$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: K/kZ3roDXYFu+ibXkNAQ4V8PrsS7BPUGtlyHy/2larw= Subject key identifier: 5A:29:B0:1A:28:9E:28:DB:FC:E4:1F:D5:8E:BA:9D:68:9F:09:D5:D4 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 2E63E13913D95A91A88D91B5732481BAC6DD0817 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: C3 Signing time: Fri 12 Jun 2026 22:55:53 +0000 Manifest this update: Fri 12 Jun 2026 22:50:53 +0000 Manifest next update: Sun 14 Jun 2026 01:43:53 +0000 Files and hashes: 1: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: a/mzz3Q4+1Rr+y053PDn0JvgGWWCwgGIV/Mp9QE+CK4=) 3: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 4: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 5: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 01:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:63:e1:39:13:d9:5a:91:a8:8d:91:b5:73:24:81:ba:c6:dd:08:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Jun 12 22:50:53 2026 GMT Not After : Jun 14 01:43:53 2026 GMT Subject: CN=5A29B01A289E28DBFCE41FD58EBA9D689F09D5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:58:cb:df:18:49:17:6d:8a:6a:13:76:35: f9:bc:c5:2e:14:90:23:e7:d5:af:38:41:7a:ae:cb: 24:47:28:49:c6:96:49:f6:56:40:06:50:60:4c:c3: ae:50:97:0c:82:32:bd:0f:0c:3f:5a:18:bc:f3:b6: a8:86:b7:80:fe:c8:29:3e:81:d3:66:a0:bb:a5:32: 45:b6:fc:66:84:56:97:af:98:69:3f:54:74:3e:18: d7:3b:02:c3:f2:3c:ec:e2:d3:5c:e9:0d:cb:9f:2e: ff:8a:20:7b:b1:c5:03:00:01:11:20:81:ef:8c:1f: 1d:25:56:e7:a2:9f:58:37:0f:1e:0f:17:94:9f:72: 2d:46:fa:66:09:a2:cc:ef:0d:4a:27:ca:62:6b:2b: 4a:c9:68:e9:17:40:81:2e:b4:83:1f:c3:48:f9:c9: 53:b1:98:4c:98:cb:38:df:b9:45:a2:fb:02:67:d3: 13:fb:34:33:de:39:7c:a3:4b:75:ca:0e:05:d8:ad: f9:5d:25:a7:e4:75:9b:7b:3a:f5:f5:b4:59:df:4d: 8c:0b:11:4d:88:3b:1c:dc:b0:24:95:14:f1:ea:e9: 3d:a4:12:64:f5:f8:9a:4c:f9:54:6b:aa:5f:80:86: d9:c9:64:ec:25:ae:c9:d9:44:4d:71:31:28:f6:b3: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:29:B0:1A:28:9E:28:DB:FC:E4:1F:D5:8E:BA:9D:68:9F:09:D5:D4 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:59:17:a3:90:8d:15:33:4d:82:40:b8:4f:c1:ea:5e:4d:5e: 9c:7d:12:2a:99:1b:be:4d:57:1a:7f:83:1a:ef:52:35:27:02: 0d:f2:60:cd:9e:c8:ba:e6:e1:21:81:ee:e0:1c:1b:a2:33:62: 7c:8c:31:5b:71:23:c4:de:aa:9e:92:ad:10:6c:d1:e9:9e:bc: 24:ba:df:b1:44:a0:9f:30:c4:e4:69:95:1a:2c:3c:9f:59:24: 85:3c:0a:ba:bc:da:23:75:8e:29:99:ae:9d:8b:72:f3:33:20: 3c:35:90:7f:8f:86:71:9e:37:d1:fd:58:67:e2:3e:0c:58:12: 72:22:34:03:66:45:35:a9:a9:e5:92:cb:6b:8c:6d:2a:7a:49: 23:94:97:ad:2d:c8:e6:d6:9c:0e:23:a7:8e:9a:b8:83:2c:f5: bd:ac:1b:66:28:cf:26:b7:5b:d9:2a:6f:1f:c2:ef:ae:7a:4a: 72:8e:8f:d2:80:c8:56:4f:b9:c6:b4:97:bc:08:f0:b5:6a:37: f7:a6:da:78:44:f4:2c:d6:54:56:cd:8e:bd:3d:72:a9:18:d4: 25:3c:90:5c:4a:0a:3a:2b:49:ca:eb:cf:3c:8e:ee:44:ed:28: e3:22:3d:f9:a9:60:ec:11:52:39:9e:63:32:4b:0b:ec:ec:b0: 8b:a6:77:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULmPhORPZWpGojZG1cySBusbdCBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA2MTIyMjUwNTNaFw0yNjA2MTQwMTQzNTNaMDMxMTAvBgNV BAMTKDVBMjlCMDFBMjg5RTI4REJGQ0U0MUZENThFQkE5RDY4OUYwOUQ1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXljL3xhJF22KahN2Nfm8xS4U kCPn1a84QXquyyRHKEnGlkn2VkAGUGBMw65QlwyCMr0PDD9aGLzztqiGt4D+yCk+ gdNmoLulMkW2/GaEVpevmGk/VHQ+GNc7AsPyPOzi01zpDcufLv+KIHuxxQMAAREg ge+MHx0lVuein1g3Dx4PF5Sfci1G+mYJoszvDUonymJrK0rJaOkXQIEutIMfw0j5 yVOxmEyYyzjfuUWi+wJn0xP7NDPeOXyjS3XKDgXYrfldJafkdZt7OvX1tFnfTYwL EU2IOxzcsCSVFPHq6T2kEmT1+JpM+VRrql+AhtnJZOwlrsnZRE1xMSj2s9c/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWimwGiieKNv85B/VjrqdaJ8J1dQwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVkXo5CNFTNN gkC4T8HqXk1enH0SKpkbvk1XGn+DGu9SNScCDfJgzZ7IuubhIYHu4BwbojNifIwx W3EjxN6qnpKtEGzR6Z68JLrfsUSgnzDE5GmVGiw8n1kkhTwKurzaI3WOKZmunYty 8zMgPDWQf4+GcZ430f1YZ+I+DFgSciI0A2ZFNamp5ZLLa4xtKnpJI5SXrS3I5tac DiOnjpq4gyz1vawbZijPJrdb2SpvH8LvrnpKco6P0oDIVk+5xrSXvAjwtWo396ba eET0LNZUVs2OvT1yqRjUJTyQXEoKOitJyuvPPI7uRO0o4yI9+alg7BFSOZ5jMksL 7Oywi6Z3ug== -----END CERTIFICATE-----Generated at Sat Jun 13 16:54:43 2026 by rpki-client