$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: vp4lC7GIvTMbvCOtXhLuZZhC4vUaAKwJxPp2OZaHlDY= Subject key identifier: 55:7B:C0:6A:97:7E:84:8A:B2:A1:DE:54:E8:67:C6:36:0D:76:96:68 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 545EC0C3852664D70ED05B6C6C601909FEDDE916 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0100 Signing time: Tue 28 Jul 2026 12:56:50 +0000 Manifest this update: Tue 28 Jul 2026 12:51:50 +0000 Manifest next update: Wed 29 Jul 2026 13:15:50 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 2: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 3: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 4: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: hcxd2ihf509brWmJGV3h0yELpFPZYJ0tt+JwQ7wjab0=) 5: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 6: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 7: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 8: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 9: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 10: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 11: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 12: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5e:c0:c3:85:26:64:d7:0e:d0:5b:6c:6c:60:19:09:fe:dd:e9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jul 28 12:51:50 2026 GMT Not After : Jul 29 13:15:50 2026 GMT Subject: CN=557BC06A977E848AB2A1DE54E867C6360D769668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:eb:8b:44:47:63:0f:7f:41:79:98:2c:73: f0:30:b5:8e:d2:cc:5d:03:b1:82:fc:5b:1c:86:87: a9:ed:df:c2:ea:c4:0a:db:8a:0f:56:0f:4f:7f:bf: e4:6e:25:33:a7:56:b8:21:04:fd:af:38:78:d6:f7: ac:44:df:9b:e8:d4:58:ae:8c:3f:f6:ce:dd:44:01: 87:ad:0b:2e:8b:0e:f8:56:64:e7:96:5c:06:c7:e8: 0b:16:9f:f2:77:1a:0c:6c:d5:5c:d4:10:ba:89:64: 68:0e:a2:1c:96:d1:b4:4c:bc:7d:65:bd:c5:09:1d: 80:70:52:22:65:1d:c6:bf:71:9d:ba:00:57:ed:69: b1:a5:56:52:db:99:1d:74:57:17:f5:6f:1f:c5:f8: cb:b9:24:fa:a9:0c:db:6a:48:f4:f2:c6:c8:db:4a: b6:e6:f7:dc:84:63:8b:1a:07:05:bd:a2:b6:6c:37: dd:ae:4e:ff:ac:58:5c:7c:0c:54:0f:0a:0a:5f:04: 21:3f:2f:39:ad:13:13:1e:30:73:f1:37:ea:9b:d5: 53:ac:38:3b:6d:73:82:ce:48:dc:58:5e:3b:63:97: 83:23:96:05:7f:7d:d8:22:0b:f4:cf:8e:b9:96:67: f4:e9:bc:5a:49:56:c3:c3:12:c2:12:81:dc:08:91: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:C0:6A:97:7E:84:8A:B2:A1:DE:54:E8:67:C6:36:0D:76:96:68 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:69:a2:d0:e2:39:02:48:18:b2:de:0e:fb:9c:16:40:82:ba: 7c:d4:4b:5d:8b:b9:0f:56:aa:0f:8e:67:ca:d2:0a:17:37:bf: e8:af:de:78:fd:4e:63:da:71:6b:fb:55:78:ab:a2:6e:3c:3e: af:82:a8:ed:b8:ad:d7:41:aa:7d:1a:71:e2:10:3e:08:f4:ff: 4b:44:18:4c:ad:61:9c:0d:c7:5f:71:dd:08:e5:85:6b:90:80: 34:79:dc:7e:52:35:ab:37:68:f3:35:4e:c2:74:6d:d6:86:19: d4:5d:9b:8e:40:a0:7d:81:e8:c1:f1:e2:4c:1e:30:41:9d:b4: fc:c5:d5:49:f1:03:19:ba:4f:7e:06:7e:40:d2:e5:ae:71:c7: b6:58:62:e6:77:d6:33:73:b9:d6:ce:a2:99:21:35:dc:dc:f7: f0:c4:8a:ce:7a:f0:82:54:c1:24:99:a3:cc:df:0e:4e:21:aa: 42:8a:f3:eb:fa:cf:e2:95:45:9d:73:29:2f:b5:ca:2d:55:81: f7:bd:10:0f:ec:d8:73:0e:52:62:fe:b5:ab:7e:6a:fb:30:ca: c9:7e:ee:4b:ce:36:cd:0f:44:76:d8:5a:0b:90:ad:e5:93:9b: 50:d3:d3:92:86:f6:35:76:07:a9:5e:c7:9b:9d:bc:3e:30:76: 67:e9:31:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVF7Aw4UmZNcO0FtsbGAZCf7d6RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA3MjgxMjUxNTBaFw0yNjA3MjkxMzE1NTBaMDMxMTAvBgNV BAMTKDU1N0JDMDZBOTc3RTg0OEFCMkExREU1NEU4NjdDNjM2MEQ3Njk2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmUeuLREdjD39BeZgsc/AwtY7S zF0DsYL8WxyGh6nt38LqxArbig9WD09/v+RuJTOnVrghBP2vOHjW96xE35vo1Fiu jD/2zt1EAYetCy6LDvhWZOeWXAbH6AsWn/J3Ggxs1VzUELqJZGgOohyW0bRMvH1l vcUJHYBwUiJlHca/cZ26AFftabGlVlLbmR10Vxf1bx/F+Mu5JPqpDNtqSPTyxsjb Srbm99yEY4saBwW9orZsN92uTv+sWFx8DFQPCgpfBCE/LzmtExMeMHPxN+qb1VOs ODttc4LOSNxYXjtjl4MjlgV/fdgiC/TPjrmWZ/TpvFpJVsPDEsISgdwIkaQDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVXvAapd+hIqyod5U6GfGNg12lmgwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Gmi0OI5AkgY st4O+5wWQIK6fNRLXYu5D1aqD45nytIKFze/6K/eeP1OY9pxa/tVeKuibjw+r4Ko 7bit10GqfRpx4hA+CPT/S0QYTK1hnA3HX3HdCOWFa5CANHncflI1qzdo8zVOwnRt 1oYZ1F2bjkCgfYHowfHiTB4wQZ20/MXVSfEDGbpPfgZ+QNLlrnHHtlhi5nfWM3O5 1s6imSE13Nz38MSKznrwglTBJJmjzN8OTiGqQorz6/rP4pVFnXMpL7XKLVWB970Q D+zYcw5SYv61q35q+zDKyX7uS842zQ9EdthaC5Ct5ZObUNPTkob2NXYHqV7Hm528 PjB2Z+kxdA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:36:38 2026 by rpki-client