$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: lXc/tCDMTJdbUepmcrZ+6i9B5zRqPPOuRB7JAqsuuVU= Subject key identifier: 23:5E:8C:D1:E7:5A:18:F2:51:4F:BD:5B:E3:95:6B:03:75:F6:D8:08 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 63C30D2A9E5E7CE9D397C8523E464DBFB2D09346 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: FF Signing time: Wed 29 Jul 2026 13:49:31 +0000 Manifest this update: Wed 29 Jul 2026 13:44:31 +0000 Manifest next update: Thu 30 Jul 2026 16:37:31 +0000 Files and hashes: 1: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 2: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 3: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: cXO8bA3R/3WE/n3pABhkrvMKcSIdacQExVimqE5Dl88=) 4: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 5: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 6: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c3:0d:2a:9e:5e:7c:e9:d3:97:c8:52:3e:46:4d:bf:b2:d0:93:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Jul 29 13:44:31 2026 GMT Not After : Jul 30 16:37:31 2026 GMT Subject: CN=235E8CD1E75A18F2514FBD5BE3956B0375F6D808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:de:0f:00:53:f4:a6:ee:a2:2d:ce:ae:fa: 58:77:f1:d6:16:31:6a:20:35:1e:83:30:fb:42:23: 62:02:e1:76:4e:68:73:29:6e:31:58:b9:40:0c:c7: 3d:bc:f9:b7:fd:30:3e:33:c3:dc:f7:d9:bd:c4:51: e4:e4:94:1d:89:17:6e:6b:85:5e:98:86:e9:62:7c: 10:bd:3b:3a:88:94:6d:12:7f:75:0d:8a:9c:d7:aa: 00:e6:cd:62:a4:d4:1a:21:bc:ff:15:f7:61:61:dd: 20:b2:9d:33:cf:23:1e:4d:54:84:20:67:8f:fa:04: 9c:19:84:99:89:2b:ae:73:af:59:11:ea:eb:7f:f5: 5a:f2:00:d1:a2:5c:d3:55:ea:6e:6b:5a:cd:ea:6f: 93:09:61:72:f1:f6:bb:48:e5:85:4b:a8:ce:5b:ad: 00:51:9f:9f:27:ed:6b:c7:37:ff:f8:96:bd:91:cf: a0:ca:58:35:72:5c:9d:23:ee:14:fe:37:d8:28:40: 23:c1:be:8f:5b:fe:f6:14:0f:2b:3d:9d:75:fb:28: 3b:4c:2b:ea:42:f1:39:54:74:e8:58:46:68:6a:d6: b8:5b:62:43:1a:df:e3:6d:ce:e8:8d:e7:47:3c:17: 7d:3c:74:5a:3a:70:4d:4b:9c:5c:8f:91:b5:37:44: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:8C:D1:E7:5A:18:F2:51:4F:BD:5B:E3:95:6B:03:75:F6:D8:08 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:88:f1:94:d3:32:1b:a4:e5:db:57:9c:15:13:c7:61:95: 8f:7a:cf:8b:ae:c0:c8:77:63:04:e5:a0:15:bc:7e:cc:0d:74: 69:3e:32:86:1e:0c:10:14:b2:be:39:61:08:62:31:cd:3a:e4: 0d:46:2f:af:ed:3d:85:19:0c:ea:b9:16:71:38:fa:47:2c:60: 6f:07:75:0e:84:a5:a1:8d:a3:56:5e:9e:a2:eb:58:12:4c:f1: f0:d8:2b:a5:61:60:17:13:9c:2b:86:f9:6c:5b:7d:1c:b1:df: 4f:28:87:89:9a:44:48:08:b3:be:e1:7f:69:eb:40:4b:eb:a4: 68:16:3e:77:d6:3f:cc:af:7a:f7:1a:26:b8:e9:54:e8:ae:bd: d0:24:e1:51:f6:cf:d6:c5:0d:99:26:db:25:ee:86:52:3c:e5: d1:5b:e8:3d:25:e4:f1:a6:41:11:59:27:3f:93:9d:b7:85:d5: ae:b0:5c:5d:d3:28:98:06:e7:37:3b:f1:57:ff:d5:2a:ce:27: 28:da:4a:e0:e3:8f:3c:df:3a:69:dc:79:9b:03:eb:62:01:f7: 67:1f:92:9f:87:95:a5:91:77:f9:9e:b4:00:28:26:bc:7e:46: 28:5f:04:5f:12:84:c9:b5:3c:42:4e:e7:4f:55:3b:e8:4d:d1: 8c:2e:b7:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY8MNKp5efOnTl8hSPkZNv7LQk0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA3MjkxMzQ0MzFaFw0yNjA3MzAxNjM3MzFaMDMxMTAvBgNV BAMTKDIzNUU4Q0QxRTc1QTE4RjI1MTRGQkQ1QkUzOTU2QjAzNzVGNkQ4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJ94PAFP0pu6iLc6u+lh38dYW MWogNR6DMPtCI2IC4XZOaHMpbjFYuUAMxz28+bf9MD4zw9z32b3EUeTklB2JF25r hV6YhulifBC9OzqIlG0Sf3UNipzXqgDmzWKk1BohvP8V92Fh3SCynTPPIx5NVIQg Z4/6BJwZhJmJK65zr1kR6ut/9VryANGiXNNV6m5rWs3qb5MJYXLx9rtI5YVLqM5b rQBRn58n7WvHN//4lr2Rz6DKWDVyXJ0j7hT+N9goQCPBvo9b/vYUDys9nXX7KDtM K+pC8TlUdOhYRmhq1rhbYkMa3+NtzuiN50c8F308dFo6cE1LnFyPkbU3RNv3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI16M0edaGPJRT71b45VrA3X22AgwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnSI8ZTTMhuk 5dtXnBUTx2GVj3rPi67AyHdjBOWgFbx+zA10aT4yhh4MEBSyvjlhCGIxzTrkDUYv r+09hRkM6rkWcTj6Ryxgbwd1DoSloY2jVl6eoutYEkzx8NgrpWFgFxOcK4b5bFt9 HLHfTyiHiZpESAizvuF/aetAS+ukaBY+d9Y/zK969xomuOlU6K690CThUfbP1sUN mSbbJe6GUjzl0VvoPSXk8aZBEVknP5Odt4XVrrBcXdMomAbnNzvxV//VKs4nKNpK 4OOPPN86adx5mwPrYgH3Zx+Sn4eVpZF3+Z60ACgmvH5GKF8EXxKEybU8Qk7nT1U7 6E3RjC638w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:24 2026 by rpki-client