$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: ZzwQ86SZl9Uw8EZn/ltNlKMXMoTsfffXayFVJSqoTGg= Subject key identifier: 5E:53:8F:C3:83:48:E8:28:F6:D1:FF:0C:F5:0D:2E:72:51:A5:20:F4 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 7CC6E5E9A5D64A7E96445C22A06D9614B0DDA97C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 0114 Signing time: Fri 14 Aug 2026 19:52:09 +0000 Manifest this update: Fri 14 Aug 2026 19:47:09 +0000 Manifest next update: Sat 15 Aug 2026 21:12:09 +0000 Files and hashes: 1: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 2: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 3: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 5: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: ceLPuUCYw8lE+IXsyx4TYCGE6SaMXrToxazPhe4+8jc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 19:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c6:e5:e9:a5:d6:4a:7e:96:44:5c:22:a0:6d:96:14:b0:dd:a9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Aug 14 19:47:09 2026 GMT Not After : Aug 15 21:12:09 2026 GMT Subject: CN=5E538FC38348E828F6D1FF0CF50D2E7251A520F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:bd:f0:45:a4:b6:81:86:49:9e:05:25:ce: 3a:7a:41:a0:f9:c1:35:08:9b:42:02:d8:af:af:f8: 41:3d:c4:e8:68:97:f2:06:d3:6b:6f:8d:08:4b:04: a2:5c:68:00:56:c0:84:a6:84:8a:a4:b4:fd:3d:e4: 04:fd:03:1d:64:76:f9:86:67:d2:b5:dd:a5:0e:62: bc:4a:6f:4a:08:f1:df:35:ac:24:91:bd:94:ca:b1: bf:c0:f9:94:b0:92:9b:a7:fb:1e:3c:5f:50:53:c2: e4:c5:85:7d:d7:9c:7b:a9:b9:04:8b:21:f6:7b:4e: cf:db:0f:09:11:e7:8e:53:29:b0:f6:6f:ce:ea:5e: e1:bc:e2:de:a9:14:e4:06:43:0f:53:5d:42:56:1d: 9f:82:29:0b:e3:2e:52:71:f6:95:d1:0e:52:1d:cd: 3d:25:d3:8a:ae:e0:cb:9a:c0:ec:54:44:f0:18:ab: 1c:77:6f:38:ac:a2:17:91:6d:27:52:89:d8:e7:ec: 6e:05:88:3e:ec:95:09:cb:f9:d3:9a:db:6a:f0:fe: 80:0d:34:1e:6b:42:1e:cd:56:f5:16:27:47:a5:3d: 2d:7e:32:5b:37:6c:64:4c:9d:76:be:7b:80:50:ea: 4c:71:ce:b2:9c:e6:b2:d5:d5:9d:0f:56:45:60:83: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:53:8F:C3:83:48:E8:28:F6:D1:FF:0C:F5:0D:2E:72:51:A5:20:F4 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bb:f2:ce:41:32:f1:a8:dd:02:98:02:dc:5e:50:d9:ad:65: 74:99:8e:1d:15:12:5c:0f:5b:df:79:85:d7:b7:be:44:7a:88: 51:9f:5b:07:89:e7:c8:40:34:ca:cc:25:3b:79:66:9b:d6:a2: 37:27:4d:c8:e4:2a:37:e4:07:29:47:c0:7d:c5:8a:d3:08:17: fa:8f:63:64:77:b4:e2:e4:9b:f0:84:00:53:c7:0f:32:6a:ce: b0:a3:e6:45:48:9f:29:06:27:a4:6b:e6:45:d8:7f:21:41:04: 6c:a4:8c:c5:ab:1a:59:1f:85:6d:03:dd:5b:bf:6b:bb:58:06: a1:89:4d:4c:28:8c:32:9e:fd:5b:ea:73:63:a9:2d:c2:0c:3f: 52:ba:25:af:18:90:a8:a8:11:3c:44:57:12:58:86:02:bc:2f: 97:5b:5a:25:f5:61:14:25:10:76:57:1f:f3:5b:07:78:00:95: 88:d2:d2:78:d6:45:97:bf:d5:5b:f2:fb:47:51:b9:31:cb:bf: d1:07:ec:ec:3c:dc:5d:52:e0:36:18:18:c6:04:10:d6:d8:00: eb:2a:9b:52:37:bb:16:9b:e9:19:39:bb:a5:66:7b:a8:2c:4a: 12:b4:df:43:aa:ad:d2:81:d2:2f:1c:fe:d1:61:5d:9a:92:4d: 4f:68:8e:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfMbl6aXWSn6WRFwioG2WFLDdqXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA4MTQxOTQ3MDlaFw0yNjA4MTUyMTEyMDlaMDMxMTAvBgNV BAMTKDVFNTM4RkMzODM0OEU4MjhGNkQxRkYwQ0Y1MEQyRTcyNTFBNTIwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Pb3wRaS2gYZJngUlzjp6QaD5 wTUIm0IC2K+v+EE9xOhol/IG02tvjQhLBKJcaABWwISmhIqktP095AT9Ax1kdvmG Z9K13aUOYrxKb0oI8d81rCSRvZTKsb/A+ZSwkpun+x48X1BTwuTFhX3XnHupuQSL IfZ7Ts/bDwkR545TKbD2b87qXuG84t6pFOQGQw9TXUJWHZ+CKQvjLlJx9pXRDlId zT0l04qu4MuawOxURPAYqxx3bzisoheRbSdSidjn7G4FiD7slQnL+dOa22rw/oAN NB5rQh7NVvUWJ0elPS1+Mls3bGRMnXa+e4BQ6kxxzrKc5rLV1Z0PVkVgg/mTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXlOPw4NI6Cj20f8M9Q0uclGlIPQwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLvyzkEy8ajd ApgC3F5Q2a1ldJmOHRUSXA9b33mF17e+RHqIUZ9bB4nnyEA0yswlO3lmm9aiNydN yOQqN+QHKUfAfcWK0wgX+o9jZHe04uSb8IQAU8cPMmrOsKPmRUifKQYnpGvmRdh/ IUEEbKSMxasaWR+FbQPdW79ru1gGoYlNTCiMMp79W+pzY6ktwgw/UrolrxiQqKgR PERXEliGArwvl1taJfVhFCUQdlcf81sHeACViNLSeNZFl7/VW/L7R1G5Mcu/0Qfs 7DzcXVLgNhgYxgQQ1tgA6yqbUje7FpvpGTm7pWZ7qCxKErTfQ6qt0oHSLxz+0WFd mpJNT2iOCg== -----END CERTIFICATE-----Generated at Sat Aug 15 12:22:38 2026 by rpki-client