$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: vX10r3omvpc4FNcmmztZEIYDEQxglNqB7AlNCIt3mSg= Subject key identifier: 2F:1F:BE:AD:21:DD:9E:43:F2:53:DB:A6:9B:CE:CF:CD:74:47:DF:72 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 1E9C69034971EA24B89DDEDFB56C92D5BF0F38C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: 49 Signing time: Thu 12 Mar 2026 04:58:39 +0000 Manifest this update: Thu 12 Mar 2026 04:53:39 +0000 Manifest next update: Fri 13 Mar 2026 07:57:39 +0000 Files and hashes: 1: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 2: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=) 3: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=) 4: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: R2ffwxQupV+vjLvWtZ4H9lJ9RBcvvMzcmlGrUiUtuhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 07:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9c:69:03:49:71:ea:24:b8:9d:de:df:b5:6c:92:d5:bf:0f:38:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Mar 12 04:53:39 2026 GMT Not After : Mar 13 07:57:39 2026 GMT Subject: CN=2F1FBEAD21DD9E43F253DBA69BCECFCD7447DF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:3f:b9:df:49:c4:10:7a:74:55:be:3d:cc: 63:89:99:51:58:2b:5e:95:e8:3f:04:16:57:f6:b6: d2:ab:92:2e:eb:75:de:f7:04:a0:ae:82:ab:a3:a4: e2:f8:42:d6:3e:0f:f9:e2:d8:fa:e5:d2:0c:bd:c0: 08:df:02:12:45:10:4d:13:a4:a2:7b:86:f1:dc:1c: 00:31:28:d3:d5:98:c1:54:71:9a:31:33:7b:a8:e9: f8:61:c0:32:61:f5:23:00:24:57:40:84:76:8e:ae: 4f:39:c4:3f:73:5b:1a:88:0a:6a:51:3f:4f:e3:01: a1:cc:66:73:f6:d2:1c:8c:0f:75:1e:ee:b4:cf:a8: 74:13:54:0d:ce:88:0c:52:51:d1:87:1e:c5:b4:a8: 79:26:c5:e0:cb:e6:a2:df:d0:09:75:37:24:86:52: 57:84:51:2e:7d:12:aa:d3:31:06:7b:de:3b:d5:74: aa:f9:1c:95:0d:31:fc:a7:f1:96:74:15:57:c3:4b: 90:84:8a:b2:67:fe:29:16:aa:43:81:22:13:f8:e1: 53:78:14:88:d7:dc:6f:d8:f3:9b:fc:f3:23:93:dc: e8:d5:0e:2b:5d:11:e3:d9:af:4f:86:d1:b3:ea:84: 6a:f8:6e:65:dd:fe:4a:5f:62:e5:57:93:ef:e4:c4: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1F:BE:AD:21:DD:9E:43:F2:53:DB:A6:9B:CE:CF:CD:74:47:DF:72 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2a:95:db:d0:19:0b:ea:30:8c:18:d6:22:ad:a5:86:2c:dd: f6:02:06:62:da:38:dd:8f:fe:81:6d:16:1d:48:d0:6e:c3:23: aa:86:9c:98:9d:4c:39:18:4b:e8:e7:d0:3f:29:8f:bd:89:f1: 91:8c:23:81:d4:51:ee:34:cb:f1:1f:21:ae:c3:d1:a8:27:47: 9d:cc:23:cd:ee:ca:89:cb:30:0a:f3:64:d5:71:41:3c:6b:1f: 74:6a:39:19:64:ce:d9:1c:c3:be:1e:da:63:b8:a2:d2:1b:58: 62:c8:ed:5b:fd:11:89:ef:bb:64:e2:ec:7b:70:e7:88:9e:f6: 07:1e:f1:c4:26:71:53:d6:ae:ae:d4:42:53:ce:53:fd:6f:18: 50:05:6f:f5:35:83:61:22:f8:9e:f0:38:b2:fe:6b:53:44:0f: aa:42:7d:ac:2b:a2:57:a7:b8:78:ae:20:c2:6c:68:df:31:e6: f6:30:ac:3a:e6:dc:8a:fc:4a:3d:38:f1:1e:9d:d8:5c:e3:48: 8e:ab:cb:7f:05:d3:6f:33:93:1a:b8:36:7a:d5:74:e7:45:8c: 81:8b:2a:41:e1:9f:e8:46:01:c8:93:2e:9f:0c:4f:c7:08:32: 95:4d:24:e5:c1:5d:75:a5:cd:0b:5f:e5:3f:5a:20:74:49:00: aa:cb:f6:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHpxpA0lx6iS4nd7ftWyS1b8POMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjAzMTIwNDUzMzlaFw0yNjAzMTMwNzU3MzlaMDMxMTAvBgNV BAMTKDJGMUZCRUFEMjFERDlFNDNGMjUzREJBNjlCQ0VDRkNENzQ0N0RGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ij+530nEEHp0Vb49zGOJmVFY K16V6D8EFlf2ttKrki7rdd73BKCugqujpOL4QtY+D/ni2Prl0gy9wAjfAhJFEE0T pKJ7hvHcHAAxKNPVmMFUcZoxM3uo6fhhwDJh9SMAJFdAhHaOrk85xD9zWxqICmpR P0/jAaHMZnP20hyMD3Ue7rTPqHQTVA3OiAxSUdGHHsW0qHkmxeDL5qLf0Al1NySG UleEUS59EqrTMQZ73jvVdKr5HJUNMfyn8ZZ0FVfDS5CEirJn/ikWqkOBIhP44VN4 FIjX3G/Y85v88yOT3OjVDitdEePZr0+G0bPqhGr4bmXd/kpfYuVXk+/kxDbpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULx++rSHdnkPyU9umm87PzXRH33IwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniqV29AZC+ow jBjWIq2lhizd9gIGYto43Y/+gW0WHUjQbsMjqoacmJ1MORhL6OfQPymPvYnxkYwj gdRR7jTL8R8hrsPRqCdHncwjze7KicswCvNk1XFBPGsfdGo5GWTO2RzDvh7aY7ii 0htYYsjtW/0Rie+7ZOLse3DniJ72Bx7xxCZxU9aurtRCU85T/W8YUAVv9TWDYSL4 nvA4sv5rU0QPqkJ9rCuiV6e4eK4gwmxo3zHm9jCsOubcivxKPTjxHp3YXONIjqvL fwXTbzOTGrg2etV050WMgYsqQeGf6EYByJMunwxPxwgylU0k5cFddaXNC1/lP1og dEkAqsv2zw== -----END CERTIFICATE-----Generated at Thu Mar 12 18:21:08 2026 by rpki-client