$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: kiLVdS8Q0A5q5jGMLLc7wQqMRSXJbFwX9IiUpo3vR9Q= Subject key identifier: 2A:E7:30:82:72:F7:62:4A:24:22:B8:52:5C:5F:CB:C4:32:D8:6B:B0 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 5514DABC414C31481483D0D3D17FF5F7AA1B9414 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 3B Signing time: Wed 04 Mar 2026 04:48:20 +0000 Manifest this update: Wed 04 Mar 2026 04:43:20 +0000 Manifest next update: Thu 05 Mar 2026 07:11:20 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: AYG6Umjw/GMgp+APp12fs7OaGenKXnhwS43rO7UHv0g=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:14:da:bc:41:4c:31:48:14:83:d0:d3:d1:7f:f5:f7:aa:1b:94:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Mar 4 04:43:20 2026 GMT Not After : Mar 5 07:11:20 2026 GMT Subject: CN=2AE7308272F7624A2422B8525C5FCBC432D86BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:6b:5b:17:de:59:12:19:d8:61:60:07:6e: 6c:ed:d4:42:3f:51:5a:00:a9:64:32:75:dd:37:3b: 44:48:ce:4c:ed:31:4d:82:24:9f:41:c8:2a:3b:43: 47:c1:17:f6:9f:a4:de:6f:b1:88:09:8b:20:4b:21: 58:8b:53:78:63:31:2f:aa:b2:65:7b:ae:25:8e:40: b8:10:fc:f8:bc:13:53:dc:1d:7e:d0:47:ec:c2:20: 66:35:86:e1:21:a5:2a:47:5c:e1:1a:22:20:96:43: 6b:01:2f:4f:c5:c5:1a:ad:b7:a7:2f:0a:4b:34:3e: d5:33:44:bc:c6:e3:b5:aa:4a:c4:29:24:ef:e4:82: d7:58:c3:e1:cb:74:cc:57:ce:eb:cb:ce:fc:eb:02: ee:4a:1d:d0:3c:8e:a0:d9:8f:5d:00:68:e4:e9:a6: 0e:48:33:e7:59:fb:fb:f6:6a:ae:a7:93:49:33:81: db:eb:01:8d:1e:65:f5:db:dc:a6:10:93:45:9a:ba: 74:b3:71:39:92:2a:6c:d4:ad:fd:44:58:f1:5f:94: 19:7d:f8:65:26:2c:cd:e7:b6:ee:36:bf:8b:0c:1e: bf:83:25:11:a6:88:63:24:2a:69:50:db:fa:12:e2: ca:cf:ce:b4:e1:c3:49:c6:11:fb:14:59:0c:e6:ae: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:30:82:72:F7:62:4A:24:22:B8:52:5C:5F:CB:C4:32:D8:6B:B0 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ed:2b:3a:1e:b4:20:70:3b:28:9d:9f:3a:83:a6:b9:ec:50: 8c:be:1d:01:14:a7:8d:7f:48:27:7b:45:68:11:90:0e:00:fc: fb:1c:fa:a3:ea:56:96:84:6d:fe:f4:d2:cc:cb:dc:15:0c:9f: 97:c3:78:cc:0f:65:09:6a:e6:1e:0b:ed:61:03:29:a1:cf:e0: 93:6e:d1:37:78:f7:91:5c:9f:32:8a:89:d1:e3:5d:55:69:7d: a8:83:53:1b:45:a8:51:38:ea:28:dd:de:0f:84:8d:25:80:6d: 28:72:4b:41:72:4b:21:58:f9:27:82:6a:44:eb:de:c7:0f:d0: 8f:3d:ef:88:1b:c0:e9:a1:b9:43:cc:f4:66:f2:7d:9a:f8:f6: b1:90:4f:fd:39:2b:24:cb:af:f3:98:86:72:b7:1c:d8:4f:9d: b7:e4:90:9d:69:c5:d9:5c:6b:a5:e2:ae:2d:5d:c8:9e:ed:b4: 52:f5:46:d3:a9:00:0f:c8:16:dd:06:6a:62:2a:d9:9b:3b:f1: a5:eb:f8:c3:df:cf:36:61:b7:7a:ae:76:43:aa:5b:06:7f:3f: 5f:18:cc:f7:46:f6:06:72:e0:0f:84:d4:d0:f9:2d:de:96:8d: e0:b7:1b:78:43:f3:30:09:4f:e6:ad:ca:db:a5:61:20:e7:93: 98:fc:fe:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVRTavEFMMUgUg9DT0X/196oblBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjAzMDQwNDQzMjBaFw0yNjAzMDUwNzExMjBaMDMxMTAvBgNV BAMTKDJBRTczMDgyNzJGNzYyNEEyNDIyQjg1MjVDNUZDQkM0MzJEODZCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQWtbF95ZEhnYYWAHbmzt1EI/ UVoAqWQydd03O0RIzkztMU2CJJ9ByCo7Q0fBF/afpN5vsYgJiyBLIViLU3hjMS+q smV7riWOQLgQ/Pi8E1PcHX7QR+zCIGY1huEhpSpHXOEaIiCWQ2sBL0/FxRqtt6cv Cks0PtUzRLzG47WqSsQpJO/kgtdYw+HLdMxXzuvLzvzrAu5KHdA8jqDZj10AaOTp pg5IM+dZ+/v2aq6nk0kzgdvrAY0eZfXb3KYQk0WaunSzcTmSKmzUrf1EWPFflBl9 +GUmLM3ntu42v4sMHr+DJRGmiGMkKmlQ2/oS4srPzrThw0nGEfsUWQzmrscHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKucwgnL3YkokIrhSXF/LxDLYa7AwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+0rOh60IHA7 KJ2fOoOmuexQjL4dARSnjX9IJ3tFaBGQDgD8+xz6o+pWloRt/vTSzMvcFQyfl8N4 zA9lCWrmHgvtYQMpoc/gk27RN3j3kVyfMoqJ0eNdVWl9qINTG0WoUTjqKN3eD4SN JYBtKHJLQXJLIVj5J4JqROvexw/Qjz3viBvA6aG5Q8z0ZvJ9mvj2sZBP/TkrJMuv 85iGcrcc2E+dt+SQnWnF2VxrpeKuLV3Inu20UvVG06kAD8gW3QZqYirZmzvxpev4 w9/PNmG3eq52Q6pbBn8/XxjM90b2BnLgD4TU0Pkt3paN4LcbeEPzMAlP5q3K26Vh IOeTmPz+qQ== -----END CERTIFICATE-----Generated at Wed Mar 4 11:29:14 2026 by rpki-client