$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: FoVJUZvRSXdXupVVoxD2EEzYIR0VtZ0SubFC2Ne8pVw= Subject key identifier: 4F:88:C2:82:68:E0:86:45:B2:45:6F:0A:6E:F1:F3:67:51:AD:24:4E Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 202F4FB58A61719B7C9B2EAD1D43550622866B9A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: ED Signing time: Tue 14 Jul 2026 09:05:55 +0000 Manifest this update: Tue 14 Jul 2026 09:00:55 +0000 Manifest next update: Wed 15 Jul 2026 11:52:55 +0000 Files and hashes: 1: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 2: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 3: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 4: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 5: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: zWLPqhcehwUGUO0+RkV2bODqJJ0I9pf26DUfUfEuSQE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2f:4f:b5:8a:61:71:9b:7c:9b:2e:ad:1d:43:55:06:22:86:6b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Jul 14 09:00:55 2026 GMT Not After : Jul 15 11:52:55 2026 GMT Subject: CN=4F88C28268E08645B2456F0A6EF1F36751AD244E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:04:93:62:9a:2d:02:04:f8:0c:99:03:74: e8:53:56:f5:78:14:37:1d:dd:5e:f0:f1:60:72:e4: 98:67:c0:2a:2f:11:d3:50:3d:d5:54:f1:22:26:0f: 19:d2:ec:a1:aa:9d:64:46:3b:c7:c7:2d:b0:61:94: a8:c3:32:ad:92:84:59:25:c4:df:a0:e1:31:71:31: 09:7a:60:47:15:a7:c0:19:40:5e:ad:9e:13:f7:e1: 63:53:3d:da:61:b5:3c:e5:41:82:d4:92:bf:c7:3a: 19:72:c5:ba:26:77:78:c6:8e:e5:17:09:a3:6b:12: 7e:70:a1:a8:90:4d:8d:4f:1a:79:60:bf:00:90:3e: 3b:bb:da:92:ba:81:84:93:b9:c1:9a:d8:d3:b7:24: af:4c:2d:fd:b7:8c:21:e9:48:bb:db:8c:91:7f:c6: cc:6d:2c:4c:39:40:69:93:dc:56:9d:41:a6:46:cf: f0:2d:ea:87:48:8f:e0:10:ad:db:46:c7:0a:87:69: 46:e0:5d:7d:13:6d:16:c8:08:23:6b:cc:c8:bc:c8: eb:41:38:e3:31:03:71:5e:8d:4d:b0:6f:85:4d:e4: 9c:5e:df:15:0f:25:45:28:50:10:4d:7b:65:c7:8f: d4:fc:6c:07:f5:d7:10:fe:41:cf:63:33:6f:4b:f9: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:C2:82:68:E0:86:45:B2:45:6F:0A:6E:F1:F3:67:51:AD:24:4E X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:fc:2e:be:bb:8a:24:87:86:ea:3e:16:ad:dc:09:87:05:15: e6:25:0f:0b:21:94:0e:57:68:b9:40:ba:ce:66:4e:ec:17:60: 33:ad:b7:c4:2e:93:15:8e:ee:62:f6:7f:1d:8f:9a:e0:1f:88: e4:0c:87:e1:a8:b2:bd:34:c5:55:a0:5b:6c:06:cb:9e:5f:1e: fb:ab:65:ac:79:2c:15:27:cf:17:1f:8c:39:60:55:05:48:c3: 86:59:a7:49:e4:3b:36:46:e8:39:8c:78:2e:4f:da:53:2d:13: 56:1d:f8:d3:c7:c1:a2:f8:5e:3b:13:73:85:6d:01:db:b3:f5: 0f:84:21:01:a8:e5:eb:bb:60:82:a3:de:c4:02:48:7c:1b:bc: 05:76:38:11:c1:d5:34:5e:d1:53:9c:05:12:11:f3:bd:62:1d: 2d:5f:a0:d5:fa:ba:d7:cf:2f:db:76:45:57:5c:e6:f9:a8:31: ba:79:ff:c2:ce:b3:5c:2e:99:35:e9:7a:ad:9d:dd:a3:3b:35: a4:ef:1e:5e:75:cc:7c:82:8c:fa:05:f5:9b:d9:2b:89:ab:44: 12:d4:bc:06:7e:19:92:c4:66:1d:c1:cb:05:ca:b9:cd:74:0f: 9a:df:eb:09:d1:a5:8d:aa:43:dd:69:8a:3a:01:50:f0:09:f7: 71:09:88:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIC9PtYphcZt8my6tHUNVBiKGa5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA3MTQwOTAwNTVaFw0yNjA3MTUxMTUyNTVaMDMxMTAvBgNV BAMTKDRGODhDMjgyNjhFMDg2NDVCMjQ1NkYwQTZFRjFGMzY3NTFBRDI0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjxQSTYpotAgT4DJkDdOhTVvV4 FDcd3V7w8WBy5JhnwCovEdNQPdVU8SImDxnS7KGqnWRGO8fHLbBhlKjDMq2ShFkl xN+g4TFxMQl6YEcVp8AZQF6tnhP34WNTPdphtTzlQYLUkr/HOhlyxbomd3jGjuUX CaNrEn5woaiQTY1PGnlgvwCQPju72pK6gYSTucGa2NO3JK9MLf23jCHpSLvbjJF/ xsxtLEw5QGmT3FadQaZGz/At6odIj+AQrdtGxwqHaUbgXX0TbRbICCNrzMi8yOtB OOMxA3FejU2wb4VN5Jxe3xUPJUUoUBBNe2XHj9T8bAf11xD+Qc9jM29L+UQLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT4jCgmjghkWyRW8KbvHzZ1GtJE4wHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvwuvruKJIeG 6j4WrdwJhwUV5iUPCyGUDldouUC6zmZO7BdgM623xC6TFY7uYvZ/HY+a4B+I5AyH 4aiyvTTFVaBbbAbLnl8e+6tlrHksFSfPFx+MOWBVBUjDhlmnSeQ7NkboOYx4Lk/a Uy0TVh3408fBovheOxNzhW0B27P1D4QhAajl67tggqPexAJIfBu8BXY4EcHVNF7R U5wFEhHzvWIdLV+g1fq6188v23ZFV1zm+agxunn/ws6zXC6ZNel6rZ3dozs1pO8e XnXMfIKM+gX1m9kriatEEtS8Bn4ZksRmHcHLBcq5zXQPmt/rCdGljapD3WmKOgFQ 8An3cQmI2g== -----END CERTIFICATE-----Generated at Tue Jul 14 19:57:39 2026 by rpki-client