$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: H8lJy/UmfM9TpbCG4tNMzEj9fp3kV2p683+V2dOHMK4= Subject key identifier: 2E:B3:61:F4:58:10:8F:F3:59:BB:81:9B:80:0A:87:82:81:CD:65:BC Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 2F25AF2116142A7D0EA02F426ECB84E5604704A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: C4 Signing time: Sun 14 Jun 2026 09:38:04 +0000 Manifest this update: Sun 14 Jun 2026 09:33:04 +0000 Manifest next update: Mon 15 Jun 2026 13:01:04 +0000 Files and hashes: 1: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 2: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 3: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: aiU/n1Oc8SYaTT0vG5PMYEq8+uozf0T2jc42EI1knhc=) 4: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 5: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 6: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 09:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:25:af:21:16:14:2a:7d:0e:a0:2f:42:6e:cb:84:e5:60:47:04:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Jun 14 09:33:04 2026 GMT Not After : Jun 15 13:01:04 2026 GMT Subject: CN=2EB361F458108FF359BB819B800A878281CD65BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:ba:77:aa:ec:c4:6b:f0:47:98:a9:f7:ec: fe:79:51:e9:a7:cf:df:c7:52:87:0a:c0:0b:e0:00: 15:27:09:d3:4b:48:08:b2:86:6d:35:c8:fc:bc:4c: 7b:df:c1:fb:e9:60:1a:0f:d8:42:31:df:6c:da:09: 00:fc:c0:2a:19:75:84:22:15:06:b0:27:53:e6:2c: 66:5d:b0:63:5f:cf:40:4d:8a:eb:8e:07:52:1f:8c: 49:cb:61:87:81:6a:61:d6:9c:be:06:be:bc:63:f1: 2e:f6:1e:2f:3b:6f:88:50:5e:73:3b:8e:b0:09:d2: 90:85:82:ba:c3:19:35:c3:30:70:a3:84:f8:db:06: 9e:9c:ad:73:c7:0f:5f:8c:c7:87:09:c8:c7:e9:59: a1:54:7e:93:18:c8:d8:2b:1a:69:16:c4:df:5d:7a: 21:3d:82:9d:fa:53:90:62:63:d7:b3:54:1a:15:18: 5e:bc:ed:2a:ec:35:56:f4:5d:24:09:8d:8c:3b:51: ee:23:36:24:6d:31:7a:78:74:70:5d:d1:5f:ac:23: e1:5e:93:66:d4:cc:d0:45:4c:d6:00:29:1a:7c:ef: 9f:19:a7:c9:b2:f5:43:d1:fd:87:1c:70:ae:57:e5: c3:52:ec:5c:e1:9e:d0:e1:46:de:06:81:83:80:13: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B3:61:F4:58:10:8F:F3:59:BB:81:9B:80:0A:87:82:81:CD:65:BC X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:62:4a:83:cf:90:d1:18:50:38:c7:1b:0a:36:7f:c7:3c:a6: 36:9b:7c:fa:71:c3:17:38:1e:90:22:a6:a8:c9:4c:c1:9c:fa: dc:ab:b4:01:69:da:1c:93:2d:e3:61:47:83:5a:99:75:51:57: cd:0f:21:90:51:3a:24:ae:e0:85:cf:a4:5f:fc:0c:40:58:9f: 63:4f:67:84:8b:20:ca:35:cb:d1:a5:a2:c2:d2:30:02:6e:9b: cd:8a:72:4f:30:a7:b9:ef:1f:d6:12:ca:08:83:72:f4:ba:08: f4:cc:19:b2:6f:62:28:c9:a6:dd:14:74:d9:29:73:d2:7c:90: d7:c2:c9:7f:47:ca:8e:ec:cf:c0:75:d6:99:61:4f:42:34:bb: 79:1c:1c:8f:a6:dc:bc:50:ce:9b:c3:b2:e4:03:30:b3:86:1f: c3:41:15:fa:ee:3b:c0:3a:0a:74:92:9a:cf:40:db:b6:78:b0: 84:45:9e:8d:09:d1:35:f8:6e:3b:49:5a:a2:09:cb:c1:5f:8e: ee:74:37:0c:9c:e2:31:16:9f:cb:b2:8f:fc:f0:e4:fa:d4:4b: 7d:7e:29:f1:4a:43:9b:f3:e7:9d:6a:09:67:b7:84:8e:8c:e9: c0:60:f0:19:ad:68:fd:43:c2:81:46:47:f7:43:5e:05:fd:af: 41:51:86:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULyWvIRYUKn0OoC9CbsuE5WBHBKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA2MTQwOTMzMDRaFw0yNjA2MTUxMzAxMDRaMDMxMTAvBgNV BAMTKDJFQjM2MUY0NTgxMDhGRjM1OUJCODE5QjgwMEE4NzgyODFDRDY1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR5rp3quzEa/BHmKn37P55Uemn z9/HUocKwAvgABUnCdNLSAiyhm01yPy8THvfwfvpYBoP2EIx32zaCQD8wCoZdYQi FQawJ1PmLGZdsGNfz0BNiuuOB1IfjEnLYYeBamHWnL4Gvrxj8S72Hi87b4hQXnM7 jrAJ0pCFgrrDGTXDMHCjhPjbBp6crXPHD1+Mx4cJyMfpWaFUfpMYyNgrGmkWxN9d eiE9gp36U5BiY9ezVBoVGF687SrsNVb0XSQJjYw7Ue4jNiRtMXp4dHBd0V+sI+Fe k2bUzNBFTNYAKRp8758Zp8my9UPR/YcccK5X5cNS7FzhntDhRt4GgYOAEyRZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULrNh9FgQj/NZu4GbgAqHgoHNZbwwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmJKg8+Q0RhQ OMcbCjZ/xzymNpt8+nHDFzgekCKmqMlMwZz63Ku0AWnaHJMt42FHg1qZdVFXzQ8h kFE6JK7ghc+kX/wMQFifY09nhIsgyjXL0aWiwtIwAm6bzYpyTzCnue8f1hLKCINy 9LoI9MwZsm9iKMmm3RR02Slz0nyQ18LJf0fKjuzPwHXWmWFPQjS7eRwcj6bcvFDO m8Oy5AMws4Yfw0EV+u47wDoKdJKaz0DbtniwhEWejQnRNfhuO0laognLwV+O7nQ3 DJziMRafy7KP/PDk+tRLfX4p8UpDm/PnnWoJZ7eEjozpwGDwGa1o/UPCgUZH90Ne Bf2vQVGGMA== -----END CERTIFICATE-----Generated at Sun Jun 14 12:44:49 2026 by rpki-client