$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: wwm8HqPFT0uazbW82lsFEWT3FECmvG+letmLrMU17hg= Subject key identifier: 70:8E:07:D2:BE:18:9B:8C:68:D2:0C:A8:21:DF:35:A0:7E:48:84:D7 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 27479F3EEC75D7EF41DB8B20068CCBA8FB97EBDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: 73 Signing time: Mon 13 Apr 2026 03:37:45 +0000 Manifest this update: Mon 13 Apr 2026 03:32:45 +0000 Manifest next update: Tue 14 Apr 2026 06:19:45 +0000 Files and hashes: 1: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 2: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: ndpB4EVqX2r4O2I+YACa0qts1HvGjd2bhVVZ3KTT5zU=) 3: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 4: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 5: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:47:9f:3e:ec:75:d7:ef:41:db:8b:20:06:8c:cb:a8:fb:97:eb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Apr 13 03:32:45 2026 GMT Not After : Apr 14 06:19:45 2026 GMT Subject: CN=708E07D2BE189B8C68D20CA821DF35A07E4884D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:dc:f7:b7:2b:6c:23:dc:5a:7a:0a:0f:cf: 16:6c:22:09:4c:f2:16:5f:ac:57:71:85:6e:86:40: a1:de:64:8b:08:91:12:64:1d:5e:69:ff:fe:22:1e: e4:48:9c:d6:e9:01:87:6c:69:23:9f:b6:ce:2f:f1: 9f:21:7f:13:5a:75:bf:bf:8f:5d:3c:c3:03:32:60: 4e:3c:03:b7:93:f9:90:7b:ba:bc:6b:04:e3:66:b8: d6:32:f2:42:c0:00:d1:10:91:16:74:a2:12:5d:77: 98:dd:ec:f5:1c:dd:ca:30:8c:a8:46:86:15:6d:96: 7b:fb:e6:6b:14:ac:12:53:6a:d6:19:04:1a:68:00: a5:13:96:47:ac:6d:b9:63:87:f0:1c:d4:3c:b4:a9: 80:3a:e3:12:c5:9e:3d:0c:2a:28:d9:ca:75:92:60: 8b:e4:f4:ed:be:05:ff:fa:a7:86:4c:ff:8b:e8:04: 3d:38:62:b6:16:c7:cf:81:e9:9c:de:19:6f:9c:d7: 3a:96:7a:25:f3:b9:e5:c7:07:fb:b0:73:e2:b1:fb: e9:19:58:24:01:1a:33:8d:ff:36:f3:82:59:53:9b: 80:ac:f4:1a:d9:bc:24:79:60:2f:f8:8c:aa:4a:a0: 48:76:14:e9:d2:4b:fd:ad:3c:3a:54:dc:e7:98:42: 3e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:07:D2:BE:18:9B:8C:68:D2:0C:A8:21:DF:35:A0:7E:48:84:D7 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:db:1f:e2:9e:0f:f6:07:98:72:bc:0b:35:bb:53:65:ea:21: d7:bd:af:7b:4b:7a:7b:a3:11:78:7f:b3:06:a8:df:7f:a0:c2: 15:e4:7d:40:16:ea:ce:36:ff:c3:8f:1e:c5:fb:10:76:1a:4b: 9f:6e:8d:00:bf:a4:c9:c9:fd:22:95:05:14:ff:31:f3:41:c3: f0:02:20:b0:b8:a6:d4:35:35:46:bd:85:2c:53:8a:18:d7:58: a3:3a:d5:a9:38:a5:1e:42:3b:e9:b5:ee:cd:2e:a5:26:86:4f: f2:a7:2b:c5:2e:11:f0:69:07:99:1c:d0:58:0e:4c:b8:8c:f2: ae:29:9f:c9:04:63:e5:70:30:c6:26:a8:96:35:70:14:f2:9b: 14:d3:54:1e:e4:38:29:21:d3:c7:0a:89:a3:e9:33:96:de:fd: c2:11:69:d3:0b:5f:7c:c4:12:a1:fc:9e:14:4a:cc:c7:01:1e: 1e:37:f7:61:9a:50:88:b8:da:ba:e6:6c:2b:72:94:95:2d:b8: c6:46:b8:d8:6f:04:50:07:39:30:3b:6d:2b:2e:fb:e6:63:ef: ae:a3:60:58:d9:56:5b:47:35:eb:63:cc:5c:68:ed:9a:0c:29: ec:f8:6b:66:f7:8b:4a:31:88:86:ee:b3:41:f0:05:01:ce:09: 32:7e:00:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ0efPux11+9B24sgBozLqPuX69wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA0MTMwMzMyNDVaFw0yNjA0MTQwNjE5NDVaMDMxMTAvBgNV BAMTKDcwOEUwN0QyQkUxODlCOEM2OEQyMENBODIxREYzNUEwN0U0ODg0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4Nz3tytsI9xaegoPzxZsIglM 8hZfrFdxhW6GQKHeZIsIkRJkHV5p//4iHuRInNbpAYdsaSOfts4v8Z8hfxNadb+/ j108wwMyYE48A7eT+ZB7urxrBONmuNYy8kLAANEQkRZ0ohJdd5jd7PUc3cowjKhG hhVtlnv75msUrBJTatYZBBpoAKUTlkesbbljh/Ac1Dy0qYA64xLFnj0MKijZynWS YIvk9O2+Bf/6p4ZM/4voBD04YrYWx8+B6ZzeGW+c1zqWeiXzueXHB/uwc+Kx++kZ WCQBGjON/zbzgllTm4Cs9BrZvCR5YC/4jKpKoEh2FOnSS/2tPDpU3OeYQj7hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcI4H0r4Ym4xo0gyoId81oH5IhNcwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9sf4p4P9geY crwLNbtTZeoh172ve0t6e6MReH+zBqjff6DCFeR9QBbqzjb/w48exfsQdhpLn26N AL+kycn9IpUFFP8x80HD8AIgsLim1DU1Rr2FLFOKGNdYozrVqTilHkI76bXuzS6l JoZP8qcrxS4R8GkHmRzQWA5MuIzyrimfyQRj5XAwxiaoljVwFPKbFNNUHuQ4KSHT xwqJo+kzlt79whFp0wtffMQSofyeFErMxwEeHjf3YZpQiLjauuZsK3KUlS24xka4 2G8EUAc5MDttKy775mPvrqNgWNlWW0c162PMXGjtmgwp7PhrZveLSjGIhu6zQfAF Ac4JMn4AVQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:43 2026 by rpki-client