$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: Ks008UDWNGjZufz3wfIdZyovvRIdYi5g26lbYLmvdJI= Subject key identifier: 1B:49:5F:51:B7:7A:5B:60:E8:DA:85:3A:5A:80:CD:F5:24:EE:F2:C0 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 0103601FD97D409649A7755EAEC9ECC889BEEDAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: BC Signing time: Thu 10 Sep 2026 06:45:54 +0000 Manifest this update: Thu 10 Sep 2026 06:40:54 +0000 Manifest next update: Sun 13 Sep 2026 14:19:54 +0000 Files and hashes: 1: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: hZINEoIGLGyUfFxU6rmTMgUZ9QeXVXPtDtVqhc9C6S8=) 2: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 3: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 4: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 5: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:03:60:1f:d9:7d:40:96:49:a7:75:5e:ae:c9:ec:c8:89:be:ed:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Sep 10 06:40:54 2026 GMT Not After : Sep 13 14:19:54 2026 GMT Subject: CN=1B495F51B77A5B60E8DA853A5A80CDF524EEF2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:d9:09:e5:96:91:6e:30:c1:a1:a2:c5:92: 77:5d:8a:96:e8:95:b1:36:6c:66:5f:57:8c:82:88: 0e:af:73:e6:a7:d3:05:71:e3:96:72:73:d0:7b:72: 09:25:96:e8:2a:bc:53:28:c0:04:57:c9:4b:23:bf: f9:54:13:b6:e0:65:cf:9d:e1:ba:83:67:5f:11:13: b0:0a:97:a1:bd:cb:49:1b:e8:f9:bf:15:74:be:a5: a8:1a:d0:dc:b9:88:50:76:5d:62:c8:66:4f:8f:bb: 3b:63:06:9f:f9:1f:e5:58:ea:87:4d:28:c2:b9:e5: 76:9d:d2:81:2b:28:b2:0f:56:b9:91:6c:b7:c7:08: f6:62:36:8c:43:58:f5:2d:d1:51:9d:77:f2:f0:77: bf:5f:9d:94:ab:e1:c4:62:89:a5:95:3a:60:a6:8f: 58:20:e3:ef:09:a8:6d:8d:c1:e9:64:9b:6b:a1:49: d4:3a:c4:b9:93:25:d1:74:f8:e5:43:60:51:c6:a2: eb:57:37:c6:10:aa:0a:62:dc:31:9d:9e:55:ab:96: b0:63:e2:9e:61:c7:58:67:dd:f2:91:d6:41:e6:49: 9e:37:50:92:bb:1c:03:21:d1:ff:d2:cd:bc:5e:fc: 20:6a:b1:df:da:05:99:7a:50:3b:7e:24:96:24:94: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:5F:51:B7:7A:5B:60:E8:DA:85:3A:5A:80:CD:F5:24:EE:F2:C0 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:40:49:66:61:5a:f6:ea:d7:78:ce:fe:ae:18:fa:0c:71:8d: 3a:8c:7c:2c:07:fd:c9:1b:2e:cc:ed:c3:68:3d:7c:88:44:7a: a2:c0:97:80:7a:f9:8c:a1:79:b0:0c:a5:8c:4b:f6:0c:ea:ed: 6d:08:fa:9b:ff:c4:b5:f9:9d:5f:d6:88:3e:2f:cb:e1:69:81: 8f:90:f8:dd:a6:d7:a7:24:78:43:3b:cb:73:41:1f:7f:5f:ac: 7e:c8:25:41:8b:7a:b6:fa:59:59:46:60:29:45:af:9c:1f:ba: 49:4e:29:72:23:57:23:b5:91:08:2f:87:95:07:4c:d0:dc:b9: 57:01:31:c5:27:ee:81:75:a8:75:24:71:cc:94:5a:82:c8:11: 6f:70:d8:88:2b:dc:85:bd:5b:a0:14:f7:4d:ae:73:2e:57:0c: c0:09:fb:91:e5:a3:8e:00:0c:f1:2b:bd:80:53:37:24:5c:fb: 47:e5:c1:a0:18:a3:ea:03:6d:12:0b:81:bd:ba:76:3b:27:f5: f9:23:69:06:ae:0e:da:2e:10:65:34:db:29:58:4e:b3:f0:77: 9c:76:ec:b4:60:15:0b:23:76:03:29:a8:41:e7:29:b6:a4:85: 6a:05:85:54:4b:1f:15:d2:a5:5c:d2:50:be:5e:05:e5:72:0b: 4c:68:8e:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAQNgH9l9QJZJp3VersnsyIm+7aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA5MTAwNjQwNTRaFw0yNjA5MTMxNDE5NTRaMDMxMTAvBgNV BAMTKDFCNDk1RjUxQjc3QTVCNjBFOERBODUzQTVBODBDREY1MjRFRUYyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUdtkJ5ZaRbjDBoaLFknddipbo lbE2bGZfV4yCiA6vc+an0wVx45Zyc9B7cgkllugqvFMowARXyUsjv/lUE7bgZc+d 4bqDZ18RE7AKl6G9y0kb6Pm/FXS+paga0Ny5iFB2XWLIZk+PuztjBp/5H+VY6odN KMK55Xad0oErKLIPVrmRbLfHCPZiNoxDWPUt0VGdd/Lwd79fnZSr4cRiiaWVOmCm j1gg4+8JqG2Nwelkm2uhSdQ6xLmTJdF0+OVDYFHGoutXN8YQqgpi3DGdnlWrlrBj 4p5hx1hn3fKR1kHmSZ43UJK7HAMh0f/Szbxe/CBqsd/aBZl6UDt+JJYklIN3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG0lfUbd6W2Do2oU6WoDN9STu8sAwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0BJZmFa9urX eM7+rhj6DHGNOox8LAf9yRsuzO3DaD18iER6osCXgHr5jKF5sAyljEv2DOrtbQj6 m//EtfmdX9aIPi/L4WmBj5D43abXpyR4QzvLc0Eff1+sfsglQYt6tvpZWUZgKUWv nB+6SU4pciNXI7WRCC+HlQdM0Ny5VwExxSfugXWodSRxzJRagsgRb3DYiCvchb1b oBT3Ta5zLlcMwAn7keWjjgAM8Su9gFM3JFz7R+XBoBij6gNtEguBvbp2Oyf1+SNp Bq4O2i4QZTTbKVhOs/B3nHbstGAVCyN2AymoQecptqSFagWFVEsfFdKlXNJQvl4F 5XILTGiO4g== -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:43 2026 by rpki-client