$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: 1fAFOFS8Ew6r5UNExR9nfbaQUY7z8egYJEgK+3NpQdc= Subject key identifier: CF:0F:A8:8D:FE:9B:E7:96:F9:F6:A6:7A:6B:AC:62:B0:A5:A0:10:F9 Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 24B19E373726EA7C23C2E429E8054732A80E5B15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: 8C Signing time: Wed 29 Jul 2026 01:43:06 +0000 Manifest this update: Wed 29 Jul 2026 01:38:06 +0000 Manifest next update: Thu 30 Jul 2026 03:07:06 +0000 Files and hashes: 1: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) 2: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: 8IZdzHQ8jsyyppwmG5xTWsMWak1VlrpCc4IfFyG58GI=) 3: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) 4: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 5: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b1:9e:37:37:26:ea:7c:23:c2:e4:29:e8:05:47:32:a8:0e:5b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: Jul 29 01:38:06 2026 GMT Not After : Jul 30 03:07:06 2026 GMT Subject: CN=CF0FA88DFE9BE796F9F6A67A6BAC62B0A5A010F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:b8:4c:99:b7:c1:ee:4c:4d:df:d0:69:a9: a2:4b:32:96:53:ac:7c:f1:9b:2f:d2:f4:b0:3c:82: d7:01:4e:d0:1c:61:cd:cb:6a:18:3f:90:be:69:c2: df:32:10:46:26:67:13:58:92:04:90:b6:83:7a:9d: 8f:6e:f0:6b:6b:65:f3:59:cb:3a:a8:64:79:e6:bb: 7f:6e:4a:1f:a1:18:b1:bb:a7:dc:e0:25:7d:2a:96: 19:56:bb:94:5b:01:25:08:33:ff:af:f3:91:69:1e: 6b:ca:28:44:f2:2c:cc:c8:a4:86:c7:29:41:8d:a0: 5a:e8:f5:27:4a:88:57:ee:71:b5:ba:77:77:fd:98: d4:c4:c6:fc:49:6b:c9:d4:e0:58:6a:92:da:6d:76: 09:79:df:58:ed:20:d5:0d:f5:cc:9e:4b:3a:72:b5: b3:68:cb:ef:99:e5:73:87:ef:11:ba:b0:9e:bf:f8: 2b:a7:27:e7:26:3d:a3:66:b2:88:e9:87:10:8b:ab: b6:00:a8:63:3f:82:ff:71:7e:12:80:a5:28:9a:da: 01:0d:7f:74:03:20:ba:d0:7f:63:e3:01:97:67:c2: 0d:fb:b5:74:b5:6a:53:6b:dd:f4:f2:26:48:ed:5e: 4a:df:82:ef:b3:e7:71:cb:1c:14:08:34:8a:7f:d2: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:A8:8D:FE:9B:E7:96:F9:F6:A6:7A:6B:AC:62:B0:A5:A0:10:F9 X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:65:f4:53:1f:94:d7:2a:46:5a:da:cb:01:66:3a:de:6b:43: 5c:ac:8f:93:2e:0c:5f:ee:a6:07:7a:ca:20:ff:66:3a:4d:14: 10:65:9e:b7:9d:64:0c:e2:b8:9f:1b:3a:84:a7:52:10:84:80: 52:1d:df:58:13:44:2d:81:e4:5a:ec:79:ec:bb:e0:77:94:e7: 30:e1:4b:fe:a1:e7:0a:20:8e:a3:23:e7:8d:04:e9:2f:34:f2: 84:a7:b7:bc:be:f5:a7:ac:a2:d8:d7:d1:08:bf:12:97:ca:01: 72:42:e2:3d:8b:19:b2:65:b7:cb:d1:7c:c3:9b:19:b8:1e:4e: 70:4f:aa:aa:ea:24:0a:7a:e8:da:9e:73:c1:c4:66:32:04:b9: d3:5a:22:5d:eb:16:bf:2a:36:23:46:5c:8e:c9:a3:99:15:2a: 1f:cd:08:43:4a:d3:f7:87:c5:b4:1a:97:90:4c:5d:74:94:5a: d4:78:ad:4b:2b:55:17:42:19:bf:92:63:ea:bb:0f:83:95:e0: 75:27:ed:21:d3:02:ed:f4:9f:68:17:29:ba:88:2f:bb:1d:37: 6c:3d:77:09:ef:82:76:fc:7a:49:d4:52:d5:2d:4d:08:41:72: fb:a6:cf:fc:b6:3e:a3:6d:47:2c:9a:30:52:e5:ab:93:c8:c5: 63:b2:c2:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJLGeNzcm6nwjwuQp6AVHMqgOWxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA3MjkwMTM4MDZaFw0yNjA3MzAwMzA3MDZaMDMxMTAvBgNV BAMTKENGMEZBODhERkU5QkU3OTZGOUY2QTY3QTZCQUM2MkIwQTVBMDEwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08LhMmbfB7kxN39BpqaJLMpZT rHzxmy/S9LA8gtcBTtAcYc3Lahg/kL5pwt8yEEYmZxNYkgSQtoN6nY9u8GtrZfNZ yzqoZHnmu39uSh+hGLG7p9zgJX0qlhlWu5RbASUIM/+v85FpHmvKKETyLMzIpIbH KUGNoFro9SdKiFfucbW6d3f9mNTExvxJa8nU4Fhqktptdgl531jtINUN9cyeSzpy tbNoy++Z5XOH7xG6sJ6/+CunJ+cmPaNmsojphxCLq7YAqGM/gv9xfhKApSia2gEN f3QDILrQf2PjAZdnwg37tXS1alNr3fTyJkjtXkrfgu+z53HLHBQINIp/0mwJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzw+ojf6b55b59qZ6a6xisKWgEPkwHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvGX0Ux+U1ypG WtrLAWY63mtDXKyPky4MX+6mB3rKIP9mOk0UEGWet51kDOK4nxs6hKdSEISAUh3f WBNELYHkWux57Lvgd5TnMOFL/qHnCiCOoyPnjQTpLzTyhKe3vL71p6yi2NfRCL8S l8oBckLiPYsZsmW3y9F8w5sZuB5OcE+qquokCnro2p5zwcRmMgS501oiXesWvyo2 I0ZcjsmjmRUqH80IQ0rT94fFtBqXkExddJRa1HitSytVF0IZv5Jj6rsPg5XgdSft IdMC7fSfaBcpuogvux03bD13Ce+Cdvx6SdRS1S1NCEFy+6bP/LY+o21HLJowUuWr k8jFY7LCDA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:32:12 2026 by rpki-client