$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: rocJp5DdvU6HjpK3Z/wogj234s/OuCEyaYzGazzj/ww= Subject key identifier: 7C:51:F3:0C:CF:21:CB:C1:C5:3C:6D:DC:53:30:60:DA:A5:39:2F:CC Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 10719BF96217AE42E631821014094223648E9F0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 0134 Signing time: Mon 21 Sep 2026 17:23:22 +0000 Manifest this update: Mon 21 Sep 2026 17:18:22 +0000 Manifest next update: Fri 25 Sep 2026 01:46:22 +0000 Files and hashes: 1: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 2: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 3: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: xlw50y7CErwtbJmf8mwsz8sClQglkuotodKIcZyQj0M=) 4: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 5: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:71:9b:f9:62:17:ae:42:e6:31:82:10:14:09:42:23:64:8e:9f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Sep 21 17:18:22 2026 GMT Not After : Sep 25 01:46:22 2026 GMT Subject: CN=7C51F30CCF21CBC1C53C6DDC533060DAA5392FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:5b:e2:8a:8f:bb:5d:f5:ac:23:76:b7:53: 9d:f7:05:45:7a:1f:e6:ec:87:e7:a3:f8:82:23:95: fa:2e:30:eb:ab:6b:fe:a7:9b:0f:d9:25:89:c1:a5: 0f:c9:94:ec:f2:a2:46:98:7c:d3:08:b9:f5:9d:93: b7:85:95:e0:43:53:59:93:ff:4b:12:8c:a4:6d:5a: 07:d5:9e:f5:02:01:d1:85:10:6e:55:61:f5:14:ef: f6:83:34:e8:0f:56:ff:84:0e:e6:ec:4e:2b:37:27: 7d:84:d1:8e:93:70:39:f7:3a:b0:ba:04:96:24:d0: f3:c3:00:13:8d:dd:74:21:c3:c2:25:7a:47:b9:13: 67:1c:65:b2:55:a9:b0:7d:60:ab:59:a5:1a:1c:64: dc:9f:32:1b:6e:d4:e0:c2:53:a9:19:41:ad:9a:44: 3a:80:7a:68:6c:48:11:56:d2:72:5f:21:67:e0:69: 6a:13:3f:af:a3:71:9e:f6:4a:90:2e:f9:d2:46:98: 79:d5:a5:85:46:50:03:85:89:bb:1a:97:07:2f:52: a3:2f:f9:90:bf:a1:ad:3e:e2:ac:56:ed:91:76:d2: a2:83:63:c9:4d:99:f0:a4:27:f2:fb:e3:04:42:99: 20:8e:15:12:23:99:c7:58:2d:ed:f0:57:a8:19:f5: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:F3:0C:CF:21:CB:C1:C5:3C:6D:DC:53:30:60:DA:A5:39:2F:CC X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f4:35:e3:c4:9d:59:9b:85:b9:89:8c:30:4b:d6:92:9e:c9: 3a:d1:62:37:58:68:5e:d5:6f:3b:9d:d1:c2:37:4a:b0:6d:b8: 73:f4:46:01:ca:24:a6:65:7c:17:de:68:d6:d9:1f:42:39:70: 08:e4:a5:80:59:63:c0:5b:a7:17:ed:54:b3:b9:49:5c:ef:c2: 85:13:ae:55:e3:c2:5a:aa:84:11:df:e3:bb:23:f1:2a:5c:6b: 16:dc:69:56:f5:94:91:79:0b:61:13:3a:21:3a:6f:2f:49:88: bd:9c:65:b0:14:5a:89:e5:b9:3b:68:6f:d0:c9:fb:52:28:b8: 4a:61:a9:49:0a:2a:05:cf:59:16:6b:a7:96:f6:b6:9a:8a:51: dc:d1:0a:89:07:40:e5:d7:46:e0:60:d1:03:38:a1:5a:0a:cf: 0b:51:fe:25:87:3a:7c:c6:16:b2:89:ff:c3:1d:7b:f0:69:96: d7:7b:ed:8b:3a:a2:55:11:46:04:2c:9b:69:dd:3e:17:fc:7d: cf:4b:71:47:4d:a9:02:a7:c7:02:fb:13:97:0f:e5:44:7a:ff: 34:ee:46:bb:7d:d7:76:1c:a9:db:df:18:d4:ad:3a:ad:c4:14: ba:55:3f:60:07:5d:07:82:36:f9:40:81:e5:5b:3d:76:6b:c5: 78:f1:a3:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEHGb+WIXrkLmMYIQFAlCI2SOnwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA5MjExNzE4MjJaFw0yNjA5MjUwMTQ2MjJaMDMxMTAvBgNV BAMTKDdDNTFGMzBDQ0YyMUNCQzFDNTNDNkREQzUzMzA2MERBQTUzOTJGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRlviio+7XfWsI3a3U533BUV6 H+bsh+ej+IIjlfouMOura/6nmw/ZJYnBpQ/JlOzyokaYfNMIufWdk7eFleBDU1mT /0sSjKRtWgfVnvUCAdGFEG5VYfUU7/aDNOgPVv+EDubsTis3J32E0Y6TcDn3OrC6 BJYk0PPDABON3XQhw8Ileke5E2ccZbJVqbB9YKtZpRocZNyfMhtu1ODCU6kZQa2a RDqAemhsSBFW0nJfIWfgaWoTP6+jcZ72SpAu+dJGmHnVpYVGUAOFibsalwcvUqMv +ZC/oa0+4qxW7ZF20qKDY8lNmfCkJ/L74wRCmSCOFRIjmcdYLe3wV6gZ9Wx/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfFHzDM8hy8HFPG3cUzBg2qU5L8wwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPQ148SdWZuF uYmMMEvWkp7JOtFiN1hoXtVvO53RwjdKsG24c/RGAcokpmV8F95o1tkfQjlwCOSl gFljwFunF+1Us7lJXO/ChROuVePCWqqEEd/juyPxKlxrFtxpVvWUkXkLYRM6ITpv L0mIvZxlsBRaieW5O2hv0Mn7Uii4SmGpSQoqBc9ZFmunlva2mopR3NEKiQdA5ddG 4GDRAzihWgrPC1H+JYc6fMYWson/wx178GmW13vtizqiVRFGBCybad0+F/x9z0tx R02pAqfHAvsTlw/lRHr/NO5Gu33Xdhyp298Y1K06rcQUulU/YAddB4I2+UCB5Vs9 dmvFePGjKg== -----END CERTIFICATE-----Generated at Mon Sep 21 19:52:08 2026 by rpki-client