 7a:aa:4c:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPIIvf0Ivv2vYz1DFi0BvfxXW+ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA3MjQwNTE1MjZaFw0yNjA3MjUwNjUwMjZaMDMxMTAvBgNV BAMTKDgxRDVDNjQyRjQ1REFENEUyRUE4RDBDRDYyRTNCOEQyMEM1RjQzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZqcbIADBjyr2E8JsyF3diblS ZS1jL3pkhJRxeGTRdL9xNQ79eEdncnkyEF96a7BP0Zmuhc15IZEL+OttN0bmtp0Z hIOkdOdIHBlJuKKRYHXYttZZAh0c/W7KhTdFQ1AAZ8wtU6FXSXRhXtjR4mdczRra gYI/wDYg53c3tnmUgrNj9tuLCQUGjVj9galAI8apwFKPQYkv3jtAKhtsj5MN8Qqn 7L34r33bh2mslCSBLvAwBGPT/e72Pp9x2Aq7pahnV6o5e2yGPvFLqlSYqjixYntZ GDbCgqXOd6o4xCH6mdngw7SvHeK+3CDjFNqKJ4qxPxby7bBwvv410xFWqFGFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgdXGQvRdrU4uqNDNYuO40gxfQ1MwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRKoMTv0gQdG azAzHeElcRDNWQAZsZteiKbIH0p8ty2Nzx6AEuZaNfQGJEt7aLVKafgvWg8loznP mavOkjvN8ywtdMfVJvFYikmCraoIn7NtnuqC3UGmYQejMlzDHkRhj96qSZdoynYu 2BnFxP1X9FlmgpczRFajYSyHJLQ8Ok/b6jfzuIf0fSgDPSHfqIEYin8BdhrNVT7H zOBlOW50IQYLJlYotRdrxcGv2RPxtmvmdOLZmJsHjwlXz+tm31mGxQXSqqEUql7z vhviLeFjmdj2tgAU9/dEcmLeDDHDKoNsRRO3zcQRSz8LkwPbVSr+rDCBJpHJGfNW 7UrueqpMlQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:58:32 2026 by rpki-client