$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: n854LNd6383nrifMuguLD0+gZiLesFYB5Mhtd3j4+wo= Subject key identifier: 2C:0A:64:C9:7F:B8:7F:80:8B:79:34:47:10:73:2F:8E:A7:33:52:77 Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 478A73933315CF7EB0160B12447BB489E0272C4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: 7C Signing time: Fri 24 Jul 2026 10:15:57 +0000 Manifest this update: Fri 24 Jul 2026 10:10:57 +0000 Manifest next update: Sat 25 Jul 2026 11:11:57 +0000 Files and hashes: 1: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 2: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: W7A4Y+jk3JQw2UmR3ORi6P7FuVXssSGJGFfyrKhwNrw=) 3: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8a:73:93:33:15:cf:7e:b0:16:0b:12:44:7b:b4:89:e0:27:2c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Jul 24 10:10:57 2026 GMT Not After : Jul 25 11:11:57 2026 GMT Subject: CN=2C0A64C97FB87F808B79344710732F8EA7335277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:80:08:64:76:5f:6c:30:79:ef:34:a1:0c: cd:ad:47:50:1e:20:04:70:2f:e2:86:33:42:b0:9b: a3:13:0a:d1:22:f6:e0:c0:f0:8a:e6:40:9b:56:af: 98:82:41:c9:49:4f:fc:74:83:b0:e9:1f:af:10:2c: 3b:75:69:e2:10:a3:c0:7b:e0:7b:d5:e8:e3:51:e0: e4:0c:0a:6c:d6:ad:f6:3f:c5:e7:9c:02:3b:05:e4: ed:7d:ba:48:a8:62:e7:12:af:f5:5e:8c:93:c3:47: e5:d3:b3:99:4f:80:ec:bb:c2:87:d8:22:ff:ff:22: b9:e3:bd:db:72:fb:d5:c5:87:c8:db:3d:62:7c:f3: 87:95:c8:da:cc:ff:5c:3d:72:72:7f:84:4c:be:54: cc:09:a6:a7:48:68:ea:10:9b:cb:11:99:91:6d:b6: 97:eb:09:dd:76:9b:2d:6d:0d:2b:a3:8c:c3:85:15: f7:91:b8:09:ef:ca:82:f6:d2:5b:67:98:6d:ce:82: c4:21:76:dd:bc:0f:0e:80:13:df:c9:92:27:9a:cc: 77:93:25:40:4d:55:97:8c:d7:76:96:89:6b:43:ae: 66:06:98:2a:a9:54:60:22:3a:2a:c1:9b:c4:58:63: d2:b3:fd:ee:9c:34:61:11:2b:c2:1a:63:94:e3:35: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:64:C9:7F:B8:7F:80:8B:79:34:47:10:73:2F:8E:A7:33:52:77 X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:57:93:5a:45:a7:90:b5:ca:d8:51:94:dc:9a:44:91:94:32: fd:99:1c:7a:22:2d:ee:b5:ae:60:61:81:67:b9:ad:71:07:54: 96:7c:85:e5:17:bd:59:f6:12:dd:7b:cd:f1:81:9c:40:1b:aa: 9f:3e:17:5d:d6:c9:e1:8f:2b:43:51:f2:25:c5:b3:83:6a:d1: 2b:33:04:ef:73:45:46:d4:3a:78:4e:cd:c8:fb:ee:33:fc:8b: 1b:d2:ff:8f:3f:d6:cd:02:76:66:66:92:04:d0:a4:93:97:a2: ca:d1:5e:5a:a0:91:5a:a7:68:3d:de:57:1c:c9:f7:32:9d:5e: 63:52:8f:7b:ae:c3:33:fc:ef:ce:2a:8f:71:69:8f:cd:03:f2: bd:04:b5:cb:c7:00:e4:24:b2:a0:37:00:d5:2f:97:78:34:12: b5:44:0d:d4:22:ba:24:86:78:22:84:60:b5:bc:dd:59:01:36: 33:20:22:f7:3e:84:c6:58:c9:97:00:29:ca:5b:6e:10:b1:a3: cc:af:33:05:ce:bd:8a:62:14:63:15:c5:03:aa:9c:63:01:e9: 1b:c1:df:ac:d6:e5:06:17:31:a4:45:79:e8:58:91:8e:7b:9a: 16:9d:ba:da:31:74:48:80:7d:d3:60:67:a0:a0:ee:0e:08:ac: bb:e2:50:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR4pzkzMVz36wFgsSRHu0ieAnLE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjA3MjQxMDEwNTdaFw0yNjA3MjUxMTExNTdaMDMxMTAvBgNV BAMTKDJDMEE2NEM5N0ZCODdGODA4Qjc5MzQ0NzEwNzMyRjhFQTczMzUyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGYAIZHZfbDB57zShDM2tR1Ae IARwL+KGM0Kwm6MTCtEi9uDA8IrmQJtWr5iCQclJT/x0g7DpH68QLDt1aeIQo8B7 4HvV6ONR4OQMCmzWrfY/xeecAjsF5O19ukioYucSr/VejJPDR+XTs5lPgOy7wofY Iv//Irnjvdty+9XFh8jbPWJ884eVyNrM/1w9cnJ/hEy+VMwJpqdIaOoQm8sRmZFt tpfrCd12my1tDSujjMOFFfeRuAnvyoL20ltnmG3OgsQhdt28Dw6AE9/JkieazHeT JUBNVZeM13aWiWtDrmYGmCqpVGAiOirBm8RYY9Kz/e6cNGERK8IaY5TjNVi5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULApkyX+4f4CLeTRHEHMvjqczUncwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIleTWkWnkLXK 2FGU3JpEkZQy/ZkceiIt7rWuYGGBZ7mtcQdUlnyF5Re9WfYS3XvN8YGcQBuqnz4X XdbJ4Y8rQ1HyJcWzg2rRKzME73NFRtQ6eE7NyPvuM/yLG9L/jz/WzQJ2ZmaSBNCk k5eiytFeWqCRWqdoPd5XHMn3Mp1eY1KPe67DM/zvziqPcWmPzQPyvQS1y8cA5CSy oDcA1S+XeDQStUQN1CK6JIZ4IoRgtbzdWQE2MyAi9z6ExljJlwApyltuELGjzK8z Bc69imIUYxXFA6qcYwHpG8HfrNblBhcxpEV56FiRjnuaFp262jF0SIB902BnoKDu Dgisu+JQZQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:17:52 2026 by rpki-client