$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: txbfjcGpmnwVFY2pE53i21J4UfEZw5abtzF53RddnpI= Subject key identifier: 9B:7F:5A:A5:37:CA:18:35:A0:34:F0:8D:8A:7C:65:F5:87:BC:3C:F3 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 3C7A5D4781C4B771C929D3FF435222116B90AB4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 98 Signing time: Wed 13 May 2026 23:41:08 +0000 Manifest this update: Wed 13 May 2026 23:36:08 +0000 Manifest next update: Fri 15 May 2026 02:50:08 +0000 Files and hashes: 1: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 2: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) 3: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: o5E9UCohEozIxeeQ5tx/AWxKCE692k5bOjIRP8SShCg=) 4: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 5: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 02:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7a:5d:47:81:c4:b7:71:c9:29:d3:ff:43:52:22:11:6b:90:ab:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: May 13 23:36:08 2026 GMT Not After : May 15 02:50:08 2026 GMT Subject: CN=9B7F5AA537CA1835A034F08D8A7C65F587BC3CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:11:ea:bd:ac:58:5f:ed:8a:9e:95:ec:4b: 51:e1:5c:aa:b7:ce:71:24:b7:6b:3a:4c:14:e1:84: 6f:33:0c:e5:e7:dd:61:81:64:f7:58:fd:7a:5b:e8: bc:76:45:fd:48:2c:f4:cd:64:d9:7e:61:2f:46:d7: b7:46:47:1e:5e:b3:22:ff:0b:d2:0e:ab:d0:a8:b2: d2:42:1b:f3:67:3f:63:32:1f:7d:21:6b:da:02:90: dd:8b:9f:de:d0:42:16:c8:46:a6:00:1c:86:11:0f: af:b0:b3:6f:2d:14:79:d7:2e:48:61:a4:ce:de:17: a7:50:8c:96:0f:c8:5d:7c:29:78:06:b6:e7:ae:17: d5:8f:7d:2e:c9:36:19:8c:88:de:03:6e:cc:75:f6: 53:d0:f5:24:83:97:07:7b:f7:33:9b:a4:54:ac:e1: a6:73:66:99:e6:fa:15:16:8d:9f:6d:21:3a:0d:70: 57:cc:c1:57:c5:2a:cd:ae:02:65:07:7b:a7:66:19: a7:81:36:57:2d:e6:df:a4:5e:40:7c:d1:72:f9:1c: e5:04:d2:20:92:15:fe:9b:04:c7:d7:80:d3:65:6f: 7f:83:4c:dc:23:6c:3f:8d:7d:02:7f:2f:74:10:8c: a2:71:c7:ed:d8:cd:fb:ee:b4:45:a8:c7:42:a1:d3: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7F:5A:A5:37:CA:18:35:A0:34:F0:8D:8A:7C:65:F5:87:BC:3C:F3 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5d:5f:ea:8d:71:57:94:12:85:86:57:4b:29:a9:05:92:0a: d6:15:55:f5:fc:07:87:32:1f:02:2b:6b:3a:75:ed:4e:a0:2c: 66:bc:cb:ac:4d:e7:7d:b5:2c:f6:30:f8:cd:a5:f4:13:6d:31: 10:73:84:39:de:c5:5b:11:35:e6:40:cb:2d:63:fb:df:b8:67: a0:44:3e:f8:76:6d:c3:f0:50:11:73:53:b0:8b:cd:dc:23:b5: 45:e1:85:2f:3b:57:6c:30:12:bb:68:a2:cc:d5:83:a0:89:c2: c6:aa:57:6f:cf:00:96:4f:95:1c:24:c2:f3:52:3e:9a:fa:81: 69:bf:f1:b5:70:c4:d6:3e:9a:cc:5c:e0:4e:cd:e2:2e:78:45: 7e:ab:f1:70:79:0b:04:56:d5:e2:df:f7:7c:1b:43:5d:0c:47: 47:38:f6:ac:f4:54:26:86:08:3d:8d:9d:10:97:05:cc:49:08: 01:33:0c:80:03:b0:d1:20:c1:a8:17:39:14:8b:c7:cc:92:b5: fc:89:8e:c7:bd:85:65:ab:87:f6:07:43:c2:f9:ab:06:0d:93: 14:b8:41:8e:36:be:74:d2:6a:a1:82:5d:4e:9a:57:18:e5:1a: 63:5f:f7:d4:b6:a8:d0:b7:15:5f:90:5b:3c:9b:88:54:9c:55: d8:95:6e:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPHpdR4HEt3HJKdP/Q1IiEWuQq0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjA1MTMyMzM2MDhaFw0yNjA1MTUwMjUwMDhaMDMxMTAvBgNV BAMTKDlCN0Y1QUE1MzdDQTE4MzVBMDM0RjA4RDhBN0M2NUY1ODdCQzNDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJxHqvaxYX+2KnpXsS1HhXKq3 znEkt2s6TBThhG8zDOXn3WGBZPdY/Xpb6Lx2Rf1ILPTNZNl+YS9G17dGRx5esyL/ C9IOq9CostJCG/NnP2MyH30ha9oCkN2Ln97QQhbIRqYAHIYRD6+ws28tFHnXLkhh pM7eF6dQjJYPyF18KXgGtueuF9WPfS7JNhmMiN4Dbsx19lPQ9SSDlwd79zObpFSs 4aZzZpnm+hUWjZ9tIToNcFfMwVfFKs2uAmUHe6dmGaeBNlct5t+kXkB80XL5HOUE 0iCSFf6bBMfXgNNlb3+DTNwjbD+NfQJ/L3QQjKJxx+3YzfvutEWox0Kh0wRZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm39apTfKGDWgNPCNinxl9Ye8PPMwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal1f6o1xV5QS hYZXSympBZIK1hVV9fwHhzIfAitrOnXtTqAsZrzLrE3nfbUs9jD4zaX0E20xEHOE Od7FWxE15kDLLWP737hnoEQ++HZtw/BQEXNTsIvN3CO1ReGFLztXbDASu2iizNWD oInCxqpXb88Alk+VHCTC81I+mvqBab/xtXDE1j6azFzgTs3iLnhFfqvxcHkLBFbV 4t/3fBtDXQxHRzj2rPRUJoYIPY2dEJcFzEkIATMMgAOw0SDBqBc5FIvHzJK1/ImO x72FZauH9gdDwvmrBg2TFLhBjja+dNJqoYJdTppXGOUaY1/31Lao0LcVX5BbPJuI VJxV2JVuQw== -----END CERTIFICATE-----Generated at Thu May 14 03:15:33 2026 by rpki-client