$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: OlRZjqWC23TFA5r5vPn7xWAFeImgqrxSof0boUxNJzY= Subject key identifier: DC:37:BE:4B:37:CA:F6:74:42:46:57:BB:5E:DC:61:4C:30:96:20:79 Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 6B0A69513B3E2C2F09707CB81BB76B35DE83E5A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: 82 Signing time: Wed 29 Jul 2026 00:17:58 +0000 Manifest this update: Wed 29 Jul 2026 00:12:58 +0000 Manifest next update: Thu 30 Jul 2026 01:59:58 +0000 Files and hashes: 1: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 2: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: jqzFRRBRoP9MtB0QMFxF24R/r4QAbXRUGmALv2ZwJGE=) 3: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0a:69:51:3b:3e:2c:2f:09:70:7c:b8:1b:b7:6b:35:de:83:e5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Jul 29 00:12:58 2026 GMT Not After : Jul 30 01:59:58 2026 GMT Subject: CN=DC37BE4B37CAF674424657BB5EDC614C30962079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:f0:41:b9:47:7e:ff:38:0d:0c:23:b3:6e: 61:c3:e4:e9:51:b3:da:4c:bb:2b:98:37:97:8a:0d: ef:bd:4e:67:e7:d6:a5:5a:8b:aa:da:e8:61:95:65: 89:95:33:7d:8e:77:56:1c:2e:3b:b4:31:9a:e5:88: e5:93:7c:00:f4:03:db:04:19:b5:ec:79:42:40:35: 0c:e4:41:11:36:e1:32:3f:e3:df:40:a1:f6:7f:b2: 86:b0:86:ca:29:4d:af:17:b8:ca:16:a6:e1:18:ce: 12:eb:bc:1f:2f:2a:71:19:b1:0c:81:62:74:57:19: 16:0f:52:13:20:ae:b2:8f:c4:83:59:e6:fa:9b:ae: c2:ef:d9:fe:c9:6e:e2:64:9f:12:8b:c1:a1:5d:13: 4c:c3:8f:ee:ae:4b:42:78:ce:d0:68:d0:b7:da:4d: 58:c0:20:3f:5b:21:7b:d4:12:86:5e:a3:64:e7:d5: 8e:f2:a4:73:22:59:e2:41:5f:8c:9c:43:fc:ac:61: 2d:44:b4:12:f0:c6:bf:4f:b7:b2:97:f8:10:50:c3: 95:7a:86:1e:3a:85:9c:b0:12:76:b8:8d:27:ae:40: de:f6:5f:cc:eb:6c:7e:ba:64:f2:be:75:7d:6f:54: c0:c6:31:f5:48:fe:5a:bd:32:b8:a5:45:d3:c9:69: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:BE:4B:37:CA:F6:74:42:46:57:BB:5E:DC:61:4C:30:96:20:79 X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:39:ff:3e:e7:35:63:03:08:5f:61:6e:92:f7:60:b6:fd:d8: cd:50:94:be:9f:0f:b2:52:c2:ae:bb:5d:54:3e:61:4d:90:83: 85:1e:4c:50:d3:08:e4:0d:a1:b6:e1:49:5e:39:94:db:75:9b: 75:ea:d8:8e:b9:c3:06:0f:56:16:6a:75:be:61:94:af:59:81: 95:60:12:6c:09:63:6a:85:a4:19:1b:d4:7f:22:80:3b:9f:56: c3:6c:36:5d:7e:07:76:cf:85:84:f6:bc:cc:ea:6f:24:89:9b: 5b:fd:63:a3:bc:91:5c:33:73:b4:b4:44:3e:55:71:0e:54:a9: 3f:1f:84:a9:cd:97:d7:79:3a:43:72:b7:74:08:3b:5e:07:de: ce:ca:c4:f3:ef:83:db:32:a9:9d:16:42:b2:50:54:3e:b9:6c: 90:7e:c7:bc:0b:9f:98:19:ed:9e:e8:39:50:ef:dd:b3:0e:4e: 6a:43:21:d9:14:c2:a5:79:27:78:28:d9:c2:55:ed:6b:2f:7e: ee:9d:eb:1c:92:3f:c2:82:5f:16:6e:aa:9d:d8:20:88:a1:43: 36:f7:aa:78:17:b1:9e:24:dc:3e:25:cf:22:41:76:d8:9c:5b: c1:ec:85:d6:ad:a9:30:e1:6c:d2:bc:30:95:6f:b4:c1:61:8c: d6:63:60:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUawppUTs+LC8JcHy4G7drNd6D5agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjA3MjkwMDEyNThaFw0yNjA3MzAwMTU5NThaMDMxMTAvBgNV BAMTKERDMzdCRTRCMzdDQUY2NzQ0MjQ2NTdCQjVFREM2MTRDMzA5NjIwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NfBBuUd+/zgNDCOzbmHD5OlR s9pMuyuYN5eKDe+9Tmfn1qVai6ra6GGVZYmVM32Od1YcLju0MZrliOWTfAD0A9sE GbXseUJANQzkQRE24TI/499AofZ/soawhsopTa8XuMoWpuEYzhLrvB8vKnEZsQyB YnRXGRYPUhMgrrKPxINZ5vqbrsLv2f7JbuJknxKLwaFdE0zDj+6uS0J4ztBo0Lfa TVjAID9bIXvUEoZeo2Tn1Y7ypHMiWeJBX4ycQ/ysYS1EtBLwxr9Pt7KX+BBQw5V6 hh46hZywEna4jSeuQN72X8zrbH66ZPK+dX1vVMDGMfVI/lq9MrilRdPJaaf7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3De+SzfK9nRCRle7XtxhTDCWIHkwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDn/Puc1YwMI X2Fukvdgtv3YzVCUvp8PslLCrrtdVD5hTZCDhR5MUNMI5A2htuFJXjmU23WbderY jrnDBg9WFmp1vmGUr1mBlWASbAljaoWkGRvUfyKAO59Ww2w2XX4Hds+FhPa8zOpv JImbW/1jo7yRXDNztLREPlVxDlSpPx+Eqc2X13k6Q3K3dAg7XgfezsrE8++D2zKp nRZCslBUPrlskH7HvAufmBntnug5UO/dsw5OakMh2RTCpXkneCjZwlXtay9+7p3r HJI/woJfFm6qndggiKFDNveqeBexniTcPiXPIkF22JxbweyF1q2pMOFs0rwwlW+0 wWGM1mNgKQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:34:35 2026 by rpki-client