$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json) Hash identifier: ETrl0DqQCrFSPzWeM17aa+T2CteH6sPBehkot6aGbvc= Subject key identifier: 02:E8:BA:10:FA:A7:6C:DD:53:93:C9:05:2C:E7:B7:E5:8D:BB:25:3F Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Certificate serial: 2385847E33FAC2448D4C49D7AFD9D21778235295 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft Manifest number: AF Signing time: Fri 29 May 2026 15:43:01 +0000 Manifest this update: Fri 29 May 2026 15:38:01 +0000 Manifest next update: Sat 30 May 2026 16:50:01 +0000 Files and hashes: 1: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=) 2: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: m5j7Hlxs20zbNgkn423TYinHBARTJ/c5pjVTHVig0e8=) 3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=) 4: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=) 5: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=) 6: 323430353a393463303a3a2f33322d3634203d3e2039333932.roa (hash: qrvfzDrxioXFEVWOYWe3E0IKCO6drPhy+LzFpN1500o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:85:84:7e:33:fa:c2:44:8d:4c:49:d7:af:d9:d2:17:78:23:52:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Validity Not Before: May 29 15:38:01 2026 GMT Not After : May 30 16:50:01 2026 GMT Subject: CN=02E8BA10FAA76CDD5393C9052CE7B7E58DBB253F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:ad:7a:be:70:48:b8:90:1e:a1:96:97:a4: fa:85:64:7a:f7:17:16:a7:78:86:86:75:63:fb:3d: d6:05:9e:08:f9:cc:99:24:66:e7:bb:35:ac:13:f4: 93:d1:66:d1:b7:6d:28:bc:71:50:ca:ef:9b:6d:54: e7:53:c5:81:8a:2f:1b:ae:b3:4f:0e:2f:8d:e3:d1: 41:48:8b:0c:1a:bb:24:cf:08:eb:80:9c:9a:23:f4: 74:08:c0:b7:31:16:e5:e1:cf:a4:52:41:1e:fb:04: ca:9a:43:19:54:53:6e:58:d5:ff:61:67:7a:d5:4b: 39:64:cf:df:ae:7b:3a:50:3f:87:46:f6:be:fa:e8: 0f:32:64:26:a7:7e:95:aa:18:21:42:ad:db:27:71: b9:45:36:73:21:14:0a:20:67:db:61:64:5f:fd:f9: 6f:0c:14:10:95:60:35:01:f5:b6:cc:31:e3:22:cf: 22:04:ad:59:b1:db:4a:bb:5c:2c:a0:48:35:0f:2b: 7d:fd:86:eb:15:08:21:88:fe:70:fa:56:15:e0:63: 74:30:a8:06:16:7a:72:14:bc:7b:da:c1:3b:56:bb: db:01:99:c4:b7:aa:dd:4a:1c:16:07:0e:2d:b2:80: 75:27:b8:30:15:45:63:eb:34:84:1a:4a:65:5b:f4: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:BA:10:FA:A7:6C:DD:53:93:C9:05:2C:E7:B7:E5:8D:BB:25:3F X509v3 Authority Key Identifier: keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:53:0c:29:4d:17:e5:10:15:49:69:2d:31:02:d2:18:40:7f: 33:7d:27:a2:67:3b:c4:dc:12:7f:ff:2b:19:cd:9d:f6:5d:98: fc:d7:65:e9:73:2e:5e:08:9e:7b:27:2b:7f:f1:da:1b:22:37: 8d:d9:3a:4a:7a:75:5b:75:3d:58:ea:c6:17:cf:92:66:6e:a8: 1c:f6:4a:15:20:60:aa:35:96:86:3b:31:e6:a2:8d:35:1d:07: ac:ae:e2:30:e6:5d:0b:6b:e3:f2:7f:2c:10:b4:5f:8f:db:1c: 62:e0:46:9c:03:7a:f4:7f:20:a6:a1:17:51:6c:f8:d1:e8:f9: 13:05:75:64:6e:8d:43:a3:bc:d3:b5:7a:7f:9c:86:41:39:81: 5e:ad:d6:f9:37:ec:f8:19:e2:53:d3:82:87:8b:ff:ee:86:2f: b1:b5:d3:f4:2a:36:b6:f2:8e:f3:73:23:7f:37:86:a5:1f:d5: 84:ee:75:95:83:1f:7d:72:87:d0:89:9a:d8:79:4a:8b:e2:0c: 09:82:b5:e1:50:b5:89:8d:2c:0e:73:f5:60:9a:50:36:6d:e2: 57:94:c7:21:21:bf:40:9e:7c:f7:92:60:94:dd:d6:b9:b4:0f: 86:ee:5c:ad:97:66:52:6c:94:89:98:dc:ae:79:9b:b7:2c:7f: 3a:66:61:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI4WEfjP6wkSNTEnXr9nSF3gjUpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4 QUZEOTYxRTAeFw0yNjA1MjkxNTM4MDFaFw0yNjA1MzAxNjUwMDFaMDMxMTAvBgNV BAMTKDAyRThCQTEwRkFBNzZDREQ1MzkzQzkwNTJDRTdCN0U1OERCQjI1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuja16vnBIuJAeoZaXpPqFZHr3 FxaneIaGdWP7PdYFngj5zJkkZue7NawT9JPRZtG3bSi8cVDK75ttVOdTxYGKLxuu s08OL43j0UFIiwwauyTPCOuAnJoj9HQIwLcxFuXhz6RSQR77BMqaQxlUU25Y1f9h Z3rVSzlkz9+uezpQP4dG9r766A8yZCanfpWqGCFCrdsncblFNnMhFAogZ9thZF/9 +W8MFBCVYDUB9bbMMeMizyIErVmx20q7XCygSDUPK339husVCCGI/nD6VhXgY3Qw qAYWenIUvHvawTtWu9sBmcS3qt1KHBYHDi2ygHUnuDAVRWPrNIQaSmVb9NaPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAui6EPqnbN1Tk8kFLOe35Y27JT8wHwYDVR0j BBgwFoAUv3IwtBp19mzD0jcswM/6JIr9lh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzcyODAwMi8wL0JGNzIzMEI0MUE3NUY2NkNDM0QyMzcyQ0MwQ0ZG QTI0OEFGRDk2MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3MjgwMDIvMC9CRjcyMzBCNDFBNzVG NjZDQzNEMjM3MkNDMENGRkEyNDhBRkQ5NjFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAulMMKU0X5RAV SWktMQLSGEB/M30nomc7xNwSf/8rGc2d9l2Y/Ndl6XMuXgieeycrf/HaGyI3jdk6 Snp1W3U9WOrGF8+SZm6oHPZKFSBgqjWWhjsx5qKNNR0HrK7iMOZdC2vj8n8sELRf j9scYuBGnAN69H8gpqEXUWz40ej5EwV1ZG6NQ6O807V6f5yGQTmBXq3W+Tfs+Bni U9OCh4v/7oYvsbXT9Co2tvKO83MjfzeGpR/VhO51lYMffXKH0Ima2HlKi+IMCYK1 4VC1iY0sDnP1YJpQNm3iV5THISG/QJ5895JglN3WubQPhu5crZdmUmyUiZjcrnmb tyx/OmZhRA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client