$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json) Hash identifier: 71XRdDLNNUoOWA4VIVtoBGP1e6IL5PX70/wkqvaeJqs= Subject key identifier: 7F:62:39:88:48:EC:F5:DB:C4:97:D7:C3:34:4D:1D:61:FA:27:94:F2 Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35 Certificate serial: 38866BB8D012E4A3DB400251F84CF5CF2F52EF14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft Manifest number: AF Signing time: Fri 29 May 2026 15:48:01 +0000 Manifest this update: Fri 29 May 2026 15:43:01 +0000 Manifest next update: Sat 30 May 2026 19:18:01 +0000 Files and hashes: 1: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=) 2: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: eSXRYS0n7S315JqNc9TcDf8tH2vCk8/cYya38U8rreA=) 3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=) 4: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:86:6b:b8:d0:12:e4:a3:db:40:02:51:f8:4c:f5:cf:2f:52:ef:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35 Validity Not Before: May 29 15:43:01 2026 GMT Not After : May 30 19:18:01 2026 GMT Subject: CN=7F62398848ECF5DBC497D7C3344D1D61FA2794F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:d5:6b:2e:d4:2b:75:2e:76:cf:99:a6:d0: 55:75:35:88:76:3d:2b:7c:b0:18:7a:20:7a:05:8e: 9c:a2:f3:56:21:18:82:db:2d:86:57:ea:bd:90:f2: ef:b0:5a:7a:9b:bb:d6:05:93:7c:07:a4:8a:30:d6: 24:8d:a3:a8:82:f9:2e:f4:8f:1a:12:38:0a:9b:f5: fd:26:e9:7a:28:e9:8b:5f:99:44:26:39:5d:c1:f4: 95:a8:a6:2a:18:e2:fa:67:f1:17:0a:8c:fc:5b:7e: a5:09:b9:51:c6:64:73:99:11:f5:37:d5:ca:1a:51: 47:0a:e4:cd:b6:ff:b4:ec:f8:d7:93:01:df:ef:de: a0:bb:8c:64:f6:b2:83:7c:94:6c:9d:f3:f4:db:65: d7:b6:b7:a2:47:35:d0:1a:0e:0c:97:25:08:8c:d5: c4:28:6b:ea:2e:e7:66:85:03:1e:23:bb:e8:22:8f: db:45:be:15:58:ce:74:7e:c9:60:6a:6a:43:38:e9: 2b:9a:70:ad:cc:ab:55:ce:4b:18:55:e8:76:67:65: 46:6b:18:cd:52:64:29:de:10:ba:a1:5f:40:a9:f9: b1:c7:e6:4f:60:d5:8e:6b:23:bd:c5:74:04:aa:b6: 73:69:df:5e:c8:ea:3a:a2:bd:95:e2:4b:54:a1:a2: 04:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:62:39:88:48:EC:F5:DB:C4:97:D7:C3:34:4D:1D:61:FA:27:94:F2 X509v3 Authority Key Identifier: keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:73:33:eb:47:44:88:3c:8b:38:ea:48:34:28:25:2a:30:d3: b8:c0:9d:b7:87:1d:79:81:44:f4:e2:97:e7:11:8d:64:e8:a1: bf:ed:d9:8c:9b:30:a0:1f:73:b4:ec:e8:a6:2a:78:0c:37:e2: c8:9e:83:28:55:1d:ac:58:40:6b:fb:da:97:51:ca:8e:ac:c7: db:99:44:3a:96:35:24:d0:34:79:12:4e:1e:65:ce:2e:04:41: 65:a4:48:db:3f:51:61:a4:57:94:bb:80:24:cb:c3:9c:b2:0d: 73:fb:3a:25:34:63:13:71:77:f0:77:ef:e9:31:7f:02:be:24: b3:85:17:f1:88:fe:43:a1:9c:f6:26:e8:ae:56:40:17:b8:a0: e9:ec:25:bb:19:6c:29:5b:34:cb:08:a9:5a:f9:17:96:1e:1e: 84:e8:11:3f:7f:0e:ea:e0:17:02:52:f5:77:06:ab:3a:a8:e0: 2e:1b:21:fb:61:07:29:ae:0b:0b:53:d5:90:3f:38:cc:cf:d5: 83:74:88:58:91:5d:4c:a5:25:7f:d0:e4:e6:2f:2e:20:28:a7: bd:32:5c:4d:ad:00:2f:92:d2:74:c2:c8:ed:a2:b1:09:74:4c: 86:5e:a5:1c:9f:1e:e2:45:e2:e0:1f:83:99:91:da:6c:7a:e4: 38:ff:ba:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOIZruNAS5KPbQAJR+Ez1zy9S7xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC MTA0RUYzNTAeFw0yNjA1MjkxNTQzMDFaFw0yNjA1MzAxOTE4MDFaMDMxMTAvBgNV BAMTKDdGNjIzOTg4NDhFQ0Y1REJDNDk3RDdDMzM0NEQxRDYxRkEyNzk0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPY9VrLtQrdS52z5mm0FV1NYh2 PSt8sBh6IHoFjpyi81YhGILbLYZX6r2Q8u+wWnqbu9YFk3wHpIow1iSNo6iC+S70 jxoSOAqb9f0m6Xoo6YtfmUQmOV3B9JWopioY4vpn8RcKjPxbfqUJuVHGZHOZEfU3 1coaUUcK5M22/7Ts+NeTAd/v3qC7jGT2soN8lGyd8/TbZde2t6JHNdAaDgyXJQiM 1cQoa+ou52aFAx4ju+gij9tFvhVYznR+yWBqakM46SuacK3Mq1XOSxhV6HZnZUZr GM1SZCneELqhX0Cp+bHH5k9g1Y5rI73FdASqtnNp317I6jqivZXiS1ShogRPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf2I5iEjs9dvEl9fDNE0dYfonlPIwHwYDVR0j BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0 ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3Mz60dEiDyL OOpINCglKjDTuMCdt4cdeYFE9OKX5xGNZOihv+3ZjJswoB9ztOzopip4DDfiyJ6D KFUdrFhAa/val1HKjqzH25lEOpY1JNA0eRJOHmXOLgRBZaRI2z9RYaRXlLuAJMvD nLINc/s6JTRjE3F38Hfv6TF/Ar4ks4UX8Yj+Q6Gc9iborlZAF7ig6ewluxlsKVs0 ywipWvkXlh4ehOgRP38O6uAXAlL1dwarOqjgLhsh+2EHKa4LC1PVkD84zM/Vg3SI WJFdTKUlf9Dk5i8uICinvTJcTa0AL5LSdMLI7aKxCXRMhl6lHJ8e4kXi4B+DmZHa bHrkOP+6yg== -----END CERTIFICATE-----Generated at Sat May 30 01:38:22 2026 by rpki-client