$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: i+lW26FG/XBdu8eUaD/owBlueKX6CMqOc1PLefI5Qs8= Subject key identifier: 61:72:6B:57:83:BD:96:19:F1:A8:47:12:8F:34:5B:88:C8:12:B3:03 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 22D23883C31997EA8F23F1321CF0D30B94C40853 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 17:09:43 +0000 Manifest this update: Fri 17 Apr 2026 17:04:43 +0000 Manifest next update: Sat 18 Apr 2026 18:22:43 +0000 Files and hashes: 1: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: QP3PyauLF0A2wKTSJjts0D4+PZnyBeFi//hCR1eXo3o=) 2: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d2:38:83:c3:19:97:ea:8f:23:f1:32:1c:f0:d3:0b:94:c4:08:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Apr 17 17:04:43 2026 GMT Not After : Apr 18 18:22:43 2026 GMT Subject: CN=61726B5783BD9619F1A847128F345B88C812B303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:82:f8:ca:86:f3:0c:12:b8:5a:06:c3:83: 73:6b:81:6e:41:79:8d:7b:a3:b0:20:52:2d:b8:91: 08:bc:32:74:9e:ce:87:49:3e:53:9e:13:b6:2d:f3: 2b:b8:e4:94:95:0c:62:b1:78:31:e2:ef:2d:2f:45: 8e:26:8a:79:c7:5d:16:c0:96:c9:c6:fa:ba:7c:20: ab:f7:6b:d3:f8:ef:77:0a:83:4d:d5:35:e5:5a:7d: 39:ef:71:5a:e5:f2:86:17:78:31:84:fd:ee:81:8f: f8:69:3c:d3:cf:a5:3d:51:92:a7:de:23:3e:82:e8: af:d0:2b:a9:1f:34:72:15:dc:1b:65:10:31:4a:54: 39:67:3a:4d:d5:3f:16:21:53:15:6e:dc:72:82:4a: ec:a9:ae:6a:00:5b:88:3e:77:62:10:0b:10:ee:79: 40:af:42:a8:b7:04:de:4a:ff:2f:12:4e:90:cc:e3: 9d:9b:78:39:45:07:06:33:b6:2f:9b:ad:f9:0d:7a: eb:1a:63:63:3e:fc:32:bf:aa:ad:db:e6:9a:6e:c8: 7a:ce:2a:f4:e7:8c:4c:08:d5:01:62:79:29:8d:6d: 06:d2:82:87:aa:d7:5e:2c:d4:95:10:55:2c:0f:d7: 54:1e:90:6d:e3:51:5d:2a:7d:7f:24:80:4a:23:9b: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:72:6B:57:83:BD:96:19:F1:A8:47:12:8F:34:5B:88:C8:12:B3:03 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b9:8e:7e:28:8c:09:ab:55:f8:d2:9d:4e:92:4b:fe:e9:ab: 3f:39:99:79:e4:8f:e5:11:23:df:c2:f8:f4:82:96:7b:f8:4b: 76:f1:b1:88:d1:81:71:42:1c:df:d3:4c:48:aa:89:51:a3:7e: e1:79:4d:37:d7:e1:dd:6d:2c:77:7c:06:bd:dc:41:1a:31:a9: c4:94:d9:40:ba:cd:19:f4:c8:16:45:4c:b5:ba:f1:4d:fa:90: aa:2b:1d:09:0d:f2:d5:02:a5:7a:81:27:b9:d5:07:12:70:51: a0:c5:42:ce:f5:cc:7c:aa:8e:b7:7b:e3:66:cc:74:b0:7f:6c: 39:5c:c8:c7:9f:b6:35:f2:59:e5:a6:53:be:de:67:97:ef:2a: e3:39:d9:3d:f6:72:14:9f:9e:ae:c8:a5:ec:d0:5a:ca:8a:71: e0:7e:4f:bd:27:ca:15:19:4c:f4:29:eb:03:16:f7:b4:58:be: f2:1d:4b:24:05:d2:ea:ea:9e:12:a9:d0:b9:e2:3e:e9:b0:b9: 90:9f:ed:79:b7:06:0d:63:8d:96:ef:cf:ac:98:bb:b2:9f:4d: d0:9c:9f:80:32:a3:30:ea:95:97:40:04:98:0c:4e:20:33:42: 6b:83:0c:ef:cb:3d:6c:a5:90:15:1f:ed:dc:c2:dc:c8:29:0a: 6d:4d:60:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUItI4g8MZl+qPI/EyHPDTC5TECFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA0MTcxNzA0NDNaFw0yNjA0MTgxODIyNDNaMDMxMTAvBgNV BAMTKDYxNzI2QjU3ODNCRDk2MTlGMUE4NDcxMjhGMzQ1Qjg4QzgxMkIzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2YL4yobzDBK4WgbDg3NrgW5B eY17o7AgUi24kQi8MnSezodJPlOeE7Yt8yu45JSVDGKxeDHi7y0vRY4minnHXRbA lsnG+rp8IKv3a9P473cKg03VNeVafTnvcVrl8oYXeDGE/e6Bj/hpPNPPpT1Rkqfe Iz6C6K/QK6kfNHIV3BtlEDFKVDlnOk3VPxYhUxVu3HKCSuyprmoAW4g+d2IQCxDu eUCvQqi3BN5K/y8STpDM452beDlFBwYzti+brfkNeusaY2M+/DK/qq3b5ppuyHrO KvTnjEwI1QFieSmNbQbSgoeq114s1JUQVSwP11QekG3jUV0qfX8kgEojmwYHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYXJrV4O9lhnxqEcSjzRbiMgSswMwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbmOfiiMCatV +NKdTpJL/umrPzmZeeSP5REj38L49IKWe/hLdvGxiNGBcUIc39NMSKqJUaN+4XlN N9fh3W0sd3wGvdxBGjGpxJTZQLrNGfTIFkVMtbrxTfqQqisdCQ3y1QKleoEnudUH EnBRoMVCzvXMfKqOt3vjZsx0sH9sOVzIx5+2NfJZ5aZTvt5nl+8q4znZPfZyFJ+e rsil7NBayopx4H5PvSfKFRlM9CnrAxb3tFi+8h1LJAXS6uqeEqnQueI+6bC5kJ/t ebcGDWONlu/PrJi7sp9N0JyfgDKjMOqVl0AEmAxOIDNCa4MM78s9bKWQFR/t3MLc yCkKbU1g+g== -----END CERTIFICATE-----Generated at Sat Apr 18 03:53:09 2026 by rpki-client