$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: D+7sekmLwRFD2BYwYJFy1ARtYmX78JXAYHPbPHXXV/Q= Subject key identifier: 48:BB:CC:A5:5A:45:4C:16:0E:63:A8:D2:33:30:0F:EA:81:66:DA:0E Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 62DF8C1EF6D28F7342D6C6ECBFDABD6682905B7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:48:09 +0000 Manifest this update: Fri 28 Aug 2026 06:43:09 +0000 Manifest next update: Mon 31 Aug 2026 12:07:09 +0000 Files and hashes: 1: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 2: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 3: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: xV2EwYJS7FRl5fPGNKc1XfhwJcK3zK+3EXzg45pKmYQ=) 4: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 5: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 6: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:df:8c:1e:f6:d2:8f:73:42:d6:c6:ec:bf:da:bd:66:82:90:5b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Aug 28 06:43:09 2026 GMT Not After : Aug 31 12:07:09 2026 GMT Subject: CN=48BBCCA55A454C160E63A8D233300FEA8166DA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:79:3d:b9:6a:ee:12:e1:ee:2c:84:2b:18: 25:f6:3a:7d:d9:29:9a:29:27:6a:dc:65:de:0c:b0: b5:fb:6c:5c:e6:0b:a2:72:d0:0a:dc:1b:77:ad:ae: 7d:ed:50:2a:4b:96:93:9f:c6:c9:46:46:8b:a1:b2: 8d:86:e6:51:7d:4b:ef:ce:b9:49:26:61:29:df:6a: 2c:c4:90:e3:aa:21:6e:15:c7:78:ba:51:25:d9:5d: 49:3d:da:2d:bc:08:06:25:36:7b:c9:fe:8e:9c:f0: a0:36:80:52:81:fc:77:00:3a:47:fa:f7:93:8c:1a: cc:e1:df:b3:9c:79:7f:06:49:9e:e9:99:d6:6b:a3: 74:fd:05:be:ef:b0:6f:dc:e7:08:24:b5:22:32:cd: 84:d8:96:22:f7:70:fc:c5:40:21:01:fe:d6:88:bc: ef:11:47:5a:54:08:f3:aa:d0:a7:c3:45:3c:4b:48: 8d:b9:c6:4e:d6:3a:5b:cb:af:d9:f0:b2:91:02:09: fa:d2:b8:ba:e6:44:1f:f7:86:c3:25:2f:45:b5:1a: 3c:9a:28:ba:19:ab:21:21:72:49:b5:36:55:b7:92: 4d:c6:54:b7:9b:2b:60:0f:b1:3f:74:66:72:f9:1b: 98:b1:5c:20:19:76:ad:34:43:4b:66:38:79:cb:7b: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:CC:A5:5A:45:4C:16:0E:63:A8:D2:33:30:0F:EA:81:66:DA:0E X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:87:7c:b5:4d:33:b5:57:d3:09:e0:5b:f5:ad:54:25:d1:a2: 7d:03:1f:df:5c:fd:3a:40:16:29:45:91:1e:9f:a9:c8:6f:58: 96:d0:fb:d9:14:83:74:1b:3b:13:35:97:49:69:38:67:ab:1c: b4:7d:18:99:b8:a7:94:9a:70:85:bc:67:1f:e8:70:6f:93:ba: 03:45:ea:96:94:33:e0:3d:f0:9b:be:2e:03:44:3a:b7:79:e7: 3c:e9:9d:18:e7:e4:cd:03:98:7d:cf:a1:28:2d:01:fb:fb:13: c9:5c:e5:e7:6c:b6:e7:18:52:86:93:55:cb:7c:3c:44:9d:c7: ad:7e:34:11:95:2c:49:59:29:92:d4:35:b6:ea:c8:00:02:0f: 88:fa:6e:01:2c:16:00:b4:17:66:27:2c:7c:1f:12:ad:2f:c8: 96:14:44:0e:36:30:c8:2b:a4:73:0b:00:70:90:d3:a5:8e:55: 8f:34:d5:43:f9:2c:d2:03:87:a2:0f:f1:25:69:91:07:33:6c: 7b:6d:ce:67:1c:1f:82:a8:46:ab:eb:78:aa:ec:ac:fd:a3:92: 33:18:f9:e0:16:5c:ff:7e:80:ea:5d:76:f7:2c:65:3c:8e:fd: 0f:e6:f7:96:c3:57:59:7b:38:1d:63:cf:9c:34:e5:59:1f:da: 73:e7:61:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYt+MHvbSj3NC1sbsv9q9ZoKQW3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA4MjgwNjQzMDlaFw0yNjA4MzExMjA3MDlaMDMxMTAvBgNV BAMTKDQ4QkJDQ0E1NUE0NTRDMTYwRTYzQThEMjMzMzAwRkVBODE2NkRBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0Xk9uWruEuHuLIQrGCX2On3Z KZopJ2rcZd4MsLX7bFzmC6Jy0ArcG3etrn3tUCpLlpOfxslGRouhso2G5lF9S+/O uUkmYSnfaizEkOOqIW4Vx3i6USXZXUk92i28CAYlNnvJ/o6c8KA2gFKB/HcAOkf6 95OMGszh37OceX8GSZ7pmdZro3T9Bb7vsG/c5wgktSIyzYTYliL3cPzFQCEB/taI vO8RR1pUCPOq0KfDRTxLSI25xk7WOlvLr9nwspECCfrSuLrmRB/3hsMlL0W1Gjya KLoZqyEhckm1NlW3kk3GVLebK2APsT90ZnL5G5ixXCAZdq00Q0tmOHnLe+s/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSLvMpVpFTBYOY6jSMzAP6oFm2g4wHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnId8tU0ztVfT CeBb9a1UJdGifQMf31z9OkAWKUWRHp+pyG9YltD72RSDdBs7EzWXSWk4Z6sctH0Y mbinlJpwhbxnH+hwb5O6A0XqlpQz4D3wm74uA0Q6t3nnPOmdGOfkzQOYfc+hKC0B +/sTyVzl52y25xhShpNVy3w8RJ3HrX40EZUsSVkpktQ1turIAAIPiPpuASwWALQX ZicsfB8SrS/IlhREDjYwyCukcwsAcJDTpY5VjzTVQ/ks0gOHog/xJWmRBzNse23O ZxwfgqhGq+t4quys/aOSMxj54BZc/36A6l129yxlPI79D+b3lsNXWXs4HWPPnDTl WR/ac+dhxw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:35 2026 by rpki-client