$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: 7/Mxa/ojC3e+iuZXJ0/j3LYckvmPf9eoRsaECBlHEwI= Subject key identifier: 5A:6A:F0:F2:A6:F4:AE:A0:81:73:73:D5:7A:85:DB:2B:EC:2E:36:FC Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 01FD45B5F1C5C3B947D410072661CDC990D39919 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 05:24:40 +0000 Manifest this update: Fri 17 Apr 2026 05:19:40 +0000 Manifest next update: Sat 18 Apr 2026 05:58:40 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 2: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 3: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 4: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 5: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 6: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 7: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 8: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 1vnW6VZH3taHImD5wPajjoaS/3OQBVbHN/ZawLx4xRk=) 9: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 10: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 11: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 12: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fd:45:b5:f1:c5:c3:b9:47:d4:10:07:26:61:cd:c9:90:d3:99:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Apr 17 05:19:40 2026 GMT Not After : Apr 18 05:58:40 2026 GMT Subject: CN=5A6AF0F2A6F4AEA0817373D57A85DB2BEC2E36FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:06:1f:8d:ac:90:8e:0b:7c:9a:b4:f8:5b: 72:76:e6:f7:18:05:ee:19:09:68:58:43:57:18:30: 99:f0:84:b2:5c:53:f1:91:9b:eb:8b:6b:0c:d9:c2: 18:c5:11:43:d5:64:7b:5d:fc:5b:c3:75:1d:13:8b: c7:37:83:64:58:cf:ad:f2:c0:5c:a4:e8:7d:05:92: f3:e2:1e:55:fe:a9:4b:75:f1:79:22:97:f1:f0:d4: 32:84:67:5c:c2:1b:79:4b:72:c7:a6:b4:d3:86:95: 9c:8e:a9:90:77:cc:18:03:d4:a5:5d:3d:3b:cc:0c: 83:aa:47:b8:ee:21:b7:f5:ad:4e:8f:33:41:f1:33: e5:0f:21:a7:f0:32:2e:e7:17:c6:25:d4:d2:6f:69: 81:e0:b1:e1:27:86:d3:dd:55:28:f8:39:2f:0e:a1: 97:ec:e9:4e:e3:19:ef:b3:77:10:3c:07:53:68:e0: 85:0c:b4:e9:67:52:39:0f:37:0a:fd:2c:17:fd:c0: 88:5f:3a:62:b5:b1:95:93:83:f3:17:b0:01:05:df: e6:24:46:f3:e7:55:13:f8:a0:c2:2e:2f:9c:28:d8: a4:ef:33:b7:d2:e1:c3:36:26:64:8f:5a:15:e5:fe: ed:e4:b5:b0:47:97:1a:7e:52:75:80:6e:11:59:92: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:F0:F2:A6:F4:AE:A0:81:73:73:D5:7A:85:DB:2B:EC:2E:36:FC X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2d:ea:b6:54:65:bd:52:64:9f:d4:c8:45:0f:56:8c:ae:05: 13:34:61:c1:dd:ce:d0:3b:50:cb:36:34:87:f0:fc:51:08:5d: 29:f6:3a:80:5f:33:28:e7:73:95:a9:b0:06:3a:c2:70:62:c8: 6e:bb:07:e7:8c:60:0c:60:8f:75:3b:db:36:84:88:d2:b5:ba: 83:c2:bb:7f:cd:13:0a:2a:93:ce:16:1e:43:e7:2f:fc:88:d2: 18:8c:f2:02:4d:97:4f:d2:0f:d4:25:e3:8a:96:2e:3c:b5:eb: ba:51:c9:fd:6e:37:86:2e:f7:d9:76:8e:4a:94:b6:37:f4:37: 83:be:f2:f1:db:3e:fe:a1:a2:89:f3:2c:67:4f:cf:c7:ec:64: 36:6d:f5:82:f3:36:d1:12:ec:10:90:1f:91:ed:da:97:c8:e4: 07:83:de:93:38:ad:a4:12:8b:73:8b:66:a7:09:35:87:41:64: 1a:ff:1c:65:cf:94:eb:58:b2:fe:f3:c5:29:78:e7:6b:53:a9: e8:b2:96:8b:b4:74:d3:0f:3e:b8:44:20:a5:2f:85:d1:c0:52: 61:50:27:d5:29:8b:93:9a:8f:aa:92:da:8d:98:65:e6:5d:b4: f2:20:86:da:06:0a:fc:0b:e5:ad:21:11:f9:5d:0a:1f:cd:d2: 65:b6:2b:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAf1FtfHFw7lH1BAHJmHNyZDTmRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA0MTcwNTE5NDBaFw0yNjA0MTgwNTU4NDBaMDMxMTAvBgNV BAMTKDVBNkFGMEYyQTZGNEFFQTA4MTczNzNENTdBODVEQjJCRUMyRTM2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKQYfjayQjgt8mrT4W3J25vcY Be4ZCWhYQ1cYMJnwhLJcU/GRm+uLawzZwhjFEUPVZHtd/FvDdR0Ti8c3g2RYz63y wFyk6H0FkvPiHlX+qUt18Xkil/Hw1DKEZ1zCG3lLcsemtNOGlZyOqZB3zBgD1KVd PTvMDIOqR7juIbf1rU6PM0HxM+UPIafwMi7nF8Yl1NJvaYHgseEnhtPdVSj4OS8O oZfs6U7jGe+zdxA8B1No4IUMtOlnUjkPNwr9LBf9wIhfOmK1sZWTg/MXsAEF3+Yk RvPnVRP4oMIuL5wo2KTvM7fS4cM2JmSPWhXl/u3ktbBHlxp+UnWAbhFZkl/FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWmrw8qb0rqCBc3PVeoXbK+wuNvwwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy3qtlRlvVJk n9TIRQ9WjK4FEzRhwd3O0DtQyzY0h/D8UQhdKfY6gF8zKOdzlamwBjrCcGLIbrsH 54xgDGCPdTvbNoSI0rW6g8K7f80TCiqTzhYeQ+cv/IjSGIzyAk2XT9IP1CXjipYu PLXrulHJ/W43hi732XaOSpS2N/Q3g77y8ds+/qGiifMsZ0/Px+xkNm31gvM20RLs EJAfke3al8jkB4PekzitpBKLc4tmpwk1h0FkGv8cZc+U61iy/vPFKXjna1Op6LKW i7R00w8+uEQgpS+F0cBSYVAn1SmLk5qPqpLajZhl5l208iCG2gYK/AvlrSER+V0K H83SZbYrMw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:37:02 2026 by rpki-client