$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 17oqzADJpfvJwQ1LPkctbMJ60IZ/6gmfl/LC56y8L+U= Subject key identifier: 0B:A5:2D:0F:3C:74:E1:8F:CE:B1:E9:E2:82:F0:5B:3D:16:20:0E:83 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 492953242D199356E809A1497E44E465524B326C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 013D Signing time: Sun 18 Oct 2026 11:29:44 +0000 Manifest this update: Sun 18 Oct 2026 11:24:44 +0000 Manifest next update: Wed 21 Oct 2026 14:40:44 +0000 Files and hashes: 1: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 4: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 5: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: 3byRjA6vhUT54owMRAXjKFi/2KOEF+4bbg8E1e6Lhp4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 14:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:29:53:24:2d:19:93:56:e8:09:a1:49:7e:44:e4:65:52:4b:32:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Oct 18 11:24:44 2026 GMT Not After : Oct 21 14:40:44 2026 GMT Subject: CN=0BA52D0F3C74E18FCEB1E9E282F05B3D16200E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:aa:ef:01:46:8d:09:ed:d2:14:83:de:e8:3d: 33:06:44:1f:a8:29:74:4c:c5:c4:a7:b0:2e:3e:03: 60:37:83:a6:e9:b5:a6:ed:ff:09:4b:aa:e3:33:d0: 6c:85:b5:59:9c:af:a2:85:ef:0e:b0:62:96:38:e8: ac:7b:ef:4f:31:7f:5e:1c:3a:77:1b:e0:eb:e7:b3: 9c:99:0d:ac:c5:e5:92:14:3e:6e:a1:15:78:57:fc: 52:3b:6a:fc:65:83:c0:a7:4f:56:fb:d4:79:60:6a: cb:dd:f2:8d:64:6e:68:2b:de:e4:ad:bf:ba:b5:2a: 15:6c:5f:6a:2c:6d:41:68:55:67:3a:ed:14:b7:71: 16:ce:28:02:98:cd:2e:0e:8b:d7:68:81:2a:7b:2a: d7:c9:e1:de:29:64:5c:29:cb:4b:ad:4d:73:fe:7f: 57:3e:d0:7f:c1:0c:67:02:d5:80:5b:95:2b:74:75: fd:80:93:56:79:5a:70:d4:96:04:fa:07:c0:42:16: 02:3e:ae:aa:79:6c:7d:08:11:17:f1:3d:b2:bc:91: 14:80:ee:6a:b4:63:d2:44:bb:66:dd:df:08:8a:72: e1:6f:e2:52:2c:7b:87:52:db:09:fa:e8:d5:e8:70: 90:e1:79:aa:ce:94:ce:33:c6:de:38:00:37:bc:d8: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A5:2D:0F:3C:74:E1:8F:CE:B1:E9:E2:82:F0:5B:3D:16:20:0E:83 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a6:4b:7f:a4:6e:89:c6:51:53:ae:fb:1c:eb:3c:79:82:c9: 1a:7c:ec:37:73:e7:9a:f0:62:27:68:2f:32:21:29:ce:89:d8: 74:fd:69:69:f7:99:32:d5:00:2e:49:f6:8f:a8:1b:04:80:02: ce:49:3e:f4:9c:2b:b0:ea:ca:e7:eb:b3:2a:e6:46:cf:0c:45: 4c:2f:2a:a6:db:d3:71:0e:2d:d8:ca:5e:1f:d3:95:d0:e5:f0: b4:19:f2:df:3b:ac:b8:a4:8b:f7:3a:67:54:87:c7:04:11:3b: 14:ff:9d:b8:af:74:85:8e:44:5e:14:f9:58:00:ed:ad:23:c7: 8c:c1:59:6c:dc:47:36:4f:a7:30:f6:20:c5:91:23:c0:8a:a8: f5:72:b0:65:68:9b:82:7f:8a:40:38:5a:5b:ae:7e:b4:6b:6d: 33:de:72:a4:73:3b:88:60:b3:95:fa:e8:2e:1d:86:eb:1c:27: 2f:c0:67:ce:a4:8a:f6:c2:d6:3e:90:87:09:7b:e6:31:2d:73: e4:34:ae:93:75:b6:70:b4:44:13:9c:8e:10:cd:b0:c0:df:a2: bd:db:fe:ff:08:2e:aa:c6:9a:c8:10:17:a2:08:2d:5f:7a:f8: e7:b1:c3:f1:91:d8:e4:db:46:a7:da:aa:ca:e2:4c:f5:eb:c0: b6:ab:ae:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSSlTJC0Zk1boCaFJfkTkZVJLMmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjEwMTgxMTI0NDRaFw0yNjEwMjExNDQwNDRaMDMxMTAvBgNV BAMTKDBCQTUyRDBGM0M3NEUxOEZDRUIxRTlFMjgyRjA1QjNEMTYyMDBFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCequ8BRo0J7dIUg97oPTMGRB+o KXRMxcSnsC4+A2A3g6bptabt/wlLquMz0GyFtVmcr6KF7w6wYpY46Kx7708xf14c Oncb4Ovns5yZDazF5ZIUPm6hFXhX/FI7avxlg8CnT1b71Hlgasvd8o1kbmgr3uSt v7q1KhVsX2osbUFoVWc67RS3cRbOKAKYzS4Oi9dogSp7KtfJ4d4pZFwpy0utTXP+ f1c+0H/BDGcC1YBblSt0df2Ak1Z5WnDUlgT6B8BCFgI+rqp5bH0IERfxPbK8kRSA 7mq0Y9JEu2bd3wiKcuFv4lIse4dS2wn66NXocJDhearOlM4zxt44ADe82BgBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC6UtDzx04Y/OsenigvBbPRYgDoMwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqZLf6RuicZR U677HOs8eYLJGnzsN3PnmvBiJ2gvMiEpzonYdP1pafeZMtUALkn2j6gbBIACzkk+ 9JwrsOrK5+uzKuZGzwxFTC8qptvTcQ4t2MpeH9OV0OXwtBny3zusuKSL9zpnVIfH BBE7FP+duK90hY5EXhT5WADtrSPHjMFZbNxHNk+nMPYgxZEjwIqo9XKwZWibgn+K QDhaW65+tGttM95ypHM7iGCzlfroLh2G6xwnL8BnzqSK9sLWPpCHCXvmMS1z5DSu k3W2cLREE5yOEM2wwN+ivdv+/wguqsaayBAXoggtX3r457HD8ZHY5NtGp9qqyuJM 9evAtquurg== -----END CERTIFICATE-----Generated at Mon Oct 19 06:42:29 2026 by rpki-client