$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft (raw, json) Hash identifier: /BZ0RxUrpFQvLkuk+EMKzNQFCe0hCG+AfjKI9sPFwF4= Subject key identifier: 23:8E:7C:D0:00:A7:87:0D:C0:C9:2A:76:06:31:59:FB:D9:6A:3C:6D Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 088EA9E6C73B15B792B3DE07C7F9118EE977737F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft Manifest number: AF Signing time: Fri 29 May 2026 05:27:40 +0000 Manifest this update: Fri 29 May 2026 05:22:40 +0000 Manifest next update: Sat 30 May 2026 09:01:40 +0000 Files and hashes: 1: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl (hash: W6Y2HD8UudbgioDkaqTkFXJXgF7o8YG+QJFg7WctJmA=) 2: 323430343a6630303a3a2f33322d313238203d3e2030.roa (hash: ZF5Tj24YtzjH8TfD85ob8Ke0i62kPBzdIYNpDjheETM=) 3: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (hash: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k=) 4: 3136332e35332e35362e302f32322d3332203d3e2030.roa (hash: rAnzQxKUU4nmTXeEcZWUPRleZJ3o8e2ZdKbS6H6ir7w=) 5: 3130332e32322e3138382e302f32342d3234203d3e203536303035.roa (hash: S4oTbNPAysXPckoQEqNSrbnn/cIJi1z6CjtzaWA06NE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8e:a9:e6:c7:3b:15:b7:92:b3:de:07:c7:f9:11:8e:e9:77:73:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: May 29 05:22:40 2026 GMT Not After : May 30 09:01:40 2026 GMT Subject: CN=238E7CD000A7870DC0C92A76063159FBD96A3C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:1a:22:ba:fd:c9:73:62:bf:22:79:04:bf: 86:dd:bb:95:34:32:9e:35:40:23:18:fb:26:ac:44: 8f:4a:6d:ef:85:a3:85:1c:5e:22:4e:77:e3:3c:b3: 81:d5:27:40:74:91:32:81:48:7d:0c:c3:20:9c:95: a7:78:55:e7:7f:4f:82:37:62:2b:67:3a:5c:0e:fd: ce:ea:3a:e1:b1:1b:8d:3b:59:a6:f5:1b:db:ff:8a: 2e:4d:03:46:76:f2:75:bd:6d:2a:ac:25:f5:b4:f8: d3:12:0b:cf:b7:d1:cd:9f:43:c6:ee:df:a4:46:9f: 32:cb:1d:08:6f:28:6a:ab:e6:83:e3:2d:e6:ad:bb: 00:2c:8c:8e:a7:b4:52:f5:bf:cb:b6:2b:8a:ef:93: aa:5a:b4:e8:d0:fc:c4:9b:77:ff:a7:35:7b:d0:89: 99:7c:4e:7f:ea:79:9d:cc:99:fa:29:5c:a0:10:8b: f3:db:3e:c8:89:37:42:44:39:9e:ce:d6:94:ed:84: 99:8b:b6:e5:9f:2f:02:bb:22:22:85:13:c4:46:37: ec:25:a0:5f:0f:63:fb:53:dd:12:ae:54:50:24:85: c9:94:42:da:1d:fc:93:8e:e3:a0:69:54:0c:03:4e: a1:87:5c:07:15:51:43:1a:e5:b3:52:fd:67:a8:1c: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:7C:D0:00:A7:87:0D:C0:C9:2A:76:06:31:59:FB:D9:6A:3C:6D X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:03:ef:48:48:00:54:82:9f:a0:8c:33:e9:3c:b2:7d:de:a0: 8a:fe:0d:d6:8d:2f:11:c1:b4:fb:96:dc:ad:10:84:93:b5:71: 8c:d0:e7:0f:31:04:0b:c5:b5:7c:bb:59:2c:ea:9d:fa:42:af: 0e:0d:55:78:9c:a0:3b:2d:90:91:79:ff:47:0d:bd:5b:3e:ca: 62:38:78:91:e0:9c:92:fc:2c:18:94:b3:43:81:2d:ba:54:ea: e8:17:7a:66:73:93:22:01:30:71:1b:5d:4a:a0:8c:a7:c3:76: 24:93:62:26:4a:bb:18:94:9e:4f:a2:e3:f4:8d:dc:5a:b9:01: c0:fd:10:6a:18:18:1e:5a:4d:25:58:66:a1:a3:e1:fb:6c:26: 21:ec:85:67:57:52:d2:fc:a2:40:eb:0c:0b:2e:93:95:02:94: 25:bf:eb:52:63:ca:3e:86:d3:0b:37:72:2f:42:1a:a3:96:9f: 0b:16:8b:1f:8d:cc:a9:64:6e:16:b3:3a:28:43:6b:38:18:85: d1:11:b2:4f:d3:5e:75:ed:b0:8b:c6:d3:bf:78:49:8b:78:8b: 4a:84:1d:3e:c4:ef:21:93:f2:d4:51:3f:d3:af:96:c7:39:9c: fe:8e:5b:b7:bb:ed:46:30:04:3a:6d:7f:a4:75:3f:04:8b:1f: 0d:68:32:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCI6p5sc7FbeSs94Hx/kRjul3c38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA1MjkwNTIyNDBaFw0yNjA1MzAwOTAxNDBaMDMxMTAvBgNV BAMTKDIzOEU3Q0QwMDBBNzg3MERDMEM5MkE3NjA2MzE1OUZCRDk2QTNDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdxoiuv3Jc2K/InkEv4bdu5U0 Mp41QCMY+yasRI9Kbe+Fo4UcXiJOd+M8s4HVJ0B0kTKBSH0MwyCclad4Ved/T4I3 YitnOlwO/c7qOuGxG407Wab1G9v/ii5NA0Z28nW9bSqsJfW0+NMSC8+30c2fQ8bu 36RGnzLLHQhvKGqr5oPjLeatuwAsjI6ntFL1v8u2K4rvk6patOjQ/MSbd/+nNXvQ iZl8Tn/qeZ3MmfopXKAQi/PbPsiJN0JEOZ7O1pTthJmLtuWfLwK7IiKFE8RGN+wl oF8PY/tT3RKuVFAkhcmUQtod/JOO46BpVAwDTqGHXAcVUUMa5bNS/WeoHAHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI4580ACnhw3AySp2BjFZ+9lqPG0wHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxOTIzMjEvMC9CQ0E4RTI2RTg2REMy N0E0MTBEREE1M0IwREFBRDIxQ0REOUFEQjEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswPvSEgAVIKf oIwz6Tyyfd6giv4N1o0vEcG0+5bcrRCEk7VxjNDnDzEEC8W1fLtZLOqd+kKvDg1V eJygOy2QkXn/Rw29Wz7KYjh4keCckvwsGJSzQ4EtulTq6Bd6ZnOTIgEwcRtdSqCM p8N2JJNiJkq7GJSeT6Lj9I3cWrkBwP0QahgYHlpNJVhmoaPh+2wmIeyFZ1dS0vyi QOsMCy6TlQKUJb/rUmPKPobTCzdyL0Iao5afCxaLH43MqWRuFrM6KENrOBiF0RGy T9Nede2wi8bTv3hJi3iLSoQdPsTvIZPy1FE/06+Wxzmc/o5bt7vtRjAEOm1/pHU/ BIsfDWgydA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:10 2026 by rpki-client