$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft (raw, json) Hash identifier: lml05EQZPxGw2tU3gikZVNBKSEn01J+S1uzJPSBEzhg= Subject key identifier: 21:56:6A:CA:F7:3E:5B:F3:EA:0B:4A:E7:2B:52:FB:5D:DD:AB:48:4E Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 60E0ED7FA6EB0253C627B9234BA415B404B5A85D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft Manifest number: 22 Signing time: Tue 14 Jul 2026 11:16:09 +0000 Manifest this update: Tue 14 Jul 2026 11:11:09 +0000 Manifest next update: Wed 15 Jul 2026 15:09:09 +0000 Files and hashes: 1: 3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (hash: +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=) 2: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl (hash: 2TqO31gZ4b0u6m1hbfBAL607/vPbSTjmsSBhNNV/1Ak=) 3: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (hash: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=) 4: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (hash: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e0:ed:7f:a6:eb:02:53:c6:27:b9:23:4b:a4:15:b4:04:b5:a8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Jul 14 11:11:09 2026 GMT Not After : Jul 15 15:09:09 2026 GMT Subject: CN=21566ACAF73E5BF3EA0B4AE72B52FB5DDDAB484E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:65:90:bc:41:03:4d:63:08:d0:04:45:01: ea:ee:37:2b:f8:ee:14:3f:03:6f:5d:cc:41:f0:f5: 6d:20:f6:d9:e2:08:77:25:8c:6b:b5:f5:fa:db:d9: ec:02:35:d8:17:f7:a1:f4:71:a6:cd:7a:3e:5f:c8: d3:52:5e:62:2c:e3:47:d2:c9:a2:14:d6:e0:6f:b9: 77:95:eb:5b:f1:f8:28:0f:a9:ca:20:4d:e8:c6:8f: fa:4d:44:19:13:a6:ef:a1:cf:a7:4c:39:2e:3d:26: 0e:1d:80:df:af:3f:13:cc:ce:a4:5f:2f:4c:2f:eb: 0f:f0:5b:2c:65:d3:0b:ad:15:e3:d1:f7:26:24:98: d5:0f:a7:40:de:8d:0a:08:17:90:e7:75:17:e7:47: ff:8f:e2:9a:24:11:bb:d5:b9:d5:54:79:8e:dc:85: 71:a8:5c:41:a3:2f:82:12:eb:0f:12:89:f0:54:d4: 60:e5:93:d7:b1:fa:af:fd:ad:75:82:d8:d0:76:23: d0:3a:56:1e:95:8c:26:b9:e6:02:b4:de:01:dc:9f: 6a:95:ef:f9:7f:c9:e0:54:3b:fa:f9:01:1b:23:02: e4:22:39:7a:6f:5f:ca:57:88:2d:37:94:07:f2:81: ee:86:f4:89:fc:70:32:50:4c:37:fb:67:80:92:25: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:6A:CA:F7:3E:5B:F3:EA:0B:4A:E7:2B:52:FB:5D:DD:AB:48:4E X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:2c:fc:1b:ce:56:a8:36:f8:fc:44:80:9d:77:a9:c6:9e:c0: 62:5e:3c:ab:85:28:bb:06:13:c4:73:a2:32:42:96:2b:26:1d: 78:a4:58:8e:cf:d8:e7:dc:1f:e5:d0:db:17:88:e5:dd:38:32: 68:ac:f7:4b:9d:7a:c6:5e:5e:61:7a:88:c0:bc:32:5f:7b:a4: 40:5b:7e:0e:7c:e8:fc:7b:17:cd:c7:4e:89:fc:67:c7:6c:47: b1:5a:8d:38:b4:d1:b1:cf:ef:05:dd:36:a4:05:e6:da:16:e8: 00:85:f8:ae:4a:73:28:45:56:31:fd:3a:54:1d:1f:ce:2f:7d: 26:0b:da:8b:b2:89:7c:3d:f4:84:03:eb:bf:e9:b7:6d:de:4b: aa:35:f7:55:94:c9:8f:dd:05:b2:27:26:a0:9f:98:5e:94:6e: a8:cf:51:bc:12:27:71:69:4c:70:02:66:a1:64:09:be:9a:be: 33:48:69:99:51:c1:07:80:37:96:20:63:e0:f5:68:3b:8a:54: 1d:7c:18:b2:09:7c:3f:ec:3d:37:20:90:80:4d:5f:3a:77:94: 11:d5:5e:70:b0:a3:09:3d:ee:22:38:95:74:7e:d8:db:b1:33: 2d:1f:6a:a2:60:0f:69:48:02:f1:66:68:77:fa:b2:90:b0:d4: 80:2c:97:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYODtf6brAlPGJ7kjS6QVtAS1qF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjA3MTQxMTExMDlaFw0yNjA3MTUxNTA5MDlaMDMxMTAvBgNV BAMTKDIxNTY2QUNBRjczRTVCRjNFQTBCNEFFNzJCNTJGQjVERERBQjQ4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTF2WQvEEDTWMI0ARFAeruNyv4 7hQ/A29dzEHw9W0g9tniCHcljGu19frb2ewCNdgX96H0cabNej5fyNNSXmIs40fS yaIU1uBvuXeV61vx+CgPqcogTejGj/pNRBkTpu+hz6dMOS49Jg4dgN+vPxPMzqRf L0wv6w/wWyxl0wutFePR9yYkmNUPp0DejQoIF5DndRfnR/+P4pokEbvVudVUeY7c hXGoXEGjL4IS6w8SifBU1GDlk9ex+q/9rXWC2NB2I9A6Vh6VjCa55gK03gHcn2qV 7/l/yeBUO/r5ARsjAuQiOXpvX8pXiC03lAfyge6G9In8cDJQTDf7Z4CSJSDfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIVZqyvc+W/PqC0rnK1L7Xd2rSE4wHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTI1NTIwNjg1OTU3NTEvMC9CRjg1Nzk2NUM5MjMx QzVFRjU3Q0JCRTdBMDlEODdDMkZDNkU4QzdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAySz8G85WqDb4 /ESAnXepxp7AYl48q4UouwYTxHOiMkKWKyYdeKRYjs/Y59wf5dDbF4jl3TgyaKz3 S516xl5eYXqIwLwyX3ukQFt+Dnzo/HsXzcdOifxnx2xHsVqNOLTRsc/vBd02pAXm 2hboAIX4rkpzKEVWMf06VB0fzi99Jgvai7KJfD30hAPrv+m3bd5LqjX3VZTJj90F sicmoJ+YXpRuqM9RvBIncWlMcAJmoWQJvpq+M0hpmVHBB4A3liBj4PVoO4pUHXwY sgl8P+w9NyCQgE1fOneUEdVecLCjCT3uIjiVdH7Y27EzLR9qomAPaUgC8WZod/qy kLDUgCyXXQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:59 2026 by rpki-client