$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: k5UQBCdpwmuJP4PRo3+6RFCWcfxJXL6qaGuMMn7dLvU= Subject key identifier: DF:14:C2:45:2E:D0:0A:85:EB:8F:1E:D2:87:30:08:0B:85:AE:C7:C7 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 0983A032834FE4D2A9FFCFA0E3B557A7104A9AB6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:18:17 +0000 Manifest this update: Mon 02 Mar 2026 09:13:17 +0000 Manifest next update: Tue 03 Mar 2026 11:21:17 +0000 Files and hashes: 1: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: Sy67GgYao5HiEbN55na89HtD+tfRu+lLD+bcQpN48ig=) 2: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:83:a0:32:83:4f:e4:d2:a9:ff:cf:a0:e3:b5:57:a7:10:4a:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Mar 2 09:13:17 2026 GMT Not After : Mar 3 11:21:17 2026 GMT Subject: CN=DF14C2452ED00A85EB8F1ED28730080B85AEC7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:a6:7b:c7:71:43:21:46:67:ce:ae:2c:92: 32:b3:a3:10:9d:da:fd:f0:4c:99:d1:5a:23:96:93: a5:13:cd:7c:7c:1e:f1:07:70:d2:3d:f1:ff:0e:76: b0:3b:0f:14:38:05:67:49:70:90:0b:d1:9f:f0:0c: 72:cb:cc:ce:d2:7f:5a:da:1d:dd:23:1e:c5:16:5c: 74:25:53:bb:5c:ef:d7:5c:74:6d:c7:18:4f:ce:08: 34:e2:59:06:3b:a0:18:ea:03:cb:a6:5b:7f:55:82: 22:bf:c0:da:7e:87:9e:46:f3:1f:f8:3a:29:0e:2f: 72:88:12:b0:53:9e:9a:40:c2:c5:a5:37:25:58:fd: e0:a0:c9:90:66:fa:43:83:83:17:df:c9:48:fb:af: cc:3e:27:bd:67:94:43:e6:6a:95:85:67:59:21:8e: 25:e9:ec:31:66:89:dc:6d:92:e9:51:01:6a:9c:d0: ce:b0:df:c7:70:1e:73:21:cf:be:1f:f6:41:d1:2a: 74:ec:31:f4:de:f5:82:84:fc:10:7c:10:05:23:81: 7b:fe:ab:cc:af:09:6b:53:71:a2:32:f1:9b:82:42: c3:56:da:ce:67:e5:78:79:83:ce:54:cd:3f:b2:3c: ad:94:f2:76:3b:9e:c3:ca:3b:ea:68:a2:d3:5e:cf: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:14:C2:45:2E:D0:0A:85:EB:8F:1E:D2:87:30:08:0B:85:AE:C7:C7 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:47:c3:03:46:9f:24:ad:f9:e6:92:f1:8e:9d:54:fe:24: c7:97:c2:54:79:36:fe:c9:34:0e:a0:00:80:39:ce:f3:74:8d: 34:a8:4c:fe:57:df:64:e2:27:de:3e:2f:ad:ac:c3:5a:bd:38: 84:6f:8d:51:fe:58:d7:2c:22:23:b2:65:28:74:0e:6f:8f:3d: a7:bb:24:3e:8b:be:56:a2:2b:70:c1:9d:38:d8:b0:fd:79:6b: 75:b2:98:03:5e:f8:85:2c:e5:15:2a:27:0e:5f:56:4b:8b:99: 3c:09:ee:58:e1:47:f6:28:11:d6:ec:48:85:ca:cf:47:dc:45: 7c:ea:68:45:f9:02:87:96:ec:a7:34:2e:27:0e:97:ea:42:c5: df:a0:d6:f2:ea:f5:d4:87:c2:51:c3:4a:30:b8:02:ee:84:a0: bd:98:4a:e1:36:6e:56:ef:8d:fd:c9:b5:66:f0:09:12:d2:25: b2:9c:45:43:74:c6:f5:b2:7d:2a:8d:41:aa:ae:82:f4:64:93: 21:c9:73:de:df:f0:2d:ff:1f:70:b8:51:c8:09:c4:78:03:fd: 5b:8a:a3:37:86:73:99:34:f3:50:59:98:70:99:cf:ed:3b:8e: cf:07:7d:e9:af:ed:15:8e:ab:0e:45:2f:cf:ea:02:63:38:8f: 27:53:ad:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCYOgMoNP5NKp/8+g47VXpxBKmrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjAzMDIwOTEzMTdaFw0yNjAzMDMxMTIxMTdaMDMxMTAvBgNV BAMTKERGMTRDMjQ1MkVEMDBBODVFQjhGMUVEMjg3MzAwODBCODVBRUM3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuKZ7x3FDIUZnzq4skjKzoxCd 2v3wTJnRWiOWk6UTzXx8HvEHcNI98f8OdrA7DxQ4BWdJcJAL0Z/wDHLLzM7Sf1ra Hd0jHsUWXHQlU7tc79dcdG3HGE/OCDTiWQY7oBjqA8umW39VgiK/wNp+h55G8x/4 OikOL3KIErBTnppAwsWlNyVY/eCgyZBm+kODgxffyUj7r8w+J71nlEPmapWFZ1kh jiXp7DFmidxtkulRAWqc0M6w38dwHnMhz74f9kHRKnTsMfTe9YKE/BB8EAUjgXv+ q8yvCWtTcaIy8ZuCQsNW2s5n5Xh5g85UzT+yPK2U8nY7nsPKO+pootNez5fjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3xTCRS7QCoXrjx7ShzAIC4Wux8cwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGJHwwNGnySt +eaS8Y6dVP4kx5fCVHk2/sk0DqAAgDnO83SNNKhM/lffZOIn3j4vrazDWr04hG+N Uf5Y1ywiI7JlKHQOb489p7skPou+VqIrcMGdONiw/XlrdbKYA174hSzlFSonDl9W S4uZPAnuWOFH9igR1uxIhcrPR9xFfOpoRfkCh5bspzQuJw6X6kLF36DW8ur11IfC UcNKMLgC7oSgvZhK4TZuVu+N/cm1ZvAJEtIlspxFQ3TG9bJ9Ko1Bqq6C9GSTIclz 3t/wLf8fcLhRyAnEeAP9W4qjN4ZzmTTzUFmYcJnP7TuOzwd96a/tFY6rDkUvz+oC YziPJ1OtNA== -----END CERTIFICATE-----Generated at Mon Mar 2 19:23:20 2026 by rpki-client