$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: mIXseQd+PqAgnzEV5E7iFktZXXoH0iLTa339cW4swSA= Subject key identifier: 23:E4:04:14:F0:5F:13:B2:FA:33:01:CA:6B:A3:A7:5A:20:CC:A9:EE Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 614464314D9D36098D17E5CF09F0A874CDDDF1CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: FE Signing time: Wed 29 Jul 2026 09:13:58 +0000 Manifest this update: Wed 29 Jul 2026 09:08:58 +0000 Manifest next update: Thu 30 Jul 2026 13:01:58 +0000 Files and hashes: 1: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: WFT7ZMcnSrDqHnE44xtdQwxigSeP3f8ll7P4MBt1Ubo=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:64:31:4d:9d:36:09:8d:17:e5:cf:09:f0:a8:74:cd:dd:f1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jul 29 09:08:58 2026 GMT Not After : Jul 30 13:01:58 2026 GMT Subject: CN=23E40414F05F13B2FA3301CA6BA3A75A20CCA9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:70:5a:51:78:91:25:fe:18:be:d5:5b:12: b3:05:f6:5e:a2:c8:eb:ac:12:f9:ad:aa:8d:05:8b: 55:bb:bb:4b:f2:d6:a7:90:f1:89:7c:0b:6d:12:52: c2:9d:df:7a:bb:ad:71:ac:16:94:46:82:66:86:9b: a2:40:2c:7c:e6:c9:5f:41:7d:2d:c1:85:c0:cb:4d: db:a9:bb:fb:91:03:06:24:b2:cd:00:07:76:8e:8d: ec:c2:b0:db:0c:7c:fd:96:78:59:1d:6c:8b:83:72: b9:46:a7:c3:65:32:6f:19:84:0d:fc:89:f8:37:01: 82:e6:20:84:2f:60:8b:cf:0b:00:b8:07:43:6f:02: 0e:52:72:7a:21:d2:90:8a:41:2f:ec:42:8e:6d:fe: 2a:bb:81:23:02:0a:af:77:25:df:2a:05:07:49:60: df:5f:2f:a9:1a:da:04:46:58:82:f8:07:58:e4:f9: 10:29:3c:37:d9:f4:f2:94:9c:b3:3b:38:1b:77:c7: 6c:53:17:b5:3e:30:67:eb:8e:c8:16:83:c4:a5:fe: 2f:16:96:3a:d9:b6:f9:c1:f2:77:12:73:62:94:9c: 5f:26:04:b2:de:e6:87:4f:87:1d:f1:3e:8a:1a:16: 4c:ad:63:4b:36:9d:4e:e2:0f:b8:86:1b:d2:4e:fa: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:04:14:F0:5F:13:B2:FA:33:01:CA:6B:A3:A7:5A:20:CC:A9:EE X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:00:74:df:ed:d0:3c:32:d2:b8:4b:01:80:3e:a7:17:44:0b: a2:fa:2f:bb:c7:8b:8b:ce:6e:cb:4e:4d:3b:c8:4b:09:8b:7a: 93:48:54:07:56:12:45:20:53:ec:51:fd:a6:df:49:b5:93:18: 2f:ff:5f:11:cd:fc:b6:84:01:ba:e6:e5:0b:e8:a5:04:9e:75: 51:71:d2:9f:62:43:5e:47:4f:b5:6a:28:ef:0d:99:7d:10:fc: ba:ac:89:0b:ca:63:8e:0a:7d:31:64:a5:6c:f4:b6:c3:e9:43: 3e:bf:c5:d8:6a:95:78:c2:7f:9a:24:93:35:ec:ab:cb:a0:3d: 02:7c:95:09:4f:38:50:89:3d:c8:89:1a:04:92:bb:0b:42:47: fd:de:ff:a6:28:7e:d4:0f:f2:22:8f:19:31:f0:a0:f2:fa:3f: 02:bc:19:d6:68:75:f1:4f:71:14:48:cb:d9:ab:04:d5:33:2a: 5c:5f:4a:6e:38:4a:33:2d:ca:b6:c3:8f:3b:da:a2:e9:e4:20: 2e:55:e6:4d:d1:68:17:a6:3b:49:20:18:d9:86:e9:44:c0:72: 99:13:31:5f:f8:bf:0c:8f:93:d0:82:81:9d:13:24:7c:76:66: 81:d0:fb:a9:59:79:e3:a1:c1:63:ae:6f:9f:9e:6b:50:d9:c3: bd:c6:04:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYURkMU2dNgmNF+XPCfCodM3d8cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA3MjkwOTA4NThaFw0yNjA3MzAxMzAxNThaMDMxMTAvBgNV BAMTKDIzRTQwNDE0RjA1RjEzQjJGQTMzMDFDQTZCQTNBNzVBMjBDQ0E5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPnBaUXiRJf4YvtVbErMF9l6i yOusEvmtqo0Fi1W7u0vy1qeQ8Yl8C20SUsKd33q7rXGsFpRGgmaGm6JALHzmyV9B fS3BhcDLTdupu/uRAwYkss0AB3aOjezCsNsMfP2WeFkdbIuDcrlGp8NlMm8ZhA38 ifg3AYLmIIQvYIvPCwC4B0NvAg5Scnoh0pCKQS/sQo5t/iq7gSMCCq93Jd8qBQdJ YN9fL6ka2gRGWIL4B1jk+RApPDfZ9PKUnLM7OBt3x2xTF7U+MGfrjsgWg8Sl/i8W ljrZtvnB8ncSc2KUnF8mBLLe5odPhx3xPooaFkytY0s2nU7iD7iGG9JO+jp/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI+QEFPBfE7L6MwHKa6OnWiDMqe4wHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwB03+3QPDLS uEsBgD6nF0QLovovu8eLi85uy05NO8hLCYt6k0hUB1YSRSBT7FH9pt9JtZMYL/9f Ec38toQBuublC+ilBJ51UXHSn2JDXkdPtWoo7w2ZfRD8uqyJC8pjjgp9MWSlbPS2 w+lDPr/F2GqVeMJ/miSTNeyry6A9AnyVCU84UIk9yIkaBJK7C0JH/d7/pih+1A/y Io8ZMfCg8vo/ArwZ1mh18U9xFEjL2asE1TMqXF9KbjhKMy3KtsOPO9qi6eQgLlXm TdFoF6Y7SSAY2YbpRMBymRMxX/i/DI+T0IKBnRMkfHZmgdD7qVl546HBY65vn55r UNnDvcYEfA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:55 2026 by rpki-client