$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: XR9j2byk7jabbejacuf4owDW8w1ImaAxxXnjEQ5KN4M= Subject key identifier: 90:86:69:43:8A:0E:F6:7A:9A:E0:9D:EF:2D:81:03:E1:80:C8:52:DB Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 415BC5A1AE830B8FC77FD36167B6AE6BDDD15189 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 8D Signing time: Tue 28 Jul 2026 19:57:39 +0000 Manifest this update: Tue 28 Jul 2026 19:52:39 +0000 Manifest next update: Wed 29 Jul 2026 21:00:39 +0000 Files and hashes: 1: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: UWcKso32qtpImTvzX0WwSyyotTYSdbhc3uBr0bWOUDM=) 2: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 3: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) 4: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 5: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 6: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5b:c5:a1:ae:83:0b:8f:c7:7f:d3:61:67:b6:ae:6b:dd:d1:51:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Jul 28 19:52:39 2026 GMT Not After : Jul 29 21:00:39 2026 GMT Subject: CN=908669438A0EF67A9AE09DEF2D8103E180C852DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:8d:02:65:1b:58:65:f0:81:25:b4:b4:8f: 24:33:94:85:4e:98:d7:9d:ea:e4:8b:ae:ea:c4:ee: b6:2f:40:a8:ea:e7:0f:0d:39:37:11:7b:05:1b:53: 8f:f7:99:7f:50:58:22:ac:ae:6c:cb:3b:d2:d9:08: 4a:6c:86:5a:1b:6a:f3:ed:2f:22:a3:fb:6a:f8:a6: a6:d3:7e:ba:d8:21:d1:07:d5:d7:f5:7e:b8:61:95: 73:10:91:26:10:e4:8c:ba:59:27:57:e7:11:0a:00: 18:79:98:ae:4a:50:f4:66:ed:b5:e2:01:1e:e6:d2: 54:58:03:2e:72:39:ef:2d:34:1d:4b:d0:79:a2:29: 6d:4e:6e:2a:e4:34:36:e4:f0:71:14:72:bf:d0:25: 3d:05:9d:83:61:81:3a:69:95:86:3f:f2:86:b1:29: ed:0d:82:21:35:11:b6:97:10:2f:85:4b:88:69:95: e2:bf:5e:dd:66:83:0f:11:bf:a6:ce:3b:78:91:12: d3:25:8e:b1:5b:66:07:d0:b8:b3:ee:41:76:ae:b7: cc:b7:1d:04:c9:da:06:04:30:3a:99:46:da:5d:d3: 96:f9:0e:96:3c:86:00:20:f1:7b:ca:0f:5e:ba:d1: d2:b2:f4:7f:e3:09:75:84:ee:ac:8a:30:c1:fa:36: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:86:69:43:8A:0E:F6:7A:9A:E0:9D:EF:2D:81:03:E1:80:C8:52:DB X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:71:5c:20:f7:9b:06:81:ef:34:16:0f:4a:94:38:53:d3:b7: a6:c6:e7:a7:e2:72:0e:d9:a8:b0:48:04:26:2b:c8:ee:c1:c1: b8:2c:ac:d5:6b:c4:d6:f1:77:51:87:c9:7a:27:e3:ef:47:05: ee:e1:dc:76:42:ba:c2:26:cc:c1:05:2f:93:73:d1:0b:c3:37: 74:56:82:16:72:88:0a:18:20:fe:86:ba:5f:b4:18:f9:56:37: fb:92:64:e9:e7:b6:85:ed:66:c4:7f:62:28:b2:f5:e4:ca:ce: 50:9e:90:e5:1d:2e:e7:f3:90:b8:66:bb:6c:7b:40:50:3e:62: 62:e1:ae:ad:f5:93:66:28:fe:ba:c4:f3:f6:ee:ce:9c:a6:7a: 95:35:a0:e0:21:1e:88:86:34:19:ee:57:9f:32:9a:35:73:2c: 4e:0a:f1:bc:05:63:ce:a9:78:39:3c:a7:86:f8:10:eb:41:4d: 88:75:3f:56:ad:d5:c8:a9:0a:20:5e:78:27:40:9d:5e:d8:84: 85:7d:64:a3:72:75:ba:03:e8:af:e9:fc:5d:80:0b:2e:21:15: c4:14:9b:cd:b3:21:aa:3c:7b:1c:92:75:a1:7c:35:f4:63:a7: bb:b5:1a:9a:5e:9e:c3:9a:64:05:41:52:2d:f4:cd:4a:29:5c: 24:17:08:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQVvFoa6DC4/Hf9NhZ7aua93RUYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA3MjgxOTUyMzlaFw0yNjA3MjkyMTAwMzlaMDMxMTAvBgNV BAMTKDkwODY2OTQzOEEwRUY2N0E5QUUwOURFRjJEODEwM0UxODBDODUyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6Y0CZRtYZfCBJbS0jyQzlIVO mNed6uSLrurE7rYvQKjq5w8NOTcRewUbU4/3mX9QWCKsrmzLO9LZCEpshlobavPt LyKj+2r4pqbTfrrYIdEH1df1frhhlXMQkSYQ5Iy6WSdX5xEKABh5mK5KUPRm7bXi AR7m0lRYAy5yOe8tNB1L0HmiKW1ObirkNDbk8HEUcr/QJT0FnYNhgTpplYY/8oax Ke0NgiE1EbaXEC+FS4hpleK/Xt1mgw8Rv6bOO3iREtMljrFbZgfQuLPuQXaut8y3 HQTJ2gYEMDqZRtpd05b5DpY8hgAg8XvKD1660dKy9H/jCXWE7qyKMMH6NiAlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkIZpQ4oO9nqa4J3vLYED4YDIUtswHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXFcIPebBoHv NBYPSpQ4U9O3psbnp+JyDtmosEgEJivI7sHBuCys1WvE1vF3UYfJeifj70cF7uHc dkK6wibMwQUvk3PRC8M3dFaCFnKIChgg/oa6X7QY+VY3+5Jk6ee2he1mxH9iKLL1 5MrOUJ6Q5R0u5/OQuGa7bHtAUD5iYuGurfWTZij+usTz9u7OnKZ6lTWg4CEeiIY0 Ge5XnzKaNXMsTgrxvAVjzql4OTynhvgQ60FNiHU/Vq3VyKkKIF54J0CdXtiEhX1k o3J1ugPor+n8XYALLiEVxBSbzbMhqjx7HJJ1oXw19GOnu7Uaml6ew5pkBUFSLfTN SilcJBcIjQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:32:48 2026 by rpki-client