$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: RGAJE2aR+t58wlEkvQHiOBIG34/hadqj2h4oYzXMLoI= Subject key identifier: E6:69:8A:61:CE:C0:BA:0D:42:23:D4:61:EA:32:38:56:7E:F0:05:4F Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 676BCC6490C6FED81020CD23D193DE177C3747BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: C0 Signing time: Tue 13 Oct 2026 07:07:49 +0000 Manifest this update: Tue 13 Oct 2026 07:02:49 +0000 Manifest next update: Fri 16 Oct 2026 11:41:49 +0000 Files and hashes: 1: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) 2: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 3: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: xE2TeM2PUMXrJVha296nJrs/kg/nMpfOaQAPsnpjzCw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6b:cc:64:90:c6:fe:d8:10:20:cd:23:d1:93:de:17:7c:37:47:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Oct 13 07:02:49 2026 GMT Not After : Oct 16 11:41:49 2026 GMT Subject: CN=E6698A61CEC0BA0D4223D461EA3238567EF0054F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:19:d1:4e:0b:5a:87:32:f5:64:b8:d9:fa: e0:ba:1d:36:66:24:6c:7e:22:99:b2:48:05:72:19: 3e:3a:55:1f:ff:b0:c2:23:e1:7f:fd:62:03:ee:c6: 5d:85:ad:ee:b7:d3:3e:35:52:ae:c1:d7:3a:ec:f9: 6a:87:34:c8:6d:de:c7:e1:bb:b1:6e:81:d7:ca:4f: 75:16:5a:32:c1:fb:7b:e8:d2:17:68:42:9a:9f:f4: 67:85:db:4c:44:ca:72:0d:a2:46:26:e0:20:58:0c: 75:f2:4d:b6:6c:8a:db:28:ef:15:4a:64:80:c4:a8: a1:c8:25:78:b3:27:ba:33:98:40:3c:69:36:dc:08: aa:ba:6d:a8:36:09:70:c1:c3:06:33:1f:30:68:e4: 65:69:dc:5b:3e:f8:35:3e:70:96:f0:3c:11:b4:f8: 2f:2e:02:66:51:88:3c:d7:84:42:c6:4a:c8:2a:a6: ca:5e:6e:33:fb:33:62:8f:21:5d:50:dd:ad:5b:90: ba:4e:3a:39:2e:45:92:90:74:54:ea:90:44:e1:96: a6:e8:ab:0e:7d:34:8e:b0:fc:30:ff:fe:ea:66:f9: 92:cd:79:03:04:cd:a9:97:fd:00:44:43:f9:a3:18: a5:0a:aa:67:a0:05:39:1a:12:a4:d6:83:71:52:f7: d0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:69:8A:61:CE:C0:BA:0D:42:23:D4:61:EA:32:38:56:7E:F0:05:4F X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:08:2b:f5:ca:30:1e:28:da:d7:78:3c:0c:ff:24:c9:24:4b: fd:b6:d8:8a:c6:a1:0f:73:85:18:08:dc:66:58:5b:0f:fb:84: 07:12:77:10:81:d7:a5:d3:7a:13:15:6c:d1:61:e6:73:3c:65: 72:09:6a:4e:42:f2:1e:cd:e9:e1:dd:6c:b3:5a:e3:80:84:ce: 5a:f5:23:53:35:b7:58:18:7a:d2:34:16:86:14:1f:91:49:f0: c3:0b:18:d0:b4:fb:0e:36:6a:4a:9e:d3:fd:df:1a:45:06:49: 08:a6:a7:31:18:05:ba:d2:4b:d2:ef:e0:ed:c3:0b:6c:9e:b2: 22:35:dc:b2:00:ba:55:04:64:d5:7b:3e:16:68:8b:e2:65:01: ef:93:42:bc:88:16:32:5e:47:86:d9:d5:78:cd:2e:99:43:ae: 6f:9b:d3:ce:f5:8a:e6:c3:4a:31:44:71:ba:c2:f1:55:80:ca: 3c:10:f2:88:17:47:d1:c5:95:e2:f4:11:33:bc:c7:12:ef:a7: d4:21:41:8e:c7:2a:da:18:12:94:14:23:2d:83:79:b8:14:50: f4:57:df:c1:2c:96:81:d7:67:95:27:ba:48:15:5e:ea:a0:5c: ab:3d:b3:7c:a8:77:a0:9d:ad:be:29:d7:8e:bf:12:68:81:63: ed:46:6b:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ2vMZJDG/tgQIM0j0ZPeF3w3R78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjEwMTMwNzAyNDlaFw0yNjEwMTYxMTQxNDlaMDMxMTAvBgNV BAMTKEU2Njk4QTYxQ0VDMEJBMEQ0MjIzRDQ2MUVBMzIzODU2N0VGMDA1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KBnRTgtahzL1ZLjZ+uC6HTZm JGx+IpmySAVyGT46VR//sMIj4X/9YgPuxl2Fre630z41Uq7B1zrs+WqHNMht3sfh u7FugdfKT3UWWjLB+3vo0hdoQpqf9GeF20xEynINokYm4CBYDHXyTbZsitso7xVK ZIDEqKHIJXizJ7ozmEA8aTbcCKq6bag2CXDBwwYzHzBo5GVp3Fs++DU+cJbwPBG0 +C8uAmZRiDzXhELGSsgqpspebjP7M2KPIV1Q3a1bkLpOOjkuRZKQdFTqkEThlqbo qw59NI6w/DD//upm+ZLNeQMEzamX/QBEQ/mjGKUKqmegBTkaEqTWg3FS99AJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5mmKYc7Aug1CI9Rh6jI4Vn7wBU8wHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwgr9cowHija 13g8DP8kySRL/bbYisahD3OFGAjcZlhbD/uEBxJ3EIHXpdN6ExVs0WHmczxlcglq TkLyHs3p4d1ss1rjgITOWvUjUzW3WBh60jQWhhQfkUnwwwsY0LT7DjZqSp7T/d8a RQZJCKanMRgFutJL0u/g7cMLbJ6yIjXcsgC6VQRk1Xs+FmiL4mUB75NCvIgWMl5H htnVeM0umUOub5vTzvWK5sNKMURxusLxVYDKPBDyiBdH0cWV4vQRM7zHEu+n1CFB jscq2hgSlBQjLYN5uBRQ9FffwSyWgddnlSe6SBVe6qBcqz2zfKh3oJ2tvinXjr8S aIFj7UZrsw== -----END CERTIFICATE-----Generated at Tue Oct 13 21:24:44 2026 by rpki-client