$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: XMZrtSxCRJBYbABhyMH8fkYtnpxdFcIa1Q95s2wsh6s= Subject key identifier: F1:A5:87:9A:54:8D:89:41:C8:B1:23:D5:E1:91:2D:CB:E3:92:A7:0C Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 6D8E1184A72DA37C2BB65FF49C7BF3660A2AD649 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 00:09:17 +0000 Manifest this update: Mon 13 Apr 2026 00:04:17 +0000 Manifest next update: Tue 14 Apr 2026 03:54:17 +0000 Files and hashes: 1: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: HrP+D3t8hRG2xC2N5R9aYIS9bUth9l3loJovGLZ1dDw=) 2: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8e:11:84:a7:2d:a3:7c:2b:b6:5f:f4:9c:7b:f3:66:0a:2a:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: Apr 13 00:04:17 2026 GMT Not After : Apr 14 03:54:17 2026 GMT Subject: CN=F1A5879A548D8941C8B123D5E1912DCBE392A70C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:1c:32:a5:34:d4:10:54:04:1a:58:00:d0: 8b:f1:ef:7e:74:43:fe:83:ac:91:b3:06:28:95:e1: 14:52:76:46:3e:29:b5:68:66:82:8f:ee:28:c7:4b: 00:4f:03:de:dc:a1:ea:51:2a:11:a5:55:cf:33:a8: f4:13:c4:69:1e:90:26:9f:94:34:22:83:8c:56:dc: 0c:ad:68:df:0c:b1:2b:17:b4:21:46:ff:34:8f:16: 45:22:4f:2e:76:42:b6:29:df:51:36:d9:65:7a:e3: f0:f1:e7:e9:4f:a4:85:d0:c5:a3:6a:82:b2:76:45: de:eb:06:56:66:7d:46:d4:2b:ed:9c:f4:2d:05:c3: 89:cd:06:06:c6:0c:92:cc:02:4c:f1:2a:a2:f3:57: e0:ac:16:e9:e3:fc:50:b2:02:9d:cc:a9:bb:76:bb: 5a:fb:f2:27:07:f2:3c:8c:42:3f:1a:7d:20:29:0f: 1e:f0:98:bf:88:7d:f1:df:81:98:5e:e2:3c:aa:78: 06:65:30:8e:36:fc:99:d0:0f:5d:78:aa:c0:78:09: dd:95:84:18:6b:8d:cc:b9:7c:0d:3a:07:03:bf:fd: 28:3c:67:44:8d:01:b8:a0:f8:7b:83:35:9b:0d:3d: 1e:0a:dc:75:d4:c3:20:99:ce:55:ee:c0:12:d1:61: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A5:87:9A:54:8D:89:41:C8:B1:23:D5:E1:91:2D:CB:E3:92:A7:0C X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:1e:92:f4:22:46:be:88:d5:75:d2:0c:75:c9:7d:3c:46: 99:65:57:21:34:9f:dd:f4:f8:0c:b2:b7:b2:e5:cd:af:ce:f3: 82:c8:64:47:48:b4:e2:83:13:0c:65:10:c1:2c:71:07:21:10: 5e:45:ee:ab:fd:09:3b:5b:3b:22:f8:10:0f:a7:b0:c1:d5:cb: b3:ef:6e:68:fc:f5:03:50:aa:90:ff:54:8a:76:74:72:e4:ca: 6f:10:7c:7e:e9:80:f2:c7:0f:62:3e:bb:dc:0a:2b:34:c3:6a: 97:c7:de:b9:ca:3b:3b:75:1c:e1:cf:d7:c7:b6:29:10:95:df: 21:be:25:82:93:ad:00:e1:0d:92:0e:5b:00:69:a7:bb:1d:a2: a8:8e:21:33:08:ce:1c:2d:83:09:f3:9a:b9:d6:87:d5:bd:f0: 6d:f3:86:92:07:bd:21:35:93:56:67:70:00:44:6c:c2:ec:e8: 6d:fb:c0:90:b9:9f:d9:92:bd:5c:dd:c1:5b:40:26:c0:89:4d: 0d:8d:ea:50:75:11:53:f9:76:cc:39:3b:01:c4:1b:30:44:ff: 4f:cf:9e:7f:42:8d:b3:94:db:47:dd:ab:26:a6:d2:c0:a0:31: b2:e8:e7:32:fe:9c:5d:ac:af:27:68:36:1b:10:0a:c2:fc:2b: f0:57:0a:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbY4RhKcto3wrtl/0nHvzZgoq1kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA0MTMwMDA0MTdaFw0yNjA0MTQwMzU0MTdaMDMxMTAvBgNV BAMTKEYxQTU4NzlBNTQ4RDg5NDFDOEIxMjNENUUxOTEyRENCRTM5MkE3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyxwypTTUEFQEGlgA0Ivx7350 Q/6DrJGzBiiV4RRSdkY+KbVoZoKP7ijHSwBPA97coepRKhGlVc8zqPQTxGkekCaf lDQig4xW3AytaN8MsSsXtCFG/zSPFkUiTy52QrYp31E22WV64/Dx5+lPpIXQxaNq grJ2Rd7rBlZmfUbUK+2c9C0Fw4nNBgbGDJLMAkzxKqLzV+CsFunj/FCyAp3Mqbt2 u1r78icH8jyMQj8afSApDx7wmL+IffHfgZhe4jyqeAZlMI42/JnQD114qsB4Cd2V hBhrjcy5fA06BwO//Sg8Z0SNAbig+HuDNZsNPR4K3HXUwyCZzlXuwBLRYbvJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8aWHmlSNiUHIsSPV4ZEty+OSpwwwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP04ekvQiRr6I 1XXSDHXJfTxGmWVXITSf3fT4DLK3suXNr87zgshkR0i04oMTDGUQwSxxByEQXkXu q/0JO1s7IvgQD6ewwdXLs+9uaPz1A1CqkP9UinZ0cuTKbxB8fumA8scPYj673Aor NMNql8feuco7O3Uc4c/Xx7YpEJXfIb4lgpOtAOENkg5bAGmnux2iqI4hMwjOHC2D CfOaudaH1b3wbfOGkge9ITWTVmdwAERswuzobfvAkLmf2ZK9XN3BW0AmwIlNDY3q UHURU/l2zDk7AcQbMET/T8+ef0KNs5TbR92rJqbSwKAxsujnMv6cXayvJ2g2GxAK wvwr8FcKtA== -----END CERTIFICATE-----Generated at Mon Apr 13 20:26:12 2026 by rpki-client