$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: XtmCxzcSFli48ik/EoilHMHe+puVe1dKxhCtZXSOwqY= Subject key identifier: F3:33:EF:76:92:24:88:F8:7A:FA:7B:2E:6E:FB:5B:25:46:E3:E5:6B Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 5E6F9E27BEDEFAE787864140D3C1D07D15908B76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 23:38:16 +0000 Manifest this update: Sun 01 Mar 2026 23:33:16 +0000 Manifest next update: Tue 03 Mar 2026 00:18:16 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: 8GDS86t9HWpN/yFPgyhq7OxfwdVe2arSUIxF9jj34iQ=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 14:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6f:9e:27:be:de:fa:e7:87:86:41:40:d3:c1:d0:7d:15:90:8b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Mar 1 23:33:16 2026 GMT Not After : Mar 3 00:18:16 2026 GMT Subject: CN=F333EF76922488F87AFA7B2E6EFB5B2546E3E56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:f0:f4:00:68:71:2a:42:64:7c:95:ea:ed: cb:6f:eb:e8:68:bb:8d:d3:d9:e0:36:e4:14:09:29: 7c:44:5d:ef:a7:40:3f:fe:97:07:3e:f4:17:45:ca: f1:8e:69:25:d0:b6:31:a8:47:be:6c:d2:29:61:c8: 91:26:3d:b2:00:39:1b:e6:15:31:5c:fb:93:df:40: be:ff:af:d8:57:7d:a1:fc:bc:da:43:cc:0c:ff:21: 04:d3:d1:b5:a7:1d:4d:f6:dc:b1:b4:9e:bc:6f:a1: 06:24:a7:6e:db:d9:d1:2c:7f:55:b6:0b:d6:df:31: 2c:41:5d:93:95:b3:1e:22:39:9a:14:46:35:63:72: 14:7f:ac:20:9e:2e:d2:f2:cc:f9:7f:f2:b4:71:8e: d8:a9:94:55:1f:f9:3c:2e:e5:9e:ca:9a:88:b7:51: 2a:a6:b3:3d:b7:fe:e3:d0:b1:ec:bf:8e:74:48:36: 64:51:74:bb:ff:e0:5b:68:6d:17:13:69:ca:94:38: b9:d6:27:ec:a2:59:78:b5:16:9f:9a:c5:19:e4:1e: 80:8a:08:d6:b0:69:90:e3:1c:08:a3:d6:b1:6d:0f: 5e:93:be:dd:14:6c:59:1d:b4:98:0a:ce:7a:75:ac: 81:86:1b:36:d0:45:ce:35:23:6e:fe:4d:a7:6b:26: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:33:EF:76:92:24:88:F8:7A:FA:7B:2E:6E:FB:5B:25:46:E3:E5:6B X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:57:9a:6c:26:c6:97:64:1e:15:3b:7b:ad:c0:36:72:c1:51: 0b:90:33:11:20:e0:17:f1:04:4d:c3:35:2f:37:05:74:a7:89: 15:f6:a5:a1:ba:b3:dc:97:08:52:f1:ae:9a:46:21:13:e4:35: 15:44:b6:c5:ff:e7:4d:98:c7:57:36:50:0c:e5:bc:6c:64:e3: ce:01:48:e5:52:2a:85:b2:96:2c:04:b3:82:0f:c2:52:a4:d9: 32:df:4f:f2:d3:55:50:91:f2:1d:15:ae:17:25:f4:4e:d0:d8: 62:35:48:78:f9:c2:dd:1b:2f:3e:41:eb:39:70:52:4f:1f:4c: 3a:52:0e:89:22:15:e8:f1:c0:b8:10:c6:94:aa:8d:24:cb:cd: 9b:02:97:56:91:92:13:cd:23:2e:b5:30:2c:d1:11:b2:da:2b: a4:35:67:85:f2:45:66:bf:2e:30:26:08:e3:63:e6:fa:3b:37: 48:d2:b0:56:ee:10:b2:fe:6d:53:bd:13:f9:33:36:08:6e:43: aa:f5:90:c9:80:a8:de:36:08:55:8e:cd:6c:29:8e:33:0b:53: d1:8f:1e:27:10:7b:0d:00:e3:2b:66:c1:4e:15:9c:98:ae:ee: d8:ab:7a:b5:c3:c8:9a:17:99:08:1f:72:37:0f:4f:6f:94:c7: fc:82:56:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXm+eJ77e+ueHhkFA08HQfRWQi3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjAzMDEyMzMzMTZaFw0yNjAzMDMwMDE4MTZaMDMxMTAvBgNV BAMTKEYzMzNFRjc2OTIyNDg4Rjg3QUZBN0IyRTZFRkI1QjI1NDZFM0U1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yPD0AGhxKkJkfJXq7ctv6+ho u43T2eA25BQJKXxEXe+nQD/+lwc+9BdFyvGOaSXQtjGoR75s0ilhyJEmPbIAORvm FTFc+5PfQL7/r9hXfaH8vNpDzAz/IQTT0bWnHU323LG0nrxvoQYkp27b2dEsf1W2 C9bfMSxBXZOVsx4iOZoURjVjchR/rCCeLtLyzPl/8rRxjtiplFUf+Twu5Z7Kmoi3 USqmsz23/uPQsey/jnRINmRRdLv/4FtobRcTacqUOLnWJ+yiWXi1Fp+axRnkHoCK CNawaZDjHAij1rFtD16Tvt0UbFkdtJgKznp1rIGGGzbQRc41I27+TadrJoirAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8zPvdpIkiPh6+nsubvtbJUbj5WswHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFeabCbGl2Qe FTt7rcA2csFRC5AzESDgF/EETcM1LzcFdKeJFfalobqz3JcIUvGumkYhE+Q1FUS2 xf/nTZjHVzZQDOW8bGTjzgFI5VIqhbKWLASzgg/CUqTZMt9P8tNVUJHyHRWuFyX0 TtDYYjVIePnC3RsvPkHrOXBSTx9MOlIOiSIV6PHAuBDGlKqNJMvNmwKXVpGSE80j LrUwLNERstorpDVnhfJFZr8uMCYI42Pm+js3SNKwVu4Qsv5tU70T+TM2CG5DqvWQ yYCo3jYIVY7NbCmOMwtT0Y8eJxB7DQDjK2bBThWcmK7u2Kt6tcPImheZCB9yNw9P b5TH/IJWjQ== -----END CERTIFICATE-----Generated at Mon Mar 2 03:16:13 2026 by rpki-client