$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: gaM8d451P7vRmzLLrChpUirYTiTnVRm9ui8OnC+Bn+A= Subject key identifier: 1D:61:E1:FD:C7:3C:BD:1B:8F:82:69:80:4F:8D:36:54:7F:D1:8A:C5 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 42E63916F9AB851C8E08A706C0A21714FC940D01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 12:09:43 +0000 Manifest this update: Fri 17 Apr 2026 12:04:43 +0000 Manifest next update: Sat 18 Apr 2026 15:52:43 +0000 Files and hashes: 1: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: vi701VCdFsH1VWTYAD54mJVvcTg5YAg1jTQWmavcmfU=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e6:39:16:f9:ab:85:1c:8e:08:a7:06:c0:a2:17:14:fc:94:0d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Apr 17 12:04:43 2026 GMT Not After : Apr 18 15:52:43 2026 GMT Subject: CN=1D61E1FDC73CBD1B8F8269804F8D36547FD18AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:12:c8:ef:41:2f:a3:9d:30:d3:52:9a:f7: 77:60:7f:68:67:55:bf:eb:91:67:bf:32:68:3d:c1: ef:2c:fb:fa:22:73:97:13:fb:72:b7:31:f3:ba:a1: 22:18:0b:aa:08:d3:6e:90:45:f8:d7:92:c3:ef:5d: 3d:4d:71:0f:b2:08:bf:f0:03:a0:ba:fc:1f:5b:7d: 9e:62:60:4c:28:62:98:a5:bf:ba:93:1a:db:c9:a2: 4b:81:10:cf:69:9b:63:30:83:b0:08:b9:48:6e:26: 61:ab:16:50:99:d2:22:b6:dd:23:1c:b7:fa:90:2c: 8f:c4:e8:cb:55:4a:4b:1d:5f:25:5d:2b:d1:1a:ae: 65:04:35:4b:e9:65:cf:d2:ed:71:3e:49:92:a3:d8: bc:97:85:8c:c0:7a:5d:04:34:b3:e9:37:38:b9:18: ba:6a:c6:95:9e:93:5e:36:78:eb:1f:86:cb:d1:1b: b0:80:5d:e8:d0:77:b4:61:08:14:63:0b:31:1f:09: 10:ab:40:ff:a6:06:12:47:94:43:f1:7c:f4:58:82: 90:6f:3f:39:fe:b1:29:db:11:d5:0e:e3:4e:35:24: 80:7d:87:6a:4d:cc:60:5f:4a:bd:91:e9:71:52:54: 18:47:1c:98:f5:9a:3f:67:a9:d5:02:72:9e:93:27: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:61:E1:FD:C7:3C:BD:1B:8F:82:69:80:4F:8D:36:54:7F:D1:8A:C5 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0c:88:6e:33:5c:33:de:8d:b0:9c:ea:eb:3b:22:76:f2:61: b7:7e:19:ac:e4:55:8e:d0:fe:a8:82:34:92:58:2a:6a:79:67: 0c:0b:c4:b4:32:7b:53:35:05:9f:85:42:93:cf:a3:f6:bb:c6: 10:eb:67:fd:57:6d:39:9e:71:29:60:67:c0:c8:8c:bc:da:3b: 11:14:27:d7:47:56:0c:78:96:9c:2a:e1:06:35:95:58:5e:b7: ed:7d:5e:e0:3a:05:2a:f1:d8:05:93:39:41:8c:24:ca:4b:40: ba:67:68:1e:26:fd:de:e5:61:26:26:1c:5c:c6:0b:12:b0:e6: 41:11:30:c4:95:84:21:6b:b9:4d:de:12:d4:4b:5f:ff:b3:32: 27:ca:0a:0e:2e:4c:a3:69:fa:06:93:80:76:89:64:ca:fa:fd: 31:b5:37:f1:4d:de:49:e8:34:98:43:6d:bf:60:36:2b:97:79: d2:ad:57:2f:10:89:b9:0f:98:4a:d3:94:dd:3b:d9:eb:d1:97: 5f:f7:e4:f3:9e:d9:b4:fe:53:8b:ee:ae:53:e4:3a:a5:c0:5c: 00:c6:41:3d:99:0b:36:10:60:6e:ee:32:bf:68:c3:2a:ee:fa: 71:4a:db:d5:dd:9b:dd:7a:fb:11:d0:f3:24:42:8e:78:d1:41: 41:a2:7c:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQuY5FvmrhRyOCKcGwKIXFPyUDQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA0MTcxMjA0NDNaFw0yNjA0MTgxNTUyNDNaMDMxMTAvBgNV BAMTKDFENjFFMUZEQzczQ0JEMUI4RjgyNjk4MDRGOEQzNjU0N0ZEMThBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkhLI70Evo50w01Ka93dgf2hn Vb/rkWe/Mmg9we8s+/oic5cT+3K3MfO6oSIYC6oI026QRfjXksPvXT1NcQ+yCL/w A6C6/B9bfZ5iYEwoYpilv7qTGtvJokuBEM9pm2Mwg7AIuUhuJmGrFlCZ0iK23SMc t/qQLI/E6MtVSksdXyVdK9EarmUENUvpZc/S7XE+SZKj2LyXhYzAel0ENLPpNzi5 GLpqxpWek142eOsfhsvRG7CAXejQd7RhCBRjCzEfCRCrQP+mBhJHlEPxfPRYgpBv Pzn+sSnbEdUO4041JIB9h2pNzGBfSr2R6XFSVBhHHJj1mj9nqdUCcp6TJxBtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHWHh/cc8vRuPgmmAT402VH/RisUwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAyIbjNcM96N sJzq6zsidvJht34ZrORVjtD+qII0klgqanlnDAvEtDJ7UzUFn4VCk8+j9rvGEOtn /VdtOZ5xKWBnwMiMvNo7ERQn10dWDHiWnCrhBjWVWF637X1e4DoFKvHYBZM5QYwk yktAumdoHib93uVhJiYcXMYLErDmQREwxJWEIWu5Td4S1Etf/7MyJ8oKDi5Mo2n6 BpOAdolkyvr9MbU38U3eSeg0mENtv2A2K5d50q1XLxCJuQ+YStOU3TvZ69GXX/fk 857ZtP5Ti+6uU+Q6pcBcAMZBPZkLNhBgbu4yv2jDKu76cUrb1d2b3Xr7EdDzJEKO eNFBQaJ8Kg== -----END CERTIFICATE-----Generated at Sat Apr 18 06:33:43 2026 by rpki-client