$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json) Hash identifier: 2WUiS97UdWtWF/exMnqUGworgG2Dp12OMKj/0VgGhdw= Subject key identifier: 23:DF:D0:CB:05:B6:F3:0D:29:E1:25:B1:0B:3A:73:D4:E3:BD:AC:52 Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Certificate serial: 6AC3AE34EA368FB16C4C4FF08FDE69D860735FB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft Manifest number: 0138 Signing time: Wed 07 Oct 2026 08:15:47 +0000 Manifest this update: Wed 07 Oct 2026 08:10:47 +0000 Manifest next update: Sat 10 Oct 2026 19:47:47 +0000 Files and hashes: 1: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=) 2: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: 7R17vIeA6MDO9gW59VvhJao4Db2/tZEDKz5QpNrXSV8=) 3: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=) 4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=) 5: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 19:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c3:ae:34:ea:36:8f:b1:6c:4c:4f:f0:8f:de:69:d8:60:73:5f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Validity Not Before: Oct 7 08:10:47 2026 GMT Not After : Oct 10 19:47:47 2026 GMT Subject: CN=23DFD0CB05B6F30D29E125B10B3A73D4E3BDAC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:56:8d:86:a9:38:a7:57:ea:04:60:22:77: b2:20:e6:2b:94:ee:7d:49:cb:79:64:e7:96:a8:b6: cd:0e:a7:21:ed:0c:a1:39:06:96:a1:d5:af:ee:b8: 65:19:7b:7f:1a:bb:e4:39:df:ee:7f:70:63:e0:84: 68:ec:8b:35:9d:bb:2b:46:43:7a:b1:e6:56:89:bc: a8:61:2f:20:30:74:24:f2:06:59:81:d0:05:59:79: 9d:2e:a5:58:d7:d4:6f:28:ee:75:0e:41:2c:a6:08: 9f:e6:f2:81:96:28:53:17:24:7c:aa:54:46:01:eb: de:97:4a:fc:85:ed:58:70:36:82:ab:7c:82:8e:c8: 23:6b:9f:58:d4:d6:b4:34:f6:24:07:6c:ba:62:c8: 72:ae:89:49:07:69:b9:f8:2e:6f:90:6c:a2:9f:0b: 97:ea:ee:8a:2e:e1:21:30:ea:b6:a0:32:1d:3a:49: 62:13:33:47:21:b5:e2:52:fa:f2:e2:d8:3a:c8:47: e8:94:07:f4:6e:e5:f9:46:03:f9:1e:08:e2:e6:f2: 57:f0:1e:86:bd:1b:58:fd:ff:8d:92:cf:8b:b6:67: 8a:c6:a2:81:80:a8:e2:09:50:2c:12:ea:26:5f:9c: a6:be:51:d0:5c:e1:f8:93:b6:de:0a:0e:81:78:dd: 41:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:D0:CB:05:B6:F3:0D:29:E1:25:B1:0B:3A:73:D4:E3:BD:AC:52 X509v3 Authority Key Identifier: keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0b:d3:37:71:b4:b2:a1:a5:18:70:82:ab:1a:1c:b6:c1:c9: 74:e6:01:eb:94:dd:12:de:c1:17:fb:9d:d2:28:2b:95:37:62: 89:69:aa:a2:08:f0:91:af:69:fb:17:1e:92:98:3b:bf:ef:ab: ca:c7:bb:e2:c5:ff:2d:62:e5:ae:ca:d4:a3:88:7f:c7:9c:1d: de:81:be:84:5d:8c:ea:46:ce:5e:4c:7d:dc:68:c3:ba:f2:00: 47:e1:1b:2b:4e:3c:3f:dd:64:d0:11:46:ac:ba:86:0f:84:0b: f9:cd:e7:af:e0:c9:98:a8:c3:e2:58:c5:82:0d:3d:7f:0d:21: 07:f6:86:e1:ab:64:d6:90:c0:e8:97:11:6b:06:5b:14:75:fc: 94:b6:b3:97:46:50:aa:df:7f:db:86:49:3e:71:df:4d:46:fc: 6f:85:a8:e9:8d:be:a6:11:00:f7:7d:2f:3b:a1:01:22:98:eb: ea:b8:e0:ab:fe:ed:3f:22:df:91:c2:71:8a:b7:ce:68:a4:5b: 91:8e:ef:35:38:55:ff:f7:f5:38:47:23:55:e8:d8:45:99:09: 36:e9:ba:2b:3e:59:02:a3:ad:6f:98:f9:69:f3:b2:5c:06:28: b1:40:61:a5:22:85:92:02:10:82:4b:ef:a0:31:ac:20:94:02: 3a:97:b5:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUasOuNOo2j7FsTE/wj95p2GBzX7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlE ODc5RTRGNDAeFw0yNjEwMDcwODEwNDdaFw0yNjEwMTAxOTQ3NDdaMDMxMTAvBgNV BAMTKDIzREZEMENCMDVCNkYzMEQyOUUxMjVCMTBCM0E3M0Q0RTNCREFDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UFaNhqk4p1fqBGAid7Ig5iuU 7n1Jy3lk55aots0OpyHtDKE5Bpah1a/uuGUZe38au+Q53+5/cGPghGjsizWduytG Q3qx5laJvKhhLyAwdCTyBlmB0AVZeZ0upVjX1G8o7nUOQSymCJ/m8oGWKFMXJHyq VEYB696XSvyF7VhwNoKrfIKOyCNrn1jU1rQ09iQHbLpiyHKuiUkHabn4Lm+QbKKf C5fq7oou4SEw6ragMh06SWITM0chteJS+vLi2DrIR+iUB/Ru5flGA/keCOLm8lfw Hoa9G1j9/42Sz4u2Z4rGooGAqOIJUCwS6iZfnKa+UdBc4fiTtt4KDoF43UHrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI9/QywW28w0p4SWxCzpz1OO9rFIwHwYDVR0j BBgwFoAUvK+ZV0gZWQ17gmEf/YYvadh55PQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjMzNjY0My8wL0JDQUY5OTU3NDgxOTU5MEQ3QjgyNjExRkZEODYy RjY5RDg3OUU0RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIzMzY2NDMvMC9CQ0FGOTk1NzQ4MTk1 OTBEN0I4MjYxMUZGRDg2MkY2OUQ4NzlFNEY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwvTN3G0sqGl GHCCqxoctsHJdOYB65TdEt7BF/ud0igrlTdiiWmqogjwka9p+xcekpg7v++ryse7 4sX/LWLlrsrUo4h/x5wd3oG+hF2M6kbOXkx93GjDuvIAR+EbK048P91k0BFGrLqG D4QL+c3nr+DJmKjD4ljFgg09fw0hB/aG4atk1pDA6JcRawZbFHX8lLazl0ZQqt9/ 24ZJPnHfTUb8b4Wo6Y2+phEA930vO6EBIpjr6rjgq/7tPyLfkcJxirfOaKRbkY7v NThV//f1OEcjVejYRZkJNum6Kz5ZAqOtb5j5afOyXAYosUBhpSKFkgIQgkvvoDGs IJQCOpe19A== -----END CERTIFICATE-----Generated at Fri Oct 9 20:04:57 2026 by rpki-client