$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: TyHeANuxvEUvOIpdw07C9K/85F1VS8NIimVnIJrGFIU= Subject key identifier: 0B:7D:A1:09:DF:53:B2:73:AF:1B:EE:F9:54:1C:64:FE:DA:BA:2A:1B Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 220352608EA6BD1D1E00E990B2FEFD0BECBC5313 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: 0144 Signing time: Mon 12 Oct 2026 20:27:20 +0000 Manifest this update: Mon 12 Oct 2026 20:22:20 +0000 Manifest next update: Thu 15 Oct 2026 21:58:20 +0000 Files and hashes: 1: 35322e38322e3136372e302f32342d3234203d3e203130323036.roa (hash: jA9haOI6kySgq1DVWJkc8EX9yQohEQjgpgBjtl6oC6E=) 2: 35322e38322e3138352e302f32342d3234203d3e20313334373631.roa (hash: h52K71cVkEvRfWG0J7cr0+YJ6In+cIrKNIjl5TAeqsg=) 3: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=) 4: 35322e38322e3138392e302f32342d3234203d3e20313335363239.roa (hash: JsX3EOo0/wKfe3BbMf+G+hEwv1a6nU/8xbsC/TgScPw=) 5: 35322e38322e3138392e302f32342d3234203d3e203130323036.roa (hash: 5cQTljFEJOEZXop9i6p3X/9Q/LdGsjfoX0+8S9a/ZJs=) 6: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=) 7: 35322e38322e3136352e302f32342d3234203d3e203130323036.roa (hash: 3aoO0RZzfnR2taghnPVb4h/zdjWMigrOBnd5ZB4vK/k=) 8: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 9: 35322e38322e3138342e302f32332d3233203d3e20313335363239.roa (hash: 4XMcMSUWf++F2SfVM2t+C1JFFOpfP2Q4r3PebfoZMVU=) 10: 35322e38322e3136352e302f32342d3234203d3e20313334373631.roa (hash: JpKP7fhA5N6PL9wmKvp1c1i6Lj4QBeyJPw7U8b3TYek=) 11: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=) 12: 35322e38322e3138342e302f32342d3234203d3e2039383038.roa (hash: T7cd5meUiuSVYvQcqWIcBAZAPt/5r5lAflYlNp19Gag=) 13: 35322e38322e3136372e302f32342d3234203d3e20313334373631.roa (hash: aol0nlUDEoDfenI+Oz5+UlmKGs9CBBAf2LXGXI+54QA=) 14: 35322e38322e3136362e302f32342d3234203d3e2039383038.roa (hash: dPwjZgcOSKpC8T1f78TL2R9yZQSyJxDo9Ubuw5BHRfA=) 15: 35322e38322e3139302e302f32342d3234203d3e2039383038.roa (hash: /98+qYxSVo1xRAidY06nXanJqrFidHWqLtz5hXByN0M=) 16: 35322e38322e3138342e302f32332d3233203d3e20313334373631.roa (hash: cO3ZZEtontYy2pbxwRteKX/EQNP0Mbqjo0mSUyGl2qs=) 17: 35322e38322e3138352e302f32342d3234203d3e2039383038.roa (hash: tlBLC6tmjFNQArkJ0zICI3IoHB7Xbm+DLzwO8iB3D3E=) 18: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=) 19: 35322e38322e3136342e302f32342d3234203d3e203130323036.roa (hash: YOh2Z6xnovaWzm5jYodPmPfdKKIbcwM2c3Kav7uiN5k=) 20: 35322e38322e3136342e302f32342d3234203d3e20313335363239.roa (hash: tiUBpKmKhjB2J17TRFTpNc9V1anyatNVinBLT8+TkBQ=) 21: 35322e38322e3138392e302f32342d3234203d3e2039383038.roa (hash: xTSaXwi3c7yUY4b6kYGDPBGowzJLypNnk5vK0eGEKbg=) 22: 35322e38322e3138352e302f32342d3234203d3e20313335363239.roa (hash: ev79JT+YUnQHbDdHQypWb1s3EHRCFOEGAC+QSwVTQvk=) 23: 35322e38322e3136352e302f32342d3234203d3e2039383038.roa (hash: GzmTVoQDOWQjN49zT40osGZeO/BFsLS2fi2CdKe0nTQ=) 24: 35322e38322e3138382e302f32342d3234203d3e20313335363239.roa (hash: 3Cn4mk6/R1gGWL22EKxaKN35fajH56VoyWPl6bYh7MY=) 25: 35322e38322e3136342e302f32322d3232203d3e2039383038.roa (hash: TWFNhZT3LWxNlSqHTrTbyYPuNo6GJhgc1PS3aWDZ2BQ=) 26: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=) 27: 35322e38322e3139302e302f32342d3234203d3e20313334373631.roa (hash: khLsSFX7uC3YMXx+jARjDXxajW/9Q277wQL4nFOUdGU=) 28: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=) 29: 35322e38322e3138342e302f32332d3233203d3e203130323036.roa (hash: XTaotjbe61CaiYtgWkNb6+PpHbllutr0kxHDEMlxQKI=) 30: 35322e38322e3136372e302f32342d3234203d3e20313335363239.roa (hash: +EuN4mGokXA6hnSae3S26WMLFU5vVGOcvOwIhq3Tgdk=) 31: 35322e38322e3136342e302f32342d3234203d3e2039383038.roa (hash: rVb7UvTWUA8LjCfu3JiathO2qrwwp9Cs2eeptDyeRbk=) 32: 35322e38322e3138342e302f32342d3234203d3e203130323036.roa (hash: uRYwNrM+4jFy0/i9YBZfz7Qy/vHaRvkYdt/+VJBTiJs=) 33: 35322e38322e3136362e302f32342d3234203d3e20313335363239.roa (hash: JHkyfcGcAQcpKTuTWHacKKCPUdbLXyszNRTpqSmDkQw=) 34: 35322e38322e3138382e302f32342d3234203d3e203130323036.roa (hash: CKUMpPbMrXARinF/1+nBQgHO39eF7RWneoHgIPmsHKo=) 35: 35322e38322e3138342e302f32342d3234203d3e20313335363239.roa (hash: Wx2fJiVUg7aRrLVflCytJxjBf5nA0uOaSAfJSPCLMMA=) 36: 35322e38322e3139302e302f32342d3234203d3e203130323036.roa (hash: nC7+rpANmmCg+6SEMXaYL8w1nRc7xWWCU7ZoAgvGF9A=) 37: 35322e38322e3136342e302f32322d3232203d3e203130323036.roa (hash: D4LCG8ByREcRHsJF4sEDqKsRazNqbGyglbHTw08Crhc=) 38: 35322e38322e3136342e302f32322d3232203d3e20313334373631.roa (hash: Iz4mAueZbXkv/Tp1/tPoiT1eVK52Ne6Ltxif23cYvwM=) 39: 35322e38322e3139302e302f32342d3234203d3e20313335363239.roa (hash: ILMjTAKEvwYebJma8f4DXxIuzqbOI1CxBD205TbY+Ns=) 40: 35322e38322e3138342e302f32332d3233203d3e2039383038.roa (hash: AFbF9xdRG/v8Le4U5bG1FLyRwVuzo8Tuh8Az92VCZuE=) 41: 35322e38322e3138382e302f32342d3234203d3e20313334373631.roa (hash: hLjYhD8ytXZC3hISfJLL6yirIzQNks2aGjclI1LTDp8=) 42: 35322e38322e3136352e302f32342d3234203d3e20313335363239.roa (hash: M8RoQpinR5RY0oBw86ul69C/hksdHEuEQSgYtyZnvHM=) 43: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: UnqvAA619nZxJNhe+iGahxI9uB/oorfrM0YuPdlBO64=) 44: 35322e38322e3136362e302f32342d3234203d3e203130323036.roa (hash: OHpwSF8VWaiCkad4RyF+LadVUpvbILas+BlaqFDJHhY=) 45: 35322e38322e3138352e302f32342d3234203d3e203130323036.roa (hash: 6sdu1PGAwg9QhNwazfcqQ4Diwz8hWjJjnDi7vj3Xk3Y=) 46: 35322e38322e3136362e302f32342d3234203d3e20313334373631.roa (hash: GSJ/v+baT7z1YIyvfm6OkEcCmbEHr/xBMzk54Un3IAc=) 47: 35322e38322e3136342e302f32322d3232203d3e20313335363239.roa (hash: BjJ+E5dUBktFVJFOyPtZ4SqnEe2yJoahPoVjHtOg/ec=) 48: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=) 49: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=) 50: 35322e38322e3136342e302f32342d3234203d3e20313334373631.roa (hash: Q26gi0L+79VGO+FHMNbd4kLd+IzBpcoQh9hV4PQTSE0=) 51: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=) 52: 35322e38322e3136372e302f32342d3234203d3e2039383038.roa (hash: APJECX6VmJhTSOuoJl7f9JOpKelHjMmiVKv5OXqjefY=) 53: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=) 54: 35322e38322e3138392e302f32342d3234203d3e20313334373631.roa (hash: vZcB9u11DVU6wzCqRxKV1K2qimyNVamJ2YdEp4xL91I=) 55: 35322e38322e3138342e302f32342d3234203d3e20313334373631.roa (hash: 3vEF2mFZujrI0a9LHkHOm9t6wP5U+IFjnNMRZ7k9dMs=) 56: 35322e38322e3138382e302f32342d3234203d3e2039383038.roa (hash: 0yo4KcOJqsmCHT4CNpW2d7KgIBhDLngivVGmTNuL+Bo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:03:52:60:8e:a6:bd:1d:1e:00:e9:90:b2:fe:fd:0b:ec:bc:53:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Oct 12 20:22:20 2026 GMT Not After : Oct 15 21:58:20 2026 GMT Subject: CN=0B7DA109DF53B273AF1BEEF9541C64FEDABA2A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:eb:75:37:f5:7a:34:fc:10:35:fb:42:66: ac:66:8b:39:2c:8c:19:07:6a:60:d9:84:85:82:f4: 20:9d:18:dc:fc:ff:38:a2:c8:e2:b7:1f:47:93:65: e9:97:b9:2b:3c:62:71:7e:66:ba:02:72:84:2a:a6: 40:76:fd:17:35:a2:ab:a0:ff:19:55:ee:d3:f5:af: ea:86:1a:6f:c7:4e:14:fc:68:f4:a4:e4:87:f1:ca: b8:bd:26:9e:c4:bd:10:54:92:0d:bd:4e:8d:49:d8: 19:55:07:89:26:82:66:40:dc:54:eb:c8:66:58:11: 05:ab:ea:99:29:2f:bb:c0:fe:6c:3b:a8:5a:b5:ed: 98:d1:6b:1b:02:ff:20:e9:e1:dc:64:a4:20:03:9e: 82:35:f3:83:2c:b9:e7:e7:95:7e:07:40:83:b6:28: e2:5d:d5:0b:5b:3b:c8:b9:76:3e:a0:2f:df:a0:19: 3c:49:d5:6b:fc:cd:f6:36:a3:d4:b1:62:5d:16:da: 0f:e6:26:1e:31:25:c3:e8:c3:2c:a3:af:8b:93:b1: f0:77:5a:fc:30:66:56:01:f1:43:db:75:e3:08:6f: eb:1e:31:a0:5e:41:93:9c:47:a2:d0:03:27:0f:6b: 1d:27:e4:df:c1:3c:76:d6:88:da:08:9f:14:a3:bc: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7D:A1:09:DF:53:B2:73:AF:1B:EE:F9:54:1C:64:FE:DA:BA:2A:1B X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d1:c9:1e:5b:3c:ab:0b:55:1b:5d:53:e7:71:a4:44:e8:c3: a3:44:b6:91:f5:60:06:02:ff:c9:d9:82:47:71:24:44:23:98: bf:ee:d3:d0:fb:23:c6:4b:15:57:0a:41:a7:71:76:41:fe:d1: 89:d4:b9:f1:67:6b:73:0b:4f:47:75:73:85:f3:a4:62:a2:d4: 37:08:9d:0e:76:cb:9d:de:cd:ac:e1:8a:2b:af:00:06:5b:46: 54:52:da:03:b6:2c:70:83:97:cf:cf:44:3f:ea:b1:8e:e8:98: dd:0e:da:19:aa:da:15:ff:3a:22:7a:c0:de:32:b5:0e:6f:ac: 28:d9:08:d2:70:2f:67:19:d8:52:02:fa:ca:97:70:8d:57:94: 68:76:65:67:64:8b:79:b2:dc:c1:c4:fd:9f:81:d5:21:78:5d: 60:40:19:3f:37:c7:13:d9:68:71:da:85:26:81:58:13:20:2c: 28:b8:39:eb:6c:e0:43:6e:0a:18:40:63:d6:db:30:a4:98:37: 98:0e:0d:99:2f:69:a8:36:3e:69:e1:9a:3f:fe:b5:84:30:ed: e9:48:6e:86:0b:f0:97:36:64:ba:c3:0a:80:2c:09:b3:96:52: d8:bf:7b:ac:57:72:37:d5:cb:d7:9f:bb:a6:be:9c:41:5f:ba: d4:0b:f1:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIgNSYI6mvR0eAOmQsv79C+y8UxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjEwMTIyMDIyMjBaFw0yNjEwMTUyMTU4MjBaMDMxMTAvBgNV BAMTKDBCN0RBMTA5REY1M0IyNzNBRjFCRUVGOTU0MUM2NEZFREFCQTJBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQut1N/V6NPwQNftCZqxmizks jBkHamDZhIWC9CCdGNz8/ziiyOK3H0eTZemXuSs8YnF+ZroCcoQqpkB2/Rc1oqug /xlV7tP1r+qGGm/HThT8aPSk5Ifxyri9Jp7EvRBUkg29To1J2BlVB4kmgmZA3FTr yGZYEQWr6pkpL7vA/mw7qFq17ZjRaxsC/yDp4dxkpCADnoI184MsuefnlX4HQIO2 KOJd1QtbO8i5dj6gL9+gGTxJ1Wv8zfY2o9SxYl0W2g/mJh4xJcPowyyjr4uTsfB3 WvwwZlYB8UPbdeMIb+seMaBeQZOcR6LQAycPax0n5N/BPHbWiNoInxSjvP+5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC32hCd9TsnOvG+75VBxk/tq6KhswHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdHJHls8qwtV G11T53GkROjDo0S2kfVgBgL/ydmCR3EkRCOYv+7T0PsjxksVVwpBp3F2Qf7RidS5 8WdrcwtPR3VzhfOkYqLUNwidDnbLnd7NrOGKK68ABltGVFLaA7YscIOXz89EP+qx juiY3Q7aGaraFf86InrA3jK1Dm+sKNkI0nAvZxnYUgL6ypdwjVeUaHZlZ2SLebLc wcT9n4HVIXhdYEAZPzfHE9locdqFJoFYEyAsKLg562zgQ24KGEBj1tswpJg3mA4N mS9pqDY+aeGaP/61hDDt6UhuhgvwlzZkusMKgCwJs5ZS2L97rFdyN9XL15+7pr6c QV+61AvxIw== -----END CERTIFICATE-----Generated at Wed Oct 14 10:03:33 2026 by rpki-client