$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: wEer2twUnz55qdcFPYI2XOsrFXDCtPVxqZ/KMcquBlE= Subject key identifier: BC:E0:E3:B7:26:D3:E4:E8:B6:7D:FB:52:37:92:96:C9:11:F5:CB:CC Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 6D1179DEF06C81A56DA8BDAD5948AD10F98FD034 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 51 Signing time: Sat 13 Jun 2026 17:56:59 +0000 Manifest this update: Sat 13 Jun 2026 17:51:59 +0000 Manifest next update: Sun 14 Jun 2026 21:02:59 +0000 Files and hashes: 1: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 2: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 3: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 4: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: h8Ovmx2ZIrurf1g5WMQsAT2BKF2KuoZ3L4izejw+XRg=) 5: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:11:79:de:f0:6c:81:a5:6d:a8:bd:ad:59:48:ad:10:f9:8f:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Jun 13 17:51:59 2026 GMT Not After : Jun 14 21:02:59 2026 GMT Subject: CN=BCE0E3B726D3E4E8B67DFB52379296C911F5CBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:3b:7d:f4:ba:24:75:66:6a:21:3f:50:70: 97:17:3c:93:02:20:55:75:89:e9:a4:b4:42:37:dc: e9:2a:2d:e3:2e:4c:d1:59:d9:77:32:33:17:c3:a2: b9:38:86:bc:ac:41:b0:8e:0d:de:18:35:b0:11:4d: 71:c5:22:87:ee:f2:55:a3:62:82:1a:af:6e:07:af: ef:c5:c3:ae:a9:5e:3b:9c:89:54:bf:48:2a:e1:86: 8c:40:e5:85:6c:8f:96:18:5e:c6:f7:6b:94:2e:ec: e6:05:73:d3:e9:e2:40:50:84:83:2a:ad:10:43:fb: 20:73:45:f5:1d:4e:bb:40:aa:e6:e8:8a:33:aa:9f: 5e:69:7c:79:b5:3a:ef:76:d8:4c:2a:50:43:2e:f4: 5b:ce:fb:b3:5b:61:f6:16:f5:2b:5f:76:2d:67:e7: 0e:85:4c:c5:e5:d5:53:70:1a:0a:ab:d9:1f:70:f3: 8a:ab:9b:4e:30:1d:91:df:7b:7b:11:e7:8a:0f:87: 14:aa:96:9b:77:43:c9:7a:a4:23:7b:8c:c2:06:a8: 40:88:ad:6f:bd:03:12:5b:aa:ea:d7:15:4f:53:e7: aa:59:fc:43:e0:90:cf:59:96:5a:57:25:fd:e0:92: 5e:c0:e6:a5:7a:60:62:70:2a:73:bb:80:5f:1e:35: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:E3:B7:26:D3:E4:E8:B6:7D:FB:52:37:92:96:C9:11:F5:CB:CC X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3b:87:8a:5a:87:6b:26:cb:20:79:20:02:26:39:94:fb:a6: 84:56:04:4c:55:93:e6:c9:b8:30:92:ed:89:b3:26:88:d6:98: d1:da:20:6f:79:d0:d0:e9:04:70:47:1d:6b:24:7f:a1:5c:5a: 63:34:8c:dc:c5:24:ed:85:f3:0c:42:68:37:52:6a:7c:7e:90: fc:44:a4:d6:4a:79:d4:07:e6:05:a9:a4:d8:7b:17:bc:b6:b3: 09:c3:52:a2:63:a7:95:5f:51:d5:89:26:dd:bd:fa:6a:22:89: 00:bb:75:f8:bf:8e:13:10:9e:78:73:83:87:7a:68:b7:3c:60: 39:85:33:a0:4e:d6:e0:29:18:c1:0f:4d:98:5b:04:36:65:6e: 9a:b8:9d:f5:c4:72:56:dc:d1:93:f2:f2:fd:23:60:4a:4a:1c: 32:0c:d7:de:52:ff:86:99:7b:22:1d:37:d5:74:46:88:f6:d6: 4c:f4:d7:c1:61:20:68:3a:ae:a8:8e:8a:cf:f2:d9:f7:91:45: 9a:60:fb:26:1e:aa:b0:b4:af:6b:97:ff:8b:f6:d5:d4:bf:4f: 86:6e:7e:72:7b:0c:4a:dd:3d:70:23:a7:d9:36:5a:40:18:48: aa:58:d7:ff:da:88:b4:1e:06:41:82:9c:4f:6a:8b:3b:21:04: 40:68:c4:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbRF53vBsgaVtqL2tWUitEPmP0DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA2MTMxNzUxNTlaFw0yNjA2MTQyMTAyNTlaMDMxMTAvBgNV BAMTKEJDRTBFM0I3MjZEM0U0RThCNjdERkI1MjM3OTI5NkM5MTFGNUNCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNTt99LokdWZqIT9QcJcXPJMC IFV1iemktEI33OkqLeMuTNFZ2XcyMxfDork4hrysQbCODd4YNbARTXHFIofu8lWj YoIar24Hr+/Fw66pXjuciVS/SCrhhoxA5YVsj5YYXsb3a5Qu7OYFc9Pp4kBQhIMq rRBD+yBzRfUdTrtAquboijOqn15pfHm1Ou922EwqUEMu9FvO+7NbYfYW9Stfdi1n 5w6FTMXl1VNwGgqr2R9w84qrm04wHZHfe3sR54oPhxSqlpt3Q8l6pCN7jMIGqECI rW+9AxJbqurXFU9T56pZ/EPgkM9ZllpXJf3gkl7A5qV6YGJwKnO7gF8eNU7jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvODjtybT5Oi2fftSN5KWyRH1y8wwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujuHilqHaybL IHkgAiY5lPumhFYETFWT5sm4MJLtibMmiNaY0dogb3nQ0OkEcEcdayR/oVxaYzSM 3MUk7YXzDEJoN1JqfH6Q/ESk1kp51AfmBamk2HsXvLazCcNSomOnlV9R1Ykm3b36 aiKJALt1+L+OExCeeHODh3potzxgOYUzoE7W4CkYwQ9NmFsENmVumrid9cRyVtzR k/Ly/SNgSkocMgzX3lL/hpl7Ih031XRGiPbWTPTXwWEgaDquqI6Kz/LZ95FFmmD7 Jh6qsLSva5f/i/bV1L9Phm5+cnsMSt09cCOn2TZaQBhIqljX/9qItB4GQYKcT2qL OyEEQGjEfg== -----END CERTIFICATE-----Generated at Sun Jun 14 03:42:13 2026 by rpki-client