$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: 2EMSvpdtBh0uknZbDj/KpVZzcoFbAI2wLGUElW6uLKA= Subject key identifier: E4:6B:CB:54:75:27:60:F0:22:A8:20:D5:57:AB:31:AB:71:60:54:9D Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 781CC7581F3C9E63F5565C856BBC27BF26D10A80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 74 Signing time: Fri 17 Apr 2026 10:44:43 +0000 Manifest this update: Fri 17 Apr 2026 10:39:43 +0000 Manifest next update: Sat 18 Apr 2026 13:19:43 +0000 Files and hashes: 1: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 2: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 3: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: z9qwUs17EsQ07/H6RAjLtJ8WzG0WLmPUOP26+6n5B8Y=) 4: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 5: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 13:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1c:c7:58:1f:3c:9e:63:f5:56:5c:85:6b:bc:27:bf:26:d1:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Apr 17 10:39:43 2026 GMT Not After : Apr 18 13:19:43 2026 GMT Subject: CN=E46BCB54752760F022A820D557AB31AB7160549D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:74:f9:70:aa:e4:4d:c2:3b:a3:e1:5e:d5: 03:e3:25:98:3d:62:d2:02:bd:00:8a:d9:29:55:83: 47:ce:04:84:d2:fa:b0:3b:11:ba:59:6c:93:22:e9: d3:aa:38:a8:ae:09:16:3f:ba:03:11:0d:a0:14:a5: dc:40:79:48:10:28:a7:d3:8a:65:53:5d:69:0d:3b: dd:3b:3f:01:36:f7:0e:9d:f3:ba:16:11:79:5f:22: 5a:d3:75:0b:7f:cb:0e:73:b0:8e:41:11:61:82:25: d0:8e:0b:fc:7c:d8:7f:78:b6:b8:2a:6b:d1:b8:86: 6e:31:08:b6:c4:24:f5:db:72:d6:56:b3:b6:cb:fe: 79:cb:6b:f7:e4:41:d1:16:f8:fc:27:bd:39:d7:6d: 18:23:ea:3c:74:f2:b8:23:7f:01:80:75:53:0b:03: 61:a3:59:8f:dc:a1:23:01:c3:35:9c:f4:bc:17:19: 91:95:ac:95:a8:78:fc:46:41:c3:87:77:c7:e9:48: f1:6f:ad:bf:b5:26:ba:f9:29:34:3a:fd:50:37:25: 86:7e:a3:57:51:5f:96:29:b8:ed:5c:b6:19:6f:92: e2:69:fb:31:a9:a7:95:bc:d4:de:db:3a:ac:8d:8f: 7f:52:f5:4d:4f:be:a6:f5:b2:d6:20:5d:13:38:fc: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:CB:54:75:27:60:F0:22:A8:20:D5:57:AB:31:AB:71:60:54:9D X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f1:50:79:26:86:6b:63:eb:1f:c0:54:e7:08:07:e0:f8:53: 6b:c1:72:82:16:70:61:fa:98:8a:8c:0d:54:1b:72:d5:da:f7: e0:2a:81:49:1b:59:d0:5f:28:74:ab:48:c1:34:89:0a:de:02: 3f:07:16:67:dc:31:66:4a:af:a9:62:dc:2a:ce:2b:ae:f4:69: 8f:5d:cb:ab:4f:27:e1:3b:a1:93:16:84:44:8a:91:4e:3b:c1: 24:db:ba:0e:4a:84:1c:15:89:73:19:9d:87:c9:8f:39:46:ea: c9:ce:2d:6c:bf:b3:05:4e:73:8c:ba:c4:53:b9:a1:c6:aa:5d: b1:22:53:67:e9:c5:16:e3:50:6b:1f:5d:cc:bb:b3:1d:e5:33: fc:74:3e:90:d2:1e:0c:07:9a:b7:22:90:0f:ea:0d:69:d5:64: a1:5d:0c:75:c6:a0:6e:3a:02:6e:60:4b:ac:34:70:88:91:dd: ed:cb:92:87:a7:df:ba:8b:53:a8:c1:11:91:cd:98:65:cb:18: 9b:6c:4a:21:95:94:1b:d0:4c:50:e2:3d:14:90:02:d2:ca:28: b0:ef:dc:02:6d:19:b4:1b:46:26:b6:16:e0:f2:3a:57:b7:4a: 4f:8f:14:de:4d:9a:ad:83:9c:65:44:a2:1f:89:c5:9c:99:2c: 44:40:e8:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeBzHWB88nmP1VlyFa7wnvybRCoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA0MTcxMDM5NDNaFw0yNjA0MTgxMzE5NDNaMDMxMTAvBgNV BAMTKEU0NkJDQjU0NzUyNzYwRjAyMkE4MjBENTU3QUIzMUFCNzE2MDU0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHnT5cKrkTcI7o+Fe1QPjJZg9 YtICvQCK2SlVg0fOBITS+rA7EbpZbJMi6dOqOKiuCRY/ugMRDaAUpdxAeUgQKKfT imVTXWkNO907PwE29w6d87oWEXlfIlrTdQt/yw5zsI5BEWGCJdCOC/x82H94trgq a9G4hm4xCLbEJPXbctZWs7bL/nnLa/fkQdEW+PwnvTnXbRgj6jx08rgjfwGAdVML A2GjWY/coSMBwzWc9LwXGZGVrJWoePxGQcOHd8fpSPFvrb+1Jrr5KTQ6/VA3JYZ+ o1dRX5YpuO1cthlvkuJp+zGpp5W81N7bOqyNj39S9U1Pvqb1stYgXRM4/KU/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5GvLVHUnYPAiqCDVV6sxq3FgVJ0wHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfFQeSaGa2Pr H8BU5wgH4PhTa8FyghZwYfqYiowNVBty1dr34CqBSRtZ0F8odKtIwTSJCt4CPwcW Z9wxZkqvqWLcKs4rrvRpj13Lq08n4TuhkxaERIqRTjvBJNu6DkqEHBWJcxmdh8mP OUbqyc4tbL+zBU5zjLrEU7mhxqpdsSJTZ+nFFuNQax9dzLuzHeUz/HQ+kNIeDAea tyKQD+oNadVkoV0MdcagbjoCbmBLrDRwiJHd7cuSh6ffuotTqMERkc2YZcsYm2xK IZWUG9BMUOI9FJAC0soosO/cAm0ZtBtGJrYW4PI6V7dKT48U3k2arYOcZUSiH4nF nJksREDoOA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:24 2026 by rpki-client