$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: lTrCQ1LtiyDF8+8Yu0oMm/NLdHE+ihYlLXmcyer44Ks= Subject key identifier: 6D:7D:AD:48:49:15:C0:AC:00:94:62:DF:27:10:75:23:C4:03:61:B9 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 0C7D2B42E41527347D89B1487713ED117BCA9176 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:13 +0000 Manifest this update: Fri 28 Aug 2026 06:43:13 +0000 Manifest next update: Mon 31 Aug 2026 12:08:13 +0000 Files and hashes: 1: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: wm9YC0plrSREaK2nvdg3nKiRGl4PxScHuNoa8HKAh7E=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7d:2b:42:e4:15:27:34:7d:89:b1:48:77:13:ed:11:7b:ca:91:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Aug 28 06:43:13 2026 GMT Not After : Aug 31 12:08:13 2026 GMT Subject: CN=6D7DAD484915C0AC009462DF27107523C40361B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:d2:76:1c:ed:30:4a:db:f3:01:8a:19:a0: a0:65:0b:38:4a:e9:b3:15:1b:7e:91:4d:51:85:eb: 47:bf:2f:06:f4:c0:6d:fc:cd:49:92:6d:92:8a:e8: 84:da:61:4b:36:30:f4:95:ec:1d:ed:ed:be:c7:80: 20:9b:56:4e:5b:c2:8d:32:dd:45:d7:49:30:d9:cb: b8:4c:18:6e:1e:c6:a8:df:c9:3f:2a:5c:ca:74:28: ca:6f:74:26:df:b6:b4:33:d2:68:13:a1:16:3e:ff: f3:34:ab:80:7a:2a:ae:f2:c3:8d:e7:ef:26:73:57: 8c:e3:2a:cd:b4:46:a2:5c:aa:b4:f4:a1:42:c4:20: 22:e9:23:76:c4:cd:5e:66:6c:e2:06:65:0f:17:a2: 62:2a:88:27:14:df:0a:78:0a:e9:a7:c5:b7:4d:37: e5:7b:47:49:ab:5f:39:df:91:45:39:75:1e:1c:72: 43:b0:47:51:56:f3:a2:5a:ef:fc:36:ca:5e:d9:56: 2a:2c:5a:d1:e4:a4:6c:a0:b9:f1:c1:0e:95:71:34: 8c:aa:2e:5f:08:f1:10:6f:99:f9:20:6c:46:f5:68: 1a:d7:e4:14:16:3e:a7:9d:4f:1a:e2:f9:0c:0c:84: 61:4e:57:ce:64:97:c4:c3:ae:b8:04:da:bd:af:7a: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7D:AD:48:49:15:C0:AC:00:94:62:DF:27:10:75:23:C4:03:61:B9 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fb:16:bc:02:a9:fd:39:4d:e1:c7:15:35:e4:77:96:af:a2: a6:5f:b6:ea:5c:fc:a3:47:5a:62:03:cd:5f:b6:52:79:6e:6a: 71:1e:eb:6f:67:0d:1c:0e:50:a3:2e:70:c5:56:c9:56:8f:d5: 9d:b1:f3:aa:a0:c2:8c:fd:cf:75:85:e8:f2:0e:8c:1b:af:83: 83:a9:d9:85:d5:bc:0c:c2:2d:7e:df:ab:f3:4e:21:ba:be:01: e5:a9:9d:d2:c2:52:43:bf:d0:0b:2c:31:21:69:37:19:cf:e3: 6a:6e:76:00:73:3f:bc:99:88:1d:38:89:79:c4:d7:aa:32:a4: 3c:0c:a8:b8:98:9b:4a:58:bc:0f:1c:95:64:6e:61:ac:40:3b: 47:6d:74:49:e7:81:ac:43:25:e7:d3:57:bd:b1:16:ed:35:8e: 40:5e:e3:3d:bf:d6:23:15:e0:d2:ef:af:74:e5:28:c7:1e:7b: d8:34:20:cd:33:3c:22:61:23:84:6a:cf:04:63:73:af:e6:73: 5e:ee:94:60:71:0b:20:17:9b:77:3a:18:48:f4:97:10:c9:42: 98:68:be:a2:23:c8:62:08:e4:55:80:ae:09:b2:40:05:bd:d0: ce:c2:ff:ef:73:be:9f:aa:e9:50:06:8c:b5:c3:78:28:68:cb: e0:c6:3b:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDH0rQuQVJzR9ibFIdxPtEXvKkXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA4MjgwNjQzMTNaFw0yNjA4MzExMjA4MTNaMDMxMTAvBgNV BAMTKDZEN0RBRDQ4NDkxNUMwQUMwMDk0NjJERjI3MTA3NTIzQzQwMzYxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQdJ2HO0wStvzAYoZoKBlCzhK 6bMVG36RTVGF60e/Lwb0wG38zUmSbZKK6ITaYUs2MPSV7B3t7b7HgCCbVk5bwo0y 3UXXSTDZy7hMGG4exqjfyT8qXMp0KMpvdCbftrQz0mgToRY+//M0q4B6Kq7yw43n 7yZzV4zjKs20RqJcqrT0oULEICLpI3bEzV5mbOIGZQ8XomIqiCcU3wp4CumnxbdN N+V7R0mrXznfkUU5dR4cckOwR1FW86Ja7/w2yl7ZViosWtHkpGygufHBDpVxNIyq Ll8I8RBvmfkgbEb1aBrX5BQWPqedTxri+QwMhGFOV85kl8TDrrgE2r2veuDtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbX2tSEkVwKwAlGLfJxB1I8QDYbkwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPsWvAKp/TlN 4ccVNeR3lq+ipl+26lz8o0daYgPNX7ZSeW5qcR7rb2cNHA5Qoy5wxVbJVo/VnbHz qqDCjP3PdYXo8g6MG6+Dg6nZhdW8DMItft+r804hur4B5amd0sJSQ7/QCywxIWk3 Gc/jam52AHM/vJmIHTiJecTXqjKkPAyouJibSli8DxyVZG5hrEA7R210SeeBrEMl 59NXvbEW7TWOQF7jPb/WIxXg0u+vdOUoxx572DQgzTM8ImEjhGrPBGNzr+ZzXu6U YHELIBebdzoYSPSXEMlCmGi+oiPIYgjkVYCuCbJABb3QzsL/73O+n6rpUAaMtcN4 KGjL4MY7nA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:56 2026 by rpki-client