$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: lcGeckI+OIFrOgFFqM9Nmp91GRdmhjDEkt0NQkWegvM= Subject key identifier: A5:30:DF:D5:3E:9E:76:9A:12:3E:2B:6B:4B:7F:A4:B9:0F:DD:59:D9 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 61B1EA5A0FEC04C887D0FEC6EF76C80E8B0D6B38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 013E Signing time: Tue 13 Oct 2026 16:43:09 +0000 Manifest this update: Tue 13 Oct 2026 16:38:09 +0000 Manifest next update: Sat 17 Oct 2026 01:18:09 +0000 Files and hashes: 1: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: O/kU1LqZ1n21UCRw6IALHPbLOs9NHDKGd1aM0uMhCdc=) 3: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 4: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 5: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 01:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b1:ea:5a:0f:ec:04:c8:87:d0:fe:c6:ef:76:c8:0e:8b:0d:6b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Oct 13 16:38:09 2026 GMT Not After : Oct 17 01:18:09 2026 GMT Subject: CN=A530DFD53E9E769A123E2B6B4B7FA4B90FDD59D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:93:64:71:e6:a2:50:d4:ce:c4:67:7f:bd: 25:51:61:95:62:8a:65:38:1a:0a:73:ec:b7:0b:2e: b5:ef:89:89:75:59:84:a9:89:dc:d3:66:c7:46:cf: a3:bd:11:51:8f:19:89:8d:a8:ea:4f:9a:d2:c2:0a: 32:14:bc:cc:11:5b:bf:dc:99:92:1a:f7:9e:c8:38: a1:f4:6b:26:4f:6c:28:a7:b1:ae:91:d5:76:8f:83: d6:0d:a3:ab:00:49:70:b3:79:09:2f:18:2b:b8:52: 08:ef:78:44:11:18:4a:60:1f:b8:ec:ad:b5:d9:35: e2:92:93:02:74:ef:db:aa:1a:cc:dc:fa:03:96:92: 07:2a:24:66:80:2f:a9:fb:e2:b3:83:9e:d3:e1:f5: 30:ab:fb:8b:14:c2:22:ce:1b:64:58:97:95:f2:d4: 34:93:b4:17:86:85:cb:a1:a7:17:60:e1:50:a6:02: e6:be:90:ae:0b:7a:88:8f:5c:01:86:58:7f:82:f6: 3a:e3:e9:2b:ff:78:40:1d:bc:0f:45:a7:bd:9f:ed: ac:39:55:04:ee:e1:9c:b7:9c:ed:f4:62:df:cf:cc: dd:8d:06:57:5d:82:c3:a5:c9:7f:81:ad:c3:ec:5d: 02:a4:33:08:96:cd:be:3e:8b:c2:88:82:58:7c:4f: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:30:DF:D5:3E:9E:76:9A:12:3E:2B:6B:4B:7F:A4:B9:0F:DD:59:D9 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ab:52:34:ce:f9:33:92:b2:27:05:5a:43:ed:83:27:73:60: 3e:10:e1:df:10:7f:ad:2a:b1:b5:2d:db:82:00:97:ff:7e:a5: ae:c2:cd:7f:14:a9:76:bc:08:ca:fb:ab:70:25:c7:23:f6:f5: 69:5b:7d:4b:60:99:06:e3:9b:15:22:af:8e:58:7b:a2:6a:5b: d6:df:7e:fd:90:b1:c5:d8:23:70:7e:48:71:fd:f5:c2:ad:f0: f6:3f:24:0e:32:70:53:a6:63:eb:86:40:93:4e:68:0d:12:fc: 85:33:48:0c:13:6d:c3:17:1b:f6:7f:00:71:5e:f3:98:96:de: fc:0a:fb:ed:94:b8:f1:cf:f0:c5:c5:48:22:f1:b9:d7:b4:d7: 58:ce:5e:65:69:b6:e1:5a:2c:25:33:b7:98:a4:79:20:57:50: c1:b8:38:10:43:87:34:aa:51:b9:0e:e0:a5:46:6b:33:02:dd: 7c:e8:4b:4e:ab:ab:37:3b:d2:98:dd:ee:aa:a8:ce:62:5c:8d: e1:80:3f:67:8a:d3:3b:de:7c:17:b6:6c:99:42:e3:cc:e2:fa: d7:bb:5b:3b:cb:71:07:17:e9:ca:34:8b:e2:f2:2d:7d:b3:a2: 20:52:d7:92:fe:ab:88:08:29:1b:70:db:5f:02:eb:ea:da:e1: d0:17:c0:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYbHqWg/sBMiH0P7G73bIDosNazgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjEwMTMxNjM4MDlaFw0yNjEwMTcwMTE4MDlaMDMxMTAvBgNV BAMTKEE1MzBERkQ1M0U5RTc2OUExMjNFMkI2QjRCN0ZBNEI5MEZERDU5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9pNkceaiUNTOxGd/vSVRYZVi imU4Ggpz7LcLLrXviYl1WYSpidzTZsdGz6O9EVGPGYmNqOpPmtLCCjIUvMwRW7/c mZIa957IOKH0ayZPbCinsa6R1XaPg9YNo6sASXCzeQkvGCu4UgjveEQRGEpgH7js rbXZNeKSkwJ079uqGszc+gOWkgcqJGaAL6n74rODntPh9TCr+4sUwiLOG2RYl5Xy 1DSTtBeGhcuhpxdg4VCmAua+kK4LeoiPXAGGWH+C9jrj6Sv/eEAdvA9Fp72f7aw5 VQTu4Zy3nO30Yt/PzN2NBlddgsOlyX+BrcPsXQKkMwiWzb4+i8KIglh8T31hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpTDf1T6edpoSPitrS3+kuQ/dWdkwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKtSNM75M5Ky JwVaQ+2DJ3NgPhDh3xB/rSqxtS3bggCX/36lrsLNfxSpdrwIyvurcCXHI/b1aVt9 S2CZBuObFSKvjlh7ompb1t9+/ZCxxdgjcH5Icf31wq3w9j8kDjJwU6Zj64ZAk05o DRL8hTNIDBNtwxcb9n8AcV7zmJbe/Ar77ZS48c/wxcVIIvG517TXWM5eZWm24Vos JTO3mKR5IFdQwbg4EEOHNKpRuQ7gpUZrMwLdfOhLTqurNzvSmN3uqqjOYlyN4YA/ Z4rTO958F7ZsmULjzOL617tbO8txBxfpyjSL4vItfbOiIFLXkv6riAgpG3DbXwLr 6trh0BfAsA== -----END CERTIFICATE-----Generated at Wed Oct 14 22:26:55 2026 by rpki-client