$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: hgaAdjA7tmVvjMZVh2aIVuueCmSgY66Q01BWc4Jg9K8= Subject key identifier: 44:1A:EC:63:55:CD:A2:17:B4:CA:50:C0:51:CC:AB:A0:C5:FF:EE:CA Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 29E7B38DF067B3F3D00D4B985B97514EB9ED1BF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:18:16 +0000 Manifest this update: Mon 02 Mar 2026 07:13:16 +0000 Manifest next update: Tue 03 Mar 2026 11:03:16 +0000 Files and hashes: 1: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 2: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: lzMPXF0142mPG6bFhYDD+5EPF1AW/dHYK41tZDJf5F4=) 3: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 4: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 5: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 6: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 7: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 8: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 9: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 10: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 11: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 12: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e7:b3:8d:f0:67:b3:f3:d0:0d:4b:98:5b:97:51:4e:b9:ed:1b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Mar 2 07:13:16 2026 GMT Not After : Mar 3 11:03:16 2026 GMT Subject: CN=441AEC6355CDA217B4CA50C051CCABA0C5FFEECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:a7:6b:5a:d4:f6:a9:43:52:5d:fe:c0:de: da:f3:85:c9:05:1e:ea:3b:ad:1d:82:a2:39:66:c8: 57:49:23:68:10:c7:ca:af:fe:f5:7a:64:83:c4:7b: 72:e9:87:ab:1d:01:91:56:f8:29:14:d0:3f:ec:13: 40:48:dd:6f:e2:4f:41:a2:46:e3:e4:1b:28:82:9c: c3:07:21:ae:24:0e:a1:cf:ab:9d:ab:ea:97:30:7b: b7:49:df:8e:44:10:72:c6:5a:b1:70:e7:bb:15:04: cf:3d:54:fb:d7:ec:97:d8:2d:3a:87:70:c7:15:00: 73:fe:35:69:31:29:58:57:6e:51:e1:9c:3e:75:c3: 0f:eb:55:f7:f5:20:b4:ca:bf:d6:4f:f4:58:c3:be: 41:1d:6d:5a:10:13:19:fb:66:16:e3:78:77:ed:01: 3e:97:19:4c:9c:85:1a:24:f2:11:e7:bc:9e:8f:ad: 3e:ce:5c:1a:35:c3:1b:6e:62:70:cc:f7:ff:df:6b: 13:ff:7d:fd:c3:c9:c2:bd:08:0f:30:1d:a0:ed:d4: 42:c8:59:bc:fc:fe:57:57:66:42:34:71:9e:18:27: a3:84:06:a0:e7:f5:0b:4f:d8:e3:2d:f3:90:f7:b8: 51:d0:f3:df:a4:d2:32:99:2b:99:93:32:b8:d2:88: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:EC:63:55:CD:A2:17:B4:CA:50:C0:51:CC:AB:A0:C5:FF:EE:CA X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3d:de:bc:e7:6d:b9:0b:1c:6b:8e:72:fb:d8:80:33:23:b3: 08:07:b1:44:ec:24:7a:12:80:2d:da:47:8a:f0:d1:cb:49:72: 5d:62:b5:ee:c1:b2:31:32:78:ea:6f:2b:50:7f:bf:3b:cc:e7: 4b:22:bf:40:72:10:b2:36:6b:d7:bf:45:95:7a:48:9d:f5:3b: ed:fb:8e:6b:49:5c:d9:ee:f9:4b:2a:02:f2:ff:a3:28:5f:38: 24:f8:11:93:9a:f2:39:e7:3c:bc:d3:d0:95:cf:a6:b6:f2:81: 92:2c:f1:b1:7a:2d:e4:9c:70:a0:3d:a0:2d:be:3d:de:d7:f4: 41:79:58:87:10:56:74:86:9a:ba:57:12:c9:e0:03:26:c7:65: fa:5f:0f:71:e9:a8:8d:1f:2f:2e:73:1b:09:ca:9b:46:19:da: 53:d5:4c:01:42:e0:d8:0e:43:e1:bf:ea:80:b4:9d:6d:f7:ed: db:2c:02:a8:2a:a5:07:0e:1a:58:63:d4:c8:93:37:f3:81:09: 48:9b:7e:02:b3:31:60:d4:ed:6b:35:da:9e:fc:69:a9:01:ab: 3d:82:79:e3:a4:27:ea:02:bd:86:90:93:c7:56:85:e1:be:40: 2f:78:3d:48:37:22:ed:e4:56:50:0a:49:ca:3a:40:6c:99:b7: c0:e6:26:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKeezjfBns/PQDUuYW5dRTrntG/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAzMDIwNzEzMTZaFw0yNjAzMDMxMTAzMTZaMDMxMTAvBgNV BAMTKDQ0MUFFQzYzNTVDREEyMTdCNENBNTBDMDUxQ0NBQkEwQzVGRkVFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHadrWtT2qUNSXf7A3trzhckF Huo7rR2CojlmyFdJI2gQx8qv/vV6ZIPEe3Lph6sdAZFW+CkU0D/sE0BI3W/iT0Gi RuPkGyiCnMMHIa4kDqHPq52r6pcwe7dJ345EEHLGWrFw57sVBM89VPvX7JfYLTqH cMcVAHP+NWkxKVhXblHhnD51ww/rVff1ILTKv9ZP9FjDvkEdbVoQExn7ZhbjeHft AT6XGUychRok8hHnvJ6PrT7OXBo1wxtuYnDM9//faxP/ff3DycK9CA8wHaDt1ELI Wbz8/ldXZkI0cZ4YJ6OEBqDn9QtP2OMt85D3uFHQ89+k0jKZK5mTMrjSiLJtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURBrsY1XNohe0ylDAUcyroMX/7sowHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj3evOdtuQsc a45y+9iAMyOzCAexROwkehKALdpHivDRy0lyXWK17sGyMTJ46m8rUH+/O8znSyK/ QHIQsjZr179FlXpInfU77fuOa0lc2e75SyoC8v+jKF84JPgRk5ryOec8vNPQlc+m tvKBkizxsXot5JxwoD2gLb493tf0QXlYhxBWdIaaulcSyeADJsdl+l8PcemojR8v LnMbCcqbRhnaU9VMAULg2A5D4b/qgLSdbfft2ywCqCqlBw4aWGPUyJM384EJSJt+ ArMxYNTtazXanvxpqQGrPYJ546Qn6gK9hpCTx1aF4b5AL3g9SDci7eRWUApJyjpA bJm3wOYmXQ== -----END CERTIFICATE-----Generated at Tue Mar 3 01:57:13 2026 by rpki-client