$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft File: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft (raw, json) Hash identifier: wNZbYw/bf8Kc/bKFa1nglR3cMpjv9Fl00Xjg2K4VkPQ= Subject key identifier: EB:1D:2B:8A:FD:89:1F:CD:A0:DD:3B:D3:0A:BD:9D:C6:40:8F:36:41 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 225247F09C9F8C9FF6475D029373157DDCDAFA04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft Manifest number: B2 Signing time: Thu 23 Jul 2026 17:04:10 +0000 Manifest this update: Thu 23 Jul 2026 16:59:10 +0000 Manifest next update: Fri 24 Jul 2026 18:29:10 +0000 Files and hashes: 1: 3231302e352e3134342e302f32312d3231203d3e2034383132.roa (hash: MtpPUBiQt8TPtxsCGqf8Ze8tDRRRKP8x2cQp71EJDDk=) 2: 3131392e31352e3133362e302f32332d3233203d3e2034383132.roa (hash: iyslGkiLEqEVdSW+oe1E81pt4IuqOMx8h6+odH4uEqQ=) 3: 3230322e3133362e3232312e302f32342d3234203d3e2030.roa (hash: jw6K4jbxX8BotBAL0cYgDRlD+uP6PPaf5dlMjJNsaZo=) 4: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (hash: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss=) 5: 3230322e3133362e3231322e302f32322d3232203d3e2034383132.roa (hash: 0XWbWX26rruXa4apWMj3I3fHxpgDOl2SGcq4AhkL8tU=) 6: 3231302e352e3134342e302f32312d3231203d3e203234313431.roa (hash: +lv73T9O9q5n81quuhvlQDnpqcRdKWzD0TRd2MlglfA=) 7: 3230322e3133362e3232302e302f32342d3234203d3e203137363231.roa (hash: AWmE9yewJh0fhz6Pfas9ClXLsdjyofQ7PMvv9lZQdis=) 8: 3230322e3133362e3231362e302f32332d3233203d3e2034383132.roa (hash: 5nY2Qwd6G9qtAhzlBDk/6R/77a/5eMpOO710Otrer40=) 9: 3230332e3137362e3137302e302f32342d3234203d3e203234313431.roa (hash: dLZCqmYnbpIP4WgY5kD3pZF1/DxQRaLbx47WEz5mzfQ=) 10: 3131392e31352e3134302e302f32342d3234203d3e2034383132.roa (hash: HnuA7sY67JCdIKygqMB5pRKk8VyJBnV37OTStjv4ilI=) 11: 3230332e3137362e3136382e302f32342d3234203d3e203234313431.roa (hash: N3T0xG4+OaQjiFYOMeZy4UHEZPVVz8y2/BHszGOiCDM=) 12: 3230322e3133362e3232322e302f32332d3233203d3e203137363231.roa (hash: F0Ayq3cjkuvxzFYX3SHZlSLuhDvOKIvqp12/bsu/n/4=) 13: 3230322e3133362e3231322e302f32322d3232203d3e203137363231.roa (hash: HS2oviokuHzJsSm9+Rr59oYhpd+2iiBE6DvBEyPQZ/8=) 14: 3131392e31352e3134312e302f32342d3234203d3e2034383132.roa (hash: iiZs9oCDJ3ydR1g9N7+3kpsirBvuQMlUfkeknyeUI0Y=) 15: 3230332e3137362e3136382e302f32312d3231203d3e2030.roa (hash: ktYlnhepu1386GTakqSOMD/xAMbEFqEMJ4uaT/SuP0A=) 16: 3131372e37342e3132382e302f31372d3137203d3e2030.roa (hash: 5MlJOu/q0Q3Mts15LBalJ1sepbxwUb+VkGap3rDiJX0=) 17: 323430303a393630303a3a2f33322d3332203d3e2030.roa (hash: qYpetUirBdZkWClubflhJXT8wvgjzSRaXKzICEAC+VE=) 18: BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl (hash: CVDFbagJh/Dtl7iCfIZb/q5kfaiuawWkDseI/wV8j5Y=) 19: 3230322e3133362e3231382e302f32342d3234203d3e203137363231.roa (hash: S3k9nkhW8JiHW7HA1P7oI4rU1lVF7/FTM2rJjszLFy8=) 20: 3231302e352e3135322e302f32312d3231203d3e2034383132.roa (hash: +ZHNbMnaFGN/uSkWabSmE75mffioRCBu0BsefK4v1lY=) 21: 3230322e3133362e3230382e302f32322d3232203d3e2034383132.roa (hash: OmiSIjODLWcoDnY4QUVBhclHnKvfmJsqsRP35eLApYo=) 22: 3131372e37342e3133362e302f32322d3232203d3e2034383132.roa (hash: A3jgln8L7FCj6nrGICiP8rRiROVpbxAhiphG6oEQwXY=) 23: 3230322e3133362e3230382e302f32322d3232203d3e203137363231.roa (hash: Z9J0afLCLJZwi8MldJRUz1J6biRfJ6fEP/d2kNLGKC4=) 24: 3131392e31352e3133362e302f32312d3231203d3e2030.roa (hash: MqgqdLkRcEcvofxTsK+/JIWiyCzdozy0h5Q+QPR0tCo=) 25: 3131372e37342e3132382e302f32312d3231203d3e2034383132.roa (hash: 7u1P3VkjpxSppg+34NH/Zm1EsjCmHFLZUKt9OAhN12I=) 26: 3230322e3133362e3231392e302f32342d3234203d3e2030.roa (hash: eb+lsP1zS4a52kp7rQjQfcngt6O8DL6ngxHMW6QjVVI=) 27: 32372e3131332e3132382e302f31382d3138203d3e2030.roa (hash: KK1RzKFiNcTfRxJmVFKufBBeLgH5EWmCWHV585IznMo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:52:47:f0:9c:9f:8c:9f:f6:47:5d:02:93:73:15:7d:dc:da:fa:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Jul 23 16:59:10 2026 GMT Not After : Jul 24 18:29:10 2026 GMT Subject: CN=EB1D2B8AFD891FCDA0DD3BD30ABD9DC6408F3641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:1c:cf:9d:fa:47:ea:77:25:f8:bc:71:02: 1b:87:41:1a:8c:89:3a:ea:bd:66:b5:86:d0:84:5a: c4:10:1e:0c:fd:e1:dd:4b:54:13:d3:35:3f:fa:90: 56:0a:66:b3:5d:13:fe:32:39:dc:e4:86:31:fd:dd: 42:6e:f9:28:65:a3:e0:db:72:ad:6b:34:91:57:fd: e1:a4:a7:15:cc:cc:a5:80:0e:07:a9:d2:b7:73:45: bf:fc:42:f5:a0:75:8a:aa:82:b0:a3:16:be:b1:ad: fb:5d:38:0d:21:50:6d:cc:12:c3:64:f7:97:2b:b4: cb:00:dd:1c:f6:75:ec:1e:1c:f0:78:6c:0a:48:9a: db:73:27:49:ed:48:f8:28:ee:d8:b0:d1:da:73:de: d7:82:ef:39:05:cb:0a:9e:57:2b:18:a8:3d:d4:33: 01:cd:b4:b3:20:30:00:73:e8:c9:5e:83:50:6c:41: 56:fa:c2:8a:c8:5d:04:d5:03:53:74:db:5a:66:6e: 1a:8d:57:1f:e4:c5:ec:d5:4d:a9:c8:af:de:4f:61: ee:ed:53:ff:3f:ef:3f:66:e3:9b:18:62:77:e0:1e: 48:59:be:ab:86:4e:16:f6:60:40:14:0b:1c:b3:a7: 91:9a:4d:ae:1c:e9:b1:89:6b:2c:a0:01:57:ea:6f: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1D:2B:8A:FD:89:1F:CD:A0:DD:3B:D3:0A:BD:9D:C6:40:8F:36:41 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8a:b8:99:3e:1a:49:e9:9d:6b:ae:24:31:1c:f6:30:b3:fb: 4c:0a:5a:f4:ba:b4:45:f7:61:2a:cc:8c:c5:f7:ff:84:cb:6c: 92:c9:29:ac:f8:c4:1b:ae:3c:e8:53:a0:cb:d8:b3:37:1a:7d: 67:70:af:43:c6:16:99:ec:b5:9a:88:17:9e:28:cc:e9:37:62: 06:78:8a:50:70:81:8b:94:97:c1:0e:b0:5a:12:ff:24:d5:b0: 7c:58:c1:01:9a:d7:cb:e5:0d:09:c3:5d:89:82:60:58:c6:b7: f6:b0:6a:0c:a8:ab:8b:bf:0f:9d:a2:e7:90:46:b3:6e:f2:dd: ed:08:66:50:9a:f2:0c:16:e0:45:58:44:0f:82:a1:43:ea:b4: b1:61:b0:a4:37:76:ab:7b:91:fb:88:27:85:ee:2a:24:de:91: ed:cc:80:3e:f9:c7:71:9c:12:84:12:40:6a:1a:42:70:79:a7: 59:5d:69:5a:a6:b9:aa:27:7e:71:a8:49:d5:96:75:5f:52:a2: 82:ef:bf:40:f1:8e:3f:2d:f8:35:84:50:04:21:f3:c3:68:65: 20:b1:44:43:81:89:06:40:9f:15:af:ff:15:77:17:59:b5:6f: f2:57:c6:9d:82:35:12:f5:4c:07:77:1c:6d:cf:34:39:a1:bf: 41:5b:66:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIlJH8JyfjJ/2R10Ck3MVfdza+gQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA3MjMxNjU5MTBaFw0yNjA3MjQxODI5MTBaMDMxMTAvBgNV BAMTKEVCMUQyQjhBRkQ4OTFGQ0RBMEREM0JEMzBBQkQ5REM2NDA4RjM2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQBzPnfpH6ncl+LxxAhuHQRqM iTrqvWa1htCEWsQQHgz94d1LVBPTNT/6kFYKZrNdE/4yOdzkhjH93UJu+Shlo+Db cq1rNJFX/eGkpxXMzKWADgep0rdzRb/8QvWgdYqqgrCjFr6xrftdOA0hUG3MEsNk 95crtMsA3Rz2deweHPB4bApImttzJ0ntSPgo7tiw0dpz3teC7zkFywqeVysYqD3U MwHNtLMgMABz6Mleg1BsQVb6worIXQTVA1N021pmbhqNVx/kxezVTanIr95PYe7t U/8/7z9m45sYYnfgHkhZvquGThb2YEAUCxyzp5GaTa4c6bGJayygAVfqbxxFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6x0riv2JH82g3TvTCr2dxkCPNkEwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODc4ODAwODMwMTM2MzUvMC9CQTQ2NjFGRkFGN0JB QTdBOTQ4Q0RBODdGNjYxQzVCQkY3NTRCRjNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoq4mT4aSemd a64kMRz2MLP7TApa9Lq0RfdhKsyMxff/hMtskskprPjEG6486FOgy9izNxp9Z3Cv Q8YWmey1mogXnijM6TdiBniKUHCBi5SXwQ6wWhL/JNWwfFjBAZrXy+UNCcNdiYJg WMa39rBqDKiri78PnaLnkEazbvLd7QhmUJryDBbgRVhED4KhQ+q0sWGwpDd2q3uR +4gnhe4qJN6R7cyAPvnHcZwShBJAahpCcHmnWV1pWqa5qid+cahJ1ZZ1X1Kigu+/ QPGOPy34NYRQBCHzw2hlILFEQ4GJBkCfFa//FXcXWbVv8lfGnYI1EvVMB3ccbc80 OaG/QVtmrg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:47:58 2026 by rpki-client