$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: oLDzxkYNuGmNHrhLtxxR4FNy4D/NKwpI+MM336BYctE= Subject key identifier: 8E:39:DF:BF:6C:AF:FE:C4:84:1A:FE:15:6B:46:9F:53:45:D0:35:79 Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 48CBFFF42363569537CC90EB899885FC3CE14651 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: 1B Signing time: Wed 13 May 2026 06:26:00 +0000 Manifest this update: Wed 13 May 2026 06:21:00 +0000 Manifest next update: Thu 14 May 2026 07:00:00 +0000 Files and hashes: 1: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 2: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: sevWPDS0AKJDh8UBk2MVfW1ygeuow+VWBUVsVK+4JnU=) 3: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cb:ff:f4:23:63:56:95:37:cc:90:eb:89:98:85:fc:3c:e1:46:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: May 13 06:21:00 2026 GMT Not After : May 14 07:00:00 2026 GMT Subject: CN=8E39DFBF6CAFFEC4841AFE156B469F5345D03579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:a1:98:2e:63:48:c7:d3:8b:82:60:cb:76: 41:cd:5a:e1:67:c4:a4:5b:7e:f7:f3:e0:e1:de:ec: d9:2f:82:80:c8:e2:45:57:d7:13:82:54:c7:4a:5f: be:30:f5:d3:8b:a3:84:9f:a5:49:6f:3a:1f:a1:3f: 8a:e6:fd:c5:dd:4f:07:b0:d5:f6:f7:fb:7c:24:26: f4:a0:2c:c1:f8:1a:ef:c9:a8:7c:ea:14:6a:1c:2c: b7:dd:52:63:90:49:08:41:d6:4a:b9:4b:35:e3:fb: a1:0b:c0:9e:ee:a9:64:43:ec:92:fd:49:b7:09:de: 77:4f:0f:3d:9d:42:31:a1:c3:d8:d6:45:8c:bd:aa: 17:80:2a:1a:d1:28:b0:c3:0e:be:3a:aa:8d:36:a0: a9:51:70:36:4c:2a:ad:18:d8:03:ba:2c:0a:2f:c7: 3f:1e:17:28:40:91:ec:34:f5:b4:46:b0:2e:ce:1e: 2d:0e:cf:b7:cf:23:d7:2f:f6:6c:39:55:b4:43:3a: 2c:63:5a:c0:42:57:d3:fd:d6:ad:39:72:f2:5f:31: 71:1f:75:58:e8:29:f1:81:65:44:c8:a1:04:fa:f5: ab:0f:37:6b:61:13:e3:4d:c7:ac:04:99:eb:a5:ad: 23:d5:ca:cb:a4:b3:bb:69:50:9e:7a:88:8e:27:cd: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:39:DF:BF:6C:AF:FE:C4:84:1A:FE:15:6B:46:9F:53:45:D0:35:79 X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:18:bf:f9:ab:1c:2f:ad:e1:b4:fb:05:41:67:cf:f8:c7:e5: e3:00:e0:1f:ba:f2:6e:02:48:9b:63:20:8e:5d:ed:21:be:6b: ad:e0:2e:3f:5e:e4:c2:ed:9a:06:44:96:d3:ee:54:c9:d4:be: 0a:04:44:c1:ea:39:78:d5:eb:6e:f9:60:be:e0:53:b5:92:26: a3:4f:26:d3:a6:c3:16:31:fd:51:29:ea:74:6b:c9:6a:eb:1b: c3:dd:c2:3a:32:fa:ac:2b:d1:b6:c8:89:f8:35:04:fe:26:fc: 4d:15:e2:05:40:d7:31:6f:bf:4d:1b:32:1e:2f:87:86:ec:39: dd:55:c9:0f:ae:1f:bc:9f:fe:22:3f:eb:8c:4a:71:65:2a:f1: da:71:13:c5:b4:63:a4:ac:f0:1d:61:e6:05:a0:b0:ed:e9:9e: 53:a4:61:4a:52:10:99:a2:3e:1d:a4:91:91:0a:cf:2b:27:3d: 6f:75:58:72:7f:2c:d2:b8:15:43:dc:ee:b6:79:2a:4a:bc:e3: d0:a9:4b:e0:86:5a:1c:b5:f0:eb:36:f5:89:60:5c:a1:09:eb: 3d:81:49:f7:91:8a:06:1d:bb:5f:83:d9:6d:ac:f9:d6:9d:b6: a5:e6:dc:bf:60:50:32:87:eb:50:53:7e:49:b3:a7:0c:26:e5: ca:f7:19:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSMv/9CNjVpU3zJDriZiF/DzhRlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjA1MTMwNjIxMDBaFw0yNjA1MTQwNzAwMDBaMDMxMTAvBgNV BAMTKDhFMzlERkJGNkNBRkZFQzQ4NDFBRkUxNTZCNDY5RjUzNDVEMDM1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7aGYLmNIx9OLgmDLdkHNWuFn xKRbfvfz4OHe7NkvgoDI4kVX1xOCVMdKX74w9dOLo4SfpUlvOh+hP4rm/cXdTwew 1fb3+3wkJvSgLMH4Gu/JqHzqFGocLLfdUmOQSQhB1kq5SzXj+6ELwJ7uqWRD7JL9 SbcJ3ndPDz2dQjGhw9jWRYy9qheAKhrRKLDDDr46qo02oKlRcDZMKq0Y2AO6LAov xz8eFyhAkew09bRGsC7OHi0Oz7fPI9cv9mw5VbRDOixjWsBCV9P91q05cvJfMXEf dVjoKfGBZUTIoQT69asPN2thE+NNx6wEmeulrSPVysuks7tpUJ56iI4nzRKfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjjnfv2yv/sSEGv4Va0afU0XQNXkwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABi/+ascL63h tPsFQWfP+Mfl4wDgH7rybgJIm2Mgjl3tIb5rreAuP17kwu2aBkSW0+5UydS+CgRE weo5eNXrbvlgvuBTtZImo08m06bDFjH9USnqdGvJausbw93COjL6rCvRtsiJ+DUE /ib8TRXiBUDXMW+/TRsyHi+Hhuw53VXJD64fvJ/+Ij/rjEpxZSrx2nETxbRjpKzw HWHmBaCw7emeU6RhSlIQmaI+HaSRkQrPKyc9b3VYcn8s0rgVQ9zutnkqSrzj0KlL 4IZaHLXw6zb1iWBcoQnrPYFJ95GKBh27X4PZbaz51p22pebcv2BQMofrUFN+SbOn DCblyvcZ8A== -----END CERTIFICATE-----Generated at Wed May 13 12:41:51 2026 by rpki-client