$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft File: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json) Hash identifier: 8S/Br9F3a1PYu45ytlEUg0ucLn0yEuOldNrBbA4CYAE= Subject key identifier: 0A:C5:2A:68:C2:39:5C:31:3D:91:87:CE:7E:91:DD:B1:64:61:42:2C Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 6FD1DFB2EE1ECFF310FADD712EA4670D1C428B36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft Manifest number: 69 Signing time: Fri 29 May 2026 20:33:18 +0000 Manifest this update: Fri 29 May 2026 20:28:18 +0000 Manifest next update: Sat 30 May 2026 21:01:18 +0000 Files and hashes: 1: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=) 2: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=) 3: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=) 4: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=) 5: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=) 6: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=) 7: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=) 8: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=) 9: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=) 10: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=) 11: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: jDLxD5FrP0KI8r/G9NXeClLcanDt/Xxx5OB+n7oksCc=) 12: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=) 13: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=) 14: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=) 15: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=) 16: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=) 17: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=) 18: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=) 19: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=) 20: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=) 21: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=) 22: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=) 23: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=) 24: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=) 25: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=) 26: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=) 27: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d1:df:b2:ee:1e:cf:f3:10:fa:dd:71:2e:a4:67:0d:1c:42:8b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: May 29 20:28:18 2026 GMT Not After : May 30 21:01:18 2026 GMT Subject: CN=0AC52A68C2395C313D9187CE7E91DDB16461422C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:0f:58:62:0c:34:e5:b0:fb:32:e5:d9:5d: 88:5e:11:d0:dc:64:7e:24:50:dc:34:59:32:57:70: 5a:e0:fc:29:23:42:75:51:b0:bf:93:6f:97:0d:1e: 6e:46:d6:be:da:2b:30:80:75:a0:26:71:d7:e3:cf: e2:69:83:ab:6d:cc:2f:a8:9c:ec:cd:30:b1:66:d0: b6:94:5c:67:47:05:32:42:96:6a:33:d1:c3:ca:6f: c4:31:59:bb:26:85:c4:98:07:23:b7:a9:c6:49:d4: a2:7c:63:bc:f0:a8:5e:08:d1:87:e5:ec:1d:85:a3: 3f:0d:39:08:83:de:f5:88:77:d8:e5:2b:06:34:17: 0e:49:30:69:a8:21:fc:15:91:fa:19:03:76:f3:52: b5:1c:f2:70:bd:90:a3:59:98:e9:75:d1:fb:c6:ea: 0b:eb:24:d6:f5:38:dc:5f:a4:dd:97:c8:2f:b1:c4: 5b:3d:0d:ff:38:d9:90:b4:f0:ce:63:8e:f7:00:a9: 89:1e:10:a9:26:7f:bf:a8:21:e4:63:b9:2b:8f:f3: 48:8d:68:1c:b5:66:f4:85:b9:41:fa:93:b2:01:25: f5:4c:5c:04:a7:0b:ba:ae:f6:4b:c7:f2:38:83:a7: c1:29:dc:34:a1:94:13:71:4f:6d:d0:d2:40:55:d9: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:2A:68:C2:39:5C:31:3D:91:87:CE:7E:91:DD:B1:64:61:42:2C X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ca:40:38:c6:aa:f5:14:25:da:11:77:04:3d:31:63:77:ad: c5:d7:f9:36:5f:29:cb:b1:73:8d:b0:87:da:67:b5:46:8f:e6: ba:7a:75:ab:db:2d:f9:b8:4c:ad:d9:40:7a:0b:70:76:a0:80: 70:24:5a:de:9a:fa:0a:15:34:e9:54:c0:61:5f:83:c3:c0:fe: 88:ed:56:64:13:d2:a0:54:dd:97:36:c9:ab:ab:36:0c:d2:8c: 33:6b:c8:58:99:d4:72:70:79:b3:f5:fb:74:c1:ea:b2:1d:eb: 37:e2:36:ca:e2:a6:5e:fc:25:08:9e:8b:21:0d:48:da:12:69: 86:67:ee:6e:87:4b:83:cb:ff:47:30:9c:80:41:1d:c2:18:2b: c1:1c:df:78:49:d8:6f:d2:73:53:ee:5b:71:f4:59:2d:49:b0: 33:3c:cb:19:8c:f2:f0:e3:54:1f:a4:d7:87:dc:61:2c:3a:97: cb:68:4b:0b:37:0d:db:72:96:af:57:6d:39:88:e0:3d:fe:85: 13:0d:19:e1:91:3b:00:82:c6:bb:73:19:14:38:87:10:f1:1d: 6e:6a:fc:e9:d6:6a:49:80:81:fd:0b:9c:da:ab:62:33:df:51: 1f:73:fc:6b:2c:64:10:87:88:9b:ae:de:12:a4:0d:69:fc:de: 7e:4d:ea:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb9Hfsu4ez/MQ+t1xLqRnDRxCizYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA1MjkyMDI4MThaFw0yNjA1MzAyMTAxMThaMDMxMTAvBgNV BAMTKDBBQzUyQTY4QzIzOTVDMzEzRDkxODdDRTdFOTFEREIxNjQ2MTQyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IA9YYgw05bD7MuXZXYheEdDc ZH4kUNw0WTJXcFrg/CkjQnVRsL+Tb5cNHm5G1r7aKzCAdaAmcdfjz+Jpg6ttzC+o nOzNMLFm0LaUXGdHBTJClmoz0cPKb8QxWbsmhcSYByO3qcZJ1KJ8Y7zwqF4I0Yfl 7B2Foz8NOQiD3vWId9jlKwY0Fw5JMGmoIfwVkfoZA3bzUrUc8nC9kKNZmOl10fvG 6gvrJNb1ONxfpN2XyC+xxFs9Df842ZC08M5jjvcAqYkeEKkmf7+oIeRjuSuP80iN aBy1ZvSFuUH6k7IBJfVMXASnC7qu9kvH8jiDp8Ep3DShlBNxT23Q0kBV2YenAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCsUqaMI5XDE9kYfOfpHdsWRhQiwwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC9CQTQ2NjFGRkFGN0JB QTdBOTQ4Q0RBODdGNjYxQzVCQkY3NTRCRjNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8pAOMaq9RQl 2hF3BD0xY3etxdf5Nl8py7FzjbCH2me1Ro/munp1q9st+bhMrdlAegtwdqCAcCRa 3pr6ChU06VTAYV+Dw8D+iO1WZBPSoFTdlzbJq6s2DNKMM2vIWJnUcnB5s/X7dMHq sh3rN+I2yuKmXvwlCJ6LIQ1I2hJphmfubodLg8v/RzCcgEEdwhgrwRzfeEnYb9Jz U+5bcfRZLUmwMzzLGYzy8ONUH6TXh9xhLDqXy2hLCzcN23KWr1dtOYjgPf6FEw0Z 4ZE7AILGu3MZFDiHEPEdbmr86dZqSYCB/Quc2qtiM99RH3P8ayxkEIeIm67eEqQN afzefk3q4w== -----END CERTIFICATE-----Generated at Fri May 29 22:05:24 2026 by rpki-client