$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: PzJzObBYi5+jecO7TTpCxl/u7k+v4K/+64nlGXX+ahw= Subject key identifier: E3:C1:07:9A:00:E2:3B:6E:A5:4E:09:8E:DA:53:90:04:96:30:96:A6 Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 7F4F1C14FB4ECAA4875F021C3EF512EFB8E34398 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: 25 Signing time: Tue 12 May 2026 19:40:42 +0000 Manifest this update: Tue 12 May 2026 19:35:42 +0000 Manifest next update: Wed 13 May 2026 23:21:42 +0000 Files and hashes: 1: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) 2: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 3: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: DortRM7QiB00iFLA++1niAttrplenfHgJi/yzGPHyi4=) 4: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) 5: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4f:1c:14:fb:4e:ca:a4:87:5f:02:1c:3e:f5:12:ef:b8:e3:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: May 12 19:35:42 2026 GMT Not After : May 13 23:21:42 2026 GMT Subject: CN=E3C1079A00E23B6EA54E098EDA539004963096A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:1a:11:9a:58:42:31:25:23:04:60:13:11: 40:20:91:4d:f9:87:28:bc:38:f7:19:24:fb:ed:28: a2:8f:37:5c:df:32:c0:5a:ad:fe:01:bc:0b:4b:87: ed:64:1e:68:e1:76:15:ed:4e:8f:4a:07:7e:b8:35: 19:10:a3:da:97:82:07:2d:44:4c:c7:b7:e3:b1:e6: ad:4b:0c:3e:9c:e3:99:f3:1d:ec:b4:ad:c3:94:4d: de:ba:01:b2:d7:f7:a4:51:b7:67:4b:2f:e2:b8:20: 5b:45:b1:b3:b0:29:a0:66:2c:15:a4:8d:a3:69:1b: 0e:a0:3f:83:55:96:3f:21:16:1c:90:c0:64:5e:2f: f4:74:00:df:29:71:77:ce:de:bd:09:3e:3f:85:5c: db:29:a3:d9:4f:e3:f3:d9:48:0e:63:ba:96:95:bd: e0:ce:ca:f9:37:e3:ed:d3:0d:67:62:c8:19:2f:81: fd:fb:4a:75:61:5b:0d:f9:a3:a5:57:3a:c3:78:ef: 92:6c:5e:de:3b:b8:fd:63:ee:20:42:1e:f0:61:50: c4:29:da:d5:3b:88:5e:de:9b:c3:24:98:44:65:19: e1:1a:b7:5f:4c:95:d4:56:f1:55:82:41:b7:e1:d4: 49:23:08:d6:75:44:35:7a:26:82:a1:16:bb:a1:d7: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C1:07:9A:00:E2:3B:6E:A5:4E:09:8E:DA:53:90:04:96:30:96:A6 X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b5:e6:07:17:fa:d9:0a:b6:13:7b:44:69:7b:f8:01:0f:cc: 6b:f3:fe:f2:c9:37:4a:cd:3f:57:6a:13:36:60:8a:45:f8:5d: 04:2d:2b:a6:cc:50:7e:f5:7d:94:e9:be:b5:d5:14:d1:4a:3f: b0:7e:ac:90:9b:ee:d6:5f:63:41:7d:1e:be:3d:03:38:e5:02: cd:46:21:e4:e9:93:51:4d:bd:e7:0a:70:b0:b1:ce:93:d1:b6: ff:54:1c:a3:be:11:71:fc:dd:3f:53:83:e8:f6:ef:a2:b0:13: 92:e5:82:a5:8a:fc:fa:ea:58:ca:5e:3d:b0:eb:80:d4:70:d2: 35:5a:93:88:88:bf:44:3f:aa:73:50:55:05:8e:85:59:5b:97: f0:79:0d:f8:6e:1e:e6:74:d3:29:d5:dc:ff:0a:4f:81:9f:fa: 6d:e9:37:f7:5c:98:c0:62:47:49:a5:0e:85:77:99:d5:c7:b7: 9f:6f:00:b6:67:c1:46:df:35:84:34:d0:c7:d3:87:c8:1a:4e: d0:37:5e:29:70:50:1f:01:8c:e1:1f:ca:6c:bf:aa:7e:1d:28: ab:0d:05:02:b0:a0:35:b1:a6:b6:c1:29:ca:f7:6c:79:a9:0a: 8c:dd:dd:87:ae:19:eb:c4:6e:f7:52:59:d6:2f:12:60:4f:0c: b1:fa:7d:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf08cFPtOyqSHXwIcPvUS77jjQ5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA1MTIxOTM1NDJaFw0yNjA1MTMyMzIxNDJaMDMxMTAvBgNV BAMTKEUzQzEwNzlBMDBFMjNCNkVBNTRFMDk4RURBNTM5MDA0OTYzMDk2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY4xoRmlhCMSUjBGATEUAgkU35 hyi8OPcZJPvtKKKPN1zfMsBarf4BvAtLh+1kHmjhdhXtTo9KB364NRkQo9qXggct REzHt+Ox5q1LDD6c45nzHey0rcOUTd66AbLX96RRt2dLL+K4IFtFsbOwKaBmLBWk jaNpGw6gP4NVlj8hFhyQwGReL/R0AN8pcXfO3r0JPj+FXNspo9lP4/PZSA5jupaV veDOyvk34+3TDWdiyBkvgf37SnVhWw35o6VXOsN475JsXt47uP1j7iBCHvBhUMQp 2tU7iF7em8MkmERlGeEat19MldRW8VWCQbfh1EkjCNZ1RDV6JoKhFruh122hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU48EHmgDiO26lTgmO2lOQBJYwlqYwHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrXmBxf62Qq2 E3tEaXv4AQ/Ma/P+8sk3Ss0/V2oTNmCKRfhdBC0rpsxQfvV9lOm+tdUU0Uo/sH6s kJvu1l9jQX0evj0DOOUCzUYh5OmTUU295wpwsLHOk9G2/1Qco74RcfzdP1OD6Pbv orATkuWCpYr8+upYyl49sOuA1HDSNVqTiIi/RD+qc1BVBY6FWVuX8HkN+G4e5nTT KdXc/wpPgZ/6bek391yYwGJHSaUOhXeZ1ce3n28AtmfBRt81hDTQx9OHyBpO0Dde KXBQHwGM4R/KbL+qfh0oqw0FArCgNbGmtsEpyvdseakKjN3dh64Z68Ru91JZ1i8S YE8Msfp9SA== -----END CERTIFICATE-----Generated at Wed May 13 12:28:46 2026 by rpki-client