$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: ckMjeOilBjEDoZaR+uObcbft63XZXnP8mzGHigfXz04= Subject key identifier: 97:BC:FA:BB:AF:83:39:90:E8:AA:5F:7F:DB:33:3B:8E:C7:21:66:11 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 126BDCCB4868B0D2B106C86D27ACEEF83BCC4673 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: F1 Signing time: Tue 14 Jul 2026 10:16:02 +0000 Manifest this update: Tue 14 Jul 2026 10:11:02 +0000 Manifest next update: Wed 15 Jul 2026 12:37:02 +0000 Files and hashes: 1: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=) 2: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=) 3: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=) 4: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=) 5: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=) 6: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=) 7: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=) 8: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=) 9: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=) 10: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 11: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=) 12: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: u6APwdouK2NTeTSC/3OFbh3zhEhTnAzGaVcrWrUjpeA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6b:dc:cb:48:68:b0:d2:b1:06:c8:6d:27:ac:ee:f8:3b:cc:46:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Jul 14 10:11:02 2026 GMT Not After : Jul 15 12:37:02 2026 GMT Subject: CN=97BCFABBAF833990E8AA5F7FDB333B8EC7216611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8f:31:90:ff:0f:20:cc:bc:5b:87:7d:88:b5: 2a:1a:53:90:4d:49:5d:68:5f:82:52:fd:ce:e8:b8: ac:cf:4e:00:bd:dd:cf:69:10:7c:ee:36:3f:eb:58: 89:79:4d:c9:29:12:bf:08:8a:ba:fa:a9:33:34:a2: 2b:e6:7c:05:30:89:b9:ff:d7:b0:3d:85:78:5e:a8: 65:c9:f5:31:f5:36:a4:4d:06:e4:db:6d:71:f1:a7: c8:3f:e7:ac:8b:ec:0e:e0:83:46:23:24:a0:0c:df: 76:da:68:4c:10:1c:a1:7e:79:22:46:d0:6b:ec:7e: 16:eb:1a:a2:dd:3f:99:18:01:89:20:76:14:0d:16: ba:ec:b8:64:01:44:b9:65:ff:5c:1a:2e:cc:3d:af: 98:40:ac:38:ce:5d:d2:2f:1f:6a:db:e4:df:38:64: f4:60:00:ad:d1:f1:47:4f:4d:1f:b4:35:72:15:f2: 30:d5:6c:49:a6:7a:a8:65:4e:65:32:97:2d:c1:1a: db:c8:c2:f7:bc:f4:21:31:86:f1:45:e5:3b:9c:61: 55:93:ac:a8:c8:00:8e:42:49:eb:c2:79:89:81:05: 25:1c:6e:e3:06:f4:35:32:00:be:c1:8f:7a:5d:8a: a7:69:e3:5e:2b:5d:49:f7:1e:da:a9:f7:ea:3e:b0: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BC:FA:BB:AF:83:39:90:E8:AA:5F:7F:DB:33:3B:8E:C7:21:66:11 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1f:22:fb:c9:85:7a:e8:da:da:98:db:a4:58:24:f0:a7:28: ab:98:65:86:56:a6:e8:3e:c8:87:76:ae:b2:42:3b:be:90:65: 47:b3:d0:bd:ed:00:64:59:c1:8b:d2:3a:6c:73:2a:0b:06:01: 88:03:99:f5:f7:c4:ce:0a:82:00:31:e0:86:9d:77:ba:52:25: 4d:97:0e:dc:83:e4:a7:b1:ae:e2:be:48:9d:f5:a4:b2:3e:fe: f9:e4:77:8d:b3:b4:a5:d4:a0:0d:b3:1b:cf:29:69:b6:f0:bd: 3b:b3:0a:6f:c5:f5:7c:bb:e7:bf:84:37:95:b1:e1:c2:ae:b6: 88:fb:67:cc:b1:0b:c9:c9:45:a8:09:22:36:80:46:6b:cb:d7: ee:91:85:78:3f:cb:fb:e4:e9:6a:07:b3:a7:6e:1f:30:53:63: 97:aa:07:d6:5b:33:7e:70:76:17:19:12:f1:3b:46:db:ba:0c: b5:8a:70:f5:24:30:3a:f8:14:ab:e1:c5:66:5c:74:56:04:5d: 09:fe:42:95:15:0c:8e:bd:1f:7a:d7:41:43:3b:02:70:cb:ed: 82:b3:ad:1e:72:36:4d:43:bb:b5:2f:59:3b:b0:78:e0:83:8c: 4b:a5:5b:76:59:c0:7e:8d:0f:ed:bc:4a:da:d7:b7:70:1d:63: f0:18:74:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEmvcy0hosNKxBshtJ6zu+DvMRnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA3MTQxMDExMDJaFw0yNjA3MTUxMjM3MDJaMDMxMTAvBgNV BAMTKDk3QkNGQUJCQUY4MzM5OTBFOEFBNUY3RkRCMzMzQjhFQzcyMTY2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3jzGQ/w8gzLxbh32ItSoaU5BN SV1oX4JS/c7ouKzPTgC93c9pEHzuNj/rWIl5TckpEr8Iirr6qTM0oivmfAUwibn/ 17A9hXheqGXJ9TH1NqRNBuTbbXHxp8g/56yL7A7gg0YjJKAM33baaEwQHKF+eSJG 0GvsfhbrGqLdP5kYAYkgdhQNFrrsuGQBRLll/1waLsw9r5hArDjOXdIvH2rb5N84 ZPRgAK3R8UdPTR+0NXIV8jDVbEmmeqhlTmUyly3BGtvIwve89CExhvFF5TucYVWT rKjIAI5CSevCeYmBBSUcbuMG9DUyAL7Bj3pdiqdp414rXUn3Htqp9+o+sDnPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl7z6u6+DOZDoql9/2zM7jschZhEwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx8i+8mFeuja 2pjbpFgk8Kcoq5hlhlam6D7Ih3auskI7vpBlR7PQve0AZFnBi9I6bHMqCwYBiAOZ 9ffEzgqCADHghp13ulIlTZcO3IPkp7Gu4r5InfWksj7++eR3jbO0pdSgDbMbzylp tvC9O7MKb8X1fLvnv4Q3lbHhwq62iPtnzLELyclFqAkiNoBGa8vX7pGFeD/L++Tp agezp24fMFNjl6oH1lszfnB2FxkS8TtG27oMtYpw9SQwOvgUq+HFZlx0VgRdCf5C lRUMjr0fetdBQzsCcMvtgrOtHnI2TUO7tS9ZO7B44IOMS6VbdlnAfo0P7bxK2te3 cB1j8Bh0QQ== -----END CERTIFICATE-----Generated at Tue Jul 14 23:41:55 2026 by rpki-client