$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft (raw, json) Hash identifier: fJ1CVl/0+XjIjjJMQaOjL4ImMjZsFFohbdoAPxq0qYE= Subject key identifier: 8A:6D:14:10:29:7F:8C:39:6C:F3:B8:1D:5D:55:87:69:DE:87:FA:E2 Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 61F6C4D08172BAD858D46EB5910085519DA8F1CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft Manifest number: 72 Signing time: Sun 11 Oct 2026 22:56:11 +0000 Manifest this update: Sun 11 Oct 2026 22:51:11 +0000 Manifest next update: Thu 15 Oct 2026 00:47:11 +0000 Files and hashes: 1: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl (hash: wl03RSxDs5MVAUn5pO8RZFPESfC9KRmr6e744gDPLio=) 2: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (hash: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=) 3: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (hash: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4=) 4: 3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (hash: +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f6:c4:d0:81:72:ba:d8:58:d4:6e:b5:91:00:85:51:9d:a8:f1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Oct 11 22:51:11 2026 GMT Not After : Oct 15 00:47:11 2026 GMT Subject: CN=8A6D1410297F8C396CF3B81D5D558769DE87FAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:f7:2e:4f:de:b8:81:29:c8:0e:42:77:5c: 47:32:2f:98:e9:ae:f6:44:94:84:ba:b3:76:09:04: 7d:82:34:67:ac:51:40:e4:24:50:e4:cb:fc:67:b8: 4b:73:56:f4:90:ce:80:e5:45:c3:a3:b4:c3:86:d2: 42:60:28:89:db:1d:4c:7a:39:f9:64:d6:41:dc:16: 34:48:76:63:53:11:95:22:d0:96:e7:83:42:2f:95: fa:2d:1e:19:a9:48:14:f0:1d:73:6b:35:bc:bb:44: d0:f2:f3:d7:bf:82:91:f1:28:91:9a:ee:5a:22:73: f3:8b:bd:a0:a5:37:c5:8e:aa:d4:77:71:73:dd:d1: 79:6e:7c:a6:ef:0f:0c:7a:3e:6c:81:c7:7b:7f:34: fc:19:9d:b0:34:42:f0:b7:76:4f:82:aa:e8:2d:93: 45:35:fc:31:3e:25:00:92:03:44:1d:08:8c:63:17: 90:48:02:35:c9:ca:c4:fe:d1:a2:20:71:9f:b8:86: 3c:8e:60:d3:e9:23:c4:ed:2a:19:1f:21:e6:04:be: 67:b3:d6:61:5c:7b:5e:e0:44:1e:3a:e6:38:2e:97: 1b:4f:37:ab:de:9f:fc:6a:21:13:c5:52:0c:cf:57: 6d:8f:fa:0d:b5:22:0e:63:49:85:9c:13:8a:a3:26: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:14:10:29:7F:8C:39:6C:F3:B8:1D:5D:55:87:69:DE:87:FA:E2 X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6e:04:1a:83:de:a0:05:b7:82:d9:89:2d:43:20:ae:bc:70: 35:3f:49:72:9e:4e:79:8e:da:25:18:86:ad:5a:c5:dc:dc:59: 4b:0d:d7:99:e0:9c:77:85:cb:18:c6:d2:cb:66:2d:0a:c1:41: cc:c3:b0:c8:e7:07:5e:39:63:d6:4b:29:90:12:f9:43:11:37: df:86:c8:39:df:31:05:2e:cb:72:db:6b:8b:64:b6:d0:92:f3: b2:72:24:ae:35:9d:bb:49:7e:69:77:e5:73:24:4e:22:17:e1: 44:33:63:d8:7a:af:2b:85:61:6c:f5:4d:38:50:0d:ba:84:51: be:79:28:66:e3:46:57:38:3f:64:2b:3c:cd:2c:8d:28:d1:03: 37:c1:16:78:7c:f0:b0:69:bd:38:a4:d3:90:db:e4:40:d0:00: f3:2a:cf:e1:f4:23:32:6a:aa:2f:77:69:6b:4f:d1:95:1f:69: 28:81:e2:a4:47:bb:cc:7e:b5:41:f1:40:e8:67:58:a4:c8:48: 3e:6b:a0:aa:34:aa:af:87:01:9f:d2:3b:ed:88:6c:52:a6:4c: 92:4a:22:0b:a3:7a:49:83:bd:1f:ba:d5:9b:82:a1:11:aa:4e: ad:38:d6:75:b6:87:a3:63:00:03:10:7b:91:76:93:2f:60:12: 33:dd:7d:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYfbE0IFyuthY1G61kQCFUZ2o8cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjEwMTEyMjUxMTFaFw0yNjEwMTUwMDQ3MTFaMDMxMTAvBgNV BAMTKDhBNkQxNDEwMjk3RjhDMzk2Q0YzQjgxRDVENTU4NzY5REU4N0ZBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NPcuT964gSnIDkJ3XEcyL5jp rvZElIS6s3YJBH2CNGesUUDkJFDky/xnuEtzVvSQzoDlRcOjtMOG0kJgKInbHUx6 Oflk1kHcFjRIdmNTEZUi0Jbng0IvlfotHhmpSBTwHXNrNby7RNDy89e/gpHxKJGa 7loic/OLvaClN8WOqtR3cXPd0XlufKbvDwx6PmyBx3t/NPwZnbA0QvC3dk+Cqugt k0U1/DE+JQCSA0QdCIxjF5BIAjXJysT+0aIgcZ+4hjyOYNPpI8TtKhkfIeYEvmez 1mFce17gRB465jgulxtPN6ven/xqIRPFUgzPV22P+g21Ig5jSYWcE4qjJvF7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUim0UECl/jDls87gdXVWHad6H+uIwHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTI1NTIwNjg1OTU3NTEvMC9CRjg1Nzk2NUM5MjMx QzVFRjU3Q0JCRTdBMDlEODdDMkZDNkU4QzdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG4EGoPeoAW3 gtmJLUMgrrxwNT9Jcp5OeY7aJRiGrVrF3NxZSw3XmeCcd4XLGMbSy2YtCsFBzMOw yOcHXjlj1kspkBL5QxE334bIOd8xBS7Lcttri2S20JLzsnIkrjWdu0l+aXflcyRO IhfhRDNj2HqvK4VhbPVNOFANuoRRvnkoZuNGVzg/ZCs8zSyNKNEDN8EWeHzwsGm9 OKTTkNvkQNAA8yrP4fQjMmqqL3dpa0/RlR9pKIHipEe7zH61QfFA6GdYpMhIPmug qjSqr4cBn9I77YhsUqZMkkoiC6N6SYO9H7rVm4KhEapOrTjWdbaHo2MAAxB7kXaT L2ASM919qA== -----END CERTIFICATE-----Generated at Mon Oct 12 04:43:56 2026 by rpki-client