$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: M/ODh1F7/teFpwN+nJNm+pk98XzyT0NBxpjGuKz2P6U= Subject key identifier: BA:40:62:0F:A0:7A:E7:39:63:E5:8B:93:98:68:96:BD:63:53:C6:4F Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 6A3BC6319E568C6605FCEFC109EEF5042AF227FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: 6F Signing time: Tue 07 Jul 2026 01:48:09 +0000 Manifest this update: Tue 07 Jul 2026 01:43:09 +0000 Manifest next update: Wed 08 Jul 2026 04:54:09 +0000 Files and hashes: 1: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: 1g3tt7f38F58sFdW22D15dp8M06CneJI4qUzVebeVtU=) 2: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 3: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) 4: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) 5: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3b:c6:31:9e:56:8c:66:05:fc:ef:c1:09:ee:f5:04:2a:f2:27:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: Jul 7 01:43:09 2026 GMT Not After : Jul 8 04:54:09 2026 GMT Subject: CN=BA40620FA07AE73963E58B93986896BD6353C64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:9c:e1:ff:e8:7d:fa:52:8f:ae:1c:11:fa: f4:74:b8:90:40:2d:03:37:3b:a5:b7:a0:91:99:7e: bf:fa:68:8f:13:13:2d:a2:f8:1f:b1:a1:b6:8c:4e: bb:5c:7e:0a:67:c1:88:20:f1:8b:b3:ec:71:0f:20: fa:bb:d0:af:9a:ce:f6:15:46:46:5d:88:a0:8a:fc: 78:c4:2e:4d:5b:e4:c3:57:8e:5d:28:d7:bc:0b:38: 29:ba:5f:f2:3b:30:2b:46:ad:a0:3f:72:3e:c9:c0: a5:bf:e4:af:28:6f:c0:44:d0:b4:7b:97:f1:02:e8: cc:1d:76:8f:3c:ea:dd:be:6e:45:8f:4f:46:de:2c: 39:88:9f:8d:93:ca:d2:a3:7f:9e:f7:27:15:2b:bb: b3:b8:b6:45:ac:8b:66:23:aa:d4:71:76:00:9f:82: 1e:9f:84:cf:6b:9e:b0:43:af:0d:31:8f:3c:01:5d: c6:28:db:a0:2c:2f:e3:ac:78:ce:92:09:2b:a7:bb: 43:9a:75:86:8f:d4:6f:56:7a:ce:15:2d:87:d6:2c: dc:78:be:11:4c:40:af:a1:05:53:a1:97:bc:c3:63: 95:23:8a:0f:b4:81:55:14:6d:1f:4b:84:f1:5d:84: 3c:2d:8a:54:42:6a:f4:3d:e9:42:9e:b2:7f:b6:2a: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:62:0F:A0:7A:E7:39:63:E5:8B:93:98:68:96:BD:63:53:C6:4F X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:26:e1:d1:f6:f5:cc:34:07:8e:9c:87:1d:54:3c:d9:0c:60: 5a:6c:19:93:3a:d0:b0:08:01:6a:c0:e9:01:06:21:42:01:f8: 6e:fb:ea:3a:91:4d:13:ee:30:83:b9:b1:c6:4e:47:fe:23:47: b1:93:35:08:7d:df:e4:37:17:99:a3:17:8d:d3:12:de:dc:7b: 95:53:cb:34:3f:54:2b:4d:f6:6f:eb:1c:c8:35:c2:5d:d0:88: 83:88:be:9d:86:69:f1:4b:97:e2:f0:f6:7e:a2:d4:d1:b4:4c: 43:30:69:2d:49:5d:c3:da:b2:79:3d:ef:76:77:3b:a3:1f:2e: e7:04:57:4f:44:77:1d:e2:38:6d:e5:c2:3d:b1:f0:69:8d:42: 61:fe:4f:ed:e1:bf:ea:9c:e5:81:24:93:5a:9e:95:fa:b8:fb: d2:bb:c6:46:d8:e0:4f:55:15:4f:16:c7:5b:ed:7e:65:6b:88: ea:b2:78:34:1c:6f:61:e5:69:f1:e8:7c:fa:0c:72:ca:10:de: 1d:2f:ff:ea:c7:15:4d:3c:4d:d6:44:a5:78:2b:ee:17:26:64: 15:6b:21:11:ac:3b:87:02:8d:89:04:f2:54:be:ae:36:4b:2a: 23:29:e9:4c:ee:f3:21:f9:95:b1:be:f9:d7:bf:2d:f1:9e:d8: a5:ae:62:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUajvGMZ5WjGYF/O/BCe71BCryJ/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA3MDcwMTQzMDlaFw0yNjA3MDgwNDU0MDlaMDMxMTAvBgNV BAMTKEJBNDA2MjBGQTA3QUU3Mzk2M0U1OEI5Mzk4Njg5NkJENjM1M0M2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwepzh/+h9+lKPrhwR+vR0uJBA LQM3O6W3oJGZfr/6aI8TEy2i+B+xobaMTrtcfgpnwYgg8Yuz7HEPIPq70K+azvYV RkZdiKCK/HjELk1b5MNXjl0o17wLOCm6X/I7MCtGraA/cj7JwKW/5K8ob8BE0LR7 l/EC6Mwddo886t2+bkWPT0beLDmIn42TytKjf573JxUru7O4tkWsi2YjqtRxdgCf gh6fhM9rnrBDrw0xjzwBXcYo26AsL+OseM6SCSunu0OadYaP1G9Wes4VLYfWLNx4 vhFMQK+hBVOhl7zDY5Ujig+0gVUUbR9LhPFdhDwtilRCavQ96UKesn+2KjrDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUukBiD6B65zlj5YuTmGiWvWNTxk8wHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzybh0fb1zDQH jpyHHVQ82QxgWmwZkzrQsAgBasDpAQYhQgH4bvvqOpFNE+4wg7mxxk5H/iNHsZM1 CH3f5DcXmaMXjdMS3tx7lVPLND9UK032b+scyDXCXdCIg4i+nYZp8UuX4vD2fqLU 0bRMQzBpLUldw9qyeT3vdnc7ox8u5wRXT0R3HeI4beXCPbHwaY1CYf5P7eG/6pzl gSSTWp6V+rj70rvGRtjgT1UVTxbHW+1+ZWuI6rJ4NBxvYeVp8eh8+gxyyhDeHS// 6scVTTxN1kSleCvuFyZkFWshEaw7hwKNiQTyVL6uNksqIynpTO7zIfmVsb75178t 8Z7Ypa5i/Q== -----END CERTIFICATE-----Generated at Tue Jul 7 10:47:23 2026 by rpki-client