
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json)
Hash identifier: xJyQ+opbftkxpAQi/DhMcQ+2ig2AlQHmsljYEP1wFwg=
Subject key identifier: 8E:E7:F6:84:70:6E:B9:91:52:61:A6:52:F9:49:B0:42:11:64:A1:4E
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 64E6A2D7730B6517D6122221C978FC012A53DC5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
Manifest number: C8
Signing time: Sat 13 Jun 2026 20:22:13 +0000
Manifest this update: Sat 13 Jun 2026 20:17:13 +0000
Manifest next update: Sun 14 Jun 2026 21:18:13 +0000
Files and hashes: 1: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=)
2: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=)
3: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=)
4: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=)
5: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: O4HwsI7QsVduCv7PyX96r5jznMvoYmC/qXnuTEHDNFc=)
6: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=)
7: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=)
8: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=)
9: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=)
10: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=)
11: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=)
12: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e6:a2:d7:73:0b:65:17:d6:12:22:21:c9:78:fc:01:2a:53:dc:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Jun 13 20:17:13 2026 GMT
Not After : Jun 14 21:18:13 2026 GMT
Subject: CN=8EE7F684706EB9915261A652F949B0421164A14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:8e:95:ba:e2:d5:3f:9d:d5:ee:74:a5:f8:
03:4b:4c:55:99:c9:02:7c:53:39:c4:a0:39:6b:0d:
f7:ac:49:ed:e8:7c:97:0c:7e:3e:b5:22:12:94:25:
fe:a6:f6:26:20:93:75:18:6c:12:e3:f7:68:5b:0f:
b7:82:95:a1:b8:c5:44:a6:ed:b3:85:a7:b6:c4:a8:
3c:f7:bc:60:06:65:86:bd:ff:f9:e5:6d:35:6d:9a:
4b:6c:ab:38:1d:2f:f3:55:69:b8:19:2b:7c:8e:fc:
a8:da:f4:37:15:e7:b9:5f:57:3f:a3:07:12:85:3b:
95:31:b8:b7:0e:4b:1d:c7:55:e8:f4:cf:98:df:9a:
71:6b:0f:94:e6:aa:e0:0a:95:16:23:c6:44:b4:eb:
38:aa:53:32:86:bf:b8:11:2e:b0:0c:23:17:fc:9c:
bc:17:e1:c5:0d:1f:52:a0:85:5c:2e:ca:78:8e:eb:
18:ca:c3:67:c5:24:db:65:4a:94:1a:82:0f:87:4f:
30:48:6c:88:f9:75:0f:bc:23:4b:c6:28:ec:40:d6:
63:5c:69:e4:2a:1a:b0:4e:2d:3c:30:17:60:9b:de:
9d:6f:7e:b8:28:60:8c:a7:23:1f:a8:92:cc:2e:2d:
19:e7:7c:54:18:60:c2:3f:6c:4d:67:95:36:fb:f0:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:F6:84:70:6E:B9:91:52:61:A6:52:F9:49:B0:42:11:64:A1:4E
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7f:af:87:d0:aa:62:13:9b:03:c6:91:5a:0b:c0:ec:cf:36:
8d:54:95:eb:50:05:81:01:14:4f:40:83:a1:6b:15:c2:67:6d:
7b:17:0a:b3:65:93:9d:32:a7:a1:b2:76:2e:8c:e0:a2:6a:f9:
0e:77:22:e3:d5:05:53:69:93:7b:8a:bb:25:d8:1d:72:ec:e9:
b4:8f:fb:e1:44:58:59:b4:2f:04:45:a2:bd:e9:88:f4:0d:d2:
44:76:7b:d3:d6:67:f2:bf:fa:35:1c:08:b0:60:1e:12:61:34:
6d:e9:d2:ca:cb:93:3b:45:bc:68:07:1c:31:72:88:e8:f8:28:
23:98:82:4f:ee:9c:10:26:63:c1:d8:35:72:e4:22:27:68:6d:
16:f4:36:57:23:a1:0a:fb:37:8e:8a:4f:29:24:16:99:47:f0:
df:8d:97:42:4b:dc:45:fa:15:59:bd:99:96:37:b6:b4:8f:df:
0d:d9:66:69:de:58:cb:b3:9f:b3:47:e6:f2:fe:e0:ac:eb:4b:
93:71:fd:8c:1f:bb:75:66:02:6b:bf:78:d1:d8:84:57:04:14:
3c:aa:12:86:5d:11:12:84:64:47:90:b6:b7:80:33:47:f2:15:
19:61:19:51:18:99:52:8b:b3:c9:b5:ae:fc:cd:8b:34:1e:5e:
e1:95:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:26 2026 by rpki-client