$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: WMnrWhMIoWRjcTFro7XHdYgL51Qi4b9uJPmpj7nXzqc= Subject key identifier: 49:1A:B7:67:EA:98:3A:60:D7:55:42:D8:CB:44:FF:EB:FB:F8:D0:75 Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 1555F5451A19E3BAACBF83A28F76D038F5270ADF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: 013D Signing time: Sat 17 Oct 2026 00:38:15 +0000 Manifest this update: Sat 17 Oct 2026 00:33:15 +0000 Manifest next update: Tue 20 Oct 2026 03:46:15 +0000 Files and hashes: 1: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 2: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 4: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 5: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) 6: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: T56SZALB43lxq6s3WP3sQ8fXYYhP5T84p7CjAVlLE/o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:55:f5:45:1a:19:e3:ba:ac:bf:83:a2:8f:76:d0:38:f5:27:0a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: Oct 17 00:33:15 2026 GMT Not After : Oct 20 03:46:15 2026 GMT Subject: CN=491AB767EA983A60D75542D8CB44FFEBFBF8D075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:79:76:a3:5d:a0:ee:b8:de:f4:2f:16:52: 5c:1a:f2:21:ff:72:df:70:fc:3c:9a:90:f6:2c:b7: e1:f7:d6:a9:9b:70:be:88:bd:90:ac:8d:c2:b0:ca: fc:7f:40:84:fc:bc:8c:68:90:87:35:a5:8d:d5:ee: 45:ba:e8:bb:91:63:c5:02:ce:f2:1a:06:1a:30:90: 03:ce:28:97:25:ec:26:d6:e0:ac:6a:ab:e2:c6:16: bb:75:9f:19:8e:38:db:49:87:f0:96:71:b3:ea:f7: 7e:fd:5a:e9:83:93:52:60:7a:48:c0:29:29:89:b4: dc:44:73:08:27:3b:4a:0b:a5:af:cc:27:ad:bb:76: 0a:24:e9:81:2c:aa:4a:a9:67:d6:51:67:bb:19:31: 1b:77:9c:83:0d:fb:49:26:2a:db:13:2f:5e:b0:a0: 94:2a:8f:e8:37:02:28:3b:e1:43:04:a5:3f:06:5e: eb:b9:7c:d5:dd:9b:59:f8:8e:be:50:20:e8:85:b7: 60:05:41:53:85:fd:ab:8d:d0:ba:b6:d4:43:55:60: fd:1b:9d:01:10:fe:26:dc:2a:39:6f:0e:e6:62:94: 63:6d:a9:61:44:ac:6d:6c:ba:64:5b:b5:6a:fa:2c: 67:80:1d:0d:a1:0c:6c:83:8c:60:50:47:f3:0d:82: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:B7:67:EA:98:3A:60:D7:55:42:D8:CB:44:FF:EB:FB:F8:D0:75 X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a4:63:7a:a6:aa:5d:cb:90:7d:b4:a7:74:b0:96:4e:5a:2d: cb:59:f7:f5:c2:04:91:50:0b:6f:d7:1d:e3:e0:82:f6:96:41: 44:db:e3:f3:b7:da:54:25:a0:8b:f6:13:00:fb:84:2f:4f:bc: 53:cc:f8:f6:02:26:bd:3e:a3:26:19:6c:1e:bc:f5:a9:e7:d2: a9:3d:7e:d0:9a:cc:61:3b:6f:f3:1f:48:7a:3d:15:d2:02:44: ec:07:a9:b4:c3:64:45:26:d5:bc:a9:8e:06:a5:ff:65:04:ac: f7:7b:a6:fd:b9:24:c0:fd:d9:c5:04:d5:2b:58:63:fd:1b:48: 38:c8:e7:8e:e3:ec:c2:5b:08:72:a1:d9:72:7a:ca:e0:3f:fa: d6:00:ed:45:4d:a0:0b:b6:eb:5f:c1:a2:36:fe:98:5f:05:64: 80:4d:3f:a7:75:94:8c:ea:57:51:40:df:27:dc:9c:31:2a:bd: a3:2a:6d:87:6f:a8:6f:c4:13:24:b5:d1:f7:de:9f:78:09:87: 3d:9a:b6:b6:7d:24:69:77:94:c3:73:49:a9:21:89:c7:c2:1a: e3:af:5d:38:bd:a0:d5:46:40:e9:dd:df:eb:07:1b:e0:27:44: bd:94:8a:71:5b:f3:6c:62:ec:46:1d:0f:7e:3b:f8:12:32:b2: 0f:5c:46:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFVX1RRoZ47qsv4Oij3bQOPUnCt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjEwMTcwMDMzMTVaFw0yNjEwMjAwMzQ2MTVaMDMxMTAvBgNV BAMTKDQ5MUFCNzY3RUE5ODNBNjBENzU1NDJEOENCNDRGRkVCRkJGOEQwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8Xl2o12g7rje9C8WUlwa8iH/ ct9w/DyakPYst+H31qmbcL6IvZCsjcKwyvx/QIT8vIxokIc1pY3V7kW66LuRY8UC zvIaBhowkAPOKJcl7CbW4Kxqq+LGFrt1nxmOONtJh/CWcbPq9379WumDk1JgekjA KSmJtNxEcwgnO0oLpa/MJ627dgok6YEsqkqpZ9ZRZ7sZMRt3nIMN+0kmKtsTL16w oJQqj+g3Aig74UMEpT8GXuu5fNXdm1n4jr5QIOiFt2AFQVOF/auN0Lq21ENVYP0b nQEQ/ibcKjlvDuZilGNtqWFErG1sumRbtWr6LGeAHQ2hDGyDjGBQR/MNgiuNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSRq3Z+qYOmDXVULYy0T/6/v40HUwHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6RjeqaqXcuQ fbSndLCWTloty1n39cIEkVALb9cd4+CC9pZBRNvj87faVCWgi/YTAPuEL0+8U8z4 9gImvT6jJhlsHrz1qefSqT1+0JrMYTtv8x9Iej0V0gJE7AeptMNkRSbVvKmOBqX/ ZQSs93um/bkkwP3ZxQTVK1hj/RtIOMjnjuPswlsIcqHZcnrK4D/61gDtRU2gC7br X8GiNv6YXwVkgE0/p3WUjOpXUUDfJ9ycMSq9oypth2+ob8QTJLXR996feAmHPZq2 tn0kaXeUw3NJqSGJx8Ia469dOL2g1UZA6d3f6wcb4CdEvZSKcVvzbGLsRh0Pfjv4 EjKyD1xGWw== -----END CERTIFICATE-----Generated at Sat Oct 17 12:41:43 2026 by rpki-client