$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 5/YThxkcmocbyklyB7TfFZTJTF1CapAar33m8mVl9Bs= Subject key identifier: BF:74:79:DA:A9:4F:67:30:3C:60:1A:1E:2F:4A:5C:BB:72:99:68:E7 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 6E8E0B037F48EA8B12EE2D1B3369BAEB743CBAE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: AE Signing time: Fri 29 May 2026 16:58:03 +0000 Manifest this update: Fri 29 May 2026 16:53:03 +0000 Manifest next update: Sat 30 May 2026 18:50:03 +0000 Files and hashes: 1: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: yutKbFIDTlSbd3unIIYST2cafNf4U3mBIfYSuLHq0vg=) 2: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 3: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 4: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 5: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:8e:0b:03:7f:48:ea:8b:12:ee:2d:1b:33:69:ba:eb:74:3c:ba:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: May 29 16:53:03 2026 GMT Not After : May 30 18:50:03 2026 GMT Subject: CN=BF7479DAA94F67303C601A1E2F4A5CBB729968E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:0f:d8:97:62:17:d4:ad:63:02:00:12:13: b0:d8:8c:fa:53:3e:cd:ab:62:6b:12:17:13:45:16: 31:a7:f7:3e:e4:4a:cd:2a:58:cb:c4:f9:d7:8e:31: 37:69:6a:0c:f5:58:88:05:d9:00:de:99:4b:04:73: 47:98:b0:62:c7:0a:3f:96:f4:24:82:b8:27:e7:4b: 91:5f:49:2c:51:4a:f4:a7:e2:40:c4:40:a5:19:d9: a8:ee:f9:af:c6:58:65:c1:5f:de:e7:ef:3a:39:69: 5e:9b:ec:da:91:5b:3c:66:f3:4c:25:bb:0c:3c:a7: db:64:31:0f:2c:fe:c5:b7:29:dd:bd:9a:e7:f9:95: 0b:eb:d8:4a:10:eb:d7:61:7c:c1:48:70:29:17:4d: d9:e8:67:a5:5e:da:a7:d3:bb:20:a3:a0:72:6c:0b: 91:75:80:26:30:66:26:7f:d8:de:9f:29:a1:64:07: a2:b0:a4:75:0e:d3:a7:b5:3c:06:52:87:33:99:a5: 6c:79:3b:b0:dd:de:b1:47:e6:c9:bf:24:27:56:71: 25:d8:dc:e5:03:3c:f7:75:9e:e4:06:70:21:ac:f5: b2:ee:22:0a:73:2b:6b:1c:f6:47:cb:bd:68:f6:28: 43:db:63:91:93:3e:98:00:99:e6:bb:7f:4e:d8:bc: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:74:79:DA:A9:4F:67:30:3C:60:1A:1E:2F:4A:5C:BB:72:99:68:E7 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:68:28:7c:51:96:c5:95:16:43:47:cd:10:ed:09:45:3a: 04:e8:fa:6d:37:02:dc:6d:77:4b:82:06:39:ef:bb:bd:40:cf: 0f:89:32:b7:b7:18:bc:9b:56:3f:af:3c:8a:5e:b2:4e:18:ab: 5e:17:d3:af:dd:74:0d:06:33:58:23:80:a5:f5:8f:e8:7f:10: 0f:80:7b:68:b0:87:c7:c5:98:d6:2f:63:ca:78:2d:36:d5:d9: 11:cc:3d:38:7a:e5:73:21:76:60:b9:7f:4e:35:f7:bb:0a:6d: a1:a6:60:5a:98:ee:8c:4a:7f:28:51:56:c9:59:78:72:ae:85: 19:c0:f2:d3:99:59:94:b7:43:42:5c:76:c8:f2:16:cd:e1:5b: ab:b5:d9:d6:45:b4:42:05:21:01:d5:fe:d8:10:de:14:b9:28: 65:39:78:e0:c5:4f:cd:ea:a2:20:85:4b:4e:da:0d:ac:25:79: 60:b3:48:4c:19:9e:b0:ed:10:5f:bc:ec:e3:32:ea:89:b9:26: dd:d6:a8:d7:77:8d:96:84:80:d8:90:78:a2:db:7d:85:9c:04: 15:d1:a6:95:20:92:d1:bc:da:3a:be:41:02:97:7c:49:51:23: 5f:b6:bd:17:3a:7f:e8:fe:41:10:af:9c:1a:49:08:02:4b:a8: 01:9b:31:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbo4LA39I6osS7i0bM2m663Q8uuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA1MjkxNjUzMDNaFw0yNjA1MzAxODUwMDNaMDMxMTAvBgNV BAMTKEJGNzQ3OURBQTk0RjY3MzAzQzYwMUExRTJGNEE1Q0JCNzI5OTY4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKg/Yl2IX1K1jAgASE7DYjPpT Ps2rYmsSFxNFFjGn9z7kSs0qWMvE+deOMTdpagz1WIgF2QDemUsEc0eYsGLHCj+W 9CSCuCfnS5FfSSxRSvSn4kDEQKUZ2aju+a/GWGXBX97n7zo5aV6b7NqRWzxm80wl uww8p9tkMQ8s/sW3Kd29muf5lQvr2EoQ69dhfMFIcCkXTdnoZ6Ve2qfTuyCjoHJs C5F1gCYwZiZ/2N6fKaFkB6KwpHUO06e1PAZShzOZpWx5O7Dd3rFH5sm/JCdWcSXY 3OUDPPd1nuQGcCGs9bLuIgpzK2sc9kfLvWj2KEPbY5GTPpgAmea7f07YvJJNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv3R52qlPZzA8YBoeL0pcu3KZaOcwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuitoKHxRlsWV FkNHzRDtCUU6BOj6bTcC3G13S4IGOe+7vUDPD4kyt7cYvJtWP688il6yThirXhfT r910DQYzWCOApfWP6H8QD4B7aLCHx8WY1i9jyngtNtXZEcw9OHrlcyF2YLl/TjX3 uwptoaZgWpjujEp/KFFWyVl4cq6FGcDy05lZlLdDQlx2yPIWzeFbq7XZ1kW0QgUh AdX+2BDeFLkoZTl44MVPzeqiIIVLTtoNrCV5YLNITBmesO0QX7zs4zLqibkm3dao 13eNloSA2JB4ott9hZwEFdGmlSCS0bzaOr5BApd8SVEjX7a9Fzp/6P5BEK+cGkkI AkuoAZsxNQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:31 2026 by rpki-client