$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft File: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json) Hash identifier: BHNkMYc7EOBIGskQsl3bn9X+ww9+h++Sc+jqgjdWhrc= Subject key identifier: 5D:4F:7D:2B:10:4D:82:C7:9B:A0:82:21:6A:9E:0A:68:B0:8E:78:19 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 0C3034105F0FD4CD5185A3526F6B95B2F71649FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft Manifest number: B9 Signing time: Tue 28 Jul 2026 22:27:52 +0000 Manifest this update: Tue 28 Jul 2026 22:22:52 +0000 Manifest next update: Thu 30 Jul 2026 01:02:52 +0000 Files and hashes: 1: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: edh49oCGSU/eHBxUJEm43JwQfq9rVtwA9tv5C7b9m0U=) 2: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=) 3: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=) 4: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=) 5: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=) 6: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=) 7: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=) 8: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=) 9: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=) 10: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=) 11: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=) 12: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=) 13: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=) 14: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=) 15: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=) 16: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=) 17: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=) 18: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=) 19: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=) 20: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=) 21: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=) 22: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=) 23: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=) 24: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=) 25: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=) 26: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=) 27: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:30:34:10:5f:0f:d4:cd:51:85:a3:52:6f:6b:95:b2:f7:16:49:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Jul 28 22:22:52 2026 GMT Not After : Jul 30 01:02:52 2026 GMT Subject: CN=5D4F7D2B104D82C79BA082216A9E0A68B08E7819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:5c:9c:b7:d7:0c:d1:40:a3:20:5b:b6:78: 07:19:49:cc:ed:41:ba:61:82:7f:c2:79:57:e6:73: 9d:3e:0b:82:b9:3f:0c:c6:ce:9b:23:7b:ca:17:60: df:92:48:64:52:46:46:ec:4a:ad:dc:fc:51:a2:72: 5e:11:2a:6f:60:40:9e:70:3e:63:0f:72:89:fd:ad: 82:6d:59:6b:9f:47:0f:eb:b3:4b:c4:7e:f9:1a:69: af:6c:c9:72:38:20:f1:f6:bb:1e:c8:bd:79:cd:18: de:0e:77:43:15:5f:76:76:b0:c1:3b:d9:7d:55:ce: c9:fe:84:7b:eb:a5:d1:bb:c8:68:a5:9f:93:c4:bb: e7:dc:51:5b:ca:b9:70:d6:42:f4:11:30:08:e4:42: b9:b2:f1:a7:d9:2c:d0:7c:57:61:68:f2:b6:6c:d6: dc:c8:83:f1:33:41:18:12:1e:d5:e6:bd:ab:79:9e: ae:bc:b0:cc:7d:8e:70:b1:85:c8:9c:b0:f1:fd:44: b4:f5:9a:d7:79:43:69:25:ad:08:76:f2:b3:36:66: a2:8c:23:f0:5c:ad:f0:1a:7d:2d:d3:93:d2:5a:ff: 34:61:7d:70:11:ab:ea:d2:60:43:77:65:5c:4e:fa: 89:53:82:e0:07:40:38:58:f5:f3:60:e2:5d:ad:a3: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4F:7D:2B:10:4D:82:C7:9B:A0:82:21:6A:9E:0A:68:B0:8E:78:19 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:72:ba:64:b0:34:36:05:56:66:70:54:b0:21:13:a3:c8: 45:a7:b6:0c:21:a6:64:d8:ed:00:76:9d:ca:bd:ef:69:2b:04: 62:d1:83:3d:7d:a9:5e:09:d6:c2:9a:2b:12:b3:30:de:8b:45: 33:c3:0e:f1:72:a4:18:e1:82:63:e8:b4:49:a9:38:22:65:80: 87:ee:cb:82:02:ed:84:8e:ac:73:b4:62:c6:47:a4:d7:fb:e4: 14:9e:c9:71:81:c3:99:1d:47:41:7d:e2:c5:65:86:39:ec:54: 1b:eb:1c:e8:28:4c:b7:92:93:65:b1:46:00:82:7f:ab:43:60: f4:74:86:f9:8f:dd:5a:8b:e6:2c:c8:05:f5:34:b0:af:b2:89: 9e:af:bf:ce:c2:35:6b:19:9c:fe:5d:8c:9d:b1:b7:d9:3c:e3: 69:f9:62:bd:00:f6:46:40:db:ef:62:4a:5b:8b:64:e0:ab:4f: 9f:9c:c8:82:2a:5f:c3:91:73:3d:a6:03:aa:7e:5c:96:30:c5: a3:c6:77:16:75:35:89:6f:c1:97:d2:14:25:4c:53:e4:56:41: 62:94:8f:15:14:e7:57:f7:d3:fd:d4:0b:8b:ae:da:c0:a1:85: 4a:d2:ad:a2:99:21:9d:50:92:a7:46:31:49:13:ba:63:cf:7e: 19:7e:7e:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDDA0EF8P1M1RhaNSb2uVsvcWSf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA3MjgyMjIyNTJaFw0yNjA3MzAwMTAyNTJaMDMxMTAvBgNV BAMTKDVENEY3RDJCMTA0RDgyQzc5QkEwODIyMTZBOUUwQTY4QjA4RTc4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiVyct9cM0UCjIFu2eAcZSczt Qbphgn/CeVfmc50+C4K5PwzGzpsje8oXYN+SSGRSRkbsSq3c/FGicl4RKm9gQJ5w PmMPcon9rYJtWWufRw/rs0vEfvkaaa9syXI4IPH2ux7IvXnNGN4Od0MVX3Z2sME7 2X1Vzsn+hHvrpdG7yGiln5PEu+fcUVvKuXDWQvQRMAjkQrmy8afZLNB8V2Fo8rZs 1tzIg/EzQRgSHtXmvat5nq68sMx9jnCxhcicsPH9RLT1mtd5Q2klrQh28rM2ZqKM I/BcrfAafS3Tk9Ja/zRhfXARq+rSYEN3ZVxO+olTguAHQDhY9fNg4l2to4wlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXU99KxBNgseboIIhap4KaLCOeBkwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC9CQTQ2NjFGRkFGN0JB QTdBOTQ4Q0RBODdGNjYxQzVCQkY3NTRCRjNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg65yumSwNDYF VmZwVLAhE6PIRae2DCGmZNjtAHadyr3vaSsEYtGDPX2pXgnWwporErMw3otFM8MO 8XKkGOGCY+i0Sak4ImWAh+7LggLthI6sc7Rixkek1/vkFJ7JcYHDmR1HQX3ixWWG OexUG+sc6ChMt5KTZbFGAIJ/q0Ng9HSG+Y/dWovmLMgF9TSwr7KJnq+/zsI1axmc /l2MnbG32TzjaflivQD2RkDb72JKW4tk4KtPn5zIgipfw5FzPaYDqn5cljDFo8Z3 FnU1iW/Bl9IUJUxT5FZBYpSPFRTnV/fT/dQLi67awKGFStKtopkhnVCSp0YxSRO6 Y89+GX5+EA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:42 2026 by rpki-client