$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: MplHvxZ9X4pN22LRTSBwzKTRsKQHhrK+XE3lov8BPeQ= Subject key identifier: 12:3E:51:83:C3:42:1D:9F:6B:E7:0F:A4:61:3E:74:EA:20:C4:C7:1E Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 120058F077F30BEDBF840EF7DFCB1B6AEEEC7814 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: D0 Signing time: Mon 26 Oct 2026 01:38:08 +0000 Manifest this update: Mon 26 Oct 2026 01:33:08 +0000 Manifest next update: Thu 29 Oct 2026 09:43:08 +0000 Files and hashes: 1: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 2: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: VDRx6a3SYnQMRRAD2b2VDvcxPH32HwozGRgH0g1GImo=) 3: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) 4: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 5: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 6: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:00:58:f0:77:f3:0b:ed:bf:84:0e:f7:df:cb:1b:6a:ee:ec:78:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Oct 26 01:33:08 2026 GMT Not After : Oct 29 09:43:08 2026 GMT Subject: CN=123E5183C3421D9F6BE70FA4613E74EA20C4C71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:58:56:99:c0:77:36:bf:60:68:b7:22:ee: 00:5d:37:cd:63:3d:eb:39:21:80:87:98:3f:14:f1: 84:e4:c3:d9:5d:e6:fb:e8:9c:19:6a:91:6f:ff:b9: 4d:40:80:0a:fd:b4:80:3e:f6:f9:d7:e6:82:6a:6f: 61:e0:f7:fd:6d:f1:20:b6:6a:c5:80:a8:ef:15:91: 92:d0:f5:40:a3:5f:d2:f6:c8:8d:d0:88:06:cf:fc: 58:73:7c:71:83:a7:c4:13:9a:4a:e3:68:82:67:ff: 5e:2a:d7:40:75:24:aa:6b:35:77:d6:b8:dc:09:89: 27:02:a4:be:26:d0:27:97:0f:dd:02:5d:c6:bb:ab: 96:51:87:d4:04:3d:31:38:a6:67:9c:89:92:a9:e3: 3c:a5:a2:86:f9:4b:70:16:3f:dd:32:eb:0b:85:54: df:17:37:50:60:53:66:f1:12:88:fe:8d:df:79:92: 0b:3f:f9:75:a5:16:3b:c4:98:54:f3:87:6b:cc:62: 02:01:69:34:b8:e9:29:fc:75:9d:b2:b5:b8:24:b1: 55:75:b0:c7:aa:e4:1c:34:1f:2f:e7:e9:f3:34:8d: 09:8a:06:da:67:4e:58:64:b0:bb:69:77:5d:4d:ad: f9:8c:2e:5c:17:12:c0:6a:06:6f:fd:bd:6f:ae:9d: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:51:83:C3:42:1D:9F:6B:E7:0F:A4:61:3E:74:EA:20:C4:C7:1E X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5f:69:b7:79:d7:16:a4:5b:cf:84:e2:93:85:d7:c2:45:cd: 49:4e:07:4e:0a:68:de:86:80:d9:ee:5e:26:54:c0:bd:4d:93: 40:08:93:c2:4f:d2:08:59:1b:d7:a8:f2:79:07:bf:76:f7:e6: 55:90:06:09:c5:0e:7b:45:03:58:2c:8a:fc:4c:34:20:06:65: c7:a7:5e:e1:75:b1:68:8e:17:b0:56:d0:85:ab:d5:61:24:5d: da:f8:d0:b2:df:ac:68:86:fe:f1:88:67:bc:74:e0:2f:34:14: 60:84:3f:71:9d:24:b5:fc:de:a4:d6:85:e5:c6:8f:cb:58:c7: cd:51:15:0f:b2:16:52:50:55:93:f7:32:0e:ff:ea:3f:b3:eb: 54:ce:7c:2e:e4:e1:d1:5f:18:b5:37:7e:b5:2a:ec:e6:16:53: a5:d8:fe:f0:ac:ca:14:72:88:6c:27:1a:0e:c5:f8:9d:93:ff: 7a:23:98:a1:ec:0e:7d:fd:88:77:56:7a:ef:c1:ee:2e:33:76: 17:4f:48:86:36:46:6c:c4:4f:ab:be:17:e8:eb:08:19:ce:7d: 45:7c:f3:05:f4:fe:5c:03:4e:ac:17:bf:df:fb:85:95:1c:ef: 37:9c:c6:c7:7e:b9:35:6d:3f:21:79:9e:27:cf:0b:9d:d0:cf: 70:31:53:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEgBY8HfzC+2/hA7338sbau7seBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjEwMjYwMTMzMDhaFw0yNjEwMjkwOTQzMDhaMDMxMTAvBgNV BAMTKDEyM0U1MTgzQzM0MjFEOUY2QkU3MEZBNDYxM0U3NEVBMjBDNEM3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpFhWmcB3Nr9gaLci7gBdN81j Pes5IYCHmD8U8YTkw9ld5vvonBlqkW//uU1AgAr9tIA+9vnX5oJqb2Hg9/1t8SC2 asWAqO8VkZLQ9UCjX9L2yI3QiAbP/FhzfHGDp8QTmkrjaIJn/14q10B1JKprNXfW uNwJiScCpL4m0CeXD90CXca7q5ZRh9QEPTE4pmeciZKp4zyloob5S3AWP90y6wuF VN8XN1BgU2bxEoj+jd95kgs/+XWlFjvEmFTzh2vMYgIBaTS46Sn8dZ2ytbgksVV1 sMeq5Bw0Hy/n6fM0jQmKBtpnTlhksLtpd11NrfmMLlwXEsBqBm/9vW+unaJ1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEj5Rg8NCHZ9r5w+kYT506iDExx4wHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFF9pt3nXFqRb z4Tik4XXwkXNSU4HTgpo3oaA2e5eJlTAvU2TQAiTwk/SCFkb16jyeQe/dvfmVZAG CcUOe0UDWCyK/Ew0IAZlx6de4XWxaI4XsFbQhavVYSRd2vjQst+saIb+8YhnvHTg LzQUYIQ/cZ0ktfzepNaF5caPy1jHzVEVD7IWUlBVk/cyDv/qP7PrVM58LuTh0V8Y tTd+tSrs5hZTpdj+8KzKFHKIbCcaDsX4nZP/eiOYoewOff2Id1Z678HuLjN2F09I hjZGbMRPq74X6OsIGc59RXzzBfT+XANOrBe/3/uFlRzvN5zGx365NW0/IXmeJ88L ndDPcDFTfg== -----END CERTIFICATE-----Generated at Tue Oct 27 01:54:10 2026 by rpki-client