$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: lSndeupxXVTXbPjSFmsc/RItnz8WvZ8fNGzgNFCI39c= Subject key identifier: D3:CB:0F:2F:03:5F:9B:C1:33:B5:F5:9D:D3:13:CC:8E:F6:91:1E:93 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 4F9EF0C20A9F501C75C1400D94B4D0372ECC50B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 16:58:17 +0000 Manifest this update: Mon 02 Mar 2026 16:53:17 +0000 Manifest next update: Tue 03 Mar 2026 20:11:17 +0000 Files and hashes: 1: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 2: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 3: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 5: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: /zeKdHBRyXfh0pD6arMErhB20aq5Zg1M8I7CeTL7id0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9e:f0:c2:0a:9f:50:1c:75:c1:40:0d:94:b4:d0:37:2e:cc:50:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Mar 2 16:53:17 2026 GMT Not After : Mar 3 20:11:17 2026 GMT Subject: CN=D3CB0F2F035F9BC133B5F59DD313CC8EF6911E93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:3c:68:90:9e:28:14:01:cd:57:c6:bb:ce: 76:81:dd:de:4b:5b:8d:5c:c3:f8:0b:ea:1d:66:77: 19:d1:22:5d:6e:86:ff:4b:72:5d:53:36:f2:b3:35: 65:0a:de:80:35:e1:d4:c7:7c:d8:7e:b1:0a:1f:e4: b6:89:e8:b0:dc:0b:30:cb:7f:2c:21:fa:9f:2e:71: 8e:11:03:9f:bd:80:fc:2e:57:90:a8:b2:33:b7:d8: fb:18:44:13:b1:5f:b9:28:d4:1e:30:7d:7f:34:97: 7c:9f:db:01:4c:fc:18:8c:a9:50:f5:94:07:06:dc: 6b:73:5b:92:73:aa:8b:db:db:d6:c6:1e:55:4d:89: 53:cc:8e:67:c6:d1:46:c7:a5:50:64:80:62:41:e4: 95:49:90:fe:72:7d:c0:e3:59:7b:15:31:cd:7f:4a: 91:bb:ae:ad:3c:b3:0a:3b:05:9c:be:b6:de:7d:0e: 84:a4:cf:21:0c:ff:87:77:64:0d:23:76:45:8d:ca: d3:bd:0b:6d:cb:17:5e:cf:c5:6f:2b:03:00:56:26: 5f:c9:b0:88:b0:55:02:2b:2f:2f:87:d0:13:c4:28: 0b:e2:dd:94:46:99:fe:75:a2:38:3c:a5:d7:2c:a9: 9c:3e:b0:0c:a0:8e:32:59:01:c3:78:d6:22:c7:3c: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:0F:2F:03:5F:9B:C1:33:B5:F5:9D:D3:13:CC:8E:F6:91:1E:93 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:61:c5:62:27:1c:42:55:64:cf:a1:29:24:9a:2d:17:47:a0: 84:8c:e7:0d:76:96:1d:bb:22:09:57:12:84:2e:bd:1c:c1:e4: dd:2a:4b:ec:cb:e0:b8:44:e6:63:52:77:bc:55:e6:8a:c6:60: 26:ec:87:87:43:d5:cc:7d:18:5f:61:6b:db:07:56:db:df:44: d5:c0:bf:9d:e5:6a:e0:7f:c7:8b:66:bb:3c:31:65:06:d5:ec: d9:39:ae:38:a9:1e:7c:64:cf:48:ca:87:e0:be:a7:6a:f2:18: 82:95:a1:c5:54:92:6d:4d:05:3f:c9:da:83:d1:26:3f:c5:ff: 8a:d3:d0:ef:7f:0a:54:a3:a6:53:d0:27:33:32:40:ab:4e:18: d5:5d:87:67:94:5c:bf:1e:54:6f:ab:d4:eb:79:f8:8a:86:33: 6c:45:cd:b7:91:e7:c9:e0:af:a3:ee:ee:35:dc:61:31:cf:95: ad:4c:a5:e1:1a:bd:fb:bc:20:e8:5a:29:1d:1c:67:72:53:7e: ca:95:82:58:39:16:a6:8b:bc:72:e0:fe:8f:d2:a2:f9:93:83: 47:e8:3e:6f:43:b8:b3:bf:e8:5f:d9:f4:fc:48:05:27:c2:4b: f1:2c:11:76:c7:3d:eb:1d:72:1f:f6:82:6d:da:40:4a:5d:1e: 0b:48:b9:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT57wwgqfUBx1wUANlLTQNy7MULYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAzMDIxNjUzMTdaFw0yNjAzMDMyMDExMTdaMDMxMTAvBgNV BAMTKEQzQ0IwRjJGMDM1RjlCQzEzM0I1RjU5REQzMTNDQzhFRjY5MTFFOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3zxokJ4oFAHNV8a7znaB3d5L W41cw/gL6h1mdxnRIl1uhv9Lcl1TNvKzNWUK3oA14dTHfNh+sQof5LaJ6LDcCzDL fywh+p8ucY4RA5+9gPwuV5CosjO32PsYRBOxX7ko1B4wfX80l3yf2wFM/BiMqVD1 lAcG3GtzW5Jzqovb29bGHlVNiVPMjmfG0UbHpVBkgGJB5JVJkP5yfcDjWXsVMc1/ SpG7rq08swo7BZy+tt59DoSkzyEM/4d3ZA0jdkWNytO9C23LF17PxW8rAwBWJl/J sIiwVQIrLy+H0BPEKAvi3ZRGmf51ojg8pdcsqZw+sAygjjJZAcN41iLHPCm3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU08sPLwNfm8EztfWd0xPMjvaRHpMwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGHFYiccQlVk z6EpJJotF0eghIznDXaWHbsiCVcShC69HMHk3SpL7MvguETmY1J3vFXmisZgJuyH h0PVzH0YX2Fr2wdW299E1cC/neVq4H/Hi2a7PDFlBtXs2TmuOKkefGTPSMqH4L6n avIYgpWhxVSSbU0FP8nag9EmP8X/itPQ738KVKOmU9AnMzJAq04Y1V2HZ5Rcvx5U b6vU63n4ioYzbEXNt5HnyeCvo+7uNdxhMc+VrUyl4Rq9+7wg6FopHRxnclN+ypWC WDkWpou8cuD+j9Ki+ZODR+g+b0O4s7/oX9n0/EgFJ8JL8SwRdsc96x1yH/aCbdpA Sl0eC0i5CA== -----END CERTIFICATE-----Generated at Mon Mar 2 22:31:09 2026 by rpki-client