$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: iJSk5XNDlEbkACWnupRzlxcuotgd+KCNhsAkohPiELM= Subject key identifier: 80:68:40:E4:8F:0E:F3:18:F6:F8:BA:5C:07:F3:E6:8C:A8:B0:13:77 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 297EF78F8E68E4E4F33C9ADE78E4E0F971431482 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0135 Signing time: Mon 21 Sep 2026 16:53:19 +0000 Manifest this update: Mon 21 Sep 2026 16:48:19 +0000 Manifest next update: Thu 24 Sep 2026 17:29:19 +0000 Files and hashes: 1: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: BqSmEbYdY/P66UZJKmtq+IFCi+rgUKsQEpEymv/CiTQ=) 2: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 3: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 4: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 5: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 6: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 7: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 8: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 9: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 10: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 11: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 12: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 13: 3230322e34362e3232342e302f32302d3234203d3e203137363233.roa (hash: 0pGCXDBtG0gqAtGWNS97q9PbYTdSArqdNnHw2SFffsg=) 14: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (hash: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7e:f7:8f:8e:68:e4:e4:f3:3c:9a:de:78:e4:e0:f9:71:43:14:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Sep 21 16:48:19 2026 GMT Not After : Sep 24 17:29:19 2026 GMT Subject: CN=806840E48F0EF318F6F8BA5C07F3E68CA8B01377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:5b:8d:35:4e:4d:98:0f:1f:71:f7:cc:9e: 04:8f:7d:ac:64:bc:31:7d:72:33:b0:87:e7:bd:ba: 56:ee:ea:67:20:6b:18:86:c9:2e:60:f3:2c:2a:ad: fc:c8:13:e4:d1:61:33:1c:e1:8a:62:df:70:35:f6: 00:0e:a0:be:a4:ca:82:a6:b1:67:9d:50:11:6d:ad: 77:bd:01:7b:88:60:c0:85:64:cb:68:d4:22:e6:3f: 4d:61:45:6a:2e:7d:31:5c:38:66:e9:ef:46:16:db: f3:4d:50:5d:d6:ef:bd:45:a0:dd:d9:96:24:7a:75: aa:fa:78:f1:83:d0:3d:1e:d2:af:ec:59:bf:b1:41: 64:dd:6f:97:f9:66:b2:b9:93:60:d5:c1:c8:76:1e: a8:80:ae:cb:b8:0d:48:08:c7:c2:fd:eb:29:31:53: c4:15:fd:0b:f6:b6:06:f0:9d:b8:70:30:84:c0:a4: ce:a7:25:26:c7:6c:92:cf:62:11:32:5e:b1:f0:8f: 44:04:12:d1:17:e9:20:3d:43:91:5c:48:b4:0f:ca: 56:54:80:61:ff:12:27:fd:2e:8a:d4:cb:2e:ac:7a: 77:c2:4f:0d:13:36:41:52:27:bc:e8:e8:c6:9d:0e: 73:20:84:f3:b0:8a:a9:7f:6b:82:23:2a:6e:b2:f3: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:68:40:E4:8F:0E:F3:18:F6:F8:BA:5C:07:F3:E6:8C:A8:B0:13:77 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e2:55:45:9c:e8:f5:f8:9d:68:c6:9c:df:09:f2:c7:9b:a2: 8e:e9:ca:6c:f1:d6:85:78:f7:80:2a:c2:aa:16:5b:47:a4:55: 57:55:bc:3f:dc:f4:55:76:7d:39:f2:81:56:d0:1a:0b:3a:6c: bc:65:ef:b5:67:81:4c:a7:34:95:f6:97:27:af:c5:e6:0b:4c: c7:c9:2d:50:c0:87:62:dc:e3:8d:bc:9b:fa:0b:85:ac:4d:ce: dd:0a:cf:fe:32:75:34:c4:d3:bb:5a:68:a6:ab:b6:d6:0c:df: 4b:43:29:5e:1b:8f:8c:69:91:a2:e5:23:91:9f:79:de:75:67: 1b:d2:de:e4:c2:2d:6e:58:28:45:17:8e:11:c6:f2:44:fa:90: ad:4b:f7:af:c2:fd:78:b7:92:cc:c3:a1:c1:85:35:e3:d8:7c: 61:bf:dc:de:e8:f9:57:56:4c:29:ce:72:df:4e:be:30:f6:cf: 23:51:0e:f8:2a:26:07:d2:3e:63:66:1a:11:7b:2b:43:e9:92: 82:76:09:bb:4e:62:d4:ff:16:b5:0a:06:7b:6d:05:9f:f7:f3: 71:69:aa:06:58:82:65:5a:f1:4b:4c:5c:22:c2:54:45:bb:2e: fa:fe:c6:f8:c8:cf:2d:40:53:f3:d2:ec:dc:b4:68:0f:86:c7: 2d:f0:60:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKX73j45o5OTzPJreeOTg+XFDFIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA5MjExNjQ4MTlaFw0yNjA5MjQxNzI5MTlaMDMxMTAvBgNV BAMTKDgwNjg0MEU0OEYwRUYzMThGNkY4QkE1QzA3RjNFNjhDQThCMDEzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7VuNNU5NmA8fcffMngSPfaxk vDF9cjOwh+e9ulbu6mcgaxiGyS5g8ywqrfzIE+TRYTMc4Ypi33A19gAOoL6kyoKm sWedUBFtrXe9AXuIYMCFZMto1CLmP01hRWoufTFcOGbp70YW2/NNUF3W771FoN3Z liR6dar6ePGD0D0e0q/sWb+xQWTdb5f5ZrK5k2DVwch2HqiArsu4DUgIx8L96ykx U8QV/Qv2tgbwnbhwMITApM6nJSbHbJLPYhEyXrHwj0QEEtEX6SA9Q5FcSLQPylZU gGH/Eif9LorUyy6senfCTw0TNkFSJ7zo6MadDnMghPOwiql/a4IjKm6y8xfjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgGhA5I8O8xj2+LpcB/PmjKiwE3cwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOJVRZzo9fid aMac3wnyx5uijunKbPHWhXj3gCrCqhZbR6RVV1W8P9z0VXZ9OfKBVtAaCzpsvGXv tWeBTKc0lfaXJ6/F5gtMx8ktUMCHYtzjjbyb+guFrE3O3QrP/jJ1NMTTu1popqu2 1gzfS0MpXhuPjGmRouUjkZ953nVnG9Le5MItblgoRReOEcbyRPqQrUv3r8L9eLeS zMOhwYU149h8Yb/c3uj5V1ZMKc5y306+MPbPI1EO+ComB9I+Y2YaEXsrQ+mSgnYJ u05i1P8WtQoGe20Fn/fzcWmqBliCZVrxS0xcIsJURbsu+v7G+MjPLUBT89Ls3LRo D4bHLfBgIw== -----END CERTIFICATE-----Generated at Tue Sep 22 22:22:35 2026 by rpki-client