$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: rccC2GMcYBqrC7bbE864995D4g1CnOCu9dOZjl3mBjI= Subject key identifier: F5:9F:4A:8E:EA:D4:BE:FF:07:27:74:2D:15:C8:06:6F:F7:71:4C:E5 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 743A5206A35E1BC7FBE7CACE7E2B829A9FC0E646 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: C9 Signing time: Sat 10 Oct 2026 10:44:36 +0000 Manifest this update: Sat 10 Oct 2026 10:39:36 +0000 Manifest next update: Tue 13 Oct 2026 17:07:36 +0000 Files and hashes: 1: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 2: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 3: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 4: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) 5: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 6: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: mTKaAq6U7MhWNZ5WHupOKJZNT+iZmM1XtTy4t4dpvRI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3a:52:06:a3:5e:1b:c7:fb:e7:ca:ce:7e:2b:82:9a:9f:c0:e6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Oct 10 10:39:36 2026 GMT Not After : Oct 13 17:07:36 2026 GMT Subject: CN=F59F4A8EEAD4BEFF0727742D15C8066FF7714CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:64:f3:2e:15:bc:15:f0:e6:e3:be:db:17: 8f:1b:7d:c6:ad:0c:5d:04:59:6a:31:b4:11:58:05: 80:8a:6e:f5:c1:f0:ed:f3:87:e4:20:72:72:e5:76: b8:d6:0c:37:df:b9:25:36:56:62:93:f1:dc:db:b4: 5e:20:83:e2:19:25:e8:fd:e1:83:e9:13:14:57:d7: 60:95:2c:9c:17:07:95:5c:4a:93:d6:c6:78:7d:ec: ad:48:42:5a:20:88:69:fa:3f:bd:95:fd:06:36:5d: 49:9c:15:3a:5b:5f:c0:f7:13:fe:bf:44:bf:55:ae: 2a:4f:5c:7c:1e:86:15:8b:3f:ec:06:49:fe:45:34: 23:75:e5:b9:0b:ad:fe:12:17:40:05:bd:2c:50:41: 95:f7:c1:8f:1c:11:84:be:b1:a2:44:62:17:bc:fd: 82:6f:c9:c0:45:a5:cc:14:f0:71:e3:0f:7a:6d:3f: 3e:03:eb:e0:8e:8f:4f:e7:f1:b3:5f:7a:45:de:ff: 9a:ab:ba:94:15:03:87:ce:75:03:58:72:2d:2d:6d: e8:70:31:aa:17:d6:70:31:c7:55:cb:0d:68:74:2a: 19:43:2a:7e:36:1f:8e:c8:cc:17:18:94:54:06:ab: ec:84:7e:31:62:40:12:5a:47:00:ce:f3:53:08:df: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9F:4A:8E:EA:D4:BE:FF:07:27:74:2D:15:C8:06:6F:F7:71:4C:E5 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5e:ee:21:b1:56:f0:06:4e:d7:d6:59:92:2f:e7:03:d3:3a: 67:76:26:cc:3a:9f:98:bf:59:34:57:8e:67:9e:cc:d9:ec:70: 27:57:f7:83:de:9d:0a:58:63:59:3c:3b:8e:5f:00:ec:0e:f6: cc:dc:07:37:75:21:b7:1b:4c:ed:bf:e9:73:22:1f:30:b5:37: d2:00:23:61:11:b3:4d:b8:e8:57:7c:25:f1:5b:23:8f:5e:44: 14:f1:81:19:ee:b0:e9:f6:a1:a1:f8:9e:38:69:02:cd:5f:b3: 90:3c:ac:09:52:eb:b1:2f:e5:32:f4:c8:23:84:05:e0:3b:aa: a1:ff:93:1c:33:e3:de:f1:29:92:40:38:0a:1c:ee:7b:6c:fa: 2e:3e:83:38:56:c9:68:d1:47:bc:a9:d5:31:2f:8d:03:94:fa: 41:ea:46:18:f1:9e:46:15:6b:25:72:53:09:32:f8:03:a8:8e: d7:98:47:98:a6:9e:d8:4c:5a:df:75:f5:c0:59:98:f3:81:b9: 5a:9b:64:86:d3:fb:72:28:25:75:e8:6d:7d:16:76:16:0d:47: 6a:ad:15:e4:34:27:56:ee:48:67:91:28:d0:90:96:61:9a:d2: 63:87:1d:18:6f:ca:74:12:e1:94:30:6e:5a:bc:58:38:13:19: 59:af:06:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdDpSBqNeG8f758rOfiuCmp/A5kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjEwMTAxMDM5MzZaFw0yNjEwMTMxNzA3MzZaMDMxMTAvBgNV BAMTKEY1OUY0QThFRUFENEJFRkYwNzI3NzQyRDE1QzgwNjZGRjc3MTRDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmj2TzLhW8FfDm477bF48bfcat DF0EWWoxtBFYBYCKbvXB8O3zh+QgcnLldrjWDDffuSU2VmKT8dzbtF4gg+IZJej9 4YPpExRX12CVLJwXB5VcSpPWxnh97K1IQlogiGn6P72V/QY2XUmcFTpbX8D3E/6/ RL9VripPXHwehhWLP+wGSf5FNCN15bkLrf4SF0AFvSxQQZX3wY8cEYS+saJEYhe8 /YJvycBFpcwU8HHjD3ptPz4D6+COj0/n8bNfekXe/5qrupQVA4fOdQNYci0tbehw MaoX1nAxx1XLDWh0KhlDKn42H47IzBcYlFQGq+yEfjFiQBJaRwDO81MI3y6BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9Z9KjurUvv8HJ3QtFcgGb/dxTOUwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiV7uIbFW8AZO 19ZZki/nA9M6Z3YmzDqfmL9ZNFeOZ57M2exwJ1f3g96dClhjWTw7jl8A7A72zNwH N3UhtxtM7b/pcyIfMLU30gAjYRGzTbjoV3wl8Vsjj15EFPGBGe6w6fahofieOGkC zV+zkDysCVLrsS/lMvTII4QF4Duqof+THDPj3vEpkkA4Chzue2z6Lj6DOFbJaNFH vKnVMS+NA5T6QepGGPGeRhVrJXJTCTL4A6iO15hHmKae2Exa33X1wFmY84G5Wptk htP7cigldehtfRZ2Fg1Haq0V5DQnVu5IZ5Eo0JCWYZrSY4cdGG/KdBLhlDBuWrxY OBMZWa8GrA== -----END CERTIFICATE-----Generated at Sat Oct 10 17:05:53 2026 by rpki-client