$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json) Hash identifier: yAYU1tLL94yF16Oua7V9Lq4otE87vEIABBb7Y6tD2ts= Subject key identifier: 1D:FD:B5:84:8C:28:FF:50:66:1C:BC:1B:EC:F3:2E:5A:82:13:C1:03 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 343FEFD700AEE78B0653FB772790333E373E50F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft Manifest number: 7B Signing time: Fri 17 Apr 2026 01:49:38 +0000 Manifest this update: Fri 17 Apr 2026 01:44:38 +0000 Manifest next update: Sat 18 Apr 2026 05:16:38 +0000 Files and hashes: 1: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=) 2: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=) 3: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=) 4: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=) 5: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=) 6: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=) 7: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=) 8: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=) 9: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=) 10: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: 7YpfBLFzaCDW1mzenh3CWbkcLAlbEvpYm6MiuGwzcmA=) 11: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=) 12: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3f:ef:d7:00:ae:e7:8b:06:53:fb:77:27:90:33:3e:37:3e:50:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Apr 17 01:44:38 2026 GMT Not After : Apr 18 05:16:38 2026 GMT Subject: CN=1DFDB5848C28FF50661CBC1BECF32E5A8213C103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:ef:25:8e:46:ce:5d:7e:34:8b:0b:05:f3: be:fa:97:4c:65:b1:a2:e4:2c:f8:7a:35:a6:93:8c: 03:70:25:ca:15:ea:c6:03:9e:d9:fd:07:41:1b:31: eb:9c:a8:fa:13:af:46:72:7c:ba:d3:d8:f1:72:14: 58:c1:83:18:a2:e5:90:69:61:8f:15:25:06:55:d0: e3:35:6f:87:bd:6b:0f:a8:93:18:29:ec:de:ae:be: f8:8f:f8:c5:58:b3:1a:26:10:2e:7f:3e:37:00:b0: df:24:78:96:b9:2a:20:d5:c2:c4:a4:b0:38:f4:2a: ad:20:26:02:4a:1a:f7:cc:17:1a:a7:d2:d9:2f:a5: d2:87:9a:c6:d1:c9:eb:a0:f4:ba:d3:47:71:01:5c: 31:37:8e:36:e7:97:f8:07:84:b4:3b:20:72:40:22: f8:01:6d:e6:0f:0a:12:87:21:92:3c:fd:77:5a:cf: 8a:34:93:a8:83:ef:4b:c8:90:56:24:68:59:07:62: 93:89:5a:f7:bb:d6:8b:a7:b4:da:4e:ae:27:21:f2: bf:0d:14:51:b6:d7:b4:db:9e:b7:38:23:35:9b:34: aa:c0:d9:7b:33:50:e4:d8:47:36:61:48:cf:0a:f6: 61:76:90:a0:4c:23:33:a2:02:90:0f:06:dc:22:a8: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FD:B5:84:8C:28:FF:50:66:1C:BC:1B:EC:F3:2E:5A:82:13:C1:03 X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b8:72:34:4d:2a:f6:6c:d3:a8:83:ec:1c:b6:22:99:e5:04: 47:16:53:96:ff:72:a1:86:93:c5:b5:ff:03:1a:fb:31:44:57: 8c:a0:b2:18:b0:a0:03:ac:09:98:a5:dc:a0:94:a8:bb:02:94: 95:2b:b9:36:f2:9b:0b:48:69:db:74:c2:a7:58:e7:ed:68:70: 49:d9:ed:83:33:3e:19:14:72:b1:5d:5a:d2:d1:62:47:75:98: b2:37:ee:a7:3c:dc:ae:bc:33:14:0e:b0:7b:59:57:a6:20:d7: 41:37:ec:b4:13:36:1d:46:d1:d6:3c:3c:18:63:58:3f:94:f4: a6:bf:ac:66:d5:95:3e:92:a2:28:d1:3a:23:54:b9:d6:51:32: ac:f1:76:77:58:bf:d7:39:ae:5d:f0:6c:6d:00:21:85:8c:a7: 03:09:dc:01:32:d5:97:e8:96:f4:7e:9b:9b:35:71:b4:f5:74: 08:bc:d4:68:da:11:4c:56:b7:29:ec:da:3e:76:38:e2:f5:34: 2f:a7:ea:21:22:ee:8a:67:0f:36:10:86:98:e0:36:b5:4c:df: 78:0e:40:54:0b:3d:f8:13:cb:60:69:5b:3b:69:e8:48:37:79: 0a:33:a1:4f:f3:19:19:45:fc:2f:83:9f:ab:8a:1f:ee:fd:36: 64:05:55:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUND/v1wCu54sGU/t3J5AzPjc+UPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA0MTcwMTQ0MzhaFw0yNjA0MTgwNTE2MzhaMDMxMTAvBgNV BAMTKDFERkRCNTg0OEMyOEZGNTA2NjFDQkMxQkVDRjMyRTVBODIxM0MxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfN+8ljkbOXX40iwsF8776l0xl saLkLPh6NaaTjANwJcoV6sYDntn9B0EbMeucqPoTr0ZyfLrT2PFyFFjBgxii5ZBp YY8VJQZV0OM1b4e9aw+okxgp7N6uvviP+MVYsxomEC5/PjcAsN8keJa5KiDVwsSk sDj0Kq0gJgJKGvfMFxqn0tkvpdKHmsbRyeug9LrTR3EBXDE3jjbnl/gHhLQ7IHJA IvgBbeYPChKHIZI8/Xdaz4o0k6iD70vIkFYkaFkHYpOJWve71ountNpOrich8r8N FFG217Tbnrc4IzWbNKrA2XszUOTYRzZhSM8K9mF2kKBMIzOiApAPBtwiqH+fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHf21hIwo/1BmHLwb7PMuWoITwQMwHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMS9CQTQ0M0NGREE0MDM3 M0UzRjI3QTE0QjQxNEVDMjQ4QTQ2QTdERjZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrhyNE0q9mzT qIPsHLYimeUERxZTlv9yoYaTxbX/Axr7MURXjKCyGLCgA6wJmKXcoJSouwKUlSu5 NvKbC0hp23TCp1jn7WhwSdntgzM+GRRysV1a0tFiR3WYsjfupzzcrrwzFA6we1lX piDXQTfstBM2HUbR1jw8GGNYP5T0pr+sZtWVPpKiKNE6I1S51lEyrPF2d1i/1zmu XfBsbQAhhYynAwncATLVl+iW9H6bmzVxtPV0CLzUaNoRTFa3KezaPnY44vU0L6fq ISLuimcPNhCGmOA2tUzfeA5AVAs9+BPLYGlbO2noSDd5CjOhT/MZGUX8L4Ofq4of 7v02ZAVVXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:17:17 2026 by rpki-client