$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 7x/KSDoKE5Eo7cBxZiI6MCdVkpFl8Ly0zt6Z1izv9nM= Subject key identifier: 7B:D8:37:86:50:D6:2E:08:9A:57:91:45:AA:BE:01:A9:B8:BF:12:24 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 7C259847C6668DE4CE22F61BCBD75BBF9813633A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 04:39:17 +0000 Manifest this update: Mon 13 Apr 2026 04:34:17 +0000 Manifest next update: Tue 14 Apr 2026 06:13:17 +0000 Files and hashes: 1: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 2: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 3: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: iOroPMSsZRnPB8ESIwEycq3BUdXFrFFhJgKBeIBV9Jk=) 4: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 5: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:25:98:47:c6:66:8d:e4:ce:22:f6:1b:cb:d7:5b:bf:98:13:63:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Apr 13 04:34:17 2026 GMT Not After : Apr 14 06:13:17 2026 GMT Subject: CN=7BD8378650D62E089A579145AABE01A9B8BF1224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:a9:78:ce:93:e1:e9:81:6f:2d:67:4a:1c: 12:b4:5b:1b:e8:1c:d7:61:c3:dc:73:a6:9a:c3:a3: ff:12:b5:d2:df:8e:71:10:d0:ec:4d:64:b6:d4:d8: b1:fd:92:ee:79:1f:3e:cb:3c:89:c7:31:68:7d:0a: 5a:da:66:07:62:4c:d3:b3:22:26:9e:aa:78:bd:93: 3a:b8:0d:16:83:4a:d6:0f:d1:ee:e9:9b:97:f7:03: 68:aa:98:94:9b:0d:b7:11:2d:03:39:4e:c8:bb:2b: 9d:38:81:4f:2d:51:cf:9e:6a:25:d2:65:db:66:95: 2c:ce:12:e2:4a:06:38:97:44:39:e6:49:1f:58:9a: ec:dc:30:3b:d5:88:23:9e:d5:9f:ed:bf:ab:22:09: 46:52:d5:cf:a1:ac:e8:36:88:18:f5:10:34:7a:50: 4a:0f:fe:57:fe:0b:d7:32:ae:44:5d:fb:e0:c5:a8: 38:b3:ff:a6:ab:27:6f:28:0b:76:09:95:fe:af:36: a9:50:74:29:6c:42:f1:70:45:d1:f5:95:eb:6c:a3: ab:a1:f2:d6:f1:e6:da:b2:69:4f:6c:a7:8d:43:4c: 04:2a:bd:b0:9c:42:a6:88:ad:44:a1:53:94:0d:16: 65:c2:64:ad:c1:0e:67:a0:b3:78:8b:4b:76:d2:b2: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D8:37:86:50:D6:2E:08:9A:57:91:45:AA:BE:01:A9:B8:BF:12:24 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c7:f6:16:8b:b4:e2:6d:be:d8:0f:8b:f5:e0:8d:1e:84:8b: aa:be:a7:39:0f:93:c1:3b:fa:bd:9c:b7:45:aa:2f:c6:2d:44: cb:64:02:24:fb:e4:60:65:20:32:b6:82:60:7c:3f:4e:89:79: ae:e1:16:f1:37:0d:b6:e3:cd:84:cf:a2:cc:2f:a2:ec:df:24: 00:c8:04:94:b9:e0:3d:ce:b1:67:b9:fb:40:a7:5a:6c:62:31: b0:c9:a7:b6:23:a0:a8:5d:f6:56:89:2e:58:ef:98:36:33:47: 11:91:c1:a4:9f:85:e4:58:eb:6f:66:66:15:4e:31:b3:a8:e4: e8:53:43:e6:ad:1f:37:ca:38:11:73:14:32:91:1d:7a:ef:98: 7e:c5:e6:72:4c:09:2b:88:e0:e9:19:77:83:3f:a0:62:92:c9: ac:d8:03:c0:63:5a:1b:2d:9b:c0:df:df:a7:e6:71:23:3b:9a: c5:15:60:43:cf:54:67:8c:ff:80:f3:a7:8e:50:fe:10:2c:e6: 24:4d:fc:82:05:74:d7:fc:2b:1a:12:59:0f:a7:4a:70:9b:65: 2d:07:47:88:df:5f:16:93:e7:77:09:27:aa:39:bd:b4:00:92: 42:9a:98:be:d4:dc:c6:05:bf:96:11:cb:60:da:24:d9:9a:e1: df:71:60:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfCWYR8ZmjeTOIvYby9dbv5gTYzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA0MTMwNDM0MTdaFw0yNjA0MTQwNjEzMTdaMDMxMTAvBgNV BAMTKDdCRDgzNzg2NTBENjJFMDg5QTU3OTE0NUFBQkUwMUE5QjhCRjEyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADKl4zpPh6YFvLWdKHBK0Wxvo HNdhw9xzpprDo/8StdLfjnEQ0OxNZLbU2LH9ku55Hz7LPInHMWh9ClraZgdiTNOz Iiaeqni9kzq4DRaDStYP0e7pm5f3A2iqmJSbDbcRLQM5Tsi7K504gU8tUc+eaiXS ZdtmlSzOEuJKBjiXRDnmSR9YmuzcMDvViCOe1Z/tv6siCUZS1c+hrOg2iBj1EDR6 UEoP/lf+C9cyrkRd++DFqDiz/6arJ28oC3YJlf6vNqlQdClsQvFwRdH1letso6uh 8tbx5tqyaU9sp41DTAQqvbCcQqaIrUShU5QNFmXCZK3BDmegs3iLS3bSsiapAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe9g3hlDWLgiaV5FFqr4Bqbi/EiQwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMf2Fou04m2+ 2A+L9eCNHoSLqr6nOQ+TwTv6vZy3Raovxi1Ey2QCJPvkYGUgMraCYHw/Tol5ruEW 8TcNtuPNhM+izC+i7N8kAMgElLngPc6xZ7n7QKdabGIxsMmntiOgqF32VokuWO+Y NjNHEZHBpJ+F5Fjrb2ZmFU4xs6jk6FND5q0fN8o4EXMUMpEdeu+YfsXmckwJK4jg 6Rl3gz+gYpLJrNgDwGNaGy2bwN/fp+ZxIzuaxRVgQ89UZ4z/gPOnjlD+ECzmJE38 ggV01/wrGhJZD6dKcJtlLQdHiN9fFpPndwknqjm9tACSQpqYvtTcxgW/lhHLYNok 2Zrh33FgBw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:49 2026 by rpki-client