$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: pAUH4O6VY0KhtUuVL8CZTPXdZNnJ6l7vpyzwjQLfnmg= Subject key identifier: 61:74:80:A2:1B:6D:0D:1C:F7:6C:FC:DC:12:F3:D8:CC:DD:E5:C1:52 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 33C5C43F225D90D8D34B4876CE19CA5F741C79F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: 3A Signing time: Sun 01 Mar 2026 23:03:16 +0000 Manifest this update: Sun 01 Mar 2026 22:58:16 +0000 Manifest next update: Tue 03 Mar 2026 02:21:16 +0000 Files and hashes: 1: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 2: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: lgmGj07F7umxWXoYc0pF3WocXHATj7yc882to3FgeEI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:c4:3f:22:5d:90:d8:d3:4b:48:76:ce:19:ca:5f:74:1c:79:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Mar 1 22:58:16 2026 GMT Not After : Mar 3 02:21:16 2026 GMT Subject: CN=617480A21B6D0D1CF76CFCDC12F3D8CCDDE5C152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:14:76:8d:47:83:87:5e:13:86:db:1c:6b: 1a:7b:b1:1b:57:b8:a0:1c:f4:6c:99:43:3b:f5:84: 69:0f:8e:3e:01:9b:09:32:8f:e3:cd:e4:cc:0e:7f: dc:50:08:d8:fa:76:a0:b8:b3:ed:fb:76:0a:80:7d: 84:6d:48:f8:06:76:9f:56:d4:26:60:84:35:68:fe: 6a:c3:bf:00:42:1c:80:e3:01:02:e7:fa:85:ef:8b: 77:08:3e:b6:b0:aa:c2:ee:fa:42:b8:fd:19:54:f1: dd:2e:ee:4f:01:31:c8:26:43:65:ca:2e:e9:43:93: d0:aa:35:25:8b:9d:d8:1e:3a:46:01:ef:25:55:0f: 5b:e2:70:00:09:02:68:88:73:ba:14:92:c6:52:39: 71:15:a3:09:6b:00:f9:48:37:f3:68:63:61:7b:91: cb:c4:ba:aa:18:0d:e0:b4:a5:ac:c0:3a:e5:86:20: 41:bd:b3:cc:ae:de:83:38:f4:63:cd:c0:97:06:3c: 79:83:3d:d6:e3:1a:9d:ca:f8:9b:bf:30:d2:a4:bc: 39:6b:29:fa:ec:92:4a:c0:d7:53:d6:cb:26:c5:d4: 8a:f8:f5:43:fc:c8:64:ed:60:73:3f:6f:06:ff:70: 02:49:c3:6f:64:01:b3:bb:3e:33:36:6b:f7:5f:5a: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:80:A2:1B:6D:0D:1C:F7:6C:FC:DC:12:F3:D8:CC:DD:E5:C1:52 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e9:b3:16:db:12:00:e3:dd:fd:68:f0:1f:a7:65:fa:a3:95: ef:79:a8:58:8f:99:2c:c0:58:64:f8:f6:06:9e:7d:87:f8:1c: 57:6a:64:82:51:df:ab:3c:ca:e1:b4:26:f3:0b:e4:13:02:96: 1a:4f:16:d7:55:2c:90:81:17:47:1b:aa:d2:aa:63:1c:46:ca: 6d:26:5b:32:13:58:ee:3b:aa:d6:35:58:c9:ab:39:ac:d8:d1: 72:9e:dd:67:75:97:b5:58:0e:b8:8c:d5:b7:00:29:7e:e7:d6: 2a:29:a3:de:78:05:6c:ce:45:2b:d5:50:6d:8e:de:8a:f1:f4: d3:6b:5d:b6:2d:17:a9:a8:c9:04:4b:5f:f9:c9:a9:e4:26:1a: 86:6d:b9:0f:4d:33:f9:a0:7d:17:93:a3:12:e2:af:54:31:07: b9:cd:28:2a:b7:f7:50:30:10:c5:bd:e1:da:2c:7a:bb:34:b1: 8d:88:30:fd:46:c8:1f:c2:fb:87:1e:ec:9c:07:bd:13:83:3a: 03:bf:36:ea:5d:3a:02:17:81:01:2d:f4:34:64:e0:4a:17:7c: 98:24:49:ff:6c:f7:14:f4:e0:c0:f2:fd:e9:03:05:81:72:0b: 5b:41:c3:26:a6:5f:23:57:ac:da:a4:29:e7:2f:7c:c0:da:1b: 1f:b3:53:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM8XEPyJdkNjTS0h2zhnKX3QcefcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjAzMDEyMjU4MTZaFw0yNjAzMDMwMjIxMTZaMDMxMTAvBgNV BAMTKDYxNzQ4MEEyMUI2RDBEMUNGNzZDRkNEQzEyRjNEOENDRERFNUMxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVBR2jUeDh14Thtscaxp7sRtX uKAc9GyZQzv1hGkPjj4Bmwkyj+PN5MwOf9xQCNj6dqC4s+37dgqAfYRtSPgGdp9W 1CZghDVo/mrDvwBCHIDjAQLn+oXvi3cIPrawqsLu+kK4/RlU8d0u7k8BMcgmQ2XK LulDk9CqNSWLndgeOkYB7yVVD1vicAAJAmiIc7oUksZSOXEVowlrAPlIN/NoY2F7 kcvEuqoYDeC0pazAOuWGIEG9s8yu3oM49GPNwJcGPHmDPdbjGp3K+Ju/MNKkvDlr KfrskkrA11PWyybF1Ir49UP8yGTtYHM/bwb/cAJJw29kAbO7PjM2a/dfWn2TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYXSAohttDRz3bPzcEvPYzN3lwVIwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+mzFtsSAOPd /WjwH6dl+qOV73moWI+ZLMBYZPj2Bp59h/gcV2pkglHfqzzK4bQm8wvkEwKWGk8W 11UskIEXRxuq0qpjHEbKbSZbMhNY7juq1jVYyas5rNjRcp7dZ3WXtVgOuIzVtwAp fufWKimj3ngFbM5FK9VQbY7eivH002tdti0XqajJBEtf+cmp5CYahm25D00z+aB9 F5OjEuKvVDEHuc0oKrf3UDAQxb3h2ix6uzSxjYgw/UbIH8L7hx7snAe9E4M6A782 6l06AheBAS30NGTgShd8mCRJ/2z3FPTgwPL96QMFgXILW0HDJqZfI1es2qQp5y98 wNobH7NTHw== -----END CERTIFICATE-----Generated at Mon Mar 2 13:09:19 2026 by rpki-client