$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft File: 20CAC8E70B5CB3094E47FF051623A98578C1E315.mft (raw, json) Hash identifier: 36/YBwRJOMfU11CP+VJw+7ZOVyMSKJ/8F3482Mpv6RU= Subject key identifier: 38:5E:5E:BE:17:8D:9A:65:0E:69:BE:35:8F:34:5E:9F:82:9A:C2:F3 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 5ABBA74881B9F102B2CB632737C4D16CC4255265 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft Manifest number: 27 Signing time: Fri 17 Apr 2026 14:44:43 +0000 Manifest this update: Fri 17 Apr 2026 14:39:43 +0000 Manifest next update: Sat 18 Apr 2026 17:10:43 +0000 Files and hashes: 1: 3131342e3131322e3130302e302f32322d3332203d3e203536303438.roa (hash: HDMI1ewe1Lh3K6TdmGE4aoTMsi+MILZ0hJ8SdXtvbW0=) 2: 34332e3234372e3138342e302f32322d3332203d3e203233373234.roa (hash: TP0dXFP6J3YoHPWv+68Yw+2qDs8x5/9THiU9vM0SoMI=) 3: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (hash: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=) 4: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (hash: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=) 5: 20CAC8E70B5CB3094E47FF051623A98578C1E315.crl (hash: rBdcQqkHtJFbxj88/cT3S6c8bjBgmV4JTax6mSTHPiY=) 6: 34332e3234372e3138342e302f32322d3332203d3e203536303438.roa (hash: C/FXsL3L/3Jsgkl+fBV8LPbIlHgWxnnbtmRbpXzbwUQ=) 7: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (hash: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=) 8: 3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (hash: Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=) 9: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (hash: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=) 10: 3130332e3233372e3234382e302f32342d3332203d3e2034383038.roa (hash: WwwQRuAQTBMvvKr19C3JnKF0SqXIf8PDBY9whAL8jEk=) 11: 3131342e3131322e3130302e302f32322d3332203d3e203233373234.roa (hash: +TlL4Kdz+dQAHCRvyRXNP3LY3euHbF5VUmsAzxQL+aA=) 12: 3130332e3234322e3137322e302f32322d3332203d3e203233373234.roa (hash: YZ5T2Oqzq3fS11ORHuNW8S2yOvYweiK41wkkRAaw0Qw=) 13: 3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (hash: hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=) 14: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (hash: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=) 15: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (hash: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI=) 16: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (hash: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ=) 17: 3130332e3233382e3136302e302f32322d3332203d3e203536303438.roa (hash: D5p9o0pPwoaCYpIygArboXdaAKJUUXV6AxrgPTibA68=) 18: 3130332e3234322e3137322e302f32322d3332203d3e203536303438.roa (hash: 8nc7tUDAsYwhhigURDMQwsHhNNYfY1MZLKThQmZ1brU=) 19: 34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (hash: kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=) 20: 34332e3234372e3138342e302f32322d3332203d3e2034383038.roa (hash: SMlfZiu/E9B56jmZCUuN+IcRQSUjx9Fu3cPV/QTt2/Y=) 21: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (hash: zjWupKFn+Rq4sUjDxU2QIc6giBG1zVO8GuFEp9ODEEc=) 22: 3135302e3234322e3234382e302f32322d3332203d3e203233373234.roa (hash: vwPEmTIi0cfS54R8Za5ZiN5YnIDWkEMterbti+msZ9U=) 23: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (hash: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o=) 24: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (hash: FkmKF/A15MnCldWsxEeQrn1WOY/6MVmhweo6R2+N9ug=) 25: 3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa (hash: fsW9bgLnkSThZZN38JADzvD2+yEtJL46n4VSz59f8uA=) 26: 3130332e3233382e302e302f32322d3332203d3e203233373234.roa (hash: K0whk0Vf3B/fS221zljEn2qu9FvjJx3u4ndcAwqzswA=) 27: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (hash: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw=) 28: 34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (hash: EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=) 29: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (hash: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=) 30: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (hash: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=) 31: 3130332e3233372e3234382e302f32322d3332203d3e203233373234.roa (hash: AcHcXiVvDzr4U8IHFzFV19Pg7cmEKYi52gQ1GF6T8Qk=) 32: 3130332e3233382e342e302f32322d3332203d3e203233373234.roa (hash: ZnKtKYiBnUUSTNvN6M2vxi145uCIypRtFdR+UvbpvNs=) 33: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (hash: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=) 34: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (hash: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bb:a7:48:81:b9:f1:02:b2:cb:63:27:37:c4:d1:6c:c4:25:52:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 17 14:39:43 2026 GMT Not After : Apr 18 17:10:43 2026 GMT Subject: CN=385E5EBE178D9A650E69BE358F345E9F829AC2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:01:35:5f:fa:91:85:3f:bb:90:64:8f:fa: 34:fe:f4:7d:ab:6c:3e:2f:bf:6f:cc:13:14:3f:90: 0d:4d:95:e1:6f:f5:b6:00:52:e7:85:70:aa:bd:88: 49:bb:17:c9:77:f9:fc:b2:38:91:f6:a5:e8:7e:89: c3:46:f2:75:d1:fd:67:99:c3:00:ea:54:bc:22:ef: 41:df:91:70:6f:d7:9b:b7:78:14:46:68:65:4e:77: e1:73:68:56:89:ec:01:f3:44:0b:38:93:9b:13:09: a9:f6:ff:a4:f7:53:c5:81:1a:fe:d8:22:8e:d0:e2: 0a:79:16:44:ea:32:c0:52:d9:03:84:65:dd:b8:f8: da:5e:c2:f4:1e:00:26:dc:f9:cc:77:bc:2e:69:fb: 0d:d4:8d:b7:e6:f6:5b:45:c7:54:df:2d:e4:40:45: 66:09:b2:04:81:e8:c6:5a:a3:52:81:4b:81:2a:5b: 4a:af:3c:9c:4d:40:0f:08:fc:e3:3d:c3:9f:2c:1a: ea:24:da:8f:7c:22:a0:12:c9:fc:6f:20:16:5c:09: 53:ac:bb:c9:31:a8:cb:98:a6:7e:97:7c:f3:7b:24: 32:97:ca:f7:f2:7d:3f:24:84:ed:29:ed:b5:68:12: d8:1b:e1:c1:9c:1a:97:f2:a9:f7:8c:48:1d:b2:e6: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:5E:BE:17:8D:9A:65:0E:69:BE:35:8F:34:5E:9F:82:9A:C2:F3 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:34:ee:a4:a7:0c:39:76:0f:ab:96:c6:f7:79:71:5a:07: 0e:52:55:39:5e:27:67:d8:39:7f:fb:d2:ad:bd:7a:0d:e0:a9: e4:f7:88:08:18:2a:8e:64:cd:a0:67:37:04:ac:94:95:1a:48: b0:04:aa:eb:38:dd:8e:3a:11:b9:06:3e:78:f2:0b:5b:97:03: a1:ef:a0:ee:c6:b6:26:8c:31:84:67:9d:4f:d6:a4:65:62:a8: 5e:83:81:5e:c2:d9:12:84:fd:0d:e9:ad:f1:ba:83:0c:85:1c: 12:88:98:95:64:30:d5:39:54:3c:33:f8:c8:c2:0c:58:1b:69: 3e:8d:9e:43:d6:59:6d:c6:52:65:c7:d8:b6:08:4f:4f:8b:c1: 71:06:73:f3:17:22:2d:08:ff:e9:08:c4:32:7d:9d:f7:70:69: 0e:87:88:f0:f9:63:1a:88:a7:28:33:aa:85:a0:fa:d9:35:a2: 84:d1:ea:37:fb:86:2b:5f:da:a8:12:15:35:7c:c0:fa:f1:d7: a0:f6:81:35:61:83:ef:74:86:af:11:f5:7f:3c:60:6d:22:90: d1:3c:29:af:7c:de:41:e8:df:f6:6b:06:f6:22:a6:16:3d:fe: 03:32:39:e3:74:aa:db:a4:09:54:ea:66:3a:8b:23:5d:94:b1: 2f:df:a2:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWrunSIG58QKyy2MnN8TRbMQlUmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTcxNDM5NDNaFw0yNjA0MTgxNzEwNDNaMDMxMTAvBgNV BAMTKDM4NUU1RUJFMTc4RDlBNjUwRTY5QkUzNThGMzQ1RTlGODI5QUMyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqwE1X/qRhT+7kGSP+jT+9H2r bD4vv2/MExQ/kA1NleFv9bYAUueFcKq9iEm7F8l3+fyyOJH2peh+icNG8nXR/WeZ wwDqVLwi70HfkXBv15u3eBRGaGVOd+FzaFaJ7AHzRAs4k5sTCan2/6T3U8WBGv7Y Io7Q4gp5FkTqMsBS2QOEZd24+NpewvQeACbc+cx3vC5p+w3Ujbfm9ltFx1TfLeRA RWYJsgSB6MZao1KBS4EqW0qvPJxNQA8I/OM9w58sGuok2o98IqASyfxvIBZcCVOs u8kxqMuYpn6XfPN7JDKXyvfyfT8khO0p7bVoEtgb4cGcGpfyqfeMSB2y5mtFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOF5evheNmmUOab41jzRen4KawvMwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQyOTQ3NjcwOTk5MDUvMC8yMENBQzhFNzBCNUNC MzA5NEU0N0ZGMDUxNjIzQTk4NTc4QzFFMzE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgw07qSnDDl2 D6uWxvd5cVoHDlJVOV4nZ9g5f/vSrb16DeCp5PeICBgqjmTNoGc3BKyUlRpIsASq 6zjdjjoRuQY+ePILW5cDoe+g7sa2JowxhGedT9akZWKoXoOBXsLZEoT9Demt8bqD DIUcEoiYlWQw1TlUPDP4yMIMWBtpPo2eQ9ZZbcZSZcfYtghPT4vBcQZz8xciLQj/ 6QjEMn2d93BpDoeI8PljGoinKDOqhaD62TWihNHqN/uGK1/aqBIVNXzA+vHXoPaB NWGD73SGrxH1fzxgbSKQ0Twpr3zeQejf9msG9iKmFj3+AzI543Sq26QJVOpmOosj XZSxL9+ilg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:50 2026 by rpki-client