$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: bpnqRrexTUztjMrr30Po6zTWhHDZ4e9+McGoHOtLUQs= Subject key identifier: 74:EA:ED:18:BE:94:8D:B2:95:EA:F5:73:7D:A9:A8:FA:23:80:66:91 Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 56100E533C60163536101ECC95F1F2506EED90B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: 86 Signing time: Fri 24 Jul 2026 13:31:18 +0000 Manifest this update: Fri 24 Jul 2026 13:26:18 +0000 Manifest next update: Sat 25 Jul 2026 15:24:18 +0000 Files and hashes: 1: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) 2: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 3: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) 4: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) 5: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: g1AeBhu8D2K+rO9VUaj1hVBwpGN4sW33ltO15ffAccg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:10:0e:53:3c:60:16:35:36:10:1e:cc:95:f1:f2:50:6e:ed:90:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: Jul 24 13:26:18 2026 GMT Not After : Jul 25 15:24:18 2026 GMT Subject: CN=74EAED18BE948DB295EAF5737DA9A8FA23806691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:99:55:69:49:6b:92:e9:7a:63:7f:af:35: 8a:a5:ce:c3:cf:29:03:4c:ed:70:27:4a:68:b6:e8: 3e:62:61:c8:e7:b8:1e:3c:8d:90:b3:4a:76:a6:b3: ab:9a:b7:1e:ae:d3:d9:69:20:37:54:ec:5e:3c:95: f8:69:dc:b3:c7:df:96:5a:da:68:dc:4b:e9:d0:aa: 72:50:07:a5:f9:b1:7b:4f:f7:9d:f8:dc:a6:36:2a: 23:8e:50:90:de:48:9b:d2:23:b4:8f:09:34:57:63: 0d:22:a0:eb:de:0b:42:63:da:19:00:3f:50:1a:84: 20:c5:09:ca:d3:b0:7f:7f:f7:ae:40:be:fa:27:1f: e0:af:4f:dd:96:a2:bc:3e:36:af:38:2b:64:56:82: 9d:47:73:bc:37:70:b1:d3:8e:eb:e5:80:b6:7a:05: e9:85:01:9c:59:2f:9f:0b:8b:fa:23:a2:2f:02:5c: 46:40:9e:ee:c1:a5:d1:18:15:05:9b:a1:2e:72:2a: fc:99:b1:08:e5:ce:f0:3b:65:da:00:5b:2f:10:d3: 48:a0:ce:53:4d:88:03:96:1f:da:cd:fb:ed:01:e6: 7a:e1:98:d1:f1:20:df:74:98:da:87:5e:b7:1f:4d: 2b:3b:29:6d:91:40:15:5c:fb:59:4d:0a:0a:a1:8c: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EA:ED:18:BE:94:8D:B2:95:EA:F5:73:7D:A9:A8:FA:23:80:66:91 X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c7:7a:b5:53:78:7e:62:c7:6c:8e:21:50:9d:89:cc:d1:a2: 88:c5:f7:85:50:47:4a:a2:98:4f:a6:cd:40:47:83:b5:59:3c: cb:83:53:cf:4b:b9:75:70:53:50:b9:72:ec:d4:14:c0:96:0c: f4:46:2d:45:fc:95:7b:72:79:b7:7e:38:27:cb:3d:d8:88:ad: 95:18:5b:e6:c0:97:3f:cc:b9:c0:cc:6b:e9:1d:71:53:0d:e4: e5:de:06:dd:4b:78:21:87:d8:3d:0e:74:c4:63:0a:df:16:2d: 19:90:d1:61:b8:46:19:7d:79:45:22:02:2c:47:cf:f1:36:a6: 59:00:0d:93:bf:3f:27:69:42:ea:be:92:ad:a6:0a:81:15:26: d4:29:ed:96:7f:c7:81:56:04:cc:46:a9:e0:73:06:12:bd:ea: 5e:80:75:50:74:e7:18:4e:78:68:fc:0c:fa:7e:d7:2e:68:92: da:75:55:46:90:e7:90:2b:b3:da:16:d3:0e:84:4c:e2:e0:fa: 2a:61:d1:bc:5f:df:b5:4d:57:72:28:6e:40:11:39:91:d7:d1: 1d:3f:89:77:21:da:2a:9e:59:2f:e0:3f:60:40:8e:4e:23:5c: c3:f4:f2:49:2c:40:0d:48:d5:00:2c:db:f4:7e:21:67:99:de: 5c:c3:73:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVhAOUzxgFjU2EB7MlfHyUG7tkLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA3MjQxMzI2MThaFw0yNjA3MjUxNTI0MThaMDMxMTAvBgNV BAMTKDc0RUFFRDE4QkU5NDhEQjI5NUVBRjU3MzdEQTlBOEZBMjM4MDY2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIZlVaUlrkul6Y3+vNYqlzsPP KQNM7XAnSmi26D5iYcjnuB48jZCzSnams6uatx6u09lpIDdU7F48lfhp3LPH35Za 2mjcS+nQqnJQB6X5sXtP95343KY2KiOOUJDeSJvSI7SPCTRXYw0ioOveC0Jj2hkA P1AahCDFCcrTsH9/965AvvonH+CvT92Worw+Nq84K2RWgp1Hc7w3cLHTjuvlgLZ6 BemFAZxZL58Li/ojoi8CXEZAnu7BpdEYFQWboS5yKvyZsQjlzvA7ZdoAWy8Q00ig zlNNiAOWH9rN++0B5nrhmNHxIN90mNqHXrcfTSs7KW2RQBVc+1lNCgqhjGCpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdOrtGL6UjbKV6vVzfamo+iOAZpEwHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssd6tVN4fmLH bI4hUJ2JzNGiiMX3hVBHSqKYT6bNQEeDtVk8y4NTz0u5dXBTULly7NQUwJYM9EYt RfyVe3J5t344J8s92IitlRhb5sCXP8y5wMxr6R1xUw3k5d4G3Ut4IYfYPQ50xGMK 3xYtGZDRYbhGGX15RSICLEfP8TamWQANk78/J2lC6r6SraYKgRUm1Cntln/HgVYE zEap4HMGEr3qXoB1UHTnGE54aPwM+n7XLmiS2nVVRpDnkCuz2hbTDoRM4uD6KmHR vF/ftU1XcihuQBE5kdfRHT+JdyHaKp5ZL+A/YECOTiNcw/TySSxADUjVACzb9H4h Z5neXMNzEg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:50:14 2026 by rpki-client