$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 9l7JltJDlz+L+7UuzYe71zmVqz49qStWSn1V3lwAo1A= Subject key identifier: 7D:05:85:E1:3D:CA:C6:B6:F0:D0:1A:0A:9D:1F:CA:E5:CD:1B:90:2E Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 52AA2641DA422F7FF1F39B258D0BE297F17A9C66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: EA Signing time: Tue 14 Jul 2026 06:40:37 +0000 Manifest this update: Tue 14 Jul 2026 06:35:37 +0000 Manifest next update: Wed 15 Jul 2026 09:56:37 +0000 Files and hashes: 1: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 2: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: GSsfoQMAcAh+Yce47j+Z66ScrQMFgT0+4PfaSl+kB80=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:aa:26:41:da:42:2f:7f:f1:f3:9b:25:8d:0b:e2:97:f1:7a:9c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jul 14 06:35:37 2026 GMT Not After : Jul 15 09:56:37 2026 GMT Subject: CN=7D0585E13DCAC6B6F0D01A0A9D1FCAE5CD1B902E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:d6:07:25:10:fd:d4:b5:3b:4a:0d:b5:18: 06:20:52:61:48:2d:05:5a:fe:ea:a3:52:dc:ce:74: 6f:e8:ea:3f:bc:2b:09:59:d6:27:1d:76:22:5d:de: 0d:a3:ac:bd:e7:42:9a:a1:dd:e7:d9:56:28:3a:35: 6e:96:05:a0:8e:87:df:98:45:4e:79:4e:fd:9b:ba: b0:bb:bb:6d:6e:4f:fb:51:a8:c0:dc:5f:b8:90:fe: a0:12:10:75:7a:90:bf:84:19:b8:32:21:3b:3c:89: 78:d4:a1:ca:f9:58:34:3b:42:8f:45:c0:98:87:a3: 87:9b:bf:4e:4c:e7:8c:ff:b0:40:99:43:7a:9e:ce: b3:7b:90:45:1b:8e:c6:f1:ff:4c:2d:a3:81:29:18: 32:27:76:60:1c:28:ea:51:f8:4d:0a:6b:0d:db:2e: 66:a9:76:55:ca:21:4b:1b:f5:ab:42:56:15:9a:b5: 5e:b7:25:18:8a:80:43:c2:e6:a9:73:93:75:22:6e: ce:d2:1b:b7:9d:98:38:a3:13:80:9f:a1:93:6d:5a: b8:22:e0:16:30:9c:8a:df:bf:70:4c:09:20:f4:2d: 08:2d:c5:28:d2:fd:40:ff:6c:dd:a4:db:47:8b:62: 8f:83:74:fe:93:81:5a:dd:55:7e:f1:56:46:4e:5e: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:85:E1:3D:CA:C6:B6:F0:D0:1A:0A:9D:1F:CA:E5:CD:1B:90:2E X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:95:8e:b2:9e:8b:e7:92:30:71:08:7c:31:6d:b3:70:c9:58: b3:b7:e2:80:77:e7:33:c4:99:e7:7a:35:98:79:0e:a2:40:75: a1:27:d9:4c:61:e7:16:0e:3f:15:d7:d2:a6:b9:47:cf:fa:d0: d0:15:a0:46:b1:06:88:3e:4d:5a:1e:6e:2b:b7:58:d1:1b:7e: fc:5e:9f:a8:0a:0c:f7:4e:f5:05:41:7c:5e:be:c6:01:10:e0: 65:56:a3:c6:fd:12:12:a4:25:17:09:7f:eb:1c:a9:51:66:f4: 75:e1:35:45:28:dd:0d:ea:00:28:09:f0:5c:55:e4:ba:30:b9: 4d:ba:ea:cd:22:a9:83:b5:9d:fb:3b:7d:31:b1:1c:75:95:b7: 58:b4:c6:ae:13:a3:ae:4f:6b:1e:03:62:b3:b8:18:5f:a7:af: bb:4f:75:4e:a5:a1:22:a1:ae:f8:d2:dd:70:eb:4f:7e:97:1b: 76:ca:be:ab:36:52:2d:14:ae:a9:ef:90:ef:3d:e9:8f:15:16: 04:9c:36:46:1e:ba:b1:00:97:ba:9a:27:cc:b0:07:cf:cb:99: ff:4a:d4:6f:40:e7:34:b6:3e:a6:5a:f8:8a:76:99:13:ca:c9: ec:5b:6b:d3:a9:cc:55:51:df:91:0e:85:96:b8:52:70:fd:e7: 3d:9d:7b:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUqomQdpCL3/x85sljQvil/F6nGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA3MTQwNjM1MzdaFw0yNjA3MTUwOTU2MzdaMDMxMTAvBgNV BAMTKDdEMDU4NUUxM0RDQUM2QjZGMEQwMUEwQTlEMUZDQUU1Q0QxQjkwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCft9YHJRD91LU7Sg21GAYgUmFI LQVa/uqjUtzOdG/o6j+8KwlZ1icddiJd3g2jrL3nQpqh3efZVig6NW6WBaCOh9+Y RU55Tv2burC7u21uT/tRqMDcX7iQ/qASEHV6kL+EGbgyITs8iXjUocr5WDQ7Qo9F wJiHo4ebv05M54z/sECZQ3qezrN7kEUbjsbx/0wto4EpGDIndmAcKOpR+E0Kaw3b LmapdlXKIUsb9atCVhWatV63JRiKgEPC5qlzk3Uibs7SG7edmDijE4CfoZNtWrgi 4BYwnIrfv3BMCSD0LQgtxSjS/UD/bN2k20eLYo+DdP6TgVrdVX7xVkZOXs5vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfQWF4T3Kxrbw0BoKnR/K5c0bkC4wHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZWOsp6L55Iw cQh8MW2zcMlYs7figHfnM8SZ53o1mHkOokB1oSfZTGHnFg4/FdfSprlHz/rQ0BWg RrEGiD5NWh5uK7dY0Rt+/F6fqAoM9071BUF8Xr7GARDgZVajxv0SEqQlFwl/6xyp UWb0deE1RSjdDeoAKAnwXFXkujC5TbrqzSKpg7Wd+zt9MbEcdZW3WLTGrhOjrk9r HgNis7gYX6evu091TqWhIqGu+NLdcOtPfpcbdsq+qzZSLRSuqe+Q7z3pjxUWBJw2 Rh66sQCXuponzLAHz8uZ/0rUb0DnNLY+plr4inaZE8rJ7Ftr06nMVVHfkQ6FlrhS cP3nPZ17lg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:50 2026 by rpki-client