$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: KtEKK7v9d1lL81vtMXCzHcIwKsrYFRWPfw+XQ1egvUs= Subject key identifier: B4:2F:E1:DB:5F:34:15:1E:FA:2E:22:66:81:BC:83:B5:D0:B2:44:E4 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 1654E8B6D71F95B885F442C64FF5F0F9A65B449C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:17 +0000 Manifest this update: Fri 28 Aug 2026 06:43:17 +0000 Manifest next update: Mon 31 Aug 2026 11:21:17 +0000 Files and hashes: 1: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) 2: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: 8aJqbln0YT1vFGQklZe12mh41oR6leEFMiLo+/5jJYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:54:e8:b6:d7:1f:95:b8:85:f4:42:c6:4f:f5:f0:f9:a6:5b:44:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Aug 28 06:43:17 2026 GMT Not After : Aug 31 11:21:17 2026 GMT Subject: CN=B42FE1DB5F34151EFA2E226681BC83B5D0B244E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:cb:f0:34:26:f5:8e:69:a1:e0:8d:c2:9f: e4:e9:99:b6:86:5b:51:fb:b1:13:83:05:80:ca:32: fa:b5:a9:37:3e:18:0b:26:a4:5b:a7:20:d2:be:71: 17:60:3c:2a:b0:3f:95:1b:b5:73:cd:d6:bf:a9:eb: ab:70:54:92:56:b5:d4:c2:00:e2:92:35:b3:f6:49: a7:c1:9c:c6:25:94:65:88:3b:a6:64:d3:d3:11:ac: 5d:18:17:e5:03:1c:c6:2f:7c:f0:dd:2b:04:2f:a2: d3:58:cd:26:fb:1b:4b:ba:7c:e9:67:f9:8e:44:a9: e7:8b:0a:22:54:0a:1e:39:a3:e2:df:c1:55:5a:80: b9:b2:3d:1b:f1:bf:d4:5e:64:46:ef:bc:cb:65:36: 1a:16:2c:8c:bc:cd:af:0f:9c:da:80:b9:ce:56:fb: c3:e7:99:cf:66:34:e7:b1:9b:14:4e:03:70:97:44: bb:8f:40:d2:35:00:f3:ba:1b:05:df:cf:72:f7:12: 9f:5b:37:13:44:0c:2b:ff:7f:d5:06:12:52:1b:c2: e4:1e:3b:a8:16:80:c7:ae:4a:b4:ce:40:0d:45:a9: 54:78:b6:aa:0b:6d:a8:ac:e4:3d:5f:e4:f4:0d:52: b2:be:3e:ce:48:c3:2d:ab:28:ec:26:f3:76:4d:cd: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:E1:DB:5F:34:15:1E:FA:2E:22:66:81:BC:83:B5:D0:B2:44:E4 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f1:19:a1:8c:46:77:60:a0:1b:6a:63:ca:9c:ba:fd:d0:2e: 19:5b:ca:c5:2a:94:56:1b:53:1b:43:33:a2:1b:93:5b:26:96: 26:65:81:1e:0e:1d:22:ca:69:da:4f:46:cc:ca:e4:e8:2f:ec: 93:1c:44:cc:4c:7e:95:cf:ff:dd:a1:56:ea:4f:e8:3a:a9:a4: 95:f0:78:64:0a:52:74:c8:21:90:c3:ce:7f:d7:72:16:13:ff: 49:b6:92:b7:c7:13:7b:23:d0:50:bd:9d:62:80:59:6f:fb:84: a3:ff:53:be:c5:20:15:e5:52:bc:70:08:18:d3:73:f5:c2:94: 49:fd:1b:4e:ac:6a:36:1c:5c:90:a0:33:5f:d3:c1:5a:67:a8: 6c:21:4b:bf:69:b7:87:d2:fe:c0:86:0e:6a:6a:e4:94:2d:06: a3:40:d2:42:db:24:88:ce:6c:7f:d1:12:7a:ff:dd:b1:59:e9: 2b:af:a4:30:d8:b0:61:9b:56:87:3d:99:ee:c0:c7:72:44:64: b4:cf:1c:a3:6f:ac:17:a6:94:fd:f9:a3:22:7a:ba:a0:e2:71: 89:ee:20:59:b5:1d:7e:97:c3:07:ed:aa:a9:36:4c:3d:1b:1b: 93:ee:da:95:96:a4:74:6c:87:f1:77:43:53:c4:88:7a:d6:48: 42:50:4a:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFlTottcflbiF9ELGT/Xw+aZbRJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA4MjgwNjQzMTdaFw0yNjA4MzExMTIxMTdaMDMxMTAvBgNV BAMTKEI0MkZFMURCNUYzNDE1MUVGQTJFMjI2NjgxQkM4M0I1RDBCMjQ0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ecvwNCb1jmmh4I3Cn+TpmbaG W1H7sRODBYDKMvq1qTc+GAsmpFunINK+cRdgPCqwP5UbtXPN1r+p66twVJJWtdTC AOKSNbP2SafBnMYllGWIO6Zk09MRrF0YF+UDHMYvfPDdKwQvotNYzSb7G0u6fOln +Y5EqeeLCiJUCh45o+LfwVVagLmyPRvxv9ReZEbvvMtlNhoWLIy8za8PnNqAuc5W +8Pnmc9mNOexmxROA3CXRLuPQNI1APO6GwXfz3L3Ep9bNxNEDCv/f9UGElIbwuQe O6gWgMeuSrTOQA1FqVR4tqoLbais5D1f5PQNUrK+Ps5Iwy2rKOwm83ZNzYZVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtC/h2180FR76LiJmgbyDtdCyROQwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvEZoYxGd2Cg G2pjypy6/dAuGVvKxSqUVhtTG0MzohuTWyaWJmWBHg4dIspp2k9GzMrk6C/skxxE zEx+lc//3aFW6k/oOqmklfB4ZApSdMghkMPOf9dyFhP/SbaSt8cTeyPQUL2dYoBZ b/uEo/9TvsUgFeVSvHAIGNNz9cKUSf0bTqxqNhxckKAzX9PBWmeobCFLv2m3h9L+ wIYOamrklC0Go0DSQtskiM5sf9ESev/dsVnpK6+kMNiwYZtWhz2Z7sDHckRktM8c o2+sF6aU/fmjInq6oOJxie4gWbUdfpfDB+2qqTZMPRsbk+7alZakdGyH8XdDU8SI etZIQlBK+Q== -----END CERTIFICATE-----Generated at Sat Aug 29 07:36:07 2026 by rpki-client