$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: ubERIWcz+Lcn7/K1l1UWHhfIZHF2PhgbnBsEBgQ5znw= Subject key identifier: 77:F9:11:60:6C:E8:0C:6D:FE:78:40:8D:93:26:7D:F6:2A:47:B4:64 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 33825829D4B53A4DC8913E74E1F0BA08FF8693E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: FE Signing time: Wed 29 Jul 2026 05:18:31 +0000 Manifest this update: Wed 29 Jul 2026 05:13:31 +0000 Manifest next update: Thu 30 Jul 2026 07:37:31 +0000 Files and hashes: 1: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 2: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: GiPto9HYDB0ic5iIq0tb8RLkm8Y4xyL2Lfbfd5Hqqls=) 3: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:82:58:29:d4:b5:3a:4d:c8:91:3e:74:e1:f0:ba:08:ff:86:93:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jul 29 05:13:31 2026 GMT Not After : Jul 30 07:37:31 2026 GMT Subject: CN=77F911606CE80C6DFE78408D93267DF62A47B464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:78:2e:bc:27:89:9b:76:01:da:cd:b1:93: 3f:a6:d7:cc:c0:43:40:64:ca:7e:fd:bb:91:42:77: 80:c8:76:9d:92:98:47:fc:5e:ca:df:b6:13:4b:b6: c8:e8:45:05:19:e4:20:bb:db:03:46:3f:91:aa:38: 88:ad:39:99:a4:cf:c2:e8:e8:22:f4:9b:cc:58:d2: f3:65:26:a5:10:06:2d:61:90:57:8a:95:77:12:f7: 5a:87:4a:19:20:f1:f2:56:5c:62:7a:44:9c:0e:9d: 75:af:4f:e3:42:1b:e6:52:62:46:3c:69:db:48:62: 1c:58:71:88:03:21:7f:55:85:16:73:00:bd:f2:ec: 2b:02:31:23:51:dd:86:42:8e:be:02:9c:34:4f:0a: e8:a8:50:85:19:93:20:51:cb:f0:f0:76:42:2e:1f: 92:85:01:d7:4c:dd:cf:24:f0:6b:55:19:4b:37:2f: 25:d5:19:40:db:9f:bf:4c:cf:b2:84:c1:4d:39:83: 79:18:3d:bb:c7:09:49:eb:86:09:ab:bc:53:32:7e: 76:75:e2:d3:71:71:6d:eb:ce:3a:da:ea:64:a4:45: 94:99:43:bc:6d:17:d9:8a:ca:f5:c9:b9:c3:27:17: d0:db:65:95:e3:10:f1:0b:8c:a7:d4:79:e2:85:25: 6c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F9:11:60:6C:E8:0C:6D:FE:78:40:8D:93:26:7D:F6:2A:47:B4:64 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d6:7f:6f:3f:58:76:33:d7:59:d1:dc:9b:b1:5e:ff:48:ab: b8:31:9c:c8:dd:db:48:4c:c8:35:bd:a5:fa:14:e5:f8:89:f9: 81:12:c6:40:8e:48:91:82:a2:e9:85:bd:f8:1b:7c:7e:85:5c: 6a:df:c5:78:fd:13:ad:08:3a:cb:66:62:18:8a:62:b4:20:50: 54:bb:9b:b1:ff:ef:92:99:fe:17:f9:e5:e1:df:f0:64:59:86: 81:10:1a:98:3b:b1:7f:d4:2c:fc:41:74:d3:25:3c:b6:8a:4c: 19:09:5b:c7:df:ca:24:41:fe:d0:a0:36:61:36:70:24:7f:57: 42:4e:75:d2:f2:17:42:96:3c:14:22:eb:62:d6:1d:ff:85:3c: f8:13:96:ba:8e:6c:20:97:21:f8:73:c3:ec:68:00:bf:50:3b: f2:d8:23:9c:58:21:f5:5f:e6:a1:aa:4b:4b:eb:1c:bc:63:a0: cb:49:87:fa:6e:6b:50:d9:c1:3b:f3:e8:57:11:80:41:21:5f: 41:10:04:64:4d:9e:16:f8:0f:2f:e2:37:50:38:5e:c7:1e:30: 18:7f:5f:6c:59:c5:5d:7f:a3:71:9d:07:d4:92:e6:82:80:e0: 74:36:c3:12:4c:2d:68:23:ab:b8:93:44:91:c1:4d:08:e7:50: 5e:b8:94:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM4JYKdS1Ok3IkT504fC6CP+Gk+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA3MjkwNTEzMzFaFw0yNjA3MzAwNzM3MzFaMDMxMTAvBgNV BAMTKDc3RjkxMTYwNkNFODBDNkRGRTc4NDA4RDkzMjY3REY2MkE0N0I0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kHguvCeJm3YB2s2xkz+m18zA Q0Bkyn79u5FCd4DIdp2SmEf8XsrfthNLtsjoRQUZ5CC72wNGP5GqOIitOZmkz8Lo 6CL0m8xY0vNlJqUQBi1hkFeKlXcS91qHShkg8fJWXGJ6RJwOnXWvT+NCG+ZSYkY8 adtIYhxYcYgDIX9VhRZzAL3y7CsCMSNR3YZCjr4CnDRPCuioUIUZkyBRy/DwdkIu H5KFAddM3c8k8GtVGUs3LyXVGUDbn79Mz7KEwU05g3kYPbvHCUnrhgmrvFMyfnZ1 4tNxcW3rzjra6mSkRZSZQ7xtF9mKyvXJucMnF9DbZZXjEPELjKfUeeKFJWyVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUd/kRYGzoDG3+eECNkyZ99ipHtGQwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdZ/bz9YdjPX WdHcm7Fe/0iruDGcyN3bSEzINb2l+hTl+In5gRLGQI5IkYKi6YW9+Bt8foVcat/F eP0TrQg6y2ZiGIpitCBQVLubsf/vkpn+F/nl4d/wZFmGgRAamDuxf9Qs/EF00yU8 topMGQlbx9/KJEH+0KA2YTZwJH9XQk510vIXQpY8FCLrYtYd/4U8+BOWuo5sIJch +HPD7GgAv1A78tgjnFgh9V/moapLS+scvGOgy0mH+m5rUNnBO/PoVxGAQSFfQRAE ZE2eFvgPL+I3UDhexx4wGH9fbFnFXX+jcZ0H1JLmgoDgdDbDEkwtaCOruJNEkcFN COdQXriUbQ== -----END CERTIFICATE-----Generated at Wed Jul 29 11:01:18 2026 by rpki-client