$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft (raw, json) Hash identifier: 7i81PvmocYO/C0+Kyys5pq4WtEGAG2SOYvs0yuNE+vY= Subject key identifier: 72:FD:C4:27:C8:92:08:FB:55:40:18:AB:F8:C4:D2:00:B0:DA:49:70 Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 79CC6668E757DA93A136D540A74D4ACC4FEE2D22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft Manifest number: 73 Signing time: Wed 14 Oct 2026 00:48:22 +0000 Manifest this update: Wed 14 Oct 2026 00:43:22 +0000 Manifest next update: Sat 17 Oct 2026 09:52:22 +0000 Files and hashes: 1: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (hash: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4=) 2: 3136332e36312e3230332e302f32342d3332203d3e203633363231.roa (hash: CedaRKdjPPCA3LLv4C4vl58bISm5EdjTJJJPH3QticU=) 3: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl (hash: avCs0VeYO3uS1Kf2HkRM9YXs7gwqlz/D65vvDVKv2+Q=) 4: 3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (hash: +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 09:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cc:66:68:e7:57:da:93:a1:36:d5:40:a7:4d:4a:cc:4f:ee:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Oct 14 00:43:22 2026 GMT Not After : Oct 17 09:52:22 2026 GMT Subject: CN=72FDC427C89208FB554018ABF8C4D200B0DA4970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:fc:5a:2c:fe:65:9b:eb:d3:09:08:09:e2: b7:f9:42:d6:45:58:15:b2:b4:8e:05:50:67:d6:37: 26:d8:ee:a5:d8:5e:25:10:b5:0b:f0:2b:42:33:c2: 02:e4:28:42:cf:3b:1d:10:d3:82:b8:e6:20:ac:0f: 2c:f2:8f:69:be:b7:21:19:27:20:5a:c8:d4:43:c1: c6:1f:b3:0f:62:b0:20:bf:de:4a:eb:12:52:d5:29: de:50:bd:6f:10:62:a1:9f:4c:45:7a:74:a4:85:0a: 82:3e:8c:75:61:d8:a3:00:67:b6:5f:1a:dd:8c:25: 30:4a:22:3a:a5:88:8e:82:c8:ec:d0:59:2b:9e:38: ac:26:ce:c1:c4:ac:d5:6b:c6:e0:ae:ab:10:9f:32: a2:64:31:53:5b:00:a3:14:7e:b8:2e:a7:7f:3d:f1: 78:5a:16:bc:f9:31:88:f3:e6:6e:68:3b:6a:16:76: 04:02:4d:7b:6d:d8:81:6c:cd:48:89:06:d2:85:46: 82:8c:4a:da:51:73:6f:75:bf:bc:9e:93:ba:e7:51: 20:86:37:3a:6d:a3:30:0d:36:12:f5:59:0a:f7:1f: a0:ea:a4:c7:28:47:6a:05:e5:f7:3f:ff:71:f9:c9: 95:2a:3d:99:9d:0b:24:45:0b:65:f4:bd:f2:86:9b: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:C4:27:C8:92:08:FB:55:40:18:AB:F8:C4:D2:00:B0:DA:49:70 X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ce:74:5f:a9:23:11:2c:cc:a3:40:44:75:f0:c9:8b:c1:90: 4c:a7:b3:d8:3c:14:b6:01:55:4c:ed:08:27:bf:eb:12:b9:30: 5a:67:a7:7d:d3:45:af:97:28:70:f8:36:5d:b0:3e:5d:c6:38: 79:ea:44:96:5b:72:ae:06:84:d7:75:21:0f:cd:cf:3a:cb:4d: 9e:06:75:ae:d0:4f:53:3f:b6:33:2a:08:98:68:06:dd:21:7a: 83:fb:83:b7:63:21:60:7f:fc:4c:28:80:50:3b:6d:85:9f:e7: 7e:4a:c9:86:32:3e:0a:34:02:e3:a8:22:39:91:ed:3a:d9:40: 28:b9:3d:8d:f2:a9:27:e5:0b:0e:a1:af:99:ee:9a:fc:34:6d: 4c:8f:88:9a:0e:4f:e1:89:cc:76:5e:6f:7e:be:70:19:9f:15: 3f:82:45:c2:5d:aa:c5:4c:6a:57:2d:f7:df:be:e5:b2:e0:4c: 12:b4:96:d9:28:40:73:f4:b8:e7:2e:80:2f:88:6b:3a:39:ae: 09:fd:1c:f8:92:d0:62:fd:ec:3f:08:58:b0:ec:c0:db:58:b3: c4:0a:69:7f:9e:96:31:d4:05:9e:f4:a6:82:4a:7f:8e:3c:d6: 48:ee:39:3b:71:89:20:e9:89:f8:10:70:16:92:71:81:b0:b5: da:62:5c:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUecxmaOdX2pOhNtVAp01KzE/uLSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjEwMTQwMDQzMjJaFw0yNjEwMTcwOTUyMjJaMDMxMTAvBgNV BAMTKDcyRkRDNDI3Qzg5MjA4RkI1NTQwMThBQkY4QzREMjAwQjBEQTQ5NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcPxaLP5lm+vTCQgJ4rf5QtZF WBWytI4FUGfWNybY7qXYXiUQtQvwK0IzwgLkKELPOx0Q04K45iCsDyzyj2m+tyEZ JyBayNRDwcYfsw9isCC/3krrElLVKd5QvW8QYqGfTEV6dKSFCoI+jHVh2KMAZ7Zf Gt2MJTBKIjqliI6CyOzQWSueOKwmzsHErNVrxuCuqxCfMqJkMVNbAKMUfrgup389 8XhaFrz5MYjz5m5oO2oWdgQCTXtt2IFszUiJBtKFRoKMStpRc291v7yek7rnUSCG NzptozANNhL1WQr3H6DqpMcoR2oF5fc//3H5yZUqPZmdCyRFC2X0vfKGm/b9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcv3EJ8iSCPtVQBir+MTSALDaSXAwHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjE2OTI1NTIwNjg1OTU3NTEvMC9CRjg1Nzk2NUM5MjMx QzVFRjU3Q0JCRTdBMDlEODdDMkZDNkU4QzdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR850X6kjESzM o0BEdfDJi8GQTKez2DwUtgFVTO0IJ7/rErkwWmenfdNFr5cocPg2XbA+XcY4eepE lltyrgaE13UhD83POstNngZ1rtBPUz+2MyoImGgG3SF6g/uDt2MhYH/8TCiAUDtt hZ/nfkrJhjI+CjQC46giOZHtOtlAKLk9jfKpJ+ULDqGvme6a/DRtTI+Img5P4YnM dl5vfr5wGZ8VP4JFwl2qxUxqVy33377lsuBMErSW2ShAc/S45y6AL4hrOjmuCf0c +JLQYv3sPwhYsOzA21izxAppf56WMdQFnvSmgkp/jjzWSO45O3GJIOmJ+BBwFpJx gbC12mJc1w== -----END CERTIFICATE-----Generated at Thu Oct 15 02:20:22 2026 by rpki-client