$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: YX7UIyNlrAkc3vt54NvlhqJPxxw2XglPFrC77IWDmhI= Subject key identifier: 05:6E:89:B9:2F:46:38:EA:2E:EB:F9:6E:51:30:66:02:80:5B:CE:62 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 70BE6EAB289E58FE207AF291B9AB19B1708DF7B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 5B Signing time: Sun 29 Mar 2026 08:33:30 +0000 Manifest this update: Sun 29 Mar 2026 08:28:30 +0000 Manifest next update: Mon 30 Mar 2026 10:57:30 +0000 Files and hashes: 1: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 2: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: 5GRdHA+i+ij5hOWJiH5RBLAY+pF0traAl+QDBNl0PdY=) 3: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 4: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 5: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 10:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:be:6e:ab:28:9e:58:fe:20:7a:f2:91:b9:ab:19:b1:70:8d:f7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Mar 29 08:28:30 2026 GMT Not After : Mar 30 10:57:30 2026 GMT Subject: CN=056E89B92F4638EA2EEBF96E51306602805BCE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:ef:c9:91:c9:06:ed:4b:86:e4:72:61:da: be:42:a7:c6:e8:1a:f1:3a:78:52:a0:73:2f:84:4a: e8:46:49:a7:cd:98:48:e7:29:a9:d7:90:81:9e:2e: 51:75:6e:15:db:5e:f1:ab:cd:c6:d1:55:ef:e7:3a: 62:77:fb:71:6c:9b:52:34:1e:e1:e6:4d:48:e7:87: 4f:75:c4:7a:99:9e:d6:e6:9f:d5:d0:28:7e:40:f4: 4b:e8:15:d8:21:7a:15:d9:62:10:e2:dc:ec:9a:1d: 3d:e8:2a:fd:3e:71:0c:5a:a0:80:fd:73:b1:c0:42: 4f:e9:b9:42:d5:5e:fd:17:cc:9a:5b:d0:be:fe:fe: 93:b6:9a:48:26:a0:d5:ca:48:0e:54:d2:a1:98:c0: c2:2a:d0:28:6a:e5:4d:f7:f2:4f:9c:21:4e:95:70: 71:1a:61:1a:e5:86:d8:a2:82:e4:f4:e9:3f:5c:32: 5a:ac:50:e9:61:71:f2:a1:b5:4a:29:81:cb:18:82: 19:59:30:c4:7a:67:b3:17:8d:7f:56:8c:ef:1d:66: f5:13:19:73:5d:b9:8b:f8:bf:8f:17:d8:57:56:2f: 81:36:75:9c:41:47:e0:e1:cd:cb:8f:32:e5:a8:16: 95:3b:c3:8f:df:b7:a1:05:6f:4e:c4:de:62:cd:a0: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6E:89:B9:2F:46:38:EA:2E:EB:F9:6E:51:30:66:02:80:5B:CE:62 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6a:e4:7c:9b:40:50:40:19:4a:07:af:c0:5b:62:d9:dd:e7: 5f:1c:ce:d2:5a:8f:32:aa:e3:fd:1f:40:f6:96:61:94:c2:f5: df:88:1c:f5:e1:16:f5:a4:87:6f:f0:aa:62:21:ca:9a:9f:0e: 1c:9a:ba:79:eb:22:4a:d6:90:fd:a9:87:b7:37:9c:2d:64:c9: 21:ce:34:8a:d0:2c:71:00:04:18:78:80:3f:c5:10:e8:3a:b9: 4c:94:19:c3:8a:45:44:68:c6:03:9f:e3:e3:06:0b:43:e6:24: cf:67:c1:eb:eb:14:77:f5:b9:68:7b:d6:8d:79:d4:63:8f:cb: 08:ad:a2:ec:0d:bb:16:20:a2:4f:31:0d:29:78:fd:d6:f1:3f: a3:3a:63:0f:10:62:ea:0d:2e:8e:57:61:18:c1:88:3c:db:14: 8f:2b:dd:29:a1:9c:77:59:75:a5:cc:99:e0:f6:74:4d:06:cc: df:b0:00:43:11:dd:94:ce:5b:cf:c4:ac:1f:90:c5:72:4f:0c: 2d:02:5a:3c:01:3f:d4:d6:3d:75:2c:a4:47:55:44:b0:ec:24: 42:c9:54:9e:e9:2e:00:0a:cf:06:c1:32:55:88:f3:f2:0a:ce: 71:01:47:3d:f6:43:8c:13:61:19:30:73:e0:fe:16:f2:fa:f6: 2a:ca:f2:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcL5uqyieWP4gevKRuasZsXCN97QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjAzMjkwODI4MzBaFw0yNjAzMzAxMDU3MzBaMDMxMTAvBgNV BAMTKDA1NkU4OUI5MkY0NjM4RUEyRUVCRjk2RTUxMzA2NjAyODA1QkNFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00O/JkckG7UuG5HJh2r5Cp8bo GvE6eFKgcy+ESuhGSafNmEjnKanXkIGeLlF1bhXbXvGrzcbRVe/nOmJ3+3Fsm1I0 HuHmTUjnh091xHqZntbmn9XQKH5A9EvoFdghehXZYhDi3OyaHT3oKv0+cQxaoID9 c7HAQk/puULVXv0XzJpb0L7+/pO2mkgmoNXKSA5U0qGYwMIq0Chq5U338k+cIU6V cHEaYRrlhtiiguT06T9cMlqsUOlhcfKhtUopgcsYghlZMMR6Z7MXjX9WjO8dZvUT GXNduYv4v48X2FdWL4E2dZxBR+DhzcuPMuWoFpU7w4/ft6EFb07E3mLNoEMTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBW6JuS9GOOou6/luUTBmAoBbzmIwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmrkfJtAUEAZ SgevwFti2d3nXxzO0lqPMqrj/R9A9pZhlML134gc9eEW9aSHb/CqYiHKmp8OHJq6 eesiStaQ/amHtzecLWTJIc40itAscQAEGHiAP8UQ6Dq5TJQZw4pFRGjGA5/j4wYL Q+Ykz2fB6+sUd/W5aHvWjXnUY4/LCK2i7A27FiCiTzENKXj91vE/ozpjDxBi6g0u jldhGMGIPNsUjyvdKaGcd1l1pcyZ4PZ0TQbM37AAQxHdlM5bz8SsH5DFck8MLQJa PAE/1NY9dSykR1VEsOwkQslUnukuAArPBsEyVYjz8grOcQFHPfZDjBNhGTBz4P4W 8vr2Ksry2A== -----END CERTIFICATE-----Generated at Sun Mar 29 23:42:53 2026 by rpki-client