$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: oHRSnNrG04DyfKaZmaJT/mMROm1wwf3a5R0qMUg9Cyc= Subject key identifier: 91:B2:AA:9E:A9:93:DE:5E:5A:B7:2B:9A:1B:88:97:9B:93:92:94:CF Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 72DD00D13745B822E63E9B823E880D79EF05602B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:08:17 +0000 Manifest this update: Mon 02 Mar 2026 09:03:17 +0000 Manifest next update: Tue 03 Mar 2026 13:06:17 +0000 Files and hashes: 1: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: E8zPBjqzAvGWmrdsw4bRfxxsbiKBGWx8HNmQcQ6irZU=) 2: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 4: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 5: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:dd:00:d1:37:45:b8:22:e6:3e:9b:82:3e:88:0d:79:ef:05:60:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Mar 2 09:03:17 2026 GMT Not After : Mar 3 13:06:17 2026 GMT Subject: CN=91B2AA9EA993DE5E5AB72B9A1B88979B939294CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:2e:c6:9a:7f:68:cd:08:2b:44:18:91:32: ee:3d:2e:a2:85:a6:32:f3:dc:59:64:a7:7a:4a:51: 81:e8:e1:5f:ab:2c:d2:85:21:44:06:b0:ae:99:b6: 5a:38:cb:bf:a4:cc:c6:c5:11:6b:c7:ea:94:da:13: 8c:36:2b:fd:41:62:1e:58:31:b6:fc:04:de:10:5c: 4f:9e:75:df:14:8c:b7:ad:d9:13:80:7a:28:16:39: 1e:3f:3a:4a:0c:60:c4:c8:ec:f6:5c:b1:e0:7b:f9: ba:c3:f8:2e:1b:f1:00:58:b2:53:66:ff:03:05:5f: f2:5c:9a:01:72:b2:2b:3f:ee:dc:41:23:7c:b3:7f: a5:b5:f2:b5:14:55:87:e8:2e:c9:51:7f:e0:7d:82: 66:71:9f:01:e3:8d:69:8e:ed:5f:64:71:55:13:83: 08:2c:bc:08:6b:8c:ac:44:da:31:fe:f9:c9:d2:69: 6d:de:9d:65:1f:11:6f:0e:a9:80:ad:61:76:c5:19: 12:3a:51:91:11:6d:85:55:0d:f5:c8:fc:5e:59:b0: 93:94:65:f7:0c:84:61:d4:d3:0d:d1:73:32:c9:da: f7:96:37:db:87:05:5f:6a:28:55:93:6a:af:6c:d2: 41:e6:ae:16:f1:75:25:01:64:27:b3:1d:f5:19:0c: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:AA:9E:A9:93:DE:5E:5A:B7:2B:9A:1B:88:97:9B:93:92:94:CF X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:59:e3:45:0a:7f:42:81:ac:7e:d4:59:4e:c6:83:20:b6:4f: cf:ec:9a:ec:37:f9:ab:06:7f:61:b9:0e:4f:d2:c5:dd:97:2b: 71:7e:aa:4c:e9:ca:9d:d9:f5:db:d1:46:2c:32:dd:01:d8:34: bf:09:a8:52:e3:7e:5d:44:76:96:be:2b:d1:d6:37:4f:76:40: 67:28:f8:28:f3:61:9f:02:17:85:7a:a0:16:26:46:6d:3d:19: 2c:d4:cd:bc:45:3b:ff:27:a6:85:20:4e:b5:f4:56:f9:0f:e8: e2:ce:56:e2:ac:ff:9e:d2:d0:e5:9e:b2:17:ae:02:22:53:b1: 07:87:9f:a3:21:f6:f3:50:0d:41:3e:3b:74:37:8e:93:f3:0a: 42:77:63:77:fd:dc:24:f6:8b:40:a4:10:99:9a:8c:1e:70:5b: 38:07:06:05:32:be:3f:2d:92:35:72:f9:4a:ce:dc:47:31:81: 33:52:cc:30:30:9e:a0:71:b3:69:1f:93:87:cb:a5:de:55:e9: 1b:5d:79:fa:f8:5b:b3:50:e6:cd:21:d9:e8:b3:9a:5e:bf:04: b6:57:e1:dd:d2:49:8a:40:54:10:9f:31:62:87:9c:d1:ee:0a: 70:81:d3:0e:9a:12:94:72:59:9b:96:45:94:2e:8a:7d:93:9a: dd:35:29:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUct0A0TdFuCLmPpuCPogNee8FYCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjAzMDIwOTAzMTdaFw0yNjAzMDMxMzA2MTdaMDMxMTAvBgNV BAMTKDkxQjJBQTlFQTk5M0RFNUU1QUI3MkI5QTFCODg5NzlCOTM5Mjk0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUi7Gmn9ozQgrRBiRMu49LqKF pjLz3Flkp3pKUYHo4V+rLNKFIUQGsK6Ztlo4y7+kzMbFEWvH6pTaE4w2K/1BYh5Y Mbb8BN4QXE+edd8UjLet2ROAeigWOR4/OkoMYMTI7PZcseB7+brD+C4b8QBYslNm /wMFX/JcmgFysis/7txBI3yzf6W18rUUVYfoLslRf+B9gmZxnwHjjWmO7V9kcVUT gwgsvAhrjKxE2jH++cnSaW3enWUfEW8OqYCtYXbFGRI6UZERbYVVDfXI/F5ZsJOU ZfcMhGHU0w3RczLJ2veWN9uHBV9qKFWTaq9s0kHmrhbxdSUBZCezHfUZDKB3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkbKqnqmT3l5atyuaG4iXm5OSlM8wHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlnjRQp/QoGs ftRZTsaDILZPz+ya7Df5qwZ/YbkOT9LF3ZcrcX6qTOnKndn129FGLDLdAdg0vwmo UuN+XUR2lr4r0dY3T3ZAZyj4KPNhnwIXhXqgFiZGbT0ZLNTNvEU7/yemhSBOtfRW +Q/o4s5W4qz/ntLQ5Z6yF64CIlOxB4efoyH281ANQT47dDeOk/MKQndjd/3cJPaL QKQQmZqMHnBbOAcGBTK+Py2SNXL5Ss7cRzGBM1LMMDCeoHGzaR+Th8ul3lXpG115 +vhbs1DmzSHZ6LOaXr8Etlfh3dJJikBUEJ8xYoec0e4KcIHTDpoSlHJZm5ZFlC6K fZOa3TUpsQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:37:06 2026 by rpki-client