$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: 753IoCi0dLg4qJJRgNyC92ersa6G2Rmjx7s9RT2Gc0s= Subject key identifier: D5:EA:B7:7C:4A:F3:F5:FC:AE:6F:54:CA:89:87:1C:31:87:18:CA:8A Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 7AC15CB3DCF3C13C1800839949E637D6CA47235F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: AB Signing time: Fri 21 Aug 2026 08:09:07 +0000 Manifest this update: Fri 21 Aug 2026 08:04:07 +0000 Manifest next update: Sat 22 Aug 2026 11:34:07 +0000 Files and hashes: 1: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: BvbLagiIfBUaGWCzhRfGSADE6qxyrlF6i0zBx/j1/3o=) 2: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 3: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) 4: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) 5: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 11:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c1:5c:b3:dc:f3:c1:3c:18:00:83:99:49:e6:37:d6:ca:47:23:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: Aug 21 08:04:07 2026 GMT Not After : Aug 22 11:34:07 2026 GMT Subject: CN=D5EAB77C4AF3F5FCAE6F54CA89871C318718CA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:1a:94:ea:22:85:60:d2:9c:89:ac:fd:63: 2d:dd:e8:98:6f:9b:5c:3c:79:19:03:a5:79:7c:22: 14:9d:5b:47:da:1e:0d:e5:5b:dc:2b:48:e1:cc:28: 8c:be:89:c1:64:82:ed:d4:3c:55:68:76:99:76:5f: af:6c:66:1a:16:2e:af:ea:be:24:e8:7b:84:86:5f: db:a4:a2:c8:cc:56:f4:cf:ba:c1:d1:3e:26:89:0d: 95:03:34:32:d8:3f:78:a2:53:af:4d:62:1d:6b:59: be:3f:f5:5f:27:76:a8:4b:78:19:f2:a3:4a:9d:33: 4a:56:f1:ed:7e:f8:2b:20:95:bf:91:f1:b9:3e:6b: 6e:73:66:c1:96:ec:c9:9b:dc:b1:97:e4:67:b7:5c: 5a:d4:a1:c7:21:ec:2f:d8:77:f6:3e:24:d8:bc:85: 4a:fe:6a:99:27:50:c6:f7:f1:02:af:77:ae:45:fd: ed:84:2a:db:84:9b:85:3b:d2:d7:6c:be:c1:bd:7c: da:c1:94:40:6b:ee:c0:87:99:67:e8:56:bc:55:2b: c9:ac:b1:f1:79:ee:65:6c:43:10:e2:1d:8c:1b:35: 32:61:a9:50:ac:d7:46:b5:b7:f4:6f:6d:1d:f9:56: 78:97:5e:75:89:a1:af:6e:e5:21:62:ea:f0:b3:ef: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:B7:7C:4A:F3:F5:FC:AE:6F:54:CA:89:87:1C:31:87:18:CA:8A X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:c9:67:e9:44:47:9f:35:46:78:03:2e:55:a1:a2:41:00: b3:8c:d4:86:10:4f:32:72:63:b1:3a:42:b4:45:aa:39:5a:f3: 09:2e:16:5b:d4:c4:7c:a1:ad:c1:64:5d:b7:f9:54:bc:96:b5: e5:be:84:e7:fe:47:9c:2d:0f:98:10:02:f0:c9:a8:76:0c:4f: 23:01:ca:fe:4b:90:82:19:d6:fd:e3:e9:29:4a:a3:61:32:a8: ed:1b:c6:43:46:63:a8:8b:91:46:ce:b2:c5:33:a6:0d:1c:e1: 2f:66:25:58:66:2a:7d:4f:81:b6:62:82:cc:7b:a6:e4:8e:91: 1b:db:ac:48:70:96:62:26:5a:98:08:c8:a1:22:dc:c8:4a:11: 9b:b3:71:4b:93:10:2f:4c:ce:3b:85:5a:06:a7:f9:c5:8e:f3: bd:7f:f2:d1:fa:e7:20:33:0b:63:9a:e7:6c:00:97:39:01:a2: 29:93:5a:85:75:f1:7f:a5:1c:af:e4:5f:da:65:b0:62:d6:76: 68:48:f9:20:f9:d1:aa:b5:95:72:e3:1f:1f:52:c3:a1:46:73: 50:e2:a2:ea:1e:e5:65:ce:d6:d5:19:8c:e7:fd:36:00:6f:63: 3c:c0:9c:c2:25:40:05:52:3c:36:c6:78:d3:24:85:5f:8d:5e: f3:e0:a7:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUesFcs9zzwTwYAIOZSeY31spHI18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA4MjEwODA0MDdaFw0yNjA4MjIxMTM0MDdaMDMxMTAvBgNV BAMTKEQ1RUFCNzdDNEFGM0Y1RkNBRTZGNTRDQTg5ODcxQzMxODcxOENBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zhqU6iKFYNKciaz9Yy3d6Jhv m1w8eRkDpXl8IhSdW0faHg3lW9wrSOHMKIy+icFkgu3UPFVodpl2X69sZhoWLq/q viToe4SGX9ukosjMVvTPusHRPiaJDZUDNDLYP3iiU69NYh1rWb4/9V8ndqhLeBny o0qdM0pW8e1++Csglb+R8bk+a25zZsGW7Mmb3LGX5Ge3XFrUocch7C/Yd/Y+JNi8 hUr+apknUMb38QKvd65F/e2EKtuEm4U70tdsvsG9fNrBlEBr7sCHmWfoVrxVK8ms sfF57mVsQxDiHYwbNTJhqVCs10a1t/RvbR35VniXXnWJoa9u5SFi6vCz77RRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1eq3fErz9fyub1TKiYccMYcYyoowHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwDJZ+lER581 RngDLlWhokEAs4zUhhBPMnJjsTpCtEWqOVrzCS4WW9TEfKGtwWRdt/lUvJa15b6E 5/5HnC0PmBAC8MmodgxPIwHK/kuQghnW/ePpKUqjYTKo7RvGQ0ZjqIuRRs6yxTOm DRzhL2YlWGYqfU+BtmKCzHum5I6RG9usSHCWYiZamAjIoSLcyEoRm7NxS5MQL0zO O4VaBqf5xY7zvX/y0frnIDMLY5rnbACXOQGiKZNahXXxf6Ucr+Rf2mWwYtZ2aEj5 IPnRqrWVcuMfH1LDoUZzUOKi6h7lZc7W1RmM5/02AG9jPMCcwiVABVI8NsZ40ySF X41e8+Cnkg== -----END CERTIFICATE-----Generated at Sat Aug 22 00:53:53 2026 by rpki-client