$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: NgTQdu1+9s+qFE1b/qrgZBkumO3nfh1qwiTLtdwvAoA= Subject key identifier: 24:CF:5A:8A:26:CD:B2:0E:04:E5:62:D3:FB:85:3A:B1:BA:7C:E4:2C Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 0E5CFE695DE7C6348EF91045A841DBABD251BAE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: AB Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 11:22:06 +0000 Files and hashes: 1: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: U2O52C3n9q3/Q1UXGyeWvMRkOMTjlu7i11ezNkAUVUY=) 2: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) 3: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5c:fe:69:5d:e7:c6:34:8e:f9:10:45:a8:41:db:ab:d2:51:ba:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 11:22:06 2026 GMT Subject: CN=24CF5A8A26CDB20E04E562D3FB853AB1BA7CE42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:2f:78:19:65:29:87:44:cd:c6:9c:b9:3d: 16:b4:2e:ed:59:00:17:2c:aa:5e:04:5b:a0:3c:8b: 7c:a2:8f:d5:a2:4d:c9:53:b9:b9:0e:67:a9:1a:44: 0f:2c:ff:9f:e4:45:a4:64:8d:0b:da:ce:e9:b3:86: b8:c6:f9:74:0e:c0:8d:bc:ec:cb:db:25:66:0e:2d: 6c:84:a3:21:db:c1:81:af:69:c6:93:2e:8a:72:97: 9a:b2:80:5e:08:d2:de:68:09:e6:f7:6c:cb:2b:ea: 07:8a:73:ee:ca:db:0b:17:25:15:67:b1:cc:c6:46: f5:99:cd:7b:5c:66:26:53:5a:48:e0:68:72:89:91: 0b:93:d7:a0:19:1f:96:da:93:0e:50:6a:a2:ec:31: 7e:35:a7:b7:89:35:59:3d:9f:6b:01:21:c0:8d:41: b0:aa:35:f1:42:39:ac:97:1b:e0:17:60:97:d7:ae: 6a:c6:2d:16:a6:f3:a2:bd:41:e5:c3:2f:29:55:3c: 1f:24:40:7b:94:9d:e7:71:df:e0:89:bb:96:4a:c6: 81:c7:b8:34:d4:da:f3:81:f6:8d:ec:32:53:f2:34: 8c:c9:dd:67:f1:ff:00:2b:96:09:e5:31:bd:80:2b: 74:2f:ed:d3:84:57:75:7c:49:8a:eb:a9:5b:fb:72: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:5A:8A:26:CD:B2:0E:04:E5:62:D3:FB:85:3A:B1:BA:7C:E4:2C X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:76:29:1d:e0:43:1e:44:95:da:55:fd:b4:5d:9d:02:f5:90: 12:1e:3d:20:58:23:fd:da:5c:70:83:94:36:12:c6:ee:9d:8f: 0a:28:ab:dd:62:87:f9:6b:c3:65:50:ee:0a:28:77:b2:21:9e: 1b:62:70:13:cc:aa:9e:f9:10:95:bd:7d:d4:cd:37:af:d6:70: be:b4:64:0c:64:b7:ca:ca:51:2b:65:9c:d8:35:a5:99:8e:fe: d9:f4:30:73:20:f5:e0:95:f3:e4:ea:e7:38:1c:a4:bf:82:eb: 89:6c:13:a8:2b:ad:9a:4d:ff:cb:03:92:2f:4c:cd:9b:fc:db: 4e:d2:d8:9d:5c:61:fe:a7:14:8d:d9:53:18:a5:26:7d:b7:d4: 7a:d1:3d:2e:d5:f8:2e:f9:0d:76:3a:6b:6b:1c:ca:aa:8f:50: 5d:1c:24:68:8e:1d:54:bb:b8:b4:1f:73:36:df:46:7c:e1:ac: b6:f3:61:b1:15:8d:b3:a7:e8:15:1b:30:02:78:68:5e:7f:36: 00:17:df:b5:a9:47:22:23:81:c8:45:4e:3f:e4:f4:c5:2c:d9: d2:28:23:23:99:98:3d:b2:8d:2c:03:97:63:2d:73:48:dc:89: e5:07:d3:0b:64:76:5e:b2:55:f6:fb:39:ff:60:2b:23:28:7b: 63:ea:73:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDlz+aV3nxjSO+RBFqEHbq9JRuucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzExMTIyMDZaMDMxMTAvBgNV BAMTKDI0Q0Y1QThBMjZDREIyMEUwNEU1NjJEM0ZCODUzQUIxQkE3Q0U0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+S94GWUph0TNxpy5PRa0Lu1Z ABcsql4EW6A8i3yij9WiTclTubkOZ6kaRA8s/5/kRaRkjQvazumzhrjG+XQOwI28 7MvbJWYOLWyEoyHbwYGvacaTLopyl5qygF4I0t5oCeb3bMsr6geKc+7K2wsXJRVn sczGRvWZzXtcZiZTWkjgaHKJkQuT16AZH5bakw5QaqLsMX41p7eJNVk9n2sBIcCN QbCqNfFCOayXG+AXYJfXrmrGLRam86K9QeXDLylVPB8kQHuUnedx3+CJu5ZKxoHH uDTU2vOB9o3sMlPyNIzJ3Wfx/wArlgnlMb2AK3Qv7dOEV3V8SYrrqVv7cv99AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJM9aiibNsg4E5WLT+4U6sbp85CwwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3YpHeBDHkSV 2lX9tF2dAvWQEh49IFgj/dpccIOUNhLG7p2PCiir3WKH+WvDZVDuCih3siGeG2Jw E8yqnvkQlb191M03r9ZwvrRkDGS3yspRK2Wc2DWlmY7+2fQwcyD14JXz5OrnOByk v4LriWwTqCutmk3/ywOSL0zNm/zbTtLYnVxh/qcUjdlTGKUmfbfUetE9LtX4LvkN djpraxzKqo9QXRwkaI4dVLu4tB9zNt9GfOGstvNhsRWNs6foFRswAnhoXn82ABff talHIiOByEVOP+T0xSzZ0igjI5mYPbKNLAOXYy1zSNyJ5QfTC2R2XrJV9vs5/2Ar Iyh7Y+pzYA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:50 2026 by rpki-client