$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft File: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft (raw, json) Hash identifier: le14E4S1/nQyjM0g2VqcnEyt3FOWDFYz54yPww979wE= Subject key identifier: 7F:6B:20:A8:A3:12:D8:BD:59:EA:58:3A:F2:B7:DC:5E:C5:35:49:44 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 1406AC5E9023C83DA6104290E9FBC4E60A306580 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft Manifest number: 8B Signing time: Mon 27 Jul 2026 07:03:39 +0000 Manifest this update: Mon 27 Jul 2026 06:58:39 +0000 Manifest next update: Tue 28 Jul 2026 07:57:39 +0000 Files and hashes: 1: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (hash: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs=) 2: 3130332e3135312e3134382e302f32332d3233203d3e2034383038.roa (hash: FlqyfG9yxugYR7L+XBIV8TN1BCjELPR+chHd21WXr9k=) 3: BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl (hash: w0DGihxRu/g6xVf3vq1z3E0FUIIhwzKhPPfrwYZzb+0=) 4: 3130332e3232332e37322e302f32322d3232203d3e2030.roa (hash: FqYstaJDjg7tmxEGtum6iSsLgTAPX+rihadYFc4vywQ=) 5: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (hash: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w=) 6: 3130332e3232332e36342e302f32322d3232203d3e2030.roa (hash: rIF3hyIEEl6Mher4Y63kJzfGvu+uKEDr/8wbeQZhnQc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:06:ac:5e:90:23:c8:3d:a6:10:42:90:e9:fb:c4:e6:0a:30:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Jul 27 06:58:39 2026 GMT Not After : Jul 28 07:57:39 2026 GMT Subject: CN=7F6B20A8A312D8BD59EA583AF2B7DC5EC5354944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:e1:bb:67:ff:4f:00:ee:13:40:37:17:08: a9:eb:4d:62:18:0a:3b:87:13:8c:92:c7:2f:ad:89: 4b:4a:70:29:8d:2b:ff:8a:3d:82:36:e2:58:ac:9f: 87:1b:f8:2e:56:9e:32:16:60:4e:ce:05:10:71:c0: 0c:2d:20:3d:9d:32:a4:6c:d5:98:46:57:b2:4c:61: 26:7b:c0:79:27:27:f4:65:ee:38:66:2a:95:6a:09: 52:8d:cc:05:93:be:0f:0d:ab:8d:bb:3a:55:0b:6a: 9e:df:f1:1a:d7:d6:b3:3b:e2:0c:09:bd:ed:28:c4: 3d:ed:62:07:44:f7:ba:c1:8c:d6:30:af:d5:8b:2d: b0:71:24:2d:94:93:32:c9:00:a0:ec:ee:41:3f:07: 19:ba:88:2a:3e:01:05:03:6d:98:a6:80:2f:27:1b: 68:c0:b1:0b:66:38:59:7f:64:93:39:6e:ab:dd:3a: b0:f6:a8:52:1c:fe:2a:0b:ab:32:6f:5e:6b:03:1d: e7:78:ec:9d:cf:43:27:a2:99:2f:cc:bb:42:b8:1a: 6d:31:df:bc:5a:d7:9e:85:d5:9d:9d:8c:58:03:54: 35:0d:83:e7:1c:00:60:73:c5:da:b1:cf:71:9b:d1: 9d:93:64:09:cb:d2:94:6e:44:bf:7d:25:2f:0b:95: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6B:20:A8:A3:12:D8:BD:59:EA:58:3A:F2:B7:DC:5E:C5:35:49:44 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:78:58:66:4d:0e:6f:66:65:5e:e2:0e:50:a1:e4:60:12:1f: 29:1d:64:95:87:e8:07:a3:5a:27:77:1f:d2:3d:7d:5a:5a:9e: 1e:10:a5:15:e0:c8:86:b4:fc:96:0e:2d:cf:87:87:76:ae:ae: eb:8f:4d:de:36:33:b8:26:70:d9:99:11:b3:2f:5e:ca:11:db: 5c:af:a7:49:32:e7:fd:88:c6:56:22:f9:e6:1b:31:5b:9c:58: 04:41:c1:71:68:98:be:59:d5:17:d5:42:b7:94:0b:77:89:9c: da:bb:41:d9:b1:23:73:e7:65:68:ac:43:83:de:f6:65:19:69: ab:14:26:17:78:4a:b3:19:27:89:72:5d:b4:c2:1f:26:7a:d9: c7:08:22:b2:7e:6d:09:35:be:f6:27:66:51:49:66:11:3e:50: 2b:d2:5f:21:86:ad:6b:4c:68:70:e9:3f:f0:08:46:0f:6b:49: e1:2a:fc:91:be:18:35:86:4b:d9:11:49:64:60:e8:a7:20:ee: 10:02:6e:e0:06:00:e5:0f:26:5f:e7:cc:cb:4c:a4:62:94:74: a5:48:7a:8c:d0:29:1c:25:ef:e0:9d:3c:ca:2f:94:e5:95:e0: 2a:b0:26:ea:08:47:63:2f:01:0f:4d:8d:6e:d8:41:e0:86:67: 88:6e:1e:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFAasXpAjyD2mEEKQ6fvE5gowZYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA3MjcwNjU4MzlaFw0yNjA3MjgwNzU3MzlaMDMxMTAvBgNV BAMTKDdGNkIyMEE4QTMxMkQ4QkQ1OUVBNTgzQUYyQjdEQzVFQzUzNTQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmuG7Z/9PAO4TQDcXCKnrTWIY CjuHE4ySxy+tiUtKcCmNK/+KPYI24lisn4cb+C5WnjIWYE7OBRBxwAwtID2dMqRs 1ZhGV7JMYSZ7wHknJ/Rl7jhmKpVqCVKNzAWTvg8Nq427OlULap7f8RrX1rM74gwJ ve0oxD3tYgdE97rBjNYwr9WLLbBxJC2UkzLJAKDs7kE/Bxm6iCo+AQUDbZimgC8n G2jAsQtmOFl/ZJM5bqvdOrD2qFIc/ioLqzJvXmsDHed47J3PQyeimS/Mu0K4Gm0x 37xa156F1Z2djFgDVDUNg+ccAGBzxdqxz3Gb0Z2TZAnL0pRuRL99JS8LlSFDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf2sgqKMS2L1Z6lg68rfcXsU1SUQwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MTYyOTk0NTY3NDEzNzcvMC9CRjJDQzVFN0FFMTAy N0UzM0M1MjQ3QUI2N0ZCRDY5NjEzNUUzMkIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxnhYZk0Ob2Zl XuIOUKHkYBIfKR1klYfoB6NaJ3cf0j19WlqeHhClFeDIhrT8lg4tz4eHdq6u649N 3jYzuCZw2ZkRsy9eyhHbXK+nSTLn/YjGViL55hsxW5xYBEHBcWiYvlnVF9VCt5QL d4mc2rtB2bEjc+dlaKxDg972ZRlpqxQmF3hKsxkniXJdtMIfJnrZxwgisn5tCTW+ 9idmUUlmET5QK9JfIYata0xocOk/8AhGD2tJ4Sr8kb4YNYZL2RFJZGDopyDuEAJu 4AYA5Q8mX+fMy0ykYpR0pUh6jNApHCXv4J08yi+U5ZXgKrAm6ghHYy8BD02NbthB 4IZniG4egg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:15:44 2026 by rpki-client