
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
File: 20CAC8E70B5CB3094E47FF051623A98578C1E315.mft (raw, json)
Hash identifier: lDEReDoDtVqiauht9y0X2PpUrcSIeEwFCv6jrg/+JZU=
Subject key identifier: CF:88:A8:75:B0:A5:7C:0A:CC:F8:E4:3A:31:8F:9C:52:A9:E3:31:65
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 5DEDB7BD014290A93B1F36C6B5124FE048F8AFE3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
Manifest number: 0101
Signing time: Fri 23 Oct 2026 16:30:25 +0000
Manifest this update: Fri 23 Oct 2026 16:25:25 +0000
Manifest next update: Mon 26 Oct 2026 21:54:25 +0000
Files and hashes: 1: 20CAC8E70B5CB3094E47FF051623A98578C1E315.crl (hash: j/oisD0aDobSsP7gplx4lWPge0pSKgcoro/pEJ3Oy3M=)
2: 34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (hash: EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=)
3: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (hash: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=)
4: 34332e3234372e3138342e302f32322d3332203d3e203233373234.roa (hash: TP0dXFP6J3YoHPWv+68Yw+2qDs8x5/9THiU9vM0SoMI=)
5: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (hash: unApuc/e3kfVSaMeRVUTrLeBIAxkoNwZX+7xHbEwxiA=)
6: 34332e3234372e3138382e302f32322d3332203d3e2034383038.roa (hash: rhGWHb7CEz3GRcQ4JkTEOeeP9/h0igCZc3WCvzS2D2o=)
7: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (hash: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI=)
8: 3130332e3232372e3133362e302f32322d3332203d3e2034383337.roa (hash: jFfl737HqJaZzNLYJsdR7Pi03L4UWt1tpx204x58OHc=)
9: 34332e3234372e3138342e302f32322d3332203d3e203536303438.roa (hash: C/FXsL3L/3Jsgkl+fBV8LPbIlHgWxnnbtmRbpXzbwUQ=)
10: 3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa (hash: w5FSzLFmyVddLlA4YHga7R5Drq0hSAp700NDCwLz6y0=)
11: 3130332e3234322e3137322e302f32322d3332203d3e203233373234.roa (hash: YZ5T2Oqzq3fS11ORHuNW8S2yOvYweiK41wkkRAaw0Qw=)
12: 3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (hash: Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=)
13: 3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa (hash: qzksNBoqmy2lMtZScdS/0RStTiDB+RJTNhrDYjSfPp8=)
14: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (hash: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=)
15: 3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa (hash: t1MCyz1DAzj9QfqaCIoPg515VmpgR6j+fB2e73NIxAE=)
16: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (hash: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=)
17: 34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (hash: kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=)
18: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (hash: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw=)
19: 3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa (hash: /fsA4C9t9e2ZgCcRFHxITfOAiCAuv4YAWr5CI2QBlwo=)
20: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (hash: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o=)
21: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (hash: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=)
22: 34332e3235342e3133362e302f32322d3332203d3e2034383337.roa (hash: E6EErF6dn2+3RoNEs+Qa/gAie91cIjN/HBs4TkYUFFs=)
23: 3135302e3234322e3234382e302f32322d3332203d3e203233373234.roa (hash: vwPEmTIi0cfS54R8Za5ZiN5YnIDWkEMterbti+msZ9U=)
24: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (hash: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=)
25: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (hash: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ=)
26: 3131342e3131322e3130302e302f32322d3332203d3e203233373234.roa (hash: +TlL4Kdz+dQAHCRvyRXNP3LY3euHbF5VUmsAzxQL+aA=)
27: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (hash: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw=)
28: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (hash: F5An/Ut6sPTdTDchjvauI8c+cH9mTLnAPBuANoIQPcs=)
29: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (hash: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=)
30: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (hash: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=)
31: 3130332e3233372e3234382e302f32342d3332203d3e2034383038.roa (hash: WwwQRuAQTBMvvKr19C3JnKF0SqXIf8PDBY9whAL8jEk=)
32: 3130332e3234322e3137322e302f32322d3332203d3e203536303438.roa (hash: 8nc7tUDAsYwhhigURDMQwsHhNNYfY1MZLKThQmZ1brU=)
33: 3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (hash: hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=)
34: 3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa (hash: jlPD6Syj2WUMk0/GKQtzo96jxAOhRno6yJr248gVRTs=)
35: 3131342e3131322e3130302e302f32322d3332203d3e203536303438.roa (hash: HDMI1ewe1Lh3K6TdmGE4aoTMsi+MILZ0hJ8SdXtvbW0=)
36: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (hash: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 21:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ed:b7:bd:01:42:90:a9:3b:1f:36:c6:b5:12:4f:e0:48:f8:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Oct 23 16:25:25 2026 GMT
Not After : Oct 26 21:54:25 2026 GMT
Subject: CN=CF88A875B0A57C0ACCF8E43A318F9C52A9E33165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:5d:78:12:a2:28:ea:bf:0e:9a:52:f3:d0:
11:f4:42:79:55:53:b4:69:7b:c6:7f:77:bd:a3:0e:
56:a9:90:78:98:4b:20:11:7a:fb:10:3b:6a:27:e9:
08:89:e1:ca:91:aa:73:c7:76:e1:57:9d:e6:ac:83:
da:ca:8f:d8:23:d0:49:e6:be:a1:5a:c3:b1:45:cb:
65:8e:36:ef:e4:92:57:a2:4e:c5:0c:15:1e:b6:03:
20:a2:1e:44:9c:55:ba:b5:dd:15:b9:b3:ff:0e:62:
2f:9a:72:40:88:ff:4a:9f:81:79:84:92:3e:29:ce:
e3:ff:09:62:a7:b9:ef:ad:f4:a0:c4:3e:78:54:7b:
b3:27:52:e6:57:ce:20:32:ea:a4:f8:07:85:1d:a1:
70:00:dd:f4:ae:31:ef:aa:32:cf:72:46:9a:2d:90:
f9:6b:98:38:cb:35:00:16:c4:24:0d:38:07:24:0b:
b1:85:4b:03:02:2a:16:65:5c:23:31:32:bd:5e:6e:
c8:5a:dc:3c:f5:2b:62:94:0b:50:74:8c:3d:2e:f5:
9e:ed:b1:43:da:60:01:b1:02:0a:c9:70:5d:c7:ff:
f7:ed:4e:d6:9b:86:6b:d6:92:6f:bb:de:8d:c6:30:
86:b9:27:66:0a:0f:14:5b:6a:7b:91:6a:7a:ec:80:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:A8:75:B0:A5:7C:0A:CC:F8:E4:3A:31:8F:9C:52:A9:E3:31:65
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:36:07:cb:d2:bf:56:46:6a:b4:8d:5f:5f:d1:62:6a:76:
89:2b:b9:26:77:94:4c:93:09:45:ca:41:da:2a:0e:02:45:91:
4c:bd:d2:f9:f1:a0:7d:a7:2e:c9:a5:92:cc:67:46:1a:53:5b:
50:c9:7b:6f:15:5e:a1:ae:16:ad:d9:7a:6b:c1:50:c1:83:8b:
9f:bd:27:c9:ae:ae:2b:57:19:42:49:0e:71:a4:42:c2:6b:e5:
29:0e:a6:7f:c7:ff:d2:f9:aa:21:a5:5f:0c:35:a6:22:f5:1b:
26:93:53:61:16:22:4b:cd:e9:ee:57:9e:e6:c6:70:fd:97:8e:
3c:d7:04:b2:cc:0d:3f:04:4b:cd:60:5e:c6:51:49:64:59:e2:
19:c5:80:91:fd:bd:ab:56:63:27:88:9a:2d:d9:64:30:df:2c:
8a:7f:c2:23:3e:3a:31:e6:82:2d:e2:5d:ce:aa:e1:1a:99:b3:
72:34:ad:35:b7:b0:a6:ea:03:fc:8f:88:32:6e:d5:30:91:0d:
9c:76:26:f3:d7:92:7d:03:2e:76:e8:c9:99:ec:3f:3a:a6:84:
aa:04:6c:40:88:1a:61:f4:dc:98:db:b7:5a:74:fe:5e:42:d0:
61:37:be:d7:24:36:23:c6:df:73:f8:1e:2c:b7:f7:3d:a6:3f:
c9:06:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:00:31 2026 by rpki-client