
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json)
Hash identifier: DL3CMxO0YdH0mxrni4eXJskrucBpWs6Y5CTydzAqBPE=
Subject key identifier: 07:5D:4A:ED:4C:A8:EA:EA:BA:0C:DB:83:2F:A7:A2:95:52:73:04:90
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 300B9DC4065A14C7FF5A825D1296737B3C26D87B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
Manifest number: 013D
Signing time: Sat 26 Sep 2026 15:34:00 +0000
Manifest this update: Sat 26 Sep 2026 15:29:00 +0000
Manifest next update: Tue 29 Sep 2026 18:14:00 +0000
Files and hashes: 1: 35322e38322e3138352e302f32342d3234203d3e20313334373631.roa (hash: h52K71cVkEvRfWG0J7cr0+YJ6In+cIrKNIjl5TAeqsg=)
2: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: mpv6BrAjxjNXXyO4D2qBSeiXsNWuWLl7EYwjOc5XJwg=)
3: 35322e38322e3136342e302f32342d3234203d3e203130323036.roa (hash: YOh2Z6xnovaWzm5jYodPmPfdKKIbcwM2c3Kav7uiN5k=)
4: 35322e38322e3136362e302f32342d3234203d3e203130323036.roa (hash: OHpwSF8VWaiCkad4RyF+LadVUpvbILas+BlaqFDJHhY=)
5: 35322e38322e3136342e302f32322d3232203d3e2039383038.roa (hash: TWFNhZT3LWxNlSqHTrTbyYPuNo6GJhgc1PS3aWDZ2BQ=)
6: 35322e38322e3138352e302f32342d3234203d3e20313335363239.roa (hash: ev79JT+YUnQHbDdHQypWb1s3EHRCFOEGAC+QSwVTQvk=)
7: 35322e38322e3136362e302f32342d3234203d3e2039383038.roa (hash: dPwjZgcOSKpC8T1f78TL2R9yZQSyJxDo9Ubuw5BHRfA=)
8: 35322e38322e3138382e302f32342d3234203d3e2039383038.roa (hash: 0yo4KcOJqsmCHT4CNpW2d7KgIBhDLngivVGmTNuL+Bo=)
9: 35322e38322e3138382e302f32342d3234203d3e203130323036.roa (hash: CKUMpPbMrXARinF/1+nBQgHO39eF7RWneoHgIPmsHKo=)
10: 35322e38322e3138382e302f32342d3234203d3e20313334373631.roa (hash: hLjYhD8ytXZC3hISfJLL6yirIzQNks2aGjclI1LTDp8=)
11: 35322e38322e3139302e302f32342d3234203d3e203130323036.roa (hash: nC7+rpANmmCg+6SEMXaYL8w1nRc7xWWCU7ZoAgvGF9A=)
12: 35322e38322e3136362e302f32342d3234203d3e20313334373631.roa (hash: GSJ/v+baT7z1YIyvfm6OkEcCmbEHr/xBMzk54Un3IAc=)
13: 35322e38322e3138342e302f32332d3233203d3e20313334373631.roa (hash: cO3ZZEtontYy2pbxwRteKX/EQNP0Mbqjo0mSUyGl2qs=)
14: 35322e38322e3138342e302f32332d3233203d3e20313335363239.roa (hash: 4XMcMSUWf++F2SfVM2t+C1JFFOpfP2Q4r3PebfoZMVU=)
15: 35322e38322e3138392e302f32342d3234203d3e2039383038.roa (hash: xTSaXwi3c7yUY4b6kYGDPBGowzJLypNnk5vK0eGEKbg=)
16: 35322e38322e3138392e302f32342d3234203d3e20313334373631.roa (hash: vZcB9u11DVU6wzCqRxKV1K2qimyNVamJ2YdEp4xL91I=)
17: 35322e38322e3138342e302f32332d3233203d3e203130323036.roa (hash: XTaotjbe61CaiYtgWkNb6+PpHbllutr0kxHDEMlxQKI=)
18: 35322e38322e3136372e302f32342d3234203d3e20313335363239.roa (hash: +EuN4mGokXA6hnSae3S26WMLFU5vVGOcvOwIhq3Tgdk=)
19: 35322e38322e3138342e302f32342d3234203d3e20313334373631.roa (hash: 3vEF2mFZujrI0a9LHkHOm9t6wP5U+IFjnNMRZ7k9dMs=)
20: 35322e38322e3138342e302f32342d3234203d3e20313335363239.roa (hash: Wx2fJiVUg7aRrLVflCytJxjBf5nA0uOaSAfJSPCLMMA=)
21: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=)
22: 35322e38322e3138342e302f32342d3234203d3e2039383038.roa (hash: T7cd5meUiuSVYvQcqWIcBAZAPt/5r5lAflYlNp19Gag=)
23: 35322e38322e3138352e302f32342d3234203d3e2039383038.roa (hash: tlBLC6tmjFNQArkJ0zICI3IoHB7Xbm+DLzwO8iB3D3E=)
24: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=)
25: 35322e38322e3138352e302f32342d3234203d3e203130323036.roa (hash: 6sdu1PGAwg9QhNwazfcqQ4Diwz8hWjJjnDi7vj3Xk3Y=)
26: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=)
27: 35322e38322e3136342e302f32342d3234203d3e20313335363239.roa (hash: tiUBpKmKhjB2J17TRFTpNc9V1anyatNVinBLT8+TkBQ=)
28: 35322e38322e3136342e302f32322d3232203d3e203130323036.roa (hash: D4LCG8ByREcRHsJF4sEDqKsRazNqbGyglbHTw08Crhc=)
29: 35322e38322e3136372e302f32342d3234203d3e20313334373631.roa (hash: aol0nlUDEoDfenI+Oz5+UlmKGs9CBBAf2LXGXI+54QA=)
30: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=)
31: 35322e38322e3136352e302f32342d3234203d3e203130323036.roa (hash: 3aoO0RZzfnR2taghnPVb4h/zdjWMigrOBnd5ZB4vK/k=)
32: 35322e38322e3138382e302f32342d3234203d3e20313335363239.roa (hash: 3Cn4mk6/R1gGWL22EKxaKN35fajH56VoyWPl6bYh7MY=)
33: 35322e38322e3138342e302f32342d3234203d3e203130323036.roa (hash: uRYwNrM+4jFy0/i9YBZfz7Qy/vHaRvkYdt/+VJBTiJs=)
34: 35322e38322e3139302e302f32342d3234203d3e2039383038.roa (hash: /98+qYxSVo1xRAidY06nXanJqrFidHWqLtz5hXByN0M=)
35: 35322e38322e3139302e302f32342d3234203d3e20313335363239.roa (hash: ILMjTAKEvwYebJma8f4DXxIuzqbOI1CxBD205TbY+Ns=)
36: 35322e38322e3138392e302f32342d3234203d3e20313335363239.roa (hash: JsX3EOo0/wKfe3BbMf+G+hEwv1a6nU/8xbsC/TgScPw=)
37: 35322e38322e3139302e302f32342d3234203d3e20313334373631.roa (hash: khLsSFX7uC3YMXx+jARjDXxajW/9Q277wQL4nFOUdGU=)
38: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=)
39: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=)
40: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=)
41: 35322e38322e3136352e302f32342d3234203d3e2039383038.roa (hash: GzmTVoQDOWQjN49zT40osGZeO/BFsLS2fi2CdKe0nTQ=)
42: 35322e38322e3136372e302f32342d3234203d3e203130323036.roa (hash: jA9haOI6kySgq1DVWJkc8EX9yQohEQjgpgBjtl6oC6E=)
43: 35322e38322e3136352e302f32342d3234203d3e20313334373631.roa (hash: JpKP7fhA5N6PL9wmKvp1c1i6Lj4QBeyJPw7U8b3TYek=)
44: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=)
45: 35322e38322e3136342e302f32342d3234203d3e2039383038.roa (hash: rVb7UvTWUA8LjCfu3JiathO2qrwwp9Cs2eeptDyeRbk=)
46: 35322e38322e3136352e302f32342d3234203d3e20313335363239.roa (hash: M8RoQpinR5RY0oBw86ul69C/hksdHEuEQSgYtyZnvHM=)
47: 35322e38322e3136342e302f32322d3232203d3e20313334373631.roa (hash: Iz4mAueZbXkv/Tp1/tPoiT1eVK52Ne6Ltxif23cYvwM=)
48: 35322e38322e3136342e302f32322d3232203d3e20313335363239.roa (hash: BjJ+E5dUBktFVJFOyPtZ4SqnEe2yJoahPoVjHtOg/ec=)
49: 35322e38322e3136362e302f32342d3234203d3e20313335363239.roa (hash: JHkyfcGcAQcpKTuTWHacKKCPUdbLXyszNRTpqSmDkQw=)
50: 35322e38322e3136372e302f32342d3234203d3e2039383038.roa (hash: APJECX6VmJhTSOuoJl7f9JOpKelHjMmiVKv5OXqjefY=)
51: 35322e38322e3138392e302f32342d3234203d3e203130323036.roa (hash: 5cQTljFEJOEZXop9i6p3X/9Q/LdGsjfoX0+8S9a/ZJs=)
52: 35322e38322e3136342e302f32342d3234203d3e20313334373631.roa (hash: Q26gi0L+79VGO+FHMNbd4kLd+IzBpcoQh9hV4PQTSE0=)
53: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=)
54: 35322e38322e3138342e302f32332d3233203d3e2039383038.roa (hash: AFbF9xdRG/v8Le4U5bG1FLyRwVuzo8Tuh8Az92VCZuE=)
55: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=)
56: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0b:9d:c4:06:5a:14:c7:ff:5a:82:5d:12:96:73:7b:3c:26:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Sep 26 15:29:00 2026 GMT
Not After : Sep 29 18:14:00 2026 GMT
Subject: CN=075D4AED4CA8EAEABA0CDB832FA7A29552730490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:55:67:01:e0:b7:83:3a:a3:6a:2b:5a:17:
4b:16:65:9e:c7:bf:12:7e:ed:83:8b:01:46:4d:df:
af:e0:61:0a:88:65:9b:1d:4f:c3:88:15:3b:99:21:
b7:3c:83:61:7d:c1:66:fb:c9:f3:03:b3:7f:8d:1f:
79:8d:70:a2:a4:47:b1:79:81:74:db:b8:7b:d9:e4:
7f:e3:18:75:ac:60:0f:4e:de:5b:48:46:16:a9:2d:
12:1a:d7:fb:32:59:06:34:e1:a0:c5:50:bb:89:d7:
22:0b:2c:13:52:d9:9b:88:f3:49:25:22:88:3d:e8:
03:fd:c3:b4:8e:08:39:97:df:f3:29:00:03:32:ab:
82:1a:9e:dc:01:b6:52:6a:67:5e:91:2f:69:04:fd:
c9:bb:7d:98:3d:e6:32:bc:45:dd:dd:26:96:94:30:
b6:5e:15:c5:f5:41:01:3a:65:32:fa:34:1f:1d:d7:
1b:b8:10:fa:7d:1f:e6:0a:6b:b8:37:6b:4e:54:8e:
5c:f2:9c:f3:18:62:9a:c7:27:5f:50:4f:45:f0:bf:
80:90:76:6d:2f:e2:91:2a:33:d6:dc:6b:de:d7:a1:
cc:3f:04:c0:23:c9:85:d1:ac:c2:2d:02:38:fd:a9:
ef:68:ca:1d:d7:af:b6:c6:c2:6c:03:f7:9a:fe:38:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:4A:ED:4C:A8:EA:EA:BA:0C:DB:83:2F:A7:A2:95:52:73:04:90
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:ca:02:9a:9a:c3:03:92:f3:b1:e0:b6:66:05:62:16:fd:
26:c5:a4:38:48:cf:4b:28:a9:d8:7c:1a:4d:29:54:79:47:6a:
02:13:a0:3e:36:d3:b1:04:e9:f5:95:05:91:34:cb:e7:21:04:
f6:c1:e9:db:ea:4a:55:2c:46:7b:dc:2f:a2:60:05:8f:95:67:
05:0c:3a:2f:32:8c:3e:ff:90:98:1c:2f:45:df:2f:6c:2c:4f:
1e:81:40:1f:ed:45:e3:5d:b5:11:b0:6e:2d:dc:ee:a0:fb:48:
e4:0e:0d:24:d0:7c:1e:95:f7:38:97:75:4c:92:f8:a9:53:7a:
ef:ca:a3:8c:fe:b9:f5:f9:23:e8:b4:1d:f3:46:60:8d:40:5c:
f7:18:95:64:3b:e1:4b:5a:30:8c:cd:04:5c:5c:f2:e1:8e:0d:
64:5d:9c:78:0e:f4:79:63:d5:55:3c:f1:66:9f:7f:61:c8:09:
30:af:0c:cd:9d:fd:2f:64:40:51:78:c7:1e:ea:c9:58:85:32:
95:eb:b8:78:a3:35:2c:61:05:08:e3:e4:3c:26:5d:21:b3:12:
c9:4c:c4:8c:96:68:60:cd:da:62:07:35:9b:02:04:a6:38:44:
6d:b7:70:e2:0a:f7:8f:50:e5:15:43:df:f2:8b:6c:83:68:4b:
8f:0f:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:33 2026 by rpki-client