$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: WxZtI5Yza7dJhDz2mrnqawQNIuq8W1QIl1N2F7FqBWw= Subject key identifier: CF:10:51:8B:DA:59:CC:4E:F3:D2:6B:B0:A2:7B:8C:5A:0C:B5:1E:56 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 65F5BD28E6A6502D607BA884E6827BE78F44547D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 15:37:30 +0000 Manifest this update: Sun 22 Feb 2026 15:32:30 +0000 Manifest next update: Mon 23 Feb 2026 17:38:30 +0000 Files and hashes: 1: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: Uv6GBjrH8a7v+9ud9cZ7LAS1CLWyt8Lhveg3caY3HHc=) 2: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f5:bd:28:e6:a6:50:2d:60:7b:a8:84:e6:82:7b:e7:8f:44:54:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Feb 22 15:32:30 2026 GMT Not After : Feb 23 17:38:30 2026 GMT Subject: CN=CF10518BDA59CC4EF3D26BB0A27B8C5A0CB51E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:3c:9b:fa:99:a4:b7:79:9f:99:4a:4b:6c: b7:53:2c:de:de:67:56:fc:81:81:7b:74:19:eb:ed: d4:c5:13:13:e6:a2:76:3b:d1:49:32:25:42:ed:0d: 19:21:83:fb:c7:5d:eb:3e:35:0d:59:59:3a:d7:8e: 7e:55:1f:d1:c4:84:db:ad:61:01:59:b9:3a:91:6d: d5:ae:a1:43:ae:e8:11:1a:7d:59:8f:89:6f:a5:7e: 4f:20:5d:7d:a8:28:39:46:82:1f:d1:67:1c:9c:b7: 19:25:46:4c:8c:d7:ad:de:9a:8a:d7:3b:7a:1f:45: 56:de:0b:58:9b:b0:ea:92:76:79:ae:25:93:92:54: 19:56:aa:54:04:a8:be:79:a5:9f:01:20:59:23:b6: ad:92:93:1e:f1:23:14:d2:01:e2:f5:f2:4b:78:aa: 3d:27:73:8c:6e:4c:a1:e7:49:50:08:33:93:12:df: 32:bb:6d:26:a4:2f:08:2e:62:24:38:19:b4:0e:2f: fa:5d:df:68:e9:28:01:e8:f4:2f:11:41:80:84:1d: 96:08:fd:f1:a3:bb:48:c9:15:d4:ff:a7:55:60:d8: 7e:71:52:c8:51:8f:dd:54:74:10:53:7d:23:22:aa: b9:ed:08:ec:01:a9:f2:1d:05:fe:70:2c:59:c8:1c: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:10:51:8B:DA:59:CC:4E:F3:D2:6B:B0:A2:7B:8C:5A:0C:B5:1E:56 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:93:ec:b5:08:87:c5:62:f7:bb:d1:98:eb:f3:f5:e2:b2:45: ba:e5:c1:79:57:7b:72:6d:63:4c:ac:a0:85:86:9e:09:18:7a: bd:c4:bf:14:57:4e:c2:97:5c:96:1b:6f:22:30:0f:b0:f5:fe: 90:6d:dd:ed:f1:98:4e:6e:b0:be:98:24:ba:12:e5:b5:88:bf: e4:7a:99:03:15:49:d8:9d:82:e3:5a:f7:91:12:b0:5c:8f:f1: 35:ac:d8:b0:c5:6d:45:20:67:5a:57:02:17:f8:80:76:29:7c: 65:4e:be:24:9b:ce:df:14:cb:c1:a6:cb:e0:cc:8a:eb:e5:be: e9:23:f1:25:1f:bc:b1:7e:91:31:16:ab:7b:e7:36:8c:74:61: 27:72:c8:e1:73:a2:4e:f6:cd:65:f4:d8:37:df:f5:e0:6e:26: 88:dc:fc:7e:a1:ac:37:7a:15:e2:06:22:38:51:63:90:8b:7b: f0:f0:21:4d:c7:17:8c:cb:f7:02:80:66:65:57:21:d7:0c:a7: af:2d:09:8a:57:58:45:d7:cb:ed:10:03:5f:29:5f:3e:78:52: 09:fd:68:5b:56:3b:ec:aa:43:9a:66:87:de:41:d6:b4:2f:4b: 59:cd:45:f3:12:45:65:97:66:ea:d9:87:a6:c0:76:4f:24:c9: 92:1f:d0:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZfW9KOamUC1ge6iE5oJ7549EVH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjAyMjIxNTMyMzBaFw0yNjAyMjMxNzM4MzBaMDMxMTAvBgNV BAMTKENGMTA1MThCREE1OUNDNEVGM0QyNkJCMEEyN0I4QzVBMENCNTFFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4zyb+pmkt3mfmUpLbLdTLN7e Z1b8gYF7dBnr7dTFExPmonY70UkyJULtDRkhg/vHXes+NQ1ZWTrXjn5VH9HEhNut YQFZuTqRbdWuoUOu6BEafVmPiW+lfk8gXX2oKDlGgh/RZxyctxklRkyM163emorX O3ofRVbeC1ibsOqSdnmuJZOSVBlWqlQEqL55pZ8BIFkjtq2Skx7xIxTSAeL18kt4 qj0nc4xuTKHnSVAIM5MS3zK7bSakLwguYiQ4GbQOL/pd32jpKAHo9C8RQYCEHZYI /fGju0jJFdT/p1Vg2H5xUshRj91UdBBTfSMiqrntCOwBqfIdBf5wLFnIHBlPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzxBRi9pZzE7z0muwonuMWgy1HlYwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZPstQiHxWL3 u9GY6/P14rJFuuXBeVd7cm1jTKyghYaeCRh6vcS/FFdOwpdclhtvIjAPsPX+kG3d 7fGYTm6wvpgkuhLltYi/5HqZAxVJ2J2C41r3kRKwXI/xNazYsMVtRSBnWlcCF/iA dil8ZU6+JJvO3xTLwabL4MyK6+W+6SPxJR+8sX6RMRare+c2jHRhJ3LI4XOiTvbN ZfTYN9/14G4miNz8fqGsN3oV4gYiOFFjkIt78PAhTccXjMv3AoBmZVch1wynry0J ildYRdfL7RADXylfPnhSCf1oW1Y77KpDmmaH3kHWtC9LWc1F8xJFZZdm6tmHpsB2 TyTJkh/QKQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:09 2026 by rpki-client