$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: g5qKWvuWIY4Kr5SDE5w82RJYerg9FjtkguO8qk5fBG4= Subject key identifier: 55:31:17:2E:A1:10:8A:38:06:E8:37:CF:25:21:6C:28:AF:C6:CB:1C Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 3E05231B60BB13D4B04EF812D805EF4BEEB1A032 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: BE Signing time: Fri 09 Oct 2026 02:53:01 +0000 Manifest this update: Fri 09 Oct 2026 02:48:01 +0000 Manifest next update: Mon 12 Oct 2026 04:06:01 +0000 Files and hashes: 1: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: CbLOwJzlvcgss/oGuxD3uPyxEknQP50aD/k4G8MMlKA=) 2: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) 3: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 04:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:05:23:1b:60:bb:13:d4:b0:4e:f8:12:d8:05:ef:4b:ee:b1:a0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Oct 9 02:48:01 2026 GMT Not After : Oct 12 04:06:01 2026 GMT Subject: CN=5531172EA1108A3806E837CF25216C28AFC6CB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:10:e2:85:45:49:9d:e9:ae:af:aa:84:58: 45:b7:67:a2:42:b7:5a:b3:aa:85:24:34:1e:59:4c: cd:75:aa:50:1d:46:9e:61:e6:c8:ec:cf:8a:a1:5a: 7c:12:9b:28:6c:85:df:d4:b0:c7:90:d9:b0:b5:ca: 27:53:2a:13:d2:12:17:bc:a0:a0:1b:f5:38:b5:88: 6e:4f:b9:5d:d1:52:f3:f9:a5:c0:f2:98:ed:34:c5: 72:a3:71:5a:cb:68:7d:56:95:2a:89:91:7a:35:7a: 4b:21:a6:53:51:4c:65:63:c1:3b:8b:81:06:4e:23: fb:3f:79:1e:c7:a5:87:74:89:79:be:cc:04:7b:38: c1:c9:d3:36:cb:70:a7:c9:51:5e:21:dc:95:aa:9d: bf:e7:30:b3:6a:51:ca:36:8f:a2:11:b7:f8:88:46: 15:4f:d2:b8:5c:4e:93:5c:c5:ff:f7:e4:e8:f3:34: f5:5b:91:15:86:55:ec:78:b5:b4:e4:34:9e:e6:be: 9e:f4:a1:82:31:85:f5:8a:5e:a6:42:8f:70:f4:7f: cd:a8:15:a1:8d:db:bc:5b:bd:b2:2e:ae:d0:74:67: 9f:a8:88:21:7b:48:f3:e8:bd:10:73:79:e9:ef:5e: 17:62:ca:0a:a5:ab:52:af:e8:74:05:ec:0c:76:57: 0c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:17:2E:A1:10:8A:38:06:E8:37:CF:25:21:6C:28:AF:C6:CB:1C X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:02:d8:b0:d8:d8:77:fa:7c:47:cf:81:a7:2b:65:fd:b8:d3: 0d:24:7e:c7:9f:4b:6e:0e:ea:5e:c0:1e:38:c0:62:72:18:af: 2f:a0:38:73:05:ce:7a:2e:b1:46:45:0e:65:0d:74:bc:e9:79: 40:aa:16:b8:d2:1e:5b:83:0e:8f:46:aa:27:57:e3:8d:77:35: 0d:26:86:8e:0b:1c:5e:06:20:a6:cb:52:a4:52:fa:57:24:e1: 6c:6a:2b:95:ab:6d:43:93:d8:ce:8c:93:0c:95:a1:76:5d:cd: aa:a1:11:42:63:e2:b2:fb:e8:9c:a7:d8:ca:16:2e:1a:ea:cd: 16:0d:61:30:59:98:b7:84:45:be:77:37:cc:8a:e5:d8:a0:02: 13:70:ef:4f:3d:7d:6a:64:dd:32:c1:08:15:18:f8:68:a8:61: 3f:8b:e6:b6:df:c5:9a:24:c3:34:b9:ed:e7:f9:ab:2a:ed:f7: 8b:93:f4:ee:3d:47:02:9d:0d:f2:bf:2b:27:dd:91:72:b1:02: ce:dd:86:48:0f:27:a8:6e:da:60:10:b1:34:5a:37:1d:bd:32: 94:76:84:31:a8:4f:3e:a2:75:fe:47:df:8c:ed:cd:53:43:2e: 4d:b7:5f:7f:12:82:45:f7:92:7c:42:35:ba:37:71:ef:4f:33: f0:5b:5a:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPgUjG2C7E9SwTvgS2AXvS+6xoDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjEwMDkwMjQ4MDFaFw0yNjEwMTIwNDA2MDFaMDMxMTAvBgNV BAMTKDU1MzExNzJFQTExMDhBMzgwNkU4MzdDRjI1MjE2QzI4QUZDNkNCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVohDihUVJnemur6qEWEW3Z6JC t1qzqoUkNB5ZTM11qlAdRp5h5sjsz4qhWnwSmyhshd/UsMeQ2bC1yidTKhPSEhe8 oKAb9Ti1iG5PuV3RUvP5pcDymO00xXKjcVrLaH1WlSqJkXo1ekshplNRTGVjwTuL gQZOI/s/eR7HpYd0iXm+zAR7OMHJ0zbLcKfJUV4h3JWqnb/nMLNqUco2j6IRt/iI RhVP0rhcTpNcxf/35OjzNPVbkRWGVex4tbTkNJ7mvp70oYIxhfWKXqZCj3D0f82o FaGN27xbvbIurtB0Z5+oiCF7SPPovRBzeenvXhdiygqlq1Kv6HQF7Ax2Vwx5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVTEXLqEQijgG6DfPJSFsKK/GyxwwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyALYsNjYd/p8 R8+Bpytl/bjTDSR+x59Lbg7qXsAeOMBichivL6A4cwXOei6xRkUOZQ10vOl5QKoW uNIeW4MOj0aqJ1fjjXc1DSaGjgscXgYgpstSpFL6VyThbGorlattQ5PYzoyTDJWh dl3NqqERQmPisvvonKfYyhYuGurNFg1hMFmYt4RFvnc3zIrl2KACE3DvTz19amTd MsEIFRj4aKhhP4vmtt/FmiTDNLnt5/mrKu33i5P07j1HAp0N8r8rJ92RcrECzt2G SA8nqG7aYBCxNFo3Hb0ylHaEMahPPqJ1/kffjO3NU0MuTbdffxKCRfeSfEI1ujdx 708z8Ftahg== -----END CERTIFICATE-----Generated at Sat Oct 10 06:03:58 2026 by rpki-client