$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: NHUS1tiMTeDgoXJu5N/xWwjMHpMFveDB0kK/Uui/074= Subject key identifier: A9:F0:23:DA:21:15:7C:FB:14:C3:19:B4:FC:52:92:A2:71:10:19:C5 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 4DCB5818FA8DF8BA7770A6F6948EE87FC3BD4671 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: FF Signing time: Tue 28 Jul 2026 20:32:42 +0000 Manifest this update: Tue 28 Jul 2026 20:27:42 +0000 Manifest next update: Wed 29 Jul 2026 22:46:42 +0000 Files and hashes: 1: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 2: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: UE0ZTDRkUMBorhCV8AAdjXgoYbpHYU45OTDKKa089eo=) 3: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) 4: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cb:58:18:fa:8d:f8:ba:77:70:a6:f6:94:8e:e8:7f:c3:bd:46:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Jul 28 20:27:42 2026 GMT Not After : Jul 29 22:46:42 2026 GMT Subject: CN=A9F023DA21157CFB14C319B4FC5292A2711019C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:db:f3:22:90:43:8e:ed:33:cb:78:52:79: 1a:0b:7e:ea:46:84:0f:db:1d:4a:09:6a:a8:dc:2d: 4c:3f:b1:92:01:f2:ba:6d:c5:05:a8:b8:37:a7:65: 38:39:77:af:95:95:32:fb:cb:24:1b:60:a4:51:d7: da:3a:ea:02:49:d6:47:c8:e4:53:cd:48:7b:66:c6: b7:a2:38:48:db:bc:cf:31:83:7e:82:be:47:4c:48: 3f:6c:22:68:95:bb:f0:6e:2a:1e:37:4b:12:7e:15: b4:d6:95:d1:da:10:c5:ed:80:b9:71:e3:2f:b0:46: eb:24:01:ad:fb:66:12:4a:34:4a:c6:fa:a8:38:85: 83:ce:b8:62:d7:d8:32:2e:c3:81:f2:db:ed:db:7d: 91:fb:62:f3:8f:b8:4e:ee:23:02:fd:a4:09:a2:39: 63:3c:35:31:80:7f:33:ed:83:53:bc:eb:96:1e:86: 8d:7a:42:cd:08:ca:94:28:a3:7e:c9:1a:2e:1a:ed: 7a:85:f6:8e:06:17:1f:47:73:5a:d0:27:d7:0a:cc: 13:48:88:ae:45:70:db:81:f2:67:1a:e5:56:ae:c7: b5:4f:64:f2:03:b3:5b:4b:82:ce:dc:25:13:83:5f: 72:02:bd:ab:d9:8f:26:b2:08:db:31:c9:2f:c9:bd: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F0:23:DA:21:15:7C:FB:14:C3:19:B4:FC:52:92:A2:71:10:19:C5 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:63:6f:87:f3:cc:0c:de:9b:5d:fd:e8:08:f7:29:98:61:b2: 52:a3:01:93:ce:2a:8a:f9:e5:56:0f:d6:fa:96:9f:3d:23:b7: 39:c9:2d:00:c2:ff:ca:6e:b0:12:c8:2c:e6:90:34:23:4d:56: 65:2b:d0:99:e1:12:c2:72:1c:dc:43:9a:71:dd:ef:ee:f1:eb: fb:6e:86:ff:66:d0:3e:5d:dc:64:55:8c:8f:16:c8:01:e1:6d: e7:76:00:00:3b:d8:59:55:31:9e:de:2f:6c:6f:00:bb:a9:90: 99:24:cf:94:7a:96:1b:9b:76:30:01:f5:49:a6:10:d0:a5:a6: 13:1f:ba:e6:56:55:7a:77:fd:b7:a9:88:06:e9:03:85:12:d8: 52:b8:3e:05:d4:c3:51:11:91:b7:14:66:c4:22:f1:e5:30:0a: 3f:cf:af:75:ef:e9:d4:76:00:39:f9:52:7a:0c:a6:4a:00:45: 59:55:d9:e4:49:b2:51:55:85:35:d6:b2:dc:e1:cf:35:ef:8a: 82:40:f3:dd:11:51:1f:76:28:ef:44:70:34:e0:36:ca:55:9b: b5:e6:bc:fe:17:43:a5:d1:78:56:3f:c2:06:e1:c9:1c:88:01: 9d:93:f7:8f:8f:7d:42:a3:49:c9:d2:12:a7:89:c2:2f:13:82: 7a:e3:45:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTctYGPqN+Lp3cKb2lI7of8O9RnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA3MjgyMDI3NDJaFw0yNjA3MjkyMjQ2NDJaMDMxMTAvBgNV BAMTKEE5RjAyM0RBMjExNTdDRkIxNEMzMTlCNEZDNTI5MkEyNzExMDE5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXdvzIpBDju0zy3hSeRoLfupG hA/bHUoJaqjcLUw/sZIB8rptxQWouDenZTg5d6+VlTL7yyQbYKRR19o66gJJ1kfI 5FPNSHtmxreiOEjbvM8xg36CvkdMSD9sImiVu/BuKh43SxJ+FbTWldHaEMXtgLlx 4y+wRuskAa37ZhJKNErG+qg4hYPOuGLX2DIuw4Hy2+3bfZH7YvOPuE7uIwL9pAmi OWM8NTGAfzPtg1O865Yeho16Qs0IypQoo37JGi4a7XqF9o4GFx9Hc1rQJ9cKzBNI iK5FcNuB8mca5Vaux7VPZPIDs1tLgs7cJRODX3ICvavZjyayCNsxyS/JvQoJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqfAj2iEVfPsUwxm0/FKSonEQGcUwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWNvh/PMDN6b Xf3oCPcpmGGyUqMBk84qivnlVg/W+pafPSO3OcktAML/ym6wEsgs5pA0I01WZSvQ meESwnIc3EOacd3v7vHr+26G/2bQPl3cZFWMjxbIAeFt53YAADvYWVUxnt4vbG8A u6mQmSTPlHqWG5t2MAH1SaYQ0KWmEx+65lZVenf9t6mIBukDhRLYUrg+BdTDURGR txRmxCLx5TAKP8+vde/p1HYAOflSegymSgBFWVXZ5EmyUVWFNday3OHPNe+KgkDz 3RFRH3Yo70RwNOA2ylWbtea8/hdDpdF4Vj/CBuHJHIgBnZP3j499QqNJydISp4nC LxOCeuNFrg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:16:00 2026 by rpki-client