$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: Ojng6Xe9h89OjrTHHjE/u32g4KcinueD6uXNqDelA4o= Subject key identifier: FC:C9:A4:5E:48:F0:A0:01:45:D9:D2:59:A6:CA:07:DC:7D:55:A1:A1 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 4C1F4DBBD92DA9F5268BD69B9E93A60F86C88BCA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 0139 Signing time: Fri 09 Oct 2026 19:48:43 +0000 Manifest this update: Fri 09 Oct 2026 19:43:43 +0000 Manifest next update: Tue 13 Oct 2026 07:11:43 +0000 Files and hashes: 1: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 2: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 3: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: Y+T0Gd0nBV2D0VfQLjrTHYWBldNrAaSNxwWdmL5FCSE=) 4: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 5: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 07:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1f:4d:bb:d9:2d:a9:f5:26:8b:d6:9b:9e:93:a6:0f:86:c8:8b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Oct 9 19:43:43 2026 GMT Not After : Oct 13 07:11:43 2026 GMT Subject: CN=FCC9A45E48F0A00145D9D259A6CA07DC7D55A1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:ac:71:01:cd:75:bc:6b:29:76:39:00:21: da:e5:e6:b3:82:97:ed:d0:1f:b7:a3:e5:10:28:db: 18:a7:3e:e1:a5:21:f9:65:df:fb:15:9f:68:95:6d: 08:32:6d:30:3d:7b:3c:86:a5:ee:98:3d:b9:2a:41: 91:43:18:df:bc:07:92:6e:ef:3a:4e:d2:16:59:c4: 18:19:45:e1:f1:02:23:aa:eb:f3:3a:0a:8f:40:e0: f5:e6:72:a1:63:92:6d:80:72:12:59:cd:db:14:b7: 8b:49:d0:78:87:e4:f2:e7:7f:e3:3a:84:e3:e2:d6: 84:ba:65:06:c1:e4:f6:89:c2:41:53:fa:66:6e:cd: ae:34:73:a1:d1:11:51:f8:8a:39:39:4a:b4:ae:b2: fa:1a:7f:fd:65:da:73:bd:71:45:e8:0f:fa:29:ad: 56:d3:f0:d4:d5:cf:09:b1:1b:1b:4a:3d:aa:4b:9f: 3e:43:8e:c1:d5:07:47:a7:d4:84:76:1d:6b:80:2a: 91:87:44:dd:c4:7f:63:a3:12:6e:b0:fa:91:1c:da: 12:ba:76:02:54:bc:4c:8a:0b:f7:39:3b:a5:e5:d1: ef:48:3a:ae:3c:ac:eb:34:6c:99:83:b3:84:7f:5d: 9f:18:58:30:b9:3a:c7:15:52:f4:79:f4:64:be:13: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C9:A4:5E:48:F0:A0:01:45:D9:D2:59:A6:CA:07:DC:7D:55:A1:A1 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:f6:ec:f7:50:b8:00:52:ff:53:61:5f:be:47:ae:fd:32: 55:29:33:07:be:d0:d1:b7:93:31:b0:7c:a6:2d:05:83:36:5e: b3:59:00:11:8d:d6:42:8d:cc:3e:bc:57:2e:3b:26:2b:f8:f9: e8:b7:c2:d6:2b:d3:e3:b6:e7:c7:4a:d9:5a:9c:ac:02:dc:37: c0:8d:e0:c0:63:27:c9:60:bb:fe:25:78:c3:f6:e9:5f:58:79: a6:4b:c1:fb:6e:1b:1a:7a:82:62:de:04:69:4b:d2:ca:ec:5c: 33:25:e6:41:0c:90:c7:cf:00:1f:74:15:ce:4b:cf:47:8e:39: 0d:1a:1e:2c:40:1e:88:80:4a:ff:00:60:e3:fc:c9:86:c7:04: 40:1a:03:82:96:ee:82:f8:47:1d:60:8b:23:24:57:d6:4b:da: 4b:89:35:79:58:a2:24:85:51:60:24:e6:2e:00:12:12:51:56: 5c:ce:bb:df:78:65:d3:4d:af:6d:c4:a5:4f:0f:4c:ac:79:bc: 61:9d:d0:34:eb:e1:6c:0f:f0:f7:35:c9:94:cb:30:e4:a4:aa: f6:d6:e7:86:38:6e:0c:e3:6d:e7:72:e3:d3:fb:a6:01:5f:12: b2:53:a6:5b:c2:01:d9:77:1d:c6:ac:d1:86:fd:73:2a:e4:63: 2f:44:27:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTB9Nu9ktqfUmi9abnpOmD4bIi8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjEwMDkxOTQzNDNaFw0yNjEwMTMwNzExNDNaMDMxMTAvBgNV BAMTKEZDQzlBNDVFNDhGMEEwMDE0NUQ5RDI1OUE2Q0EwN0RDN0Q1NUExQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPaxxAc11vGspdjkAIdrl5rOC l+3QH7ej5RAo2xinPuGlIfll3/sVn2iVbQgybTA9ezyGpe6YPbkqQZFDGN+8B5Ju 7zpO0hZZxBgZReHxAiOq6/M6Co9A4PXmcqFjkm2AchJZzdsUt4tJ0HiH5PLnf+M6 hOPi1oS6ZQbB5PaJwkFT+mZuza40c6HREVH4ijk5SrSusvoaf/1l2nO9cUXoD/op rVbT8NTVzwmxGxtKPapLnz5DjsHVB0en1IR2HWuAKpGHRN3Ef2OjEm6w+pEc2hK6 dgJUvEyKC/c5O6Xl0e9IOq48rOs0bJmDs4R/XZ8YWDC5OscVUvR59GS+E5l7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/MmkXkjwoAFF2dJZpsoH3H1VoaEwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7727PdQuABS /1NhX75Hrv0yVSkzB77Q0beTMbB8pi0FgzZes1kAEY3WQo3MPrxXLjsmK/j56LfC 1ivT47bnx0rZWpysAtw3wI3gwGMnyWC7/iV4w/bpX1h5pkvB+24bGnqCYt4EaUvS yuxcMyXmQQyQx88AH3QVzkvPR445DRoeLEAeiIBK/wBg4/zJhscEQBoDgpbugvhH HWCLIyRX1kvaS4k1eViiJIVRYCTmLgASElFWXM6733hl002vbcSlTw9MrHm8YZ3Q NOvhbA/w9zXJlMsw5KSq9tbnhjhuDONt53Lj0/umAV8SslOmW8IB2XcdxqzRhv1z KuRjL0QnmQ== -----END CERTIFICATE-----Generated at Sun Oct 11 15:15:24 2026 by rpki-client