$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: LIQWVM3Wyu8T+vAuBeTkiRswyaS0asD64SEDsY09kAY= Subject key identifier: B7:A1:6D:F2:DB:CA:E6:F3:D6:D0:50:D4:DE:00:33:B9:57:5A:BA:F9 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 4C0ACB48E35E4B514913853786F65CFF61D7938C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 03:41:07 +0000 Manifest this update: Sat 13 Jun 2026 03:36:07 +0000 Manifest next update: Sun 14 Jun 2026 07:19:07 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 2: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 3: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 4: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 5: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 6: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 1oYZmaFtAC0PcQGOHTlZDtbJgrkbFE4d10bBPqSLwWA=) 7: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 8: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 9: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 10: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 11: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 12: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0a:cb:48:e3:5e:4b:51:49:13:85:37:86:f6:5c:ff:61:d7:93:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jun 13 03:36:07 2026 GMT Not After : Jun 14 07:19:07 2026 GMT Subject: CN=B7A16DF2DBCAE6F3D6D050D4DE0033B9575ABAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:f8:64:ce:a1:92:92:bc:38:4e:da:f0:6e: e5:64:16:90:6b:18:81:cf:26:ef:6c:e9:6e:86:7b: 77:a9:ee:50:51:ca:c0:b6:ad:04:8c:f9:36:f4:e5: 9f:7f:2e:a7:37:5d:4c:90:72:92:06:5f:ba:8f:db: 31:1a:ed:34:2c:79:22:d1:a0:ef:e3:88:b6:64:cd: df:bf:b1:ce:46:b4:12:da:14:a2:54:29:03:66:cf: 99:36:9f:35:e1:9e:c8:44:11:40:d7:8f:c0:f4:c9: 45:5e:47:1d:8f:46:f7:f1:10:7c:b9:fb:c1:89:89: c5:8c:94:10:13:6d:67:d8:f0:c4:fd:1d:97:13:1d: 11:47:97:40:3e:57:7e:77:85:c0:0b:5d:ad:aa:6b: 88:55:84:f9:91:01:4b:10:ec:25:46:a3:34:46:40: d6:b2:0f:1b:ad:1a:bc:17:49:fe:b7:91:6c:1b:ad: 4f:6b:f4:1f:ac:11:9a:95:c2:62:37:9f:11:aa:bf: 00:b4:2f:c4:f7:11:e5:53:f4:45:65:03:07:9a:71: e7:64:77:38:a3:c0:e1:4f:5d:5b:40:7e:cb:5b:46: 3c:22:41:3d:f7:2b:41:f7:f0:7f:1f:d5:7a:23:66: d5:ef:4f:5a:0d:99:45:10:6a:65:72:0e:10:3f:39: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A1:6D:F2:DB:CA:E6:F3:D6:D0:50:D4:DE:00:33:B9:57:5A:BA:F9 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:04:6c:4e:43:14:fd:bc:8f:cf:b0:95:4c:86:1f:89:6c:78: 27:0c:d4:9b:99:a6:d5:21:ed:68:f0:91:8f:d3:b4:ff:7f:86: 3b:fc:62:fa:39:ce:91:bb:bc:28:ea:a0:0d:aa:27:d3:72:ba: ab:6e:a2:7b:19:06:c2:25:89:83:7e:b7:75:87:ad:2b:7f:b4: c6:f7:3a:18:51:1e:45:5e:3f:ab:f3:5a:d7:ea:c2:8e:96:1d: ce:64:02:5c:31:66:7f:96:3d:52:50:8d:8c:87:d5:42:62:b5: cd:70:1b:1f:f8:f3:f0:a2:93:25:10:bf:6d:91:70:bf:a5:82: c4:d0:51:10:fe:5b:97:a9:28:61:61:53:26:7f:a3:fb:d6:69: 94:d6:52:30:92:f2:cd:35:2f:49:b5:db:ab:ec:99:42:4f:57: 5b:6a:3f:e8:a7:78:f4:90:eb:87:8c:1c:bc:44:67:5b:09:44: 04:e4:1a:16:7d:ec:3c:5a:40:51:04:90:50:fe:97:c3:95:c5: ec:59:59:37:4c:51:53:b8:56:16:ce:e8:de:be:a0:1c:7a:7e: 27:6d:be:6b:74:d6:6b:73:4f:ee:98:f0:fb:5b:26:ea:f1:a3: 8b:ec:43:bf:d5:cd:2b:d1:bc:e1:8c:33:d5:27:44:ef:bb:86: d4:44:4b:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTArLSONeS1FJE4U3hvZc/2HXk4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA2MTMwMzM2MDdaFw0yNjA2MTQwNzE5MDdaMDMxMTAvBgNV BAMTKEI3QTE2REYyREJDQUU2RjNENkQwNTBENERFMDAzM0I5NTc1QUJBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7NfhkzqGSkrw4TtrwbuVkFpBr GIHPJu9s6W6Ge3ep7lBRysC2rQSM+Tb05Z9/Lqc3XUyQcpIGX7qP2zEa7TQseSLR oO/jiLZkzd+/sc5GtBLaFKJUKQNmz5k2nzXhnshEEUDXj8D0yUVeRx2PRvfxEHy5 +8GJicWMlBATbWfY8MT9HZcTHRFHl0A+V353hcALXa2qa4hVhPmRAUsQ7CVGozRG QNayDxutGrwXSf63kWwbrU9r9B+sEZqVwmI3nxGqvwC0L8T3EeVT9EVlAweacedk dzijwOFPXVtAfstbRjwiQT33K0H38H8f1XojZtXvT1oNmUUQamVyDhA/ObgfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt6Ft8tvK5vPW0FDU3gAzuVdauvkwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wRsTkMU/byP z7CVTIYfiWx4JwzUm5mm1SHtaPCRj9O0/3+GO/xi+jnOkbu8KOqgDaon03K6q26i exkGwiWJg363dYetK3+0xvc6GFEeRV4/q/Na1+rCjpYdzmQCXDFmf5Y9UlCNjIfV QmK1zXAbH/jz8KKTJRC/bZFwv6WCxNBREP5bl6koYWFTJn+j+9ZplNZSMJLyzTUv SbXbq+yZQk9XW2o/6Kd49JDrh4wcvERnWwlEBOQaFn3sPFpAUQSQUP6Xw5XF7FlZ N0xRU7hWFs7o3r6gHHp+J22+a3TWa3NP7pjw+1sm6vGji+xDv9XNK9G84Ywz1SdE 77uG1ERLsQ== -----END CERTIFICATE-----Generated at Sat Jun 13 18:32:05 2026 by rpki-client