$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: lPLxDzAsUp/DAeD4Bn1ODSQhfO3BCZI6U3iPOriK5RM= Subject key identifier: 77:AF:F7:32:D7:9D:24:D0:04:E2:5C:FE:F7:EC:CD:65:EF:E5:87:61 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 4AD1AD7E68DFCE024634A6DE24E5362A323B2C8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 04:29:39 +0000 Manifest this update: Fri 17 Apr 2026 04:24:39 +0000 Manifest next update: Sat 18 Apr 2026 08:07:39 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: Vqwa7ecqw4++09WeOPHbXm0+5lSJXaj/UgG/I9loEzs=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 06:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d1:ad:7e:68:df:ce:02:46:34:a6:de:24:e5:36:2a:32:3b:2c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Apr 17 04:24:39 2026 GMT Not After : Apr 18 08:07:39 2026 GMT Subject: CN=77AFF732D79D24D004E25CFEF7ECCD65EFE58761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:7e:84:bb:b2:4b:b1:64:ad:02:c6:9c:40: 7f:cd:94:7e:0d:64:b1:76:6a:bb:4d:e9:6d:37:69: c0:b3:e5:f4:b1:91:a4:a3:78:75:42:a4:43:71:81: bf:7d:71:7f:92:7b:8f:77:ad:05:8a:d4:81:eb:89: aa:15:55:01:85:bd:9a:85:42:88:61:68:23:8a:aa: e7:63:fd:e3:23:fc:4e:7d:32:e5:75:35:37:5b:4e: 70:ca:d7:49:0a:94:82:03:16:02:aa:b1:22:9e:1c: 56:11:e1:01:06:a0:dc:86:a2:24:8d:f4:ba:78:26: cc:56:f9:c3:72:ab:cf:d7:c3:f0:b6:a4:d9:e0:15: a3:60:c0:c0:41:a8:8d:03:65:1f:ec:c2:49:52:6a: dc:fc:ed:f0:51:72:31:da:1b:63:02:cc:44:6a:47: 38:de:75:8d:79:c5:74:55:97:e3:4d:77:27:6e:60: 0c:7b:7b:ae:89:b8:c3:51:2f:5a:be:d4:3a:f2:a2: 76:ac:f2:01:df:11:b8:21:ae:0f:11:50:e2:a0:9d: 50:a1:0b:5f:df:75:43:d1:94:8a:42:83:d9:7d:c3: c9:88:a1:41:1d:31:dc:45:95:ae:0c:f5:4c:67:1d: 34:53:ef:b4:29:a7:19:3b:53:64:c7:7f:cc:e4:0e: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:F7:32:D7:9D:24:D0:04:E2:5C:FE:F7:EC:CD:65:EF:E5:87:61 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2d:72:f3:8f:50:73:46:71:e2:81:6d:58:ea:15:f3:04:a2: 57:72:d2:9a:3f:27:5a:6f:7b:0e:05:de:40:2a:be:fe:10:fa: ea:0f:22:f2:ff:7c:d1:e3:81:59:d3:38:d1:7d:96:ea:c8:6d: c2:46:e1:2a:16:6d:d6:14:d9:6f:16:cf:0d:c1:ec:d4:3c:70: 7b:1c:16:d7:f8:72:b1:14:9d:02:9b:06:30:5f:38:12:61:1f: 73:3a:a3:40:bc:f3:32:eb:05:57:2d:7e:6d:90:6a:2d:de:a5: 07:a0:30:95:ab:46:06:69:d3:ac:14:1c:11:17:76:3e:6f:2b: da:6f:1f:28:5e:c8:31:e7:af:9b:2f:df:2b:b2:32:7c:82:0b: 2d:8e:2e:06:85:69:23:a9:e8:21:7c:07:c8:99:9a:59:fe:e1: 86:97:57:42:68:1c:fd:b3:01:4d:a5:45:53:93:a2:2a:05:6d: b3:b1:d0:27:27:ef:55:62:dd:a4:d1:c4:e7:07:70:52:6d:7b: 7f:3a:c6:2e:7e:96:a2:09:b9:66:6e:7c:24:01:1e:07:2d:ea: 2f:b4:12:4e:1e:8b:b2:1d:af:5a:3e:e1:8b:cc:cd:47:f1:23: 91:07:07:18:d1:64:7d:69:ad:dc:d2:32:f9:bf:90:24:10:f4: 74:c1:d3:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUStGtfmjfzgJGNKbeJOU2KjI7LI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA0MTcwNDI0MzlaFw0yNjA0MTgwODA3MzlaMDMxMTAvBgNV BAMTKDc3QUZGNzMyRDc5RDI0RDAwNEUyNUNGRUY3RUNDRDY1RUZFNTg3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5T36Eu7JLsWStAsacQH/NlH4N ZLF2artN6W03acCz5fSxkaSjeHVCpENxgb99cX+Se493rQWK1IHriaoVVQGFvZqF QohhaCOKqudj/eMj/E59MuV1NTdbTnDK10kKlIIDFgKqsSKeHFYR4QEGoNyGoiSN 9Lp4JsxW+cNyq8/Xw/C2pNngFaNgwMBBqI0DZR/swklSatz87fBRcjHaG2MCzERq RzjedY15xXRVl+NNdyduYAx7e66JuMNRL1q+1Dryonas8gHfEbghrg8RUOKgnVCh C1/fdUPRlIpCg9l9w8mIoUEdMdxFla4M9UxnHTRT77Qppxk7U2THf8zkDmGzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd6/3MtedJNAE4lz+9+zNZe/lh2EwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy1y849Qc0Zx 4oFtWOoV8wSiV3LSmj8nWm97DgXeQCq+/hD66g8i8v980eOBWdM40X2W6shtwkbh KhZt1hTZbxbPDcHs1DxwexwW1/hysRSdApsGMF84EmEfczqjQLzzMusFVy1+bZBq Ld6lB6AwlatGBmnTrBQcERd2Pm8r2m8fKF7IMeevmy/fK7IyfIILLY4uBoVpI6no IXwHyJmaWf7hhpdXQmgc/bMBTaVFU5OiKgVts7HQJyfvVWLdpNHE5wdwUm17fzrG Ln6Wogm5Zm58JAEeBy3qL7QSTh6Lsh2vWj7hi8zNR/EjkQcHGNFkfWmt3NIy+b+Q JBD0dMHTcw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:57 2026 by rpki-client