$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: o9F2KSnVCya9cK0xGfedTmIEIFvws6bN1mhpYJmoDao= Subject key identifier: AF:7C:52:13:B1:78:9B:CA:5C:80:7E:39:99:C8:81:92:E6:B9:5F:07 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 6BD1E03A556C7588E7793BA4A5FB4303A34BA5AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 12:14:43 +0000 Manifest this update: Fri 17 Apr 2026 12:09:43 +0000 Manifest next update: Sat 18 Apr 2026 15:49:43 +0000 Files and hashes: 1: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 2: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 3: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: cVQ+JGMdycaR5/BaODkTtbndX1Nyt9nYqeFRX2a940k=) 4: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 5: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 6: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d1:e0:3a:55:6c:75:88:e7:79:3b:a4:a5:fb:43:03:a3:4b:a5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Apr 17 12:09:43 2026 GMT Not After : Apr 18 15:49:43 2026 GMT Subject: CN=AF7C5213B1789BCA5C807E3999C88192E6B95F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:01:44:fa:1c:94:05:ad:4f:40:3a:e9:7f: f8:cb:f4:67:b8:37:88:0a:33:9e:1a:a0:11:d0:73: 76:5c:91:e8:26:c2:49:45:f8:18:4a:24:be:3e:bf: 42:b1:a3:b2:01:e2:2a:96:e6:4c:5f:78:0b:ef:f7: c0:55:66:68:9c:c2:30:7b:d0:3b:89:26:c7:17:fb: 94:85:82:27:28:ee:a6:4f:1e:53:9c:31:a0:5d:b6: 2c:7e:3a:22:4d:11:ed:38:96:54:f3:ce:a2:5a:4c: 77:00:77:79:b5:a3:d4:9b:0e:51:c7:fa:58:45:d7: a0:6b:0c:51:09:cd:56:cc:10:ab:e1:b1:c0:fd:0e: b8:c5:61:3f:b7:c2:20:67:c3:46:e2:b9:d6:a7:2b: 8a:61:d2:60:7f:9c:4f:44:55:11:1c:ed:4f:a1:18: 0b:1f:a2:82:a8:3d:2e:89:91:1c:84:eb:b8:6b:cd: cd:93:ea:11:4d:d6:26:01:e3:87:c1:db:1f:1d:96: 38:d7:9b:b4:9a:00:ec:0a:be:0a:1d:b4:57:56:88: 9d:41:42:f6:8b:fc:63:33:b1:2c:18:59:0a:8e:4d: d7:b5:54:3f:77:32:df:fb:25:46:84:9e:e9:30:37: 3a:99:c1:a9:41:f2:09:b3:f7:99:6b:5f:3f:62:1e: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7C:52:13:B1:78:9B:CA:5C:80:7E:39:99:C8:81:92:E6:B9:5F:07 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d0:8e:a5:06:62:c8:69:f0:b5:eb:bf:e8:1a:b6:cd:3e:b7: 97:2a:c0:66:2b:62:d5:65:a4:cd:5a:b2:89:a7:39:e6:71:87: 8b:a1:6d:92:9e:67:35:76:36:ea:7c:4a:72:3e:b4:37:17:43: d6:16:ad:5c:e7:05:27:47:37:ca:88:aa:05:8b:48:97:99:a4: 6a:42:02:f8:2c:ba:64:af:44:01:61:31:ec:1d:77:b1:e1:33: bd:91:cd:21:c1:bf:ab:4b:ac:6f:ab:06:ea:ce:8e:77:40:38: 38:fd:46:1f:49:56:5e:5f:70:f9:69:26:20:61:3d:cc:d7:ac: ee:25:a0:33:a5:ca:54:d3:a7:9e:e1:a0:c9:cf:60:4e:8e:be: d6:3c:b1:d4:4d:7d:59:31:bf:40:c7:80:b5:a4:5a:3b:7c:21: 7f:b0:c6:cd:e5:10:fc:0f:d7:e2:01:11:96:c8:7b:19:96:03: 56:59:20:e0:84:47:e7:1f:07:dc:70:b4:19:a5:7a:31:07:ea: 35:b3:41:cd:74:e8:9f:e9:ec:06:7f:0e:e6:8a:0f:7c:9b:ea: f5:e3:99:4c:d7:64:e2:b4:14:9f:c6:99:1c:25:ed:93:33:d0: cc:01:d7:79:5c:7f:f8:eb:5b:6a:f8:ea:1b:5a:6a:72:f6:f6: b3:8b:8a:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa9HgOlVsdYjneTukpftDA6NLpaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA0MTcxMjA5NDNaFw0yNjA0MTgxNTQ5NDNaMDMxMTAvBgNV BAMTKEFGN0M1MjEzQjE3ODlCQ0E1QzgwN0UzOTk5Qzg4MTkyRTZCOTVGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURwFE+hyUBa1PQDrpf/jL9Ge4 N4gKM54aoBHQc3ZckegmwklF+BhKJL4+v0Kxo7IB4iqW5kxfeAvv98BVZmicwjB7 0DuJJscX+5SFgico7qZPHlOcMaBdtix+OiJNEe04llTzzqJaTHcAd3m1o9SbDlHH +lhF16BrDFEJzVbMEKvhscD9DrjFYT+3wiBnw0biudanK4ph0mB/nE9EVREc7U+h GAsfooKoPS6JkRyE67hrzc2T6hFN1iYB44fB2x8dljjXm7SaAOwKvgodtFdWiJ1B QvaL/GMzsSwYWQqOTde1VD93Mt/7JUaEnukwNzqZwalB8gmz95lrXz9iHut5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr3xSE7F4m8pcgH45mciBkua5XwcwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9COpQZiyGnw teu/6Bq2zT63lyrAZiti1WWkzVqyiac55nGHi6Ftkp5nNXY26nxKcj60NxdD1hat XOcFJ0c3yoiqBYtIl5mkakIC+Cy6ZK9EAWEx7B13seEzvZHNIcG/q0usb6sG6s6O d0A4OP1GH0lWXl9w+WkmIGE9zNes7iWgM6XKVNOnnuGgyc9gTo6+1jyx1E19WTG/ QMeAtaRaO3whf7DGzeUQ/A/X4gERlsh7GZYDVlkg4IRH5x8H3HC0GaV6MQfqNbNB zXTon+nsBn8O5ooPfJvq9eOZTNdk4rQUn8aZHCXtkzPQzAHXeVx/+OtbavjqG1pq cvb2s4uKtw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:15 2026 by rpki-client