$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: Cl/X8bJtE1BJRmX4t7lT2LknVzSMsca/ECiNfROiu1Y= Subject key identifier: CA:7A:B2:E1:B5:32:88:82:59:2C:1B:DB:AA:85:7C:D6:44:A2:E9:44 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 1465C169CF34F1AB87BC98014B6EF2F7C7C40D9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: 78 Signing time: Sat 18 Apr 2026 17:39:56 +0000 Manifest this update: Sat 18 Apr 2026 17:34:56 +0000 Manifest next update: Sun 19 Apr 2026 18:16:56 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: EgVp+179t62VKnWtfp9jb+K0ZD//vGFqCk0yqtfsyh8=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:65:c1:69:cf:34:f1:ab:87:bc:98:01:4b:6e:f2:f7:c7:c4:0d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Apr 18 17:34:56 2026 GMT Not After : Apr 19 18:16:56 2026 GMT Subject: CN=CA7AB2E1B5328882592C1BDBAA857CD644A2E944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:32:a7:4e:c8:30:10:d3:ea:de:c7:79:36: d1:3d:4b:a7:71:2a:fb:a6:41:5e:c9:fa:f1:3d:c3: fa:bc:fa:2a:af:b8:46:4f:83:55:46:06:48:dd:63: 5a:3f:46:3f:13:b5:d0:7c:a5:f5:1f:38:45:8a:ec: 22:4e:e5:9a:52:08:6c:3c:a5:0d:aa:47:02:d4:1d: 18:17:38:59:53:c6:96:ac:34:7e:ec:af:1b:43:91: be:dc:4b:88:4a:0b:2a:b7:6a:4b:4e:ce:f4:2f:5c: 5e:42:69:7c:1a:98:6e:fa:14:2d:b9:9c:25:34:e2: 5c:44:3b:51:fc:8e:36:6c:5b:8b:f6:9b:33:4d:2b: fc:9a:6f:11:6b:63:e0:d2:28:0a:c4:28:a4:25:f5: 6c:6c:0b:4d:8a:b6:bd:05:c6:2a:29:09:5e:c5:a6: f4:2c:84:2b:be:25:fd:b1:76:af:c9:6a:f9:7d:1c: 74:13:d0:bd:69:84:a4:6d:ee:5c:77:9f:a3:5a:3e: 9a:69:0e:da:c2:24:60:72:12:8d:87:6a:fc:ee:64: 64:f1:e1:67:31:31:14:2e:20:3f:5e:9a:cc:5e:47: 7c:fd:51:dc:18:ca:de:76:4b:84:e3:b4:14:11:39: ec:ed:0f:ca:42:da:1c:1c:8b:09:0d:b2:4a:76:1e: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7A:B2:E1:B5:32:88:82:59:2C:1B:DB:AA:85:7C:D6:44:A2:E9:44 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:24:cf:c7:cd:ab:35:dd:12:47:31:93:70:03:82:73:7d:7b: f1:ee:29:b8:20:de:dc:58:1a:f9:ce:d9:82:42:ef:fd:f4:92: 36:62:b6:27:09:11:51:97:1a:a0:ab:5a:95:61:f7:59:18:2f: 07:c3:d6:14:02:99:ef:7c:2e:63:2d:64:83:2d:c2:2c:c9:9b: b1:5d:a3:51:83:c1:b4:0d:c9:a0:93:b4:d8:01:46:a8:58:21: 56:03:84:1a:d1:f9:a4:bf:57:48:26:e7:5a:5d:dc:26:50:93: 5e:bd:1a:e1:98:fa:7b:4f:f5:0e:4b:d6:9f:1f:88:f0:59:60: 2e:f2:2d:b4:b0:78:66:46:2c:2e:99:80:25:8f:cd:d2:d6:7e: 56:89:ee:84:a4:7b:a0:e6:59:6a:c0:6e:04:2f:c4:10:4c:fb: 13:59:b3:73:86:02:70:d3:1e:9b:45:48:61:7e:f5:16:f4:bd: 2b:62:58:23:2c:74:41:31:d3:51:34:ea:78:7c:d6:db:b5:d2: 4a:5e:71:a1:6b:ec:1e:21:f1:8b:66:c4:1a:65:4d:46:0c:13: 2e:70:7e:45:6d:23:ea:e3:b8:dd:df:81:a8:00:6b:f9:8b:e4: a4:98:ea:76:24:8c:b4:f6:77:aa:59:48:95:96:db:82:b3:16: a5:a6:72:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFGXBac808auHvJgBS27y98fEDZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA0MTgxNzM0NTZaFw0yNjA0MTkxODE2NTZaMDMxMTAvBgNV BAMTKENBN0FCMkUxQjUzMjg4ODI1OTJDMUJEQkFBODU3Q0Q2NDRBMkU5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoDKnTsgwENPq3sd5NtE9S6dx KvumQV7J+vE9w/q8+iqvuEZPg1VGBkjdY1o/Rj8TtdB8pfUfOEWK7CJO5ZpSCGw8 pQ2qRwLUHRgXOFlTxpasNH7srxtDkb7cS4hKCyq3aktOzvQvXF5CaXwamG76FC25 nCU04lxEO1H8jjZsW4v2mzNNK/yabxFrY+DSKArEKKQl9WxsC02Ktr0FxiopCV7F pvQshCu+Jf2xdq/Javl9HHQT0L1phKRt7lx3n6NaPpppDtrCJGByEo2HavzuZGTx 4WcxMRQuID9emsxeR3z9UdwYyt52S4TjtBQROeztD8pC2hwciwkNskp2HueXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUynqy4bUyiIJZLBvbqoV81kSi6UQwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSTPx82rNd0S RzGTcAOCc3178e4puCDe3Fga+c7ZgkLv/fSSNmK2JwkRUZcaoKtalWH3WRgvB8PW FAKZ73wuYy1kgy3CLMmbsV2jUYPBtA3JoJO02AFGqFghVgOEGtH5pL9XSCbnWl3c JlCTXr0a4Zj6e0/1DkvWnx+I8FlgLvIttLB4ZkYsLpmAJY/N0tZ+VonuhKR7oOZZ asBuBC/EEEz7E1mzc4YCcNMem0VIYX71FvS9K2JYIyx0QTHTUTTqeHzW27XSSl5x oWvsHiHxi2bEGmVNRgwTLnB+RW0j6uO43d+BqABr+YvkpJjqdiSMtPZ3qllIlZbb grMWpaZylA== -----END CERTIFICATE-----Generated at Sun Apr 19 01:14:07 2026 by rpki-client