$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: B95bkI/VroygR98vS129ECIMurar4LWjy3mp/vUlCmk= Subject key identifier: 43:E0:BE:04:6B:D1:C8:31:5F:99:21:4F:8A:EF:D6:2B:4F:62:06:85 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 67200F18DD8539510CF8B8161EDB2A537666DB99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 15:11:52 +0000 Manifest this update: Sat 13 Jun 2026 15:06:52 +0000 Manifest next update: Sun 14 Jun 2026 16:29:52 +0000 Files and hashes: 1: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: 2P425ffXnIHevDuN62YRs3R8UdPM/6al0Twn2WMIoKw=) 2: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:20:0f:18:dd:85:39:51:0c:f8:b8:16:1e:db:2a:53:76:66:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Jun 13 15:06:52 2026 GMT Not After : Jun 14 16:29:52 2026 GMT Subject: CN=43E0BE046BD1C8315F99214F8AEFD62B4F620685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:26:18:13:68:bf:91:9e:55:78:39:75:ad: aa:8f:24:ab:2d:84:b2:b0:55:08:e6:6d:19:48:94: 8a:75:4e:5c:87:23:06:d6:19:44:f5:f4:63:d0:02: ed:03:8a:a4:e2:16:f7:9f:b9:e1:08:19:47:c6:63: 4d:55:3e:60:22:70:08:30:20:43:be:11:ec:03:a0: 8d:54:bf:4e:b6:b8:63:5c:3b:3a:2f:0e:43:64:52: 18:67:29:43:0f:e6:07:32:ad:94:2b:fd:7c:8e:a3: cc:38:5b:4d:93:ce:56:f2:75:fb:bc:ef:2d:91:3f: 0a:da:bb:af:22:49:89:66:f1:98:e6:3d:2c:77:b1: bc:76:38:33:0e:22:f5:d5:9a:b0:de:3d:08:99:cf: 44:d0:66:05:11:7b:f0:32:82:e8:4b:a0:f0:54:16: b4:d1:97:93:5b:67:46:59:f5:32:c8:fb:1e:87:51: 4a:2a:d8:ec:04:62:79:cb:f4:12:54:e9:45:64:44: 0d:2c:d6:24:0b:8d:fa:a7:29:17:51:72:e5:d0:24: e8:1a:68:4b:e5:12:9b:d7:1b:51:b8:b1:a7:cc:19: 31:f8:a9:5c:49:c9:cc:02:3d:9e:1d:3a:9e:5a:cb: a6:82:71:2d:74:1a:93:b1:ea:35:c3:ba:a1:f9:88: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:BE:04:6B:D1:C8:31:5F:99:21:4F:8A:EF:D6:2B:4F:62:06:85 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:47:e2:50:a9:8d:70:e6:96:de:1f:00:ef:c6:e6:c1:16:6f: 9f:bd:9b:29:6a:b4:bd:b2:6c:59:56:85:38:09:2e:a4:6c:0c: 94:48:41:68:3e:b1:14:97:ce:93:4e:e4:a8:5d:0c:81:36:a7: c6:db:15:6e:cc:6d:34:3b:c9:42:10:85:30:b9:f4:07:1f:d2: 7e:79:db:79:48:dc:e7:81:cc:4f:e2:6a:02:87:a2:ee:28:99: ee:bf:b9:d3:1a:28:30:7b:ae:c5:10:34:6a:11:e1:1b:e2:bc: d9:3d:02:ec:d1:12:12:4c:9c:6e:7d:bd:db:a3:18:45:a8:e8: b8:45:ad:a2:82:28:ce:ff:55:39:e4:5f:6f:8c:fa:71:47:00: 5a:93:b3:9d:57:54:d4:bb:23:9f:d8:3a:27:20:bb:21:1a:da: a3:32:ed:71:82:00:3f:c8:c5:15:f9:9c:7d:4b:0f:49:ab:98: da:3a:8c:d1:aa:b6:06:9e:a0:1f:bc:4f:af:17:0c:a3:9f:12: 56:3b:44:1c:7a:a7:3f:ef:5b:13:5e:ab:b7:08:d0:cc:00:7c: 0a:85:51:e0:42:51:2a:78:6f:f4:2a:52:72:56:3f:fc:d2:1c: c8:a5:2d:dc:07:41:bf:33:03:8d:3d:09:1a:0a:ca:e6:96:54: d7:12:b5:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZyAPGN2FOVEM+LgWHtsqU3Zm25kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA2MTMxNTA2NTJaFw0yNjA2MTQxNjI5NTJaMDMxMTAvBgNV BAMTKDQzRTBCRTA0NkJEMUM4MzE1Rjk5MjE0RjhBRUZENjJCNEY2MjA2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7CYYE2i/kZ5VeDl1raqPJKst hLKwVQjmbRlIlIp1TlyHIwbWGUT19GPQAu0DiqTiFvefueEIGUfGY01VPmAicAgw IEO+EewDoI1Uv062uGNcOzovDkNkUhhnKUMP5gcyrZQr/XyOo8w4W02Tzlbydfu8 7y2RPwrau68iSYlm8ZjmPSx3sbx2ODMOIvXVmrDePQiZz0TQZgURe/AyguhLoPBU FrTRl5NbZ0ZZ9TLI+x6HUUoq2OwEYnnL9BJU6UVkRA0s1iQLjfqnKRdRcuXQJOga aEvlEpvXG1G4safMGTH4qVxJycwCPZ4dOp5ay6aCcS10GpOx6jXDuqH5iHmjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ+C+BGvRyDFfmSFPiu/WK09iBoUwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUfiUKmNcOaW 3h8A78bmwRZvn72bKWq0vbJsWVaFOAkupGwMlEhBaD6xFJfOk07kqF0MgTanxtsV bsxtNDvJQhCFMLn0Bx/SfnnbeUjc54HMT+JqAoei7iiZ7r+50xooMHuuxRA0ahHh G+K82T0C7NESEkycbn2926MYRajouEWtooIozv9VOeRfb4z6cUcAWpOznVdU1Lsj n9g6JyC7IRraozLtcYIAP8jFFfmcfUsPSauY2jqM0aq2Bp6gH7xPrxcMo58SVjtE HHqnP+9bE16rtwjQzAB8CoVR4EJRKnhv9CpSclY//NIcyKUt3AdBvzMDjT0JGgrK 5pZU1xK1lQ== -----END CERTIFICATE-----Generated at Sun Jun 14 07:11:53 2026 by rpki-client