$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: BxP3NtvhJDlborZ0xOpDCZWoeMBHytksQJN5+46Mps8= Subject key identifier: 99:4D:CE:AF:0F:75:BD:F0:70:40:40:7C:D5:D2:81:78:62:E2:C5:C0 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: C95FD0B0CBAF61229E51C48F9C202A50D415BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: B3 Signing time: Fri 29 May 2026 10:42:46 +0000 Manifest this update: Fri 29 May 2026 10:37:46 +0000 Manifest next update: Sat 30 May 2026 11:08:46 +0000 Files and hashes: 1: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 2: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=) 3: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=) 4: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: QrCW7AlCdyfqTtYZsU5CDgc11ZssBGScQB729A9Gv5k=) 5: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=) 6: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=) 7: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=) 8: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=) 9: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=) 10: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=) 11: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=) 12: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c9:5f:d0:b0:cb:af:61:22:9e:51:c4:8f:9c:20:2a:50:d4:15:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: May 29 10:37:46 2026 GMT Not After : May 30 11:08:46 2026 GMT Subject: CN=994DCEAF0F75BDF07040407CD5D2817862E2C5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:56:5d:bf:68:c8:24:02:08:a7:d9:35:97: 1f:4a:f9:53:b0:4b:ed:1a:79:51:3c:1d:10:3c:8a: 7f:e5:91:35:fd:2e:dd:3a:8c:86:3f:ec:8c:51:d7: a3:c7:64:b4:29:f0:4f:de:d8:06:18:06:f0:71:6c: 73:38:ee:1a:f1:e4:2b:1d:48:1a:1d:d8:30:66:f7: 74:57:b0:7b:ce:6f:fe:35:84:94:90:cf:f6:e6:c1: 25:d2:39:43:9a:00:2e:10:09:ba:fb:cb:60:8e:c6: 3d:9c:f4:4e:5b:b2:69:d9:6d:3f:3c:57:99:e0:cb: aa:86:08:b0:7c:8e:f3:fe:fd:3e:68:f6:42:e9:ce: 80:09:24:59:73:1d:d4:18:75:05:65:d9:cf:6d:1e: 83:01:a0:06:6b:bf:cb:a6:60:77:36:15:b7:03:6a: d9:28:a0:52:d2:e6:c4:ae:a8:3d:c3:29:7b:d3:9d: 0d:e9:f0:27:aa:14:aa:da:40:76:d0:dc:d6:e2:70: e2:e7:5a:0a:99:ec:f7:c7:35:7a:ac:20:5a:a9:26: 9c:9a:0c:b3:4a:2e:0d:20:fb:a1:64:45:18:a9:a7: c3:12:f1:f7:81:c8:30:79:f7:d8:62:fb:c6:b3:53: bb:6a:7b:54:d4:e9:d1:a2:80:ad:a7:18:07:55:c7: 89:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4D:CE:AF:0F:75:BD:F0:70:40:40:7C:D5:D2:81:78:62:E2:C5:C0 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:26:3e:13:b7:20:3e:e9:f9:c0:81:e5:13:c6:04:b2:b7:9a: 90:aa:4a:73:a2:f5:8b:c4:99:88:6a:57:7b:d6:d5:d8:c2:2d: 7a:ff:1d:4b:bb:56:0a:29:5c:aa:c4:60:f5:0d:d3:34:d4:b1: 3b:74:c3:78:99:1b:a2:fb:07:fe:18:80:44:ca:3f:d4:e0:00: 2b:86:57:2d:cd:ec:86:ea:27:a3:60:8d:c6:80:b7:d7:e4:4d: db:01:b4:05:15:ac:7f:ba:32:8f:fd:7d:5f:54:36:31:9e:e6: e1:e1:c8:01:f4:70:4f:dc:8e:e5:aa:c3:09:ad:0b:00:48:e8: f0:0e:7e:fa:af:21:2f:ff:a5:79:b0:51:d8:cf:30:1f:f3:ef: 1c:c0:10:3f:fd:d7:33:9f:6d:a8:89:2c:b4:ef:68:a9:87:46: eb:e2:d2:a4:f3:e3:a2:0e:82:a0:3e:23:65:5f:af:3a:59:06: 1e:1e:52:0c:73:bc:4e:fb:50:f1:fb:d2:cd:f3:9c:c2:66:e3: 47:95:4c:2d:af:29:99:73:52:e7:40:1f:1e:62:db:e9:5c:10: 32:bb:60:cc:96:59:c0:ad:11:b1:eb:b6:52:ec:da:9c:35:d9: 17:27:42:eb:ad:5e:71:73:2e:58:e6:4e:3d:f6:6b:fc:1f:8e: 90:d4:66:ad -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAMlf0LDLr2EinlHEj5wgKlDUFb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA1MjkxMDM3NDZaFw0yNjA1MzAxMTA4NDZaMDMxMTAvBgNV BAMTKDk5NERDRUFGMEY3NUJERjA3MDQwNDA3Q0Q1RDI4MTc4NjJFMkM1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbd1Zdv2jIJAIIp9k1lx9K+VOw S+0aeVE8HRA8in/lkTX9Lt06jIY/7IxR16PHZLQp8E/e2AYYBvBxbHM47hrx5Csd SBod2DBm93RXsHvOb/41hJSQz/bmwSXSOUOaAC4QCbr7y2COxj2c9E5bsmnZbT88 V5ngy6qGCLB8jvP+/T5o9kLpzoAJJFlzHdQYdQVl2c9tHoMBoAZrv8umYHc2FbcD atkooFLS5sSuqD3DKXvTnQ3p8CeqFKraQHbQ3NbicOLnWgqZ7PfHNXqsIFqpJpya DLNKLg0g+6FkRRipp8MS8feByDB599hi+8azU7tqe1TU6dGigK2nGAdVx4kpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmU3Orw91vfBwQEB81dKBeGLixcAwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiY+E7cgPun5 wIHlE8YEsreakKpKc6L1i8SZiGpXe9bV2MItev8dS7tWCilcqsRg9Q3TNNSxO3TD eJkbovsH/hiARMo/1OAAK4ZXLc3shuono2CNxoC31+RN2wG0BRWsf7oyj/19X1Q2 MZ7m4eHIAfRwT9yO5arDCa0LAEjo8A5++q8hL/+lebBR2M8wH/PvHMAQP/3XM59t qIkstO9oqYdG6+LSpPPjog6CoD4jZV+vOlkGHh5SDHO8TvtQ8fvSzfOcwmbjR5VM La8pmXNS50AfHmLb6VwQMrtgzJZZwK0Rseu2UuzanDXZFydC661ecXMuWOZOPfZr /B+OkNRmrQ== -----END CERTIFICATE-----Generated at Sat May 30 01:28:17 2026 by rpki-client