$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: 0n9SECq59wHVLWTwHut/ASXKiIz/CjQy37H3/sUPPis= Subject key identifier: 10:BB:37:2E:43:45:31:7C:A0:F4:E0:A7:6A:BC:E4:B2:A5:F2:A1:FE Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 18B56475604116A62B890117AE3F0D321A979452 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: C4 Signing time: Sun 14 Jun 2026 01:22:34 +0000 Manifest this update: Sun 14 Jun 2026 01:17:34 +0000 Manifest next update: Mon 15 Jun 2026 03:46:34 +0000 Files and hashes: 1: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) 2: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: n4vK/0jM42OZ/8AvYrZ5UsnLgIf2OI3DH+TirGTtpPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b5:64:75:60:41:16:a6:2b:89:01:17:ae:3f:0d:32:1a:97:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 14 01:17:34 2026 GMT Not After : Jun 15 03:46:34 2026 GMT Subject: CN=10BB372E4345317CA0F4E0A76ABCE4B2A5F2A1FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:dc:35:af:31:38:78:32:10:24:77:a7:cd: b7:53:ef:48:06:2d:2c:9c:7e:76:a3:b3:a0:66:f5: 80:fa:29:1f:e5:00:78:51:f3:f1:cf:41:d6:1c:03: e6:67:ca:21:bd:45:08:ef:6e:dc:25:f5:a9:74:51: 3e:63:d8:68:1d:4c:cd:f0:7d:19:25:aa:94:e2:82: d4:06:79:8d:e4:80:03:b3:fd:14:61:e6:2b:a3:e8: ac:df:34:ec:57:a6:2c:26:07:6a:ba:43:b2:26:65: a3:f0:0f:cd:9e:b7:27:0e:00:f6:18:a3:c9:63:b4: 7c:9c:6b:c3:88:9a:ab:f6:26:e8:a3:fa:cf:15:a4: 8b:c7:5b:50:06:ce:27:a0:86:ac:3c:97:6a:b1:df: 38:38:8b:54:fe:67:0e:e3:2b:6c:dd:55:5a:d2:3c: b2:e3:78:5e:67:a4:23:85:a3:60:3c:ae:be:be:11: 4a:b3:13:4c:4f:17:f3:41:54:53:24:13:c3:2f:b4: e3:b0:ab:a0:2f:fd:af:ce:e2:a0:50:ba:2e:06:2e: c7:c5:59:96:e5:15:d3:8e:e6:02:f7:a1:a1:b7:3b: 8d:69:76:d8:c6:5c:9b:b6:cc:22:89:08:24:80:e2: 0e:ca:1e:87:0d:43:23:d9:09:54:52:8d:f9:41:a2: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BB:37:2E:43:45:31:7C:A0:F4:E0:A7:6A:BC:E4:B2:A5:F2:A1:FE X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:83:4d:16:d1:39:43:94:28:bf:f7:fa:f2:76:13:db:ff:5a: a2:3d:e2:6d:cc:56:c1:46:99:24:7a:d9:6e:92:1d:04:89:e9: d8:ab:78:c6:f6:ec:d0:55:fa:2e:21:e3:ef:6f:8c:18:d7:9a: 60:95:c6:e5:e8:cf:b0:5a:06:8b:b0:fd:01:c5:f2:6f:bc:31: 6e:e3:35:1e:ec:4b:4e:13:15:56:f0:ea:56:a9:48:c8:7a:a3: 48:33:bc:cc:13:e5:89:3f:d4:f3:35:00:79:9f:aa:d7:9e:8e: 17:57:f1:4a:71:1d:0d:0d:4c:dc:84:36:32:01:8a:af:0d:06: 6c:4b:6f:06:10:77:13:24:b7:e2:f2:96:39:a3:65:5e:01:36: 53:e4:0e:bd:3d:94:a8:dc:0c:24:5a:27:9f:53:25:7d:1d:0f: a3:ac:ed:7d:eb:dd:22:95:09:2a:bd:5e:fa:84:4b:38:58:f8: 7d:82:5b:d6:05:02:e4:42:66:37:68:ad:14:fe:d6:06:dd:6b: 64:bd:21:e9:b6:84:9d:82:3c:43:b1:7a:2d:2f:e7:ce:9e:39: cd:7f:1a:77:f0:05:ad:f7:1c:20:27:09:43:82:26:1d:53:be: 14:a7:5f:25:e5:f1:96:6e:80:a0:28:d5:dd:2c:50:61:19:f4: eb:0e:cf:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGLVkdWBBFqYriQEXrj8NMhqXlFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MTQwMTE3MzRaFw0yNjA2MTUwMzQ2MzRaMDMxMTAvBgNV BAMTKDEwQkIzNzJFNDM0NTMxN0NBMEY0RTBBNzZBQkNFNEIyQTVGMkExRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYtw1rzE4eDIQJHenzbdT70gG LSycfnajs6Bm9YD6KR/lAHhR8/HPQdYcA+ZnyiG9RQjvbtwl9al0UT5j2GgdTM3w fRklqpTigtQGeY3kgAOz/RRh5iuj6KzfNOxXpiwmB2q6Q7ImZaPwD82etycOAPYY o8ljtHyca8OImqv2Juij+s8VpIvHW1AGzieghqw8l2qx3zg4i1T+Zw7jK2zdVVrS PLLjeF5npCOFo2A8rr6+EUqzE0xPF/NBVFMkE8MvtOOwq6Av/a/O4qBQui4GLsfF WZblFdOO5gL3oaG3O41pdtjGXJu2zCKJCCSA4g7KHocNQyPZCVRSjflBohQ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUELs3LkNFMXyg9OCnarzksqXyof4wHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARINNFtE5Q5Qo v/f68nYT2/9aoj3ibcxWwUaZJHrZbpIdBInp2Kt4xvbs0FX6LiHj72+MGNeaYJXG 5ejPsFoGi7D9AcXyb7wxbuM1HuxLThMVVvDqVqlIyHqjSDO8zBPliT/U8zUAeZ+q 156OF1fxSnEdDQ1M3IQ2MgGKrw0GbEtvBhB3EyS34vKWOaNlXgE2U+QOvT2UqNwM JFonn1MlfR0Po6ztfevdIpUJKr1e+oRLOFj4fYJb1gUC5EJmN2itFP7WBt1rZL0h 6baEnYI8Q7F6LS/nzp45zX8ad/AFrfccICcJQ4ImHVO+FKdfJeXxlm6AoCjV3SxQ YRn06w7P/w== -----END CERTIFICATE-----Generated at Sun Jun 14 06:55:25 2026 by rpki-client