$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: iVxdJylLQk1sOdMWk3WK2HmWdpsO1VGdH89y3pQytdU= Subject key identifier: 1A:CA:95:F1:1F:9E:4A:B4:DD:B6:3D:A6:BE:72:07:48:64:C0:B6:45 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 3BF306E58EBF46E2C00B66013EAE7DEA4E2D206D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: D8 Signing time: Tue 30 Jun 2026 23:02:55 +0000 Manifest this update: Tue 30 Jun 2026 22:57:55 +0000 Manifest next update: Wed 01 Jul 2026 23:13:55 +0000 Files and hashes: 1: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 2: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 3: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 4: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: XqKsuORtscl8dTFnvm9mPWPdoE27sI70xPgc2rPxAzM=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 23:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f3:06:e5:8e:bf:46:e2:c0:0b:66:01:3e:ae:7d:ea:4e:2d:20:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Jun 30 22:57:55 2026 GMT Not After : Jul 1 23:13:55 2026 GMT Subject: CN=1ACA95F11F9E4AB4DDB63DA6BE72074864C0B645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:20:54:b7:29:58:75:b0:1d:19:12:71:90:46: fe:ad:20:ed:f5:7f:e0:f2:80:45:64:18:a4:ee:ca: 8a:f4:23:f4:a3:25:35:28:e1:0b:72:30:16:3f:41: b2:e4:e5:d2:4e:de:d1:33:9f:c1:a1:46:d5:c0:bd: 9d:5c:f1:a7:cf:b3:6e:44:9f:89:7b:7e:26:46:b9: 52:1f:71:f2:f7:7c:b7:bd:2f:04:82:ec:4b:81:cb: 01:83:02:b1:95:55:91:78:f3:42:6a:79:43:21:63: ca:b6:1d:aa:86:18:70:fe:ed:8f:ec:5a:28:13:5b: 93:dc:d7:63:7c:e1:4e:30:41:63:2e:84:dd:d0:f3: 33:40:9d:bf:fa:0d:33:4b:21:4d:61:15:2f:85:9e: f0:8e:53:04:e0:07:fa:f5:a2:10:ff:12:94:ad:d4: 3f:e7:d8:8c:83:f7:69:03:78:9d:b6:d9:38:34:c1: a5:a0:1e:f8:04:89:63:a1:c4:b2:a1:5d:e6:e1:fa: a4:72:d2:9b:96:34:68:68:46:2d:59:ce:3d:a9:0d: e4:bc:cb:50:f6:0f:2b:39:d5:fe:71:80:f5:c4:62: b5:87:af:8c:35:2a:a1:bb:97:48:a9:0d:3b:3c:a3: 23:bc:69:b6:ff:6f:e7:2d:1d:c0:36:6b:e6:f9:a8: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:95:F1:1F:9E:4A:B4:DD:B6:3D:A6:BE:72:07:48:64:C0:B6:45 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a5:28:f3:f4:13:9c:09:51:c6:87:b4:5b:0f:c8:6e:8c:9a: c9:4f:16:b5:b5:6b:13:19:cb:3b:53:f1:88:9c:ff:fd:6e:dc: 69:47:a8:c8:f1:76:8f:5c:9e:91:da:7a:c7:34:b3:b2:c8:81: c3:1e:ec:cb:71:3c:d7:8c:94:8a:6a:61:64:41:3e:76:d1:9f: d2:c0:76:0e:7d:fd:be:3c:44:f6:97:cf:b4:fd:e4:be:13:68: 58:ac:9b:be:16:91:de:ab:76:92:09:64:e8:f6:35:c8:5a:21: d9:11:61:6e:50:bb:66:bd:ee:cd:dc:a4:69:b9:0e:99:7c:f9: 07:34:b0:88:83:98:8d:9e:15:d9:55:df:00:77:75:49:92:b8: 8d:b6:43:4d:b8:14:47:07:a6:13:78:0d:a4:5e:e8:c8:3e:a0: 65:d0:2a:2f:a1:10:16:78:c2:59:1f:cd:ae:d1:95:53:af:59: bd:3d:df:65:bc:a7:60:54:33:b7:8c:b8:b1:0c:f9:f1:04:5c: bf:16:2a:6b:03:7b:09:12:5e:24:79:2a:78:e2:55:87:85:e8: e8:f7:ad:e8:73:c5:35:6f:6f:71:3f:7f:9b:0b:8d:d5:d8:8c: 91:b9:6d:3b:80:0b:7c:a3:30:03:6f:f8:b1:73:62:db:c6:c3: a3:3e:86:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/MG5Y6/RuLAC2YBPq596k4tIG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA2MzAyMjU3NTVaFw0yNjA3MDEyMzEzNTVaMDMxMTAvBgNV BAMTKDFBQ0E5NUYxMUY5RTRBQjREREI2M0RBNkJFNzIwNzQ4NjRDMEI2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXIFS3KVh1sB0ZEnGQRv6tIO31 f+DygEVkGKTuyor0I/SjJTUo4QtyMBY/QbLk5dJO3tEzn8GhRtXAvZ1c8afPs25E n4l7fiZGuVIfcfL3fLe9LwSC7EuBywGDArGVVZF480JqeUMhY8q2HaqGGHD+7Y/s WigTW5Pc12N84U4wQWMuhN3Q8zNAnb/6DTNLIU1hFS+FnvCOUwTgB/r1ohD/EpSt 1D/n2IyD92kDeJ222Tg0waWgHvgEiWOhxLKhXebh+qRy0puWNGhoRi1Zzj2pDeS8 y1D2Dys51f5xgPXEYrWHr4w1KqG7l0ipDTs8oyO8abb/b+ctHcA2a+b5qPVfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGsqV8R+eSrTdtj2mvnIHSGTAtkUwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKUo8/QTnAlR xoe0Ww/IboyayU8WtbVrExnLO1PxiJz//W7caUeoyPF2j1yekdp6xzSzssiBwx7s y3E814yUimphZEE+dtGf0sB2Dn39vjxE9pfPtP3kvhNoWKybvhaR3qt2kglk6PY1 yFoh2RFhblC7Zr3uzdykabkOmXz5BzSwiIOYjZ4V2VXfAHd1SZK4jbZDTbgURwem E3gNpF7oyD6gZdAqL6EQFnjCWR/NrtGVU69ZvT3fZbynYFQzt4y4sQz58QRcvxYq awN7CRJeJHkqeOJVh4Xo6Pet6HPFNW9vcT9/mwuN1diMkbltO4ALfKMwA2/4sXNi 28bDoz6G3w== -----END CERTIFICATE-----Generated at Wed Jul 1 03:18:38 2026 by rpki-client