$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft (raw, json) Hash identifier: 8p72vA5l5k6oochbQ5w8BhG3MakASK6r2i68vd/eXKg= Subject key identifier: 65:A6:DC:33:59:15:23:E5:2E:5F:27:8A:12:9F:92:2F:53:FE:E5:94 Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 154F7D2E39F8D514C40C914F57C9C166BF173879 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft Manifest number: 35 Signing time: Wed 29 Jul 2026 02:58:14 +0000 Manifest this update: Wed 29 Jul 2026 02:53:14 +0000 Manifest next update: Thu 30 Jul 2026 04:35:14 +0000 Files and hashes: 1: 3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (hash: +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=) 2: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl (hash: lyOXquuImJEighkEJkQrB3OS16PbML4BGLcqVPP9CMg=) 3: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (hash: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=) 4: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (hash: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4f:7d:2e:39:f8:d5:14:c4:0c:91:4f:57:c9:c1:66:bf:17:38:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Jul 29 02:53:14 2026 GMT Not After : Jul 30 04:35:14 2026 GMT Subject: CN=65A6DC33591523E52E5F278A129F922F53FEE594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:44:b7:1c:11:df:d2:dd:a6:7c:21:05:25: 35:a3:ff:bb:76:ac:a8:96:80:af:f7:0e:ca:43:2c: 4d:eb:8c:52:60:ef:3b:32:71:01:a3:4c:47:e7:9a: 81:ae:4c:c3:45:0f:82:c3:66:8f:c1:d1:f5:67:4e: 68:34:aa:5d:e9:df:ec:51:bc:f4:6c:1e:d0:38:29: d7:f4:6f:20:53:31:d7:64:bf:35:48:40:23:a6:f8: 84:81:e8:af:c7:67:ba:f7:7b:7b:18:2c:34:d8:49: 5d:47:28:f4:9d:bd:c5:90:96:8a:73:84:96:0e:3f: 08:67:7b:31:cf:69:4b:c9:d8:d7:51:68:b0:bf:2c: 0f:3a:3a:bf:bf:a4:47:f9:44:06:c5:24:02:e2:4b: cd:a5:5d:b6:3e:15:dd:ac:6e:b7:ab:35:c6:31:21: 05:6b:48:6a:4d:3e:56:34:ea:ac:55:71:22:cd:4c: 4f:98:a8:0a:9f:8c:f5:8b:7a:ce:28:f8:04:70:38: 8b:13:97:bf:38:3e:8c:5f:8d:5f:2d:b0:e6:73:2c: fb:db:a2:a7:af:7e:e9:3e:c2:52:b6:99:30:a2:13: ec:2b:91:1c:38:3c:fd:bc:2e:9a:e4:7b:ae:cc:c8: 2b:b5:db:f5:dd:5f:e5:67:e6:e9:14:f2:40:12:f6: 1a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:DC:33:59:15:23:E5:2E:5F:27:8A:12:9F:92:2F:53:FE:E5:94 X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:a1:e0:37:08:fb:b6:7a:b3:74:64:5a:53:68:69:dd:0a: 2a:e3:cc:fe:dd:5d:a7:f1:e7:5b:c2:3a:27:bb:4f:25:10:ad: 52:ac:c7:f7:78:2e:34:e9:a9:0b:15:d1:08:65:f5:84:91:14: a6:35:cc:7c:a5:df:b4:9f:cb:ec:e8:ae:61:cc:98:ea:d3:10: 9b:ae:6a:e7:0d:00:a6:bc:c7:5b:02:fd:fc:3a:4f:36:27:5c: c9:61:cd:9e:3c:c0:16:2f:51:a4:ae:7b:0c:61:65:de:4b:06: 55:6a:d2:59:76:01:00:8e:93:ca:aa:4d:f7:b2:11:2e:e2:4c: 22:19:16:98:72:2f:43:bf:04:45:0c:cb:f3:bf:30:5a:8d:d4: 81:0a:74:5a:0e:d6:1e:15:96:16:a1:d5:e7:7d:ca:74:91:ed: 98:bf:b5:ae:57:d0:81:e1:c4:0f:a3:5e:ff:f4:62:07:5c:94: 18:6c:52:f8:d6:7d:aa:d0:44:32:68:55:42:90:2f:58:a9:8a: 18:86:44:c1:c5:ad:bd:fa:5d:7b:53:4b:20:fc:0a:2b:ba:00: 72:ec:ca:71:cf:4c:dc:b3:c1:7c:22:41:ce:58:24:bf:31:ee: 97:be:1d:7b:9f:f3:e5:39:56:e8:0b:ad:cc:10:b9:18:a6:08: e1:85:7b:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFU99Ljn41RTEDJFPV8nBZr8XOHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjA3MjkwMjUzMTRaFw0yNjA3MzAwNDM1MTRaMDMxMTAvBgNV BAMTKDY1QTZEQzMzNTkxNTIzRTUyRTVGMjc4QTEyOUY5MjJGNTNGRUU1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgU0S3HBHf0t2mfCEFJTWj/7t2 rKiWgK/3DspDLE3rjFJg7zsycQGjTEfnmoGuTMNFD4LDZo/B0fVnTmg0ql3p3+xR vPRsHtA4Kdf0byBTMddkvzVIQCOm+ISB6K/HZ7r3e3sYLDTYSV1HKPSdvcWQlopz hJYOPwhnezHPaUvJ2NdRaLC/LA86Or+/pEf5RAbFJALiS82lXbY+Fd2sbrerNcYx IQVrSGpNPlY06qxVcSLNTE+YqAqfjPWLes4o+ARwOIsTl784PoxfjV8tsOZzLPvb oqevfuk+wlK2mTCiE+wrkRw4PP28Lprke67MyCu12/XdX+Vn5ukU8kAS9hrPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZabcM1kVI+UuXyeKEp+SL1P+5ZQwHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTI1NTIwNjg1OTU3NTEvMC9CRjg1Nzk2NUM5MjMx QzVFRjU3Q0JCRTdBMDlEODdDMkZDNkU4QzdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtqh4DcI+7Z6 s3RkWlNoad0KKuPM/t1dp/HnW8I6J7tPJRCtUqzH93guNOmpCxXRCGX1hJEUpjXM fKXftJ/L7OiuYcyY6tMQm65q5w0AprzHWwL9/DpPNidcyWHNnjzAFi9RpK57DGFl 3ksGVWrSWXYBAI6TyqpN97IRLuJMIhkWmHIvQ78ERQzL878wWo3UgQp0Wg7WHhWW FqHV533KdJHtmL+1rlfQgeHED6Ne//RiB1yUGGxS+NZ9qtBEMmhVQpAvWKmKGIZE wcWtvfpde1NLIPwKK7oAcuzKcc9M3LPBfCJBzlgkvzHul74de5/z5TlW6AutzBC5 GKYI4YV7Tw== -----END CERTIFICATE-----Generated at Wed Jul 29 16:08:03 2026 by rpki-client