$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft (raw, json) Hash identifier: uV4ZjDqjUYzKdpxkG5IMrOUxjLbHRquyNQ+NgA9LVOE= Subject key identifier: F2:CB:77:EA:F1:04:F9:4C:94:A0:05:E9:A9:81:C5:16:9F:F1:06:09 Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Certificate serial: 0E0958C8827B86519BC90E415088AC7B66A26385 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft Manifest number: B7 Signing time: Thu 04 Jun 2026 08:44:24 +0000 Manifest this update: Thu 04 Jun 2026 08:39:24 +0000 Manifest next update: Fri 05 Jun 2026 10:12:24 +0000 Files and hashes: 1: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl (hash: OlkDhufi2kOJJg1nQf43tPotEA890Q+9VweZcwM5lqQ=) 2: 3133392e3135392e3130342e302f32322d3234203d3e203633313939.roa (hash: Q88zLz7ePf7P3Fz33Cy5h6Xu/y+B/xOKfB7GswqSebU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 10:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:09:58:c8:82:7b:86:51:9b:c9:0e:41:50:88:ac:7b:66:a2:63:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Validity Not Before: Jun 4 08:39:24 2026 GMT Not After : Jun 5 10:12:24 2026 GMT Subject: CN=F2CB77EAF104F94C94A005E9A981C5169FF10609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:59:40:0e:21:7e:6a:14:14:f2:f7:00:42: dd:ca:9a:f0:f3:b0:30:71:f8:dd:14:1b:fc:b1:24: cf:6e:28:3b:58:5a:1f:74:64:31:10:c6:2a:18:2c: 01:7b:97:bb:12:da:cb:23:93:fa:1c:d3:fe:f4:f5: 8c:be:fc:22:1d:a8:35:dc:ce:48:e6:5e:3d:2f:fb: 4b:5d:6e:70:35:4e:9f:0c:85:01:01:67:77:c8:c6: 97:b1:a7:b2:f9:b3:58:2f:fa:f2:8a:a4:5f:2d:b1: ff:e0:4e:61:64:91:b3:02:e3:a7:5b:6f:33:34:4c: 92:85:1d:bf:80:b6:c2:ba:b2:73:4a:10:b1:d7:cc: bf:0d:b7:38:ff:36:12:30:29:8a:5b:24:b7:f8:32: 7b:94:4b:39:6b:e8:bf:10:11:95:b2:a9:61:eb:2e: 9a:1e:0a:8f:d9:1e:98:a6:e1:0c:6f:01:62:d4:a3: fa:7a:8a:4d:d0:ea:d6:21:a2:a3:48:03:5c:42:b6: 77:49:24:1c:d1:73:98:71:8a:cd:23:0c:2c:97:88: 64:a9:10:95:c5:67:ee:dd:c4:35:98:89:4b:85:5e: d7:4d:31:0e:75:51:c8:99:84:2e:10:a1:42:8b:92: 61:31:d1:e7:cf:61:67:4b:3d:36:22:fb:e5:18:5f: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:77:EA:F1:04:F9:4C:94:A0:05:E9:A9:81:C5:16:9F:F1:06:09 X509v3 Authority Key Identifier: keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:c3:d8:6e:a7:cc:1f:2a:6e:72:80:1d:6b:77:ae:57:e5: 08:36:34:93:46:64:5f:57:a0:34:b7:64:7b:fb:eb:e4:11:bf: c2:84:bb:ba:e5:40:ac:d7:8a:ae:0c:33:ed:f6:e2:b2:23:08: 5b:68:10:64:27:87:72:e0:e8:4d:c2:98:6b:00:41:91:f8:09: ed:6b:43:7a:97:41:26:29:aa:12:7d:b7:97:08:12:2e:91:90: f3:ec:48:01:12:90:b1:7e:86:41:da:a7:34:c4:f5:45:2e:e8: ea:b1:8a:49:57:83:de:16:36:32:2c:53:f5:3e:fc:16:0e:1e: e2:d7:d7:a6:6d:ca:ce:4a:ce:ac:84:02:5b:20:5b:ed:09:d9: c7:7b:91:6a:27:f2:30:95:05:30:b8:4f:90:db:e1:b5:b2:a2: f1:4b:a1:34:87:5b:ed:58:4e:fd:ed:3f:e5:b5:43:f2:35:a8: f6:3f:9d:4c:20:dc:4d:27:68:18:32:60:84:a9:70:15:c7:78: d7:05:ae:0a:aa:59:d8:2c:d7:86:7e:24:7d:ef:e6:d2:e9:1b: e5:5f:d1:bf:af:42:21:65:5c:97:7f:6e:91:f4:d0:e9:9f:d6: 3c:0c:8d:5a:de:51:dd:47:8b:67:75:e0:9a:97:76:4d:1e:73: 77:ba:ca:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDglYyIJ7hlGbyQ5BUIise2aiY4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3 RDk5REREMjAeFw0yNjA2MDQwODM5MjRaFw0yNjA2MDUxMDEyMjRaMDMxMTAvBgNV BAMTKEYyQ0I3N0VBRjEwNEY5NEM5NEEwMDVFOUE5ODFDNTE2OUZGMTA2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkFlADiF+ahQU8vcAQt3KmvDz sDBx+N0UG/yxJM9uKDtYWh90ZDEQxioYLAF7l7sS2ssjk/oc0/709Yy+/CIdqDXc zkjmXj0v+0tdbnA1Tp8MhQEBZ3fIxpexp7L5s1gv+vKKpF8tsf/gTmFkkbMC46db bzM0TJKFHb+AtsK6snNKELHXzL8Ntzj/NhIwKYpbJLf4MnuUSzlr6L8QEZWyqWHr LpoeCo/ZHpim4QxvAWLUo/p6ik3Q6tYhoqNIA1xCtndJJBzRc5hxis0jDCyXiGSp EJXFZ+7dxDWYiUuFXtdNMQ51UciZhC4QoUKLkmEx0efPYWdLPTYi++UYX2vFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8st36vEE+UyUoAXpqYHFFp/xBgkwHwYDVR0j BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMS9CRjYxQTZFQjJDRDI5 NDJERkZCQTEzNDdCOTQwRDVCOTdEOTlEREQyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKjD2G6nzB8q bnKAHWt3rlflCDY0k0ZkX1egNLdke/vr5BG/woS7uuVArNeKrgwz7fbisiMIW2gQ ZCeHcuDoTcKYawBBkfgJ7WtDepdBJimqEn23lwgSLpGQ8+xIARKQsX6GQdqnNMT1 RS7o6rGKSVeD3hY2MixT9T78Fg4e4tfXpm3KzkrOrIQCWyBb7QnZx3uRaifyMJUF MLhPkNvhtbKi8UuhNIdb7VhO/e0/5bVD8jWo9j+dTCDcTSdoGDJghKlwFcd41wWu CqpZ2CzXhn4kfe/m0ukb5V/Rv69CIWVcl39ukfTQ6Z/WPAyNWt5R3UeLZ3Xgmpd2 TR5zd7rKiQ== -----END CERTIFICATE-----Generated at Thu Jun 4 13:07:48 2026 by rpki-client