$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: 5TnhfrDtdRL7Ac8A66tiSQio5wEl5AAMSBHllcH8TXs= Subject key identifier: D9:33:98:53:5D:11:02:F8:3F:6C:35:83:EB:54:BE:C5:E0:32:88:1F Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 0695C0303093DB0219332FAA8165F02A32E0F1AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 27 Signing time: Wed 13 May 2026 05:20:58 +0000 Manifest this update: Wed 13 May 2026 05:15:58 +0000 Manifest next update: Thu 14 May 2026 08:45:58 +0000 Files and hashes: 1: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 2: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 3: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 4: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: zEt/mGiNFJEBM6wJQt/VAxSSrkWWNbEIIFq9dQSzWlE=) 5: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:95:c0:30:30:93:db:02:19:33:2f:aa:81:65:f0:2a:32:e0:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: May 13 05:15:58 2026 GMT Not After : May 14 08:45:58 2026 GMT Subject: CN=D93398535D1102F83F6C3583EB54BEC5E032881F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:92:0e:5d:6b:fc:91:14:bb:bf:2d:0d:90: 2e:ea:50:e4:c8:d7:0a:52:da:aa:31:d5:1d:6b:8c: 26:de:13:e4:2c:da:70:3c:6a:35:f0:4a:e9:a7:78: 14:82:f0:d8:2f:40:28:7a:cc:19:b0:70:eb:25:d9: ca:fe:97:ed:bd:f9:01:e6:6c:28:ba:29:71:8a:3e: c9:f9:8c:42:ba:26:af:ce:ff:43:0c:3b:ed:8b:2d: 6f:f4:8f:46:e1:c3:4d:62:1c:dd:24:82:ef:9a:c1: f2:88:57:57:e2:1b:cc:95:50:a9:b5:45:98:9d:ca: 2c:9d:9f:a6:8f:d6:8e:14:12:3f:14:92:c6:cb:55: b5:68:47:f6:cc:db:7a:05:bd:67:f0:36:8b:25:be: 41:d0:ee:60:95:c4:0b:16:54:f4:f5:04:14:90:8d: c8:e9:a8:17:a5:c7:ca:d8:6e:11:34:94:b6:99:2a: 1b:0c:ea:5e:bd:e6:5c:38:67:c8:e9:50:12:9f:18: 5a:44:81:6e:71:6a:47:4b:93:80:11:30:62:7e:7a: ba:da:09:b8:47:7b:20:f3:5f:ec:91:ae:57:5e:f8: ca:82:a2:00:13:2d:35:1d:66:db:0e:66:a6:95:b5: e0:67:23:fd:b3:d9:45:c2:5c:a2:19:b5:66:0c:c8: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:98:53:5D:11:02:F8:3F:6C:35:83:EB:54:BE:C5:E0:32:88:1F X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:87:ad:ef:6a:3e:44:6e:64:f1:2e:fc:2b:eb:66:2a:8a: 01:26:7e:fe:72:68:34:a2:1f:00:32:ef:62:9c:fd:37:d9:88: d6:12:1b:a6:79:72:49:f4:2a:48:64:8d:3c:af:65:3f:6c:2d: a2:1a:13:86:cb:b3:8f:ba:03:a8:95:1e:49:0d:1f:9f:bd:c8: 51:9e:f6:96:77:5c:f5:6e:c2:ba:58:b4:cc:f8:11:1d:df:85: a2:af:e2:48:01:93:b1:0b:22:1b:dd:69:ce:4e:dd:a5:0e:a2: dc:e2:2c:b3:d7:8c:93:ca:f2:27:d1:d9:e9:f6:3b:9e:eb:0c: 21:bc:c9:13:49:03:45:c7:27:af:21:12:fe:4c:c5:08:88:e7: 36:f5:55:f0:78:e7:76:e0:b6:29:48:cb:ed:67:a5:2a:f6:f3: 3c:68:f5:b1:e8:ed:44:39:4f:07:f0:4c:69:8b:5e:ae:de:70: 2d:23:f1:64:53:5e:55:73:a1:01:97:7d:74:b3:bb:90:77:74: b6:01:5d:b1:42:42:6f:e7:ef:44:ce:5e:e2:d6:7a:9c:c0:41: ad:75:50:2b:b8:ba:f7:8d:2b:29:d1:cf:b2:89:7b:7a:ba:17: e9:38:51:18:1e:cc:a7:6a:d0:e7:c2:53:97:cc:3e:82:a8:7e: b0:5f:6b:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBpXAMDCT2wIZMy+qgWXwKjLg8aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA1MTMwNTE1NThaFw0yNjA1MTQwODQ1NThaMDMxMTAvBgNV BAMTKEQ5MzM5ODUzNUQxMTAyRjgzRjZDMzU4M0VCNTRCRUM1RTAzMjg4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7JIOXWv8kRS7vy0NkC7qUOTI 1wpS2qox1R1rjCbeE+Qs2nA8ajXwSumneBSC8NgvQCh6zBmwcOsl2cr+l+29+QHm bCi6KXGKPsn5jEK6Jq/O/0MMO+2LLW/0j0bhw01iHN0kgu+awfKIV1fiG8yVUKm1 RZidyiydn6aP1o4UEj8UksbLVbVoR/bM23oFvWfwNoslvkHQ7mCVxAsWVPT1BBSQ jcjpqBelx8rYbhE0lLaZKhsM6l695lw4Z8jpUBKfGFpEgW5xakdLk4ARMGJ+erra CbhHeyDzX+yRrlde+MqCogATLTUdZtsOZqaVteBnI/2z2UXCXKIZtWYMyNkHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2TOYU10RAvg/bDWD61S+xeAyiB8wHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdKHre9qPkRu ZPEu/CvrZiqKASZ+/nJoNKIfADLvYpz9N9mI1hIbpnlySfQqSGSNPK9lP2wtohoT hsuzj7oDqJUeSQ0fn73IUZ72lndc9W7Culi0zPgRHd+Foq/iSAGTsQsiG91pzk7d pQ6i3OIss9eMk8ryJ9HZ6fY7nusMIbzJE0kDRccnryES/kzFCIjnNvVV8HjnduC2 KUjL7WelKvbzPGj1sejtRDlPB/BMaYtert5wLSPxZFNeVXOhAZd9dLO7kHd0tgFd sUJCb+fvRM5e4tZ6nMBBrXVQK7i6940rKdHPsol7eroX6ThRGB7Mp2rQ58JTl8w+ gqh+sF9rzQ== -----END CERTIFICATE-----Generated at Wed May 13 13:08:12 2026 by rpki-client