$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: gBi9yg7kuGp3dQl7HMa0w72P+xDwIWEA4LW9YMb5orY= Subject key identifier: 8A:93:2C:34:DB:41:B7:FC:7C:6D:EC:E2:D6:DB:2F:7D:2D:56:60:A6 Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 5CC74E415DC007F660DAF4A0DBCDF27F98E40F39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: C1 Signing time: Thu 15 Oct 2026 11:46:47 +0000 Manifest this update: Thu 15 Oct 2026 11:41:47 +0000 Manifest next update: Sun 18 Oct 2026 23:01:47 +0000 Files and hashes: 1: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: fCVr7tyI+zo41914B2WB7uoJ+3oCxAReSfQAd5aiV4Y=) 2: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 3: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c7:4e:41:5d:c0:07:f6:60:da:f4:a0:db:cd:f2:7f:98:e4:0f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Oct 15 11:41:47 2026 GMT Not After : Oct 18 23:01:47 2026 GMT Subject: CN=8A932C34DB41B7FC7C6DECE2D6DB2F7D2D5660A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:42:fb:d9:c3:48:46:17:b3:2c:ec:c8:bb: f6:99:4c:2d:4a:f3:09:3e:04:b8:33:f3:e3:ea:61: 05:f6:11:55:68:4d:73:56:cb:42:a1:bc:0f:a6:ea: 26:91:e2:08:76:2d:fd:2d:bc:e4:6d:80:b9:3d:55: a2:9b:46:a7:13:a4:3c:b4:fa:f2:7c:bf:e4:39:47: e8:7f:2e:3a:a2:59:9d:0f:e2:70:8d:11:97:8f:1a: 0d:e9:7a:73:c3:23:c2:fa:2d:47:d2:b1:db:e1:41: 7e:b8:cc:d6:ca:d6:0f:7a:89:ed:c2:8c:67:fa:81: 50:57:df:47:b2:17:a1:bf:d9:59:03:a2:bd:f2:70: 81:d8:2f:7a:b0:70:3b:29:2d:cc:ee:c4:36:6f:8c: cc:b5:da:b0:8f:94:3f:c6:3e:62:27:df:04:4e:2d: 11:53:6d:92:0d:8a:80:fe:79:d1:a8:00:43:82:ed: 7c:f6:ea:52:fb:9b:ed:21:5f:97:37:68:02:fe:e1: ac:37:96:7d:43:23:13:14:d3:4e:e8:b9:b2:c6:36: f1:28:4e:27:64:44:7e:f7:c0:44:50:13:62:1f:24: a0:10:3f:6d:68:e3:4e:09:a6:e3:b0:8b:cd:f3:c4: df:0e:a9:1e:de:48:b8:c4:a5:6a:e8:c8:33:27:4b: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:93:2C:34:DB:41:B7:FC:7C:6D:EC:E2:D6:DB:2F:7D:2D:56:60:A6 X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:47:b7:e1:89:c9:06:8a:f6:03:a7:72:b5:64:42:60:2a:7d: fd:c6:5b:1a:e2:cf:e5:84:b1:8d:bd:67:04:fe:be:83:65:f0: fe:6a:b3:19:04:df:f6:c0:dc:6e:58:a9:82:a0:25:ad:ec:b2: cd:fe:34:c8:e6:0c:6b:72:31:f5:4d:10:db:a1:e1:89:d7:b5: a7:46:e8:bb:46:7c:d0:60:d6:9e:7e:0b:73:3e:bd:61:73:e9: 2d:e4:92:b5:84:8b:2c:9e:b4:cf:9e:3f:14:90:b9:ab:a1:b7: 68:c0:e8:2a:9c:b7:c8:dd:c7:be:ca:56:da:fd:ca:91:b3:01: 9c:c4:6c:44:98:e8:bf:11:db:c4:28:c5:73:95:f7:27:24:37: 08:68:2f:55:2c:61:c8:57:3d:56:38:18:cf:c4:b3:12:6e:14: 45:d6:cc:43:71:58:b0:dc:31:e3:16:6d:b1:25:35:e5:d1:f6: 5b:45:e7:dd:9d:3d:03:66:72:66:48:10:d4:61:50:a8:d6:37: b7:57:6f:81:38:ad:b3:c4:db:5f:42:0b:ae:ce:61:0f:d3:13: 85:e3:21:bf:3f:db:9e:0a:2b:15:68:a2:18:26:59:92:8b:00: 53:17:8b:df:71:96:80:5c:1f:a1:b8:c6:cd:ae:b7:f1:bb:74: ba:2e:74:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXMdOQV3AB/Zg2vSg283yf5jkDzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjEwMTUxMTQxNDdaFw0yNjEwMTgyMzAxNDdaMDMxMTAvBgNV BAMTKDhBOTMyQzM0REI0MUI3RkM3QzZERUNFMkQ2REIyRjdEMkQ1NjYwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HUL72cNIRhezLOzIu/aZTC1K 8wk+BLgz8+PqYQX2EVVoTXNWy0KhvA+m6iaR4gh2Lf0tvORtgLk9VaKbRqcTpDy0 +vJ8v+Q5R+h/LjqiWZ0P4nCNEZePGg3penPDI8L6LUfSsdvhQX64zNbK1g96ie3C jGf6gVBX30eyF6G/2VkDor3ycIHYL3qwcDspLczuxDZvjMy12rCPlD/GPmIn3wRO LRFTbZINioD+edGoAEOC7Xz26lL7m+0hX5c3aAL+4aw3ln1DIxMU007oubLGNvEo TidkRH73wERQE2IfJKAQP21o404JpuOwi83zxN8OqR7eSLjEpWroyDMnS4stAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUipMsNNtBt/x8bezi1tsvfS1WYKYwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEe34YnJBor2 A6dytWRCYCp9/cZbGuLP5YSxjb1nBP6+g2Xw/mqzGQTf9sDcblipgqAlreyyzf40 yOYMa3Ix9U0Q26Hhide1p0bou0Z80GDWnn4Lcz69YXPpLeSStYSLLJ60z54/FJC5 q6G3aMDoKpy3yN3HvspW2v3KkbMBnMRsRJjovxHbxCjFc5X3JyQ3CGgvVSxhyFc9 VjgYz8SzEm4URdbMQ3FYsNwx4xZtsSU15dH2W0Xn3Z09A2ZyZkgQ1GFQqNY3t1dv gTits8TbX0ILrs5hD9MTheMhvz/bngorFWiiGCZZkosAUxeL33GWgFwfobjGza63 8bt0ui50dA== -----END CERTIFICATE-----Generated at Thu Oct 15 14:24:03 2026 by rpki-client