$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: +WZh6UUiP8xU2Rg4QoDPQdwKvmSjZgEjT4v9ZwFW1K4= Subject key identifier: 6E:1B:B5:88:37:D4:D9:71:5A:D8:92:BA:C3:6B:75:72:32:BC:3F:8C Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 67AFA59DE965730D4F2A3815DC21AB76622C99C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:48:04 +0000 Manifest this update: Fri 28 Aug 2026 06:43:04 +0000 Manifest next update: Mon 31 Aug 2026 07:43:04 +0000 Files and hashes: 1: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: OaWlvhEglodqf7pdVzUdRD9/PQVVDkN8zrH6emiGZ8A=) 3: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 4: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 5: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:af:a5:9d:e9:65:73:0d:4f:2a:38:15:dc:21:ab:76:62:2c:99:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Aug 28 06:43:04 2026 GMT Not After : Aug 31 07:43:04 2026 GMT Subject: CN=6E1BB58837D4D9715AD892BAC36B757232BC3F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:f0:c8:18:17:7b:21:04:ac:63:33:41:a6: ab:5c:26:ec:7f:22:fb:16:d4:96:e9:2d:a8:2a:30: b7:df:d9:51:52:f0:af:4e:7e:0a:96:08:3f:1c:0e: 02:dc:22:5b:ec:de:18:da:b3:a8:a6:45:c9:ef:41: 0d:e4:38:4a:19:f9:67:46:c9:72:f4:cd:7c:25:12: dd:4a:be:f7:1b:62:cf:56:17:1d:7d:86:a1:70:76: d8:31:a4:c4:d7:c3:db:90:dd:74:ba:26:96:03:37: bb:56:f8:b0:68:d9:a1:a7:a7:7f:05:4c:a5:72:86: 45:77:52:77:9b:b6:5b:b2:ee:bd:8e:2d:b1:6a:e8: 6f:86:1d:e7:c6:d0:d2:8d:9f:d2:9f:6b:52:e9:f2: e3:77:d0:21:b5:2a:2d:fd:12:ef:41:17:b1:4f:d7: 44:a8:26:13:d6:5a:b6:e7:ca:fd:93:29:6d:a4:0e: 82:da:87:27:b7:d7:1a:56:4d:aa:8f:e1:a1:1c:fa: 7f:7b:44:01:74:39:87:bf:e2:4b:4b:45:1b:ab:24: 88:65:c3:f7:85:34:9a:6b:a4:9e:1e:6e:07:56:05: 0a:d7:9b:1c:18:1e:f3:ac:cc:e9:b0:58:84:f0:c9: d4:49:6d:7e:f7:1c:93:73:48:d5:53:b8:cb:d6:07: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1B:B5:88:37:D4:D9:71:5A:D8:92:BA:C3:6B:75:72:32:BC:3F:8C X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6a:5a:23:ca:9d:3d:71:d7:6f:2c:a9:a0:2e:95:3e:f4:4d: 3d:ff:3b:80:fd:4a:f6:1f:aa:19:59:23:f8:6d:ef:4f:41:e3: f5:5d:1a:04:6e:a9:06:ba:38:50:4e:98:c8:01:61:67:fd:fa: fe:95:0a:08:8f:a8:99:1b:e8:05:f8:09:ed:91:d4:67:1a:1b: ed:c4:b2:f5:99:f8:18:d5:7c:bd:4e:91:89:2a:89:49:a7:12: 20:79:b3:bf:c6:03:56:dc:cf:3b:69:fa:f5:d5:74:d6:d6:e1: 24:8c:fc:e7:04:5e:be:b8:44:f3:d6:d7:44:97:2d:16:a0:bf: 16:f4:c2:e9:da:d7:5c:5f:b1:2f:4a:b2:98:64:00:70:ca:b9: 88:dd:ef:d2:08:32:9e:8a:e5:7d:6c:06:d8:fd:91:7f:be:a4: dd:3c:e7:d8:22:00:9b:36:8c:38:d8:2c:95:24:85:be:10:4f: 2a:b5:80:bd:02:87:a7:68:19:40:21:8c:6b:c7:65:5a:a5:f9: d1:1f:4d:08:61:11:4b:6d:63:b6:de:98:f7:be:43:5e:d2:9f: f3:9b:74:ef:c2:d2:af:50:79:20:59:d9:5e:a4:8e:db:1e:b2: f5:a4:93:c4:0c:be:be:e8:12:0c:16:6a:b2:25:d5:f3:da:3c: 80:2b:51:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ6+lnellcw1PKjgV3CGrdmIsmckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzEwNzQzMDRaMDMxMTAvBgNV BAMTKDZFMUJCNTg4MzdENEQ5NzE1QUQ4OTJCQUMzNkI3NTcyMzJCQzNGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGfDIGBd7IQSsYzNBpqtcJux/ IvsW1JbpLagqMLff2VFS8K9OfgqWCD8cDgLcIlvs3hjas6imRcnvQQ3kOEoZ+WdG yXL0zXwlEt1KvvcbYs9WFx19hqFwdtgxpMTXw9uQ3XS6JpYDN7tW+LBo2aGnp38F TKVyhkV3Unebtluy7r2OLbFq6G+GHefG0NKNn9Kfa1Lp8uN30CG1Ki39Eu9BF7FP 10SoJhPWWrbnyv2TKW2kDoLahye31xpWTaqP4aEc+n97RAF0OYe/4ktLRRurJIhl w/eFNJprpJ4ebgdWBQrXmxwYHvOszOmwWITwydRJbX73HJNzSNVTuMvWB8QhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbhu1iDfU2XFa2JK6w2t1cjK8P4wwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWpaI8qdPXHX byypoC6VPvRNPf87gP1K9h+qGVkj+G3vT0Hj9V0aBG6pBro4UE6YyAFhZ/36/pUK CI+omRvoBfgJ7ZHUZxob7cSy9Zn4GNV8vU6RiSqJSacSIHmzv8YDVtzPO2n69dV0 1tbhJIz85wRevrhE89bXRJctFqC/FvTC6drXXF+xL0qymGQAcMq5iN3v0ggynorl fWwG2P2Rf76k3Tzn2CIAmzaMONgslSSFvhBPKrWAvQKHp2gZQCGMa8dlWqX50R9N CGERS21jtt6Y975DXtKf85t078LSr1B5IFnZXqSO2x6y9aSTxAy+vugSDBZqsiXV 89o8gCtRVg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:51 2026 by rpki-client