$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: XoI9PIoU1aBUakf++nveeLhH6eULIGsbXN/B0tBaKQQ= Subject key identifier: 9E:BE:68:59:77:0C:CB:F1:A4:16:9C:7C:C7:80:04:91:80:82:3C:88 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 745A18A876236EAB3F2118DB47204F9E5E0EA153 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 0100 Signing time: Tue 28 Jul 2026 19:02:34 +0000 Manifest this update: Tue 28 Jul 2026 18:57:34 +0000 Manifest next update: Wed 29 Jul 2026 20:00:34 +0000 Files and hashes: 1: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 2: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 3: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 4: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 5: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: tS4s0mwO8twKNJRsUnQ5lvhEq9fvTYpRm2dKWb8qVaY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5a:18:a8:76:23:6e:ab:3f:21:18:db:47:20:4f:9e:5e:0e:a1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Jul 28 18:57:34 2026 GMT Not After : Jul 29 20:00:34 2026 GMT Subject: CN=9EBE6859770CCBF1A4169C7CC780049180823C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:c3:b6:78:57:1b:f5:a3:80:b4:c7:cd:13: 28:a5:5a:8e:d0:5f:01:a9:a9:7e:b0:19:34:c2:c6: af:0c:b9:7d:27:03:d0:e6:e7:25:83:d8:c0:06:c6: 1d:0a:47:cc:1d:20:cc:39:a0:43:dc:24:8c:6f:0e: 40:6c:14:90:69:7b:19:d8:2f:bb:28:a7:7b:87:8c: e7:15:0f:c9:fd:23:09:a4:25:22:89:62:cd:12:28: 32:38:a0:9c:21:0c:e3:67:19:d0:70:7a:8e:e2:3f: 3f:e2:f4:ce:bc:1c:af:da:a5:3a:37:33:2c:75:d5: ef:99:55:90:57:3f:d5:a2:34:3a:9c:d3:ab:6f:8f: d1:08:64:f7:69:ad:59:1f:ba:34:a8:9c:ea:b3:5e: 44:41:d2:41:4a:92:a4:58:9a:41:da:12:75:c1:79: f1:e1:d8:f3:d1:2e:3b:56:d8:ed:c5:73:c9:98:20: aa:46:43:28:bc:2d:8a:18:34:eb:e3:36:97:22:1a: e2:12:60:74:ff:86:f8:f4:e4:fc:5b:fd:9f:d5:01: 0c:ce:2f:eb:a4:15:0b:c5:2a:de:e6:01:5b:06:ec: e5:5c:17:1c:c3:83:7d:da:c7:30:6b:c1:3a:c0:43: fd:2e:fc:70:28:e2:81:41:e7:93:7f:3e:1a:aa:bd: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BE:68:59:77:0C:CB:F1:A4:16:9C:7C:C7:80:04:91:80:82:3C:88 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dd:14:73:f3:8f:c2:87:44:53:7b:69:d6:a6:63:d0:65:ba: 68:03:d8:8c:83:8a:4d:01:26:e8:95:40:02:88:7a:cb:bd:92: 95:93:5c:59:7d:58:51:c6:52:9d:64:9d:1a:a1:e7:ca:68:75: ec:83:af:b8:32:f6:48:df:09:43:e6:7d:b9:0a:44:cd:af:31: 65:f8:3f:9c:6c:53:1e:a7:bc:13:f7:3d:c6:5d:90:10:20:96: ae:b4:3e:25:92:c0:82:c3:b6:7b:ef:44:08:8f:7f:d5:0d:fe: 98:5b:84:62:cd:8b:c6:d3:e1:12:54:5f:2c:b7:c6:40:d7:2d: ed:55:6e:cf:5a:04:5b:63:20:73:a0:c5:04:90:01:1f:9a:5a: 12:74:83:46:36:aa:90:c1:bf:bf:a5:b8:62:6e:33:83:5d:5c: bf:94:93:60:a8:1d:7f:f0:0b:18:cb:0b:c1:d1:7e:a8:aa:0c: 20:a6:4d:94:0a:bc:b9:5f:0f:5b:0d:03:7a:87:03:7f:9e:03: 04:9f:ea:2a:95:11:82:37:c7:be:59:54:10:0d:b9:fb:f2:49: 74:0e:f2:6d:86:97:0d:7e:cf:de:07:e0:d6:20:cd:10:67:b2: 2e:06:86:52:0a:c4:a7:09:f1:33:62:fc:cf:a3:7a:26:cb:88: 10:fe:64:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdFoYqHYjbqs/IRjbRyBPnl4OoVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA3MjgxODU3MzRaFw0yNjA3MjkyMDAwMzRaMDMxMTAvBgNV BAMTKDlFQkU2ODU5NzcwQ0NCRjFBNDE2OUM3Q0M3ODAwNDkxODA4MjNDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdcO2eFcb9aOAtMfNEyilWo7Q XwGpqX6wGTTCxq8MuX0nA9Dm5yWD2MAGxh0KR8wdIMw5oEPcJIxvDkBsFJBpexnY L7sop3uHjOcVD8n9IwmkJSKJYs0SKDI4oJwhDONnGdBweo7iPz/i9M68HK/apTo3 Myx11e+ZVZBXP9WiNDqc06tvj9EIZPdprVkfujSonOqzXkRB0kFKkqRYmkHaEnXB efHh2PPRLjtW2O3Fc8mYIKpGQyi8LYoYNOvjNpciGuISYHT/hvj05Pxb/Z/VAQzO L+ukFQvFKt7mAVsG7OVcFxzDg33axzBrwTrAQ/0u/HAo4oFB55N/PhqqvaE/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnr5oWXcMy/GkFpx8x4AEkYCCPIgwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjd0Uc/OPwodE U3tp1qZj0GW6aAPYjIOKTQEm6JVAAoh6y72SlZNcWX1YUcZSnWSdGqHnymh17IOv uDL2SN8JQ+Z9uQpEza8xZfg/nGxTHqe8E/c9xl2QECCWrrQ+JZLAgsO2e+9ECI9/ 1Q3+mFuEYs2LxtPhElRfLLfGQNct7VVuz1oEW2Mgc6DFBJABH5paEnSDRjaqkMG/ v6W4Ym4zg11cv5STYKgdf/ALGMsLwdF+qKoMIKZNlAq8uV8PWw0DeocDf54DBJ/q KpURgjfHvllUEA25+/JJdA7ybYaXDX7P3gfg1iDNEGeyLgaGUgrEpwnxM2L8z6N6 JsuIEP5k8w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:27 2026 by rpki-client