$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: gfJX1ge6r2d5HZ76g0ao/CtOZimQ8tU23284jOjIebc= Subject key identifier: B5:C5:D9:F9:36:4E:1D:49:B0:C4:FF:91:55:A4:AD:E8:C1:52:0D:BA Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 3F05E5E1F7EAF3EC3BE62FD008C3E23657EDA3A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 00:13:16 +0000 Manifest this update: Mon 02 Mar 2026 00:08:16 +0000 Manifest next update: Tue 03 Mar 2026 03:07:16 +0000 Files and hashes: 1: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: nAI+Ty7XbD9OKDWtPaIhtiyHeD0gWu7fI998+tdrX1E=) 2: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:05:e5:e1:f7:ea:f3:ec:3b:e6:2f:d0:08:c3:e2:36:57:ed:a3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Mar 2 00:08:16 2026 GMT Not After : Mar 3 03:07:16 2026 GMT Subject: CN=B5C5D9F9364E1D49B0C4FF9155A4ADE8C1520DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:11:0f:fa:a1:61:f9:f8:0d:e4:51:c8:96: f1:65:d9:ac:49:ed:3f:f6:d4:78:c9:56:bf:ac:9e: c8:81:5d:83:3a:5c:04:92:c3:0d:b3:70:ba:0f:5c: f7:f7:75:0a:7c:f8:8a:23:33:54:b4:7c:fd:57:59: 9f:b8:36:ab:2c:72:6f:ee:7a:cb:b9:6b:fb:b5:d4: 39:6d:33:ea:d9:73:b0:e3:5a:44:b5:a8:71:ba:f4: f3:44:4a:5e:5a:ff:e0:4f:9d:23:14:53:63:48:c8: eb:f9:74:24:fd:81:bd:af:ce:31:32:5f:a3:6a:b4: 7e:80:ea:bb:e3:ac:58:a9:e9:0d:42:32:3e:5d:a8: 21:7d:0e:c4:c4:ff:c5:b8:f8:cc:7d:9e:33:69:06: e2:37:91:8d:8c:c1:82:8f:54:41:7f:a8:86:f8:3b: e8:13:dd:d6:f4:c0:08:a7:11:3a:4a:c7:ef:7c:93: 72:fc:aa:d4:56:5e:eb:63:77:ae:24:98:b5:07:2a: 62:0f:7f:b2:8c:01:54:97:0a:d3:94:52:c3:9c:42: 98:4a:82:54:39:07:b2:6e:2d:8f:fd:38:c9:a4:1f: 40:a2:bc:ae:31:89:06:ad:30:f4:24:11:6c:8d:2c: f6:88:2a:ce:ce:7e:61:66:e3:77:95:b4:f4:05:b1: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C5:D9:F9:36:4E:1D:49:B0:C4:FF:91:55:A4:AD:E8:C1:52:0D:BA X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3f:91:b5:48:99:2a:cc:91:0d:c2:06:81:6a:11:01:e9:36: 81:27:69:4c:92:af:f2:69:83:0f:f5:a2:f8:3f:bd:5a:ef:83: 4a:a5:bf:63:6b:49:a7:34:94:7e:10:99:6c:64:3a:2b:b1:ed: 88:be:0d:52:8b:80:8c:a1:58:56:86:e1:69:a2:ef:27:da:80: ab:c2:3d:f3:68:fb:66:13:a0:28:1c:d5:84:68:03:f8:87:1d: 92:ba:1a:3c:c8:f2:37:90:32:24:cf:4a:aa:a7:f8:ec:7f:67: e7:a0:e4:40:b4:4d:b6:42:08:75:d1:17:16:a9:50:de:77:6f: 22:09:cf:0c:f6:68:f4:a4:00:45:99:e3:6b:15:04:aa:36:8c: 7a:35:46:42:37:98:00:44:b9:a5:84:7a:44:e3:6d:b3:e6:22: aa:d0:78:0b:23:61:d8:e9:1e:89:83:8e:94:ad:41:32:b6:32: c5:97:87:b0:e8:1e:34:cd:c9:c8:b2:ed:96:aa:d9:39:11:00: 6a:79:b6:70:9b:20:62:8c:62:e2:b1:21:26:bf:0f:e8:35:35: 86:81:e6:4e:16:c7:be:fb:af:fd:1b:ea:b8:ec:c8:c7:57:d4: 9b:b3:02:f7:cd:01:ee:db:1a:37:9c:62:84:58:56:dd:15:08: be:5d:4e:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPwXl4ffq8+w75i/QCMPiNlfto6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAzMDIwMDA4MTZaFw0yNjAzMDMwMzA3MTZaMDMxMTAvBgNV BAMTKEI1QzVEOUY5MzY0RTFENDlCMEM0RkY5MTU1QTRBREU4QzE1MjBEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8xEP+qFh+fgN5FHIlvFl2axJ 7T/21HjJVr+snsiBXYM6XASSww2zcLoPXPf3dQp8+IojM1S0fP1XWZ+4Nqsscm/u esu5a/u11DltM+rZc7DjWkS1qHG69PNESl5a/+BPnSMUU2NIyOv5dCT9gb2vzjEy X6NqtH6A6rvjrFip6Q1CMj5dqCF9DsTE/8W4+Mx9njNpBuI3kY2MwYKPVEF/qIb4 O+gT3db0wAinETpKx+98k3L8qtRWXutjd64kmLUHKmIPf7KMAVSXCtOUUsOcQphK glQ5B7JuLY/9OMmkH0CivK4xiQatMPQkEWyNLPaIKs7OfmFm43eVtPQFsbaxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtcXZ+TZOHUmwxP+RVaSt6MFSDbowHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj+RtUiZKsyR DcIGgWoRAek2gSdpTJKv8mmDD/Wi+D+9Wu+DSqW/Y2tJpzSUfhCZbGQ6K7HtiL4N UouAjKFYVobhaaLvJ9qAq8I982j7ZhOgKBzVhGgD+IcdkroaPMjyN5AyJM9Kqqf4 7H9n56DkQLRNtkIIddEXFqlQ3ndvIgnPDPZo9KQARZnjaxUEqjaMejVGQjeYAES5 pYR6RONts+YiqtB4CyNh2OkeiYOOlK1BMrYyxZeHsOgeNM3JyLLtlqrZOREAanm2 cJsgYoxi4rEhJr8P6DU1hoHmThbHvvuv/RvquOzIx1fUm7MC980B7tsaN5xihFhW 3RUIvl1Odw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:01:13 2026 by rpki-client