$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft (raw, json) Hash identifier: 9auBNRdaPmEOYLRLDEWoov2vxAhTLtedWS3xgW22O2A= Subject key identifier: F8:36:8B:AE:0D:A9:EF:59:BD:5B:57:CE:D0:F0:2B:FB:9A:39:C3:72 Authority key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Certificate issuer: /CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Certificate serial: 2B8D9AD07DF02C1977388C7E17AAAA6AD88CD346 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft Manifest number: 6E Signing time: Tue 14 Jul 2026 03:10:18 +0000 Manifest this update: Tue 14 Jul 2026 03:05:18 +0000 Manifest next update: Wed 15 Jul 2026 06:32:18 +0000 Files and hashes: 1: 3130332e33302e3134382e302f32342d3234203d3e2034383038.roa (hash: fDhVm2gWvgbl6jbQZmd1pc+2ov9EqWf1/uVOrs3qxsI=) 2: 3130332e33302e3135312e302f32342d3234203d3e2034383437.roa (hash: nZjt8EVdN5rlHquv2lrRvUMxDTWld8Wy8ZFdYRjzFCc=) 3: BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl (hash: TiIktrx+wb/mTEhye0RNLz+8yBr8ozFHvNS8qWRRl5k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8d:9a:d0:7d:f0:2c:19:77:38:8c:7e:17:aa:aa:6a:d8:8c:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Validity Not Before: Jul 14 03:05:18 2026 GMT Not After : Jul 15 06:32:18 2026 GMT Subject: CN=F8368BAE0DA9EF59BD5B57CED0F02BFB9A39C372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:6d:e8:cd:7e:29:0a:a9:98:47:e3:16:d5: 35:55:d0:98:0b:d2:c6:2c:e4:e6:87:9d:a5:4c:ec: 62:1f:26:ee:27:2e:f4:b6:13:71:a0:ac:5a:0f:ff: fd:24:ff:f5:da:cf:c0:7e:b7:41:48:a0:fe:5e:43: ec:3f:76:43:1f:f8:d0:09:e2:ce:5c:b0:79:20:87: ee:06:62:a7:44:2c:a8:7a:a2:84:cf:87:5a:25:dc: c6:0e:d3:25:75:45:28:f9:fb:2b:90:d2:34:62:0f: 6f:49:20:cc:04:ba:80:4d:cf:b1:77:7f:98:2d:4a: 9e:28:ce:69:ea:c3:5a:af:ed:fa:f8:95:95:19:09: 05:e7:e0:36:e5:07:57:94:d4:36:44:3e:68:74:20: 54:ba:86:0f:37:3c:a3:12:c1:9e:ff:cb:65:ef:c1: 47:a3:01:68:fc:35:9b:db:9c:9f:79:51:78:66:1b: 6b:43:a2:89:da:36:c7:e0:78:ea:9d:b4:fc:45:30: 73:06:0e:fc:e4:44:d3:2b:d3:df:e4:76:e0:70:11: ca:3b:f9:11:a1:4d:73:46:b4:78:a5:2f:33:77:9c: bd:1b:e6:2f:42:4d:30:75:a8:bf:4c:87:21:9e:9d: 70:c6:0f:ea:36:4b:13:9b:85:e2:11:99:02:63:fc: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:36:8B:AE:0D:A9:EF:59:BD:5B:57:CE:D0:F0:2B:FB:9A:39:C3:72 X509v3 Authority Key Identifier: keyid:BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:22:85:6f:21:ed:13:76:4f:bf:1c:de:ec:aa:a8:0b:11:41: 7e:70:e6:9b:f2:3f:07:07:f8:2b:5d:02:0c:64:4c:4e:a5:8b: 9c:a7:c0:38:a0:c0:62:de:c5:ce:53:68:3a:56:e6:76:8a:0e: b4:4c:40:94:fe:e0:ce:f5:f2:37:b5:f4:51:08:7d:fa:d9:e9: c3:f9:11:50:d0:41:9d:97:b5:5d:91:87:6e:af:c0:c6:6b:ef: 6c:ad:d3:fc:3d:5b:5c:4a:3f:1f:0b:10:2b:81:08:2b:af:4d: 73:0d:06:4d:b3:78:ca:c2:03:e5:9b:3d:30:de:c8:2b:d7:bf: 7c:55:96:7c:a2:01:44:b4:e8:9e:60:43:31:a8:19:ec:25:ce: af:1b:bf:ba:27:07:96:cc:7c:c1:95:c6:bf:4f:e7:b0:30:ce: cc:72:27:ed:5a:11:ce:ac:85:8f:d6:23:46:ce:00:56:27:dd: 8e:a5:68:7a:5c:4c:de:6c:09:18:90:d0:c0:cb:78:e6:c3:c6: 05:2b:16:c8:48:61:53:fe:da:1c:dc:73:84:8f:3e:42:bf:bb: 2b:12:21:24:f9:9d:1a:0e:72:f4:df:1d:4a:71:78:6e:90:3d: b8:05:f9:1d:0e:7f:e2:dd:5a:a1:c0:70:90:ab:0b:48:16:7a: e9:60:f0:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK42a0H3wLBl3OIx+F6qqatiM00YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVG ODE2RDY3MTAeFw0yNjA3MTQwMzA1MThaFw0yNjA3MTUwNjMyMThaMDMxMTAvBgNV BAMTKEY4MzY4QkFFMERBOUVGNTlCRDVCNTdDRUQwRjAyQkZCOUEzOUMzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+G3ozX4pCqmYR+MW1TVV0JgL 0sYs5OaHnaVM7GIfJu4nLvS2E3GgrFoP//0k//Xaz8B+t0FIoP5eQ+w/dkMf+NAJ 4s5csHkgh+4GYqdELKh6ooTPh1ol3MYO0yV1RSj5+yuQ0jRiD29JIMwEuoBNz7F3 f5gtSp4ozmnqw1qv7fr4lZUZCQXn4DblB1eU1DZEPmh0IFS6hg83PKMSwZ7/y2Xv wUejAWj8NZvbnJ95UXhmG2tDoonaNsfgeOqdtPxFMHMGDvzkRNMr09/kduBwEco7 +RGhTXNGtHilLzN3nL0b5i9CTTB1qL9MhyGenXDGD+o2SxObheIRmQJj/MLxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+DaLrg2p71m9W1fO0PAr+5o5w3IwHwYDVR0j BBgwFoAUvFhe1anCuMJkddrVaDO3bvgW1nEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTIyNjI0MS8wL0JDNTg1RUQ1QTlDMkI4QzI2NDc1REFENTY4MzNC NzZFRjgxNkQ2NzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyMjYyNDEvMC9CQzU4NUVENUE5QzJC OEMyNjQ3NURBRDU2ODMzQjc2RUY4MTZENjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCKFbyHtE3ZP vxze7KqoCxFBfnDmm/I/Bwf4K10CDGRMTqWLnKfAOKDAYt7FzlNoOlbmdooOtExA lP7gzvXyN7X0UQh9+tnpw/kRUNBBnZe1XZGHbq/AxmvvbK3T/D1bXEo/HwsQK4EI K69Ncw0GTbN4ysID5Zs9MN7IK9e/fFWWfKIBRLTonmBDMagZ7CXOrxu/uicHlsx8 wZXGv0/nsDDOzHIn7VoRzqyFj9YjRs4AVifdjqVoelxM3mwJGJDQwMt45sPGBSsW yEhhU/7aHNxzhI8+Qr+7KxIhJPmdGg5y9N8dSnF4bpA9uAX5HQ5/4t1aocBwkKsL SBZ66WDwjQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:50 2026 by rpki-client