$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: lLTk1RddDmjydWiE/BwWcNWvUDAPcCJVhP2FYVLORQE= Subject key identifier: B2:7C:D2:32:BA:29:3B:79:52:F5:F0:8B:07:31:BE:C2:38:45:65:22 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 33BA4947A05A0E7651669E225E42A643E84AF717 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 17:06:58 +0000 Manifest this update: Sat 13 Jun 2026 17:01:58 +0000 Manifest next update: Sun 14 Jun 2026 19:58:58 +0000 Files and hashes: 1: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: D+KGb/DD1Ux18yzRJwFYVYLJ50/+209PJ/Sw7AYgpqg=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 4: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ba:49:47:a0:5a:0e:76:51:66:9e:22:5e:42:a6:43:e8:4a:f7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jun 13 17:01:58 2026 GMT Not After : Jun 14 19:58:58 2026 GMT Subject: CN=B27CD232BA293B7952F5F08B0731BEC238456522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:63:10:9c:01:f9:a4:ab:a4:dd:42:79:85: 07:0d:10:5e:ce:39:ac:83:e5:fa:67:26:29:b1:f6: a4:10:ec:a0:fc:f0:59:52:ef:27:6d:16:22:39:58: 39:b1:6f:42:46:e5:2d:28:0d:fe:bc:c8:3b:17:31: ac:01:54:58:62:a0:45:40:50:fb:84:86:29:28:6c: 1d:29:e6:6a:07:e9:68:53:59:3a:6e:0e:54:ca:66: 2f:63:38:34:6e:d2:32:f1:ae:be:39:ae:dc:59:69: 12:07:b7:e6:6b:18:6c:8f:bc:0e:67:30:67:e5:ba: 1c:2b:f8:a2:87:65:4b:dd:b1:28:85:3e:db:13:34: de:da:a8:9e:f9:de:41:37:9d:e7:a6:76:cf:b1:56: 6f:de:a1:c4:4d:ad:c2:f2:d4:45:a1:86:e0:33:b9: 88:f3:17:38:47:9e:b8:9b:f4:d1:c2:2b:93:08:95: 9e:9b:20:c0:f3:66:a4:67:ec:72:a6:eb:8a:26:9f: fc:e5:70:1d:b1:6e:d4:8c:cc:d5:a0:a2:55:6b:a9: a6:0a:fe:39:cf:ca:4e:3f:0d:4d:65:97:72:d4:38: a3:64:96:39:d8:f2:6d:02:a0:d5:e7:67:a1:c1:4b: 2c:aa:8e:ad:db:75:2c:73:3c:58:ec:dc:b9:ec:0f: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7C:D2:32:BA:29:3B:79:52:F5:F0:8B:07:31:BE:C2:38:45:65:22 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9a:a7:11:3f:b7:7c:94:3e:44:8b:47:f0:97:0d:67:97:04: 1a:c7:b7:c2:ba:08:df:80:71:ce:ff:d4:9a:46:dd:c7:55:03: 64:38:f4:a3:87:16:4d:20:06:25:a6:52:02:76:be:db:60:05: 3d:19:84:97:1a:b2:5e:6c:1c:a5:e6:67:bb:f8:f9:59:ce:31: 4d:bb:cc:8c:86:43:d5:c9:24:da:93:27:b5:2c:f1:24:d7:52: 36:d1:87:ee:15:96:1f:2f:d3:5f:2f:7b:07:df:c9:d9:93:67: aa:e0:a1:b2:ce:4e:27:97:23:4f:b4:06:96:63:ff:45:bd:61: 6a:83:28:a3:28:69:8e:57:c2:54:52:20:3d:9f:06:30:94:4b: ef:e9:c9:59:af:d3:53:cd:9b:6e:85:d1:88:b8:bf:65:2a:63: 50:b6:d5:9d:7f:ff:51:f6:3b:43:ab:85:cc:2a:8d:d3:0a:ab: af:19:e0:2d:64:4a:cf:32:ed:f1:03:4b:1a:8a:97:09:71:01: 72:10:ef:be:eb:83:81:1a:cd:7b:b9:bc:a2:ac:d7:7d:3e:e4: c5:ea:17:86:ea:59:d1:44:81:bb:25:bd:78:5d:9f:d0:24:f8: d9:69:84:f7:b2:96:bb:87:3f:2d:15:cc:4e:f5:ff:b6:a7:77: c6:58:b5:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM7pJR6BaDnZRZp4iXkKmQ+hK9xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA2MTMxNzAxNThaFw0yNjA2MTQxOTU4NThaMDMxMTAvBgNV BAMTKEIyN0NEMjMyQkEyOTNCNzk1MkY1RjA4QjA3MzFCRUMyMzg0NTY1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuq2MQnAH5pKuk3UJ5hQcNEF7O OayD5fpnJimx9qQQ7KD88FlS7ydtFiI5WDmxb0JG5S0oDf68yDsXMawBVFhioEVA UPuEhikobB0p5moH6WhTWTpuDlTKZi9jODRu0jLxrr45rtxZaRIHt+ZrGGyPvA5n MGfluhwr+KKHZUvdsSiFPtsTNN7aqJ753kE3neemds+xVm/eocRNrcLy1EWhhuAz uYjzFzhHnrib9NHCK5MIlZ6bIMDzZqRn7HKm64omn/zlcB2xbtSMzNWgolVrqaYK /jnPyk4/DU1ll3LUOKNkljnY8m0CoNXnZ6HBSyyqjq3bdSxzPFjs3LnsD2ejAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsnzSMropO3lS9fCLBzG+wjhFZSIwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZqnET+3fJQ+ RItH8JcNZ5cEGse3wroI34Bxzv/Umkbdx1UDZDj0o4cWTSAGJaZSAna+22AFPRmE lxqyXmwcpeZnu/j5Wc4xTbvMjIZD1ckk2pMntSzxJNdSNtGH7hWWHy/TXy97B9/J 2ZNnquChss5OJ5cjT7QGlmP/Rb1haoMooyhpjlfCVFIgPZ8GMJRL7+nJWa/TU82b boXRiLi/ZSpjULbVnX//UfY7Q6uFzCqN0wqrrxngLWRKzzLt8QNLGoqXCXEBchDv vuuDgRrNe7m8oqzXfT7kxeoXhupZ0USBuyW9eF2f0CT42WmE97KWu4c/LRXMTvX/ tqd3xli1cg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:44 2026 by rpki-client