$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft (raw, json) Hash identifier: zM4BlZIPlLEGXUqqcwtDKcraH3WJAtHorCFmeOLqBHM= Subject key identifier: 59:91:5C:15:89:3E:2D:3C:85:F2:7C:D9:96:C7:14:65:33:E1:B3:CB Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 3F73316E4C36CCAB3FA5A9B32CB88B771A8CDCC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft Manifest number: 2E Signing time: Thu 23 Jul 2026 18:34:21 +0000 Manifest this update: Thu 23 Jul 2026 18:29:21 +0000 Manifest next update: Fri 24 Jul 2026 20:54:21 +0000 Files and hashes: 1: 3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (hash: +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=) 2: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl (hash: O/hKthPIWHVQAnXIL4nIxoZayxrZ6KfXBpjUVinglQs=) 3: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (hash: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4=) 4: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (hash: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:73:31:6e:4c:36:cc:ab:3f:a5:a9:b3:2c:b8:8b:77:1a:8c:dc:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Jul 23 18:29:21 2026 GMT Not After : Jul 24 20:54:21 2026 GMT Subject: CN=59915C15893E2D3C85F27CD996C7146533E1B3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f7:6a:4f:d9:af:d0:02:c2:c0:64:30:7d:3a: 6b:e1:53:19:a2:78:30:f3:84:c0:92:64:7d:0f:50: 62:c9:a0:56:61:43:d8:8e:1e:e0:fa:eb:5c:10:67: 76:27:66:82:7e:9e:1e:65:57:e1:c3:c4:0a:fc:51: 0b:48:c6:a9:7f:de:0f:2e:55:25:5f:1c:a2:77:06: 87:39:6a:2e:9e:7c:28:6d:23:a4:2a:36:5d:2e:54: 77:60:de:2d:30:1a:e3:57:71:d3:57:7a:2b:54:0d: 30:18:04:29:68:60:d4:d1:6e:5c:13:42:e6:9e:bb: 8e:ca:e7:8b:37:51:7e:50:a7:ad:0e:f2:f4:e6:6e: 01:de:4f:a7:a9:6f:62:c7:79:dc:14:ef:aa:65:85: 1c:d1:60:df:31:0e:b5:15:41:04:a6:3d:cd:6e:c1: d9:d4:9b:68:03:d5:84:4f:11:66:96:2f:9e:30:e2: e2:0f:de:d1:ab:a7:bb:0b:4f:ae:1b:c9:fd:1e:48: ac:83:2c:4a:b6:f4:35:07:a4:a7:f8:03:6f:83:87: 98:07:91:28:4c:9a:05:24:2d:c9:ee:9b:41:ea:a2: 4b:42:64:c8:c9:82:aa:a6:0f:6a:df:df:2a:5f:f7: e7:cb:46:20:26:ed:91:dc:07:3c:14:66:99:40:93: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:5C:15:89:3E:2D:3C:85:F2:7C:D9:96:C7:14:65:33:E1:B3:CB X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:44:6d:ef:d5:29:65:c4:2b:57:f3:ef:87:25:fe:37:0d:1d: 42:2b:7a:da:aa:f0:18:69:3e:42:eb:5f:74:96:08:2f:50:49: c3:3f:27:e9:41:66:ee:5b:41:fb:7d:7b:4d:f0:78:b8:f1:dd: fb:37:da:3c:e3:ab:8f:f5:41:6e:9c:fd:f2:d7:2d:03:c7:a9: 8a:ec:4b:59:4c:04:d0:9f:44:9e:07:d4:a9:1a:80:5d:c8:f1: cc:49:53:dd:69:79:9a:d2:4f:52:b2:16:bb:21:e6:e0:a0:55: ab:af:39:6d:25:82:ca:09:10:c8:00:93:2a:68:3a:d1:e5:8b: f3:d6:3e:00:e3:2c:3e:2d:aa:70:a0:71:c6:fa:8b:61:9d:10: 06:24:93:0a:c0:a5:25:8f:90:38:9e:f4:3d:3c:fd:b9:d7:02: e5:b0:b3:69:d8:f5:13:e4:20:2e:7c:dc:2e:6c:86:1f:82:3e: 3e:cb:ac:6d:2b:e2:f5:ed:61:0d:c5:ae:fb:e2:06:a5:1d:19: 60:4a:47:0e:6f:ff:98:18:64:05:01:d9:dc:ac:57:ce:38:dc: d1:28:95:7a:2b:d3:b3:53:41:0c:01:38:af:36:2c:ea:94:0b: f5:46:73:ba:a5:30:7e:97:88:0c:7c:25:c2:30:cc:1b:ac:35: 42:c4:e4:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP3Mxbkw2zKs/pamzLLiLdxqM3MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjA3MjMxODI5MjFaFw0yNjA3MjQyMDU0MjFaMDMxMTAvBgNV BAMTKDU5OTE1QzE1ODkzRTJEM0M4NUYyN0NEOTk2QzcxNDY1MzNFMUIzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc92pP2a/QAsLAZDB9OmvhUxmi eDDzhMCSZH0PUGLJoFZhQ9iOHuD661wQZ3YnZoJ+nh5lV+HDxAr8UQtIxql/3g8u VSVfHKJ3Boc5ai6efChtI6QqNl0uVHdg3i0wGuNXcdNXeitUDTAYBCloYNTRblwT Quaeu47K54s3UX5Qp60O8vTmbgHeT6epb2LHedwU76plhRzRYN8xDrUVQQSmPc1u wdnUm2gD1YRPEWaWL54w4uIP3tGrp7sLT64byf0eSKyDLEq29DUHpKf4A2+Dh5gH kShMmgUkLcnum0HqoktCZMjJgqqmD2rf3ypf9+fLRiAm7ZHcBzwUZplAkzyxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWZFcFYk+LTyF8nzZlscUZTPhs8swHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTI1NTIwNjg1OTU3NTEvMC9CRjg1Nzk2NUM5MjMx QzVFRjU3Q0JCRTdBMDlEODdDMkZDNkU4QzdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0Rt79UpZcQr V/PvhyX+Nw0dQit62qrwGGk+QutfdJYIL1BJwz8n6UFm7ltB+317TfB4uPHd+zfa POOrj/VBbpz98tctA8epiuxLWUwE0J9EngfUqRqAXcjxzElT3Wl5mtJPUrIWuyHm 4KBVq685bSWCygkQyACTKmg60eWL89Y+AOMsPi2qcKBxxvqLYZ0QBiSTCsClJY+Q OJ70PTz9udcC5bCzadj1E+QgLnzcLmyGH4I+PsusbSvi9e1hDcWu++IGpR0ZYEpH Dm//mBhkBQHZ3KxXzjjc0SiVeivTs1NBDAE4rzYs6pQL9UZzuqUwfpeIDHwlwjDM G6w1QsTkKg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:58 2026 by rpki-client