
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
File: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json)
Hash identifier: /W2mZ8Cf7pcUBsSzJIc/AJaXHmIfKo1QP5uPmBf2reM=
Subject key identifier: 7E:84:F3:2A:BE:33:11:43:07:35:BE:40:D6:4C:58:42:7A:C6:76:11
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 44F08AD1EAC8492C52FD2A38D34B1387F36B90CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
Manifest number: 29
Signing time: Thu 16 Apr 2026 07:29:50 +0000
Manifest this update: Thu 16 Apr 2026 07:24:50 +0000
Manifest next update: Fri 17 Apr 2026 10:10:50 +0000
Files and hashes: 1: 3230322e3133362e3230382e302f32342d3234203d3e203234313431.roa (hash: IjbVnoWiWFPWKrEqj8jf4fiDbEpb/l0gTsF1NTgCbq0=)
2: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: p1FCixDnJqtsdkEziz27tBFzBNgaXMoFXtfqlMoYfIc=)
3: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=)
4: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=)
5: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=)
6: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=)
7: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=)
8: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=)
9: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=)
10: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=)
11: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=)
12: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=)
13: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=)
14: 3231302e352e3135352e302f32342d3234203d3e203234313431.roa (hash: EDj85phitcw/7ACdED68fBNI2c3Opa9N3Uul8gyI3UI=)
15: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=)
16: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=)
17: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=)
18: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=)
19: 3231302e352e3134342e302f32342d3234203d3e203234313431.roa (hash: E3vH9UEyKbEi4T5ttbo2AVGXtsJPxhKpOg/Z6viL11k=)
20: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=)
21: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=)
22: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=)
23: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=)
24: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=)
25: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=)
26: 3230322e3133362e3231322e302f32342d3234203d3e203234313431.roa (hash: beRK1qLRKKVBo4oFVTclAKL8M9jWFocQD/UUN6TnlTI=)
27: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=)
28: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=)
29: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=)
30: 3231302e352e3135312e302f32342d3234203d3e203234313431.roa (hash: LPQdu7Ox+2r9XDPVITTyP/SvVc6m2m22xqS0ijhDA+Y=)
31: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: VX3V7GmT9P2NmqGAHxpMAnehLsPK0t+s1dCwDTcv1JI=)
32: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 10:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f0:8a:d1:ea:c8:49:2c:52:fd:2a:38:d3:4b:13:87:f3:6b:90:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 16 07:24:50 2026 GMT
Not After : Apr 17 10:10:50 2026 GMT
Subject: CN=7E84F32ABE3311430735BE40D64C58427AC67611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:04:93:c4:57:56:f6:fc:23:e8:cb:38:3f:
99:62:b0:2c:fb:a7:ea:f3:5e:d1:92:db:2d:9b:bd:
d3:41:33:12:d0:6f:64:78:2a:96:8d:32:41:4f:98:
71:09:c0:ad:4d:f4:f2:51:fb:28:a0:1b:63:f7:f0:
3f:1f:ea:f6:17:48:4a:f1:2e:ff:1a:bd:35:c1:a4:
d7:02:3d:74:f3:25:c3:09:e4:6c:ff:3e:1e:f4:b8:
02:a6:59:89:19:fd:95:a1:c4:b2:bd:20:39:af:3a:
cc:0b:0a:a8:2f:ca:97:f7:47:9f:10:13:68:6d:be:
35:e0:c8:dd:6b:a5:57:db:62:0d:44:7f:90:2d:33:
95:d3:0f:50:5f:ea:6c:b7:8c:4a:25:12:81:85:25:
9e:33:c6:47:4c:41:25:f2:db:a9:0b:da:fa:0e:75:
05:c8:86:b6:6b:9a:1e:5b:9d:28:8e:83:54:aa:66:
73:d7:09:4c:9d:9c:13:b6:4e:a4:f6:9c:ed:b7:0a:
65:5f:bf:c3:ce:23:35:11:95:38:17:dd:30:c9:0b:
3b:4c:9f:d5:57:bf:6d:66:2f:b2:b4:1e:3e:cd:aa:
93:cd:15:7d:69:8f:3b:12:a9:78:c8:15:ce:de:e5:
bc:03:20:91:5d:46:ac:b6:04:61:4e:01:f9:01:f9:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:F3:2A:BE:33:11:43:07:35:BE:40:D6:4C:58:42:7A:C6:76:11
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d3:7c:92:78:25:ed:03:5f:d1:78:14:f5:83:86:b3:94:53:
ad:59:9c:08:17:ac:44:37:f5:4b:e4:15:20:fe:49:3f:92:a3:
6e:fd:e8:ff:f0:fd:ed:9a:7a:73:ed:6d:b9:bd:d8:f6:ab:fb:
24:e2:58:a2:df:4d:6f:8d:c9:87:e4:c5:1d:82:9e:3e:2f:0b:
b3:17:f0:f0:7f:48:48:8a:e3:f5:0f:41:bc:77:bb:d9:a5:77:
5c:c1:7e:f3:7e:4f:c0:4c:79:e5:15:7a:ff:18:d8:cc:29:fb:
67:bd:41:5e:dd:61:16:a0:60:d7:03:83:35:d1:7f:f7:bf:a3:
69:14:05:af:ed:69:41:55:d7:27:75:a0:1c:da:4c:3a:13:c7:
b1:99:71:f5:91:10:1b:9f:3a:88:97:2e:f1:0d:40:0b:1e:9b:
73:ea:29:42:8c:1f:cd:cf:5b:b4:f4:a9:65:2f:96:c0:3c:65:
a2:5c:07:e5:bf:8b:9e:b6:15:a1:ff:7f:54:30:8c:92:85:39:
f3:fd:f7:59:6e:e8:80:59:4f:91:6a:22:14:fc:69:cf:c9:d7:
fc:4a:3f:a2:b3:78:2f:8d:f1:5f:32:e0:05:07:5f:5c:87:e0:
d8:8d:5d:cc:36:54:41:4a:af:67:3b:12:b1:86:74:9c:45:d5:
fa:07:8a:5d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIURPCK0erISSxS/So400sTh/NrkMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG
NzU0QkYzRjAeFw0yNjA0MTYwNzI0NTBaFw0yNjA0MTcxMDEwNTBaMDMxMTAvBgNV
BAMTKDdFODRGMzJBQkUzMzExNDMwNzM1QkU0MEQ2NEM1ODQyN0FDNjc2MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSrwSTxFdW9vwj6Ms4P5lisCz7
p+rzXtGS2y2bvdNBMxLQb2R4KpaNMkFPmHEJwK1N9PJR+yigG2P38D8f6vYXSErx
Lv8avTXBpNcCPXTzJcMJ5Gz/Ph70uAKmWYkZ/ZWhxLK9IDmvOswLCqgvypf3R58Q
E2htvjXgyN1rpVfbYg1Ef5AtM5XTD1Bf6my3jEolEoGFJZ4zxkdMQSXy26kL2voO
dQXIhrZrmh5bnSiOg1SqZnPXCUydnBO2TqT2nO23CmVfv8POIzURlTgX3TDJCztM
n9VXv21mL7K0Hj7NqpPNFX1pjzsSqXjIFc7e5bwDIJFdRqy2BGFOAfkB+azPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfoTzKr4zEUMHNb5A1kxYQnrGdhEwHwYDVR0j
BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD
NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC9CQTQ2NjFGRkFGN0JB
QTdBOTQ4Q0RBODdGNjYxQzVCQkY3NTRCRjNGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdN8kngl7QNf
0XgU9YOGs5RTrVmcCBesRDf1S+QVIP5JP5Kjbv3o//D97Zp6c+1tub3Y9qv7JOJY
ot9Nb43Jh+TFHYKePi8Lsxfw8H9ISIrj9Q9BvHe72aV3XMF+835PwEx55RV6/xjY
zCn7Z71BXt1hFqBg1wODNdF/97+jaRQFr+1pQVXXJ3WgHNpMOhPHsZlx9ZEQG586
iJcu8Q1ACx6bc+opQowfzc9btPSpZS+WwDxlolwH5b+LnrYVof9/VDCMkoU58/33
WW7ogFlPkWoiFPxpz8nX/Eo/orN4L43xXzLgBQdfXIfg2I1dzDZUQUqvZzsSsYZ0
nEXV+geKXQ==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:52:27 2026 by rpki-client