
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
File: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft (raw, json)
Hash identifier: YgU1vMeQLLQwuSdLcMnKvYaCzLIQEkhAwsx4cejx0b4=
Subject key identifier: 79:79:13:F1:B7:FB:39:07:76:EC:26:B4:9D:1B:CC:70:C0:DF:FC:D6
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 33B86219AE2B3DA75F208FAB3C45936E39779767
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
Manifest number: FE
Signing time: Fri 24 Jul 2026 04:10:19 +0000
Manifest this update: Fri 24 Jul 2026 04:05:19 +0000
Manifest next update: Sat 25 Jul 2026 04:35:19 +0000
Files and hashes: 1: 36392e3233342e3139322e302f31382d3234203d3e20313335363239.roa (hash: 2JgPRqzChL6aRN2HHWJ+liAA49OceEMdwqv4mL4g3TA=)
2: 36392e3233352e3138342e302f32312d3231203d3e20313334373631.roa (hash: np+j/2H1LcK7mut452khZieuC8xhFqCKScZ+LH57rOQ=)
3: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (hash: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o=)
4: 36392e3233352e3138342e302f32312d3231203d3e203130323036.roa (hash: XdIIytMKeURqugQsIhiCG8921zvCYPpLFXWW/uA/1S4=)
5: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (hash: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=)
6: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (hash: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=)
7: 36392e3233352e3138342e302f32312d3231203d3e20313335363239.roa (hash: bXtRngVO1ZHZloYd3fw60uZkV2dYuwOu5FeJjvbf0DU=)
8: 3136312e3138392e302e302f31362d3234203d3e20313335363239.roa (hash: VArv7wtcC799gjidJmBBAegNoq7R1zV2WHiORYAIAis=)
9: 35322e38322e302e302f31352d3234203d3e20313335363239.roa (hash: BKfKRfeGnTe+uCfmNH8LGxHMZkSFP82yHfMi+FwAgaw=)
10: BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl (hash: Wepx55JES0kFVnZwqvPvLkoWFBpd9SS/EElBkpCn1yg=)
11: 36392e3233312e3132382e302f31382d3234203d3e20313335363239.roa (hash: i3tzGoy9z14VYKRZErV4ccYrCvQWVU9YyKnJBvsNCy4=)
12: 36392e3233352e3132382e302f31382d3234203d3e20313335363239.roa (hash: xFWMWs1c6SAwWOInmbWsHWAmEOaJMBB4hoMBTc7gn8c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b8:62:19:ae:2b:3d:a7:5f:20:8f:ab:3c:45:93:6e:39:77:97:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Jul 24 04:05:19 2026 GMT
Not After : Jul 25 04:35:19 2026 GMT
Subject: CN=797913F1B7FB390776EC26B49D1BCC70C0DFFCD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:cf:2d:4d:85:14:52:16:9e:f9:5e:be:97:
6d:e3:d1:c2:d5:42:d6:a7:ca:3d:5b:cf:cb:e1:ad:
69:5d:be:a1:90:7a:92:7f:14:92:81:5c:b8:8e:3c:
a9:89:42:9b:74:8d:90:ba:7a:7f:5e:2b:ce:6c:2d:
a5:73:ec:43:78:f4:11:81:c8:c7:ac:2f:77:ad:05:
b0:da:fb:c8:5f:70:a3:11:68:81:49:6a:60:45:6e:
91:20:3f:6f:45:6c:7b:38:a2:dc:07:a6:75:2a:66:
61:4e:a7:99:72:f1:0a:19:fc:d4:ea:ab:19:f5:a7:
9e:b4:00:a8:d1:eb:26:db:bf:97:01:ee:e0:3c:a7:
dd:2a:f4:a8:3b:31:4f:1b:bf:b2:8d:87:dd:a1:a7:
74:f6:17:bd:b2:e7:8f:9e:5d:e7:27:09:b3:38:f7:
d9:33:93:9d:00:1e:e7:8c:c3:2d:01:73:d6:85:ae:
37:e5:23:90:e2:d3:d8:90:a8:88:a7:3b:06:4d:d2:
cf:2b:c8:b9:af:7b:37:2e:58:fc:cd:43:af:e4:86:
be:4a:e7:40:a8:30:21:6b:bd:00:71:25:1f:3c:1d:
d3:0a:3f:c4:14:b1:2c:ba:d1:a0:6f:6b:b6:c8:d5:
2f:e6:81:a7:ab:2e:73:f5:cb:cb:6a:a2:f0:e1:27:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:13:F1:B7:FB:39:07:76:EC:26:B4:9D:1B:CC:70:C0:DF:FC:D6
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:98:b6:71:9d:fb:9c:df:89:1c:fb:e1:85:cd:29:8b:80:
c8:d8:1b:68:38:e3:a1:9e:0d:6c:bb:51:e2:73:4f:83:7a:74:
94:18:08:e0:bb:39:56:ba:1e:7d:87:44:3b:36:5b:02:04:29:
b3:e3:0c:01:51:13:e6:5c:db:7b:23:10:4b:b9:dc:d6:67:0e:
5f:da:42:52:03:aa:dc:d0:7e:dd:26:87:53:74:a9:4a:a2:33:
94:69:31:04:3e:db:6c:0e:a9:df:8a:0e:0d:67:ef:ec:f9:22:
60:97:4c:53:a2:f2:33:03:ec:b0:35:04:19:61:86:23:7e:2d:
f8:8b:80:e8:1a:25:df:e4:3f:ff:b7:eb:e3:db:58:51:27:e9:
0d:0e:d3:1c:ba:a4:ca:de:33:b3:e3:0f:3f:5b:16:7f:ef:98:
c4:1d:dd:1d:5e:ff:33:17:6a:4e:32:b6:1b:d6:44:14:2c:be:
d9:d9:2f:a8:f4:4a:a5:52:a4:a0:e3:be:69:98:55:36:39:3d:
2b:56:59:18:8d:81:10:3e:1b:a7:12:6f:2b:07:a7:24:0f:74:
b6:58:07:d8:be:a6:7d:a5:b8:15:d4:34:04:b2:50:45:ae:a9:
b1:a2:d0:00:45:d8:af:29:e9:fa:bc:f7:ce:b9:e2:0a:e7:a6:
e6:1c:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:55 2026 by rpki-client