$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json) Hash identifier: JBOEXKD+pO1+guf6oLLPejt5kxauFfhOPV2XPln1Lv8= Subject key identifier: 97:5C:2B:3C:FF:3C:AD:6B:36:BF:22:65:AA:4F:85:BF:8B:90:52:EC Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Certificate serial: 8A75549C8049590267013F4D641D3A54C3A508 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft Manifest number: 32 Signing time: Fri 22 May 2026 14:52:23 +0000 Manifest this update: Fri 22 May 2026 14:47:23 +0000 Manifest next update: Sat 23 May 2026 18:27:23 +0000 Files and hashes: 1: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=) 2: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=) 3: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=) 4: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=) 5: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: CbqPLgreMUzcnQg3f0pZiOaHz9sfffTUTfZOfWhbbp8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 18:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8a:75:54:9c:80:49:59:02:67:01:3f:4d:64:1d:3a:54:c3:a5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Validity Not Before: May 22 14:47:23 2026 GMT Not After : May 23 18:27:23 2026 GMT Subject: CN=975C2B3CFF3CAD6B36BF2265AA4F85BF8B9052EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:26:d7:34:5a:d2:b3:e0:c7:43:d2:7a:b6: cb:5f:57:7a:2e:f8:fe:90:b8:c6:21:4b:f4:0d:17: 42:61:67:5f:ea:c3:4f:2a:53:89:79:ae:51:5f:9b: fa:d3:4d:ad:29:4b:2e:b9:b5:2b:8e:33:7a:e1:38: 77:1f:75:2f:1b:94:94:1c:ec:c0:71:50:24:b3:38: 82:43:e5:6a:6f:58:50:ba:b7:0f:fe:56:ae:fb:bc: 3c:04:b9:fd:a0:46:44:df:cf:b7:1f:7a:7f:5f:a7: 92:4c:91:d3:c9:e8:e3:31:1a:08:f2:63:2e:db:21: ae:51:2c:92:14:eb:0d:08:ef:86:b9:b8:82:a0:6d: 36:4e:9c:bc:40:f6:39:50:2a:56:4e:ac:22:8a:f3: e5:e3:f0:8a:0f:41:9d:31:5e:43:69:6e:e5:f5:29: f6:ea:5b:e7:20:c2:4a:a2:ac:8b:5b:8e:a9:9e:62: 9e:17:69:4b:68:00:28:38:ed:c9:cc:9f:24:40:61: 78:62:a7:d1:bc:4c:a4:82:d3:6a:d4:64:03:c3:ab: 8b:6c:b3:27:29:bb:2f:ea:51:0b:f4:f5:68:72:e0: 6c:bd:e1:d9:84:de:42:93:af:16:7f:ac:17:d7:87: 6b:db:b2:95:0f:7b:87:53:32:61:7b:1e:7a:83:ae: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:2B:3C:FF:3C:AD:6B:36:BF:22:65:AA:4F:85:BF:8B:90:52:EC X509v3 Authority Key Identifier: keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cc:12:86:46:a2:4b:37:2e:dd:9e:ab:ee:ce:52:2e:7e:33: 9b:d4:ff:9c:94:5e:b5:03:fa:d3:99:c7:3d:81:4a:8c:d2:27: 1b:62:e1:fb:86:fb:ee:c1:38:4e:40:08:2c:43:bb:c7:cc:da: 61:d0:95:af:ca:a2:96:8f:d1:e1:e0:68:db:c7:b3:7a:8e:bc: 7b:bb:a7:24:6b:41:ba:43:cc:5b:35:ad:69:de:29:a7:75:36: bd:71:f2:14:49:b0:10:ea:81:c5:02:99:ff:42:48:45:55:ce: 76:28:09:78:8c:63:7e:a6:fc:d4:e2:a0:6c:9e:d6:16:4b:95: 87:3f:61:09:16:ee:a3:c7:64:ea:85:a7:64:5e:9d:4e:f8:e3: 6c:a1:71:81:48:65:9f:18:de:8c:2e:a4:c6:09:63:1b:57:7b: 53:77:4a:d4:47:09:0b:12:f0:22:72:8f:c9:45:cd:df:e8:90: 9f:88:5e:3c:08:c3:76:85:67:da:c8:70:6a:75:dd:b9:27:bd: d7:5e:2d:1d:fe:6b:38:14:48:6e:ed:2d:11:f6:a0:52:8b:e8: f7:04:af:cf:e5:91:86:04:08:f9:eb:9e:dc:95:b4:20:e4:1c: 0a:b3:ac:2b:6d:35:34:ae:05:81:dc:eb:2b:6a:4f:3a:08:d7: 25:27:09:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAIp1VJyASVkCZwE/TWQdOlTDpQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVC Qzc4QTA0RTAeFw0yNjA1MjIxNDQ3MjNaFw0yNjA1MjMxODI3MjNaMDMxMTAvBgNV BAMTKDk3NUMyQjNDRkYzQ0FENkIzNkJGMjI2NUFBNEY4NUJGOEI5MDUyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0CbXNFrSs+DHQ9J6tstfV3ou +P6QuMYhS/QNF0JhZ1/qw08qU4l5rlFfm/rTTa0pSy65tSuOM3rhOHcfdS8blJQc 7MBxUCSzOIJD5WpvWFC6tw/+Vq77vDwEuf2gRkTfz7cfen9fp5JMkdPJ6OMxGgjy Yy7bIa5RLJIU6w0I74a5uIKgbTZOnLxA9jlQKlZOrCKK8+Xj8IoPQZ0xXkNpbuX1 KfbqW+cgwkqirItbjqmeYp4XaUtoACg47cnMnyRAYXhip9G8TKSC02rUZAPDq4ts sycpuy/qUQv09Why4Gy94dmE3kKTrxZ/rBfXh2vbspUPe4dTMmF7HnqDrsqlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl1wrPP88rWs2vyJlqk+Fv4uQUuwwHwYDVR0j BBgwFoAUvAA4+4G49mkTPfOZJyx77rx4oE4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzM2ODM5MjYzOTE4NDg5OC8wL0JDMDAzOEZCODFCOEY2NjkxMzNERjM5OTI3MkM3 QkVFQkM3OEEwNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczNjgzOTI2MzkxODQ4OTgvMC9CQzAwMzhGQjgxQjhG NjY5MTMzREYzOTkyNzJDN0JFRUJDNzhBMDRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcwShkaiSzcu 3Z6r7s5SLn4zm9T/nJRetQP605nHPYFKjNInG2Lh+4b77sE4TkAILEO7x8zaYdCV r8qilo/R4eBo28ezeo68e7unJGtBukPMWzWtad4pp3U2vXHyFEmwEOqBxQKZ/0JI RVXOdigJeIxjfqb81OKgbJ7WFkuVhz9hCRbuo8dk6oWnZF6dTvjjbKFxgUhlnxje jC6kxgljG1d7U3dK1EcJCxLwInKPyUXN3+iQn4hePAjDdoVn2shwanXduSe9114t Hf5rOBRIbu0tEfagUovo9wSvz+WRhgQI+eue3JW0IOQcCrOsK201NK4FgdzrK2pP OgjXJScJTw== -----END CERTIFICATE-----Generated at Sat May 23 03:45:15 2026 by rpki-client