$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 6P90dMezfFDQmiBNMqBvMkTWQ2i+yEarh0Koa5u+XNM= Subject key identifier: 84:28:DF:92:16:D4:C3:7E:FC:C1:15:5B:44:43:8A:74:9B:E8:5F:B2 Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 0C091E74FD39C9EEA8812F54A3C0A4F5A61A9FA9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 10:32:30 +0000 Manifest this update: Sun 22 Feb 2026 10:27:30 +0000 Manifest next update: Mon 23 Feb 2026 12:26:30 +0000 Files and hashes: 1: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 2: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 3: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 4: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: VC9/NFvXFX3QabPDfASrp5Soz0Wz/l+eRtFqexXKxmA=) 5: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:09:1e:74:fd:39:c9:ee:a8:81:2f:54:a3:c0:a4:f5:a6:1a:9f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Feb 22 10:27:30 2026 GMT Not After : Feb 23 12:26:30 2026 GMT Subject: CN=8428DF9216D4C37EFCC1155B44438A749BE85FB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:11:2c:c5:2a:1b:b4:b5:64:49:5f:bc:46: 0e:2a:7b:34:09:27:c5:f8:4a:35:70:4a:09:db:a7: 12:a3:1e:a6:cb:81:be:33:04:68:d3:88:2e:25:71: 91:0d:48:6d:98:20:a3:04:a2:85:b2:1c:25:b1:75: 3d:5c:5f:69:66:78:6d:9f:f6:db:d1:cc:d1:fd:7c: ef:c9:be:79:cf:ce:4c:59:6f:ce:76:99:d4:0f:a1: 44:da:ca:9f:e0:f1:b2:d7:fc:1d:7b:d4:9c:b8:97: c8:c9:9e:e7:1a:bc:59:d1:25:ee:0a:39:db:dc:bc: 55:c0:9c:1b:30:a8:42:6d:d9:0d:c6:b8:ea:84:56: b2:c7:b9:c6:7d:a4:c0:8c:2f:a4:6d:68:59:2c:02: fd:23:df:03:88:c8:35:97:1c:33:e7:22:09:54:19: 72:9d:91:ba:fd:20:0f:a5:52:f0:2a:85:d2:dd:75: e6:63:ba:ef:87:1e:b2:08:db:9c:70:7c:97:0a:ad: 75:66:35:2d:ce:18:e1:69:65:8f:f0:04:fa:91:a6: f2:87:16:b0:4a:79:ce:13:9f:48:ba:cf:2e:e0:2f: a8:60:59:27:22:e5:5b:fc:e3:0e:07:bd:1c:4e:01: af:c1:56:6c:0c:5c:bf:58:5f:fb:15:99:6c:28:81: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:28:DF:92:16:D4:C3:7E:FC:C1:15:5B:44:43:8A:74:9B:E8:5F:B2 X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:70:c8:53:6a:e4:7b:9d:93:c7:dc:4e:ad:a9:e9:0f:6f:b5: 53:44:bd:3a:12:0b:cb:d4:4f:ff:a0:bd:5c:6e:ae:76:bb:df: 91:09:ac:7e:81:06:e6:57:7c:89:78:28:2e:5c:0b:6e:79:44: 5f:90:ab:82:ff:63:d4:cd:6d:e7:19:9c:44:1c:59:6a:61:62: b9:8a:93:f4:6d:27:49:60:f5:3e:3b:ca:7a:16:0b:df:d5:2e: a8:95:41:47:68:a7:d1:d7:f8:29:ca:dc:c6:b8:ba:af:d2:d2: a9:ab:ab:9c:01:7e:3c:7a:1f:70:dc:92:27:23:3a:d0:89:c7: fa:4a:17:f2:90:0f:e0:23:40:52:6c:6b:fe:33:28:7a:11:76: 35:bd:96:2e:ea:e1:0d:89:3e:84:a6:5b:1d:16:c3:42:af:04: bf:d9:84:f7:7f:95:10:fe:a0:32:c2:e1:3f:32:0d:78:7a:f4: 6d:21:5f:9c:c4:0d:48:e2:20:52:35:c1:94:3c:52:72:2a:3f: 1a:56:a5:18:98:ce:cf:8e:0a:d1:05:1f:34:98:e6:ca:90:fb: 75:d5:20:37:3f:9c:0b:5f:10:04:a3:de:8d:9b:96:2d:0b:8f: 69:34:99:86:40:bd:93:ca:a9:ea:50:e6:bc:e4:59:c3:b8:b4: a1:37:b6:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDAkedP05ye6ogS9Uo8Ck9aYan6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAyMjIxMDI3MzBaFw0yNjAyMjMxMjI2MzBaMDMxMTAvBgNV BAMTKDg0MjhERjkyMTZENEMzN0VGQ0MxMTU1QjQ0NDM4QTc0OUJFODVGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGBEsxSobtLVkSV+8Rg4qezQJ J8X4SjVwSgnbpxKjHqbLgb4zBGjTiC4lcZENSG2YIKMEooWyHCWxdT1cX2lmeG2f 9tvRzNH9fO/JvnnPzkxZb852mdQPoUTayp/g8bLX/B171Jy4l8jJnucavFnRJe4K OdvcvFXAnBswqEJt2Q3GuOqEVrLHucZ9pMCML6RtaFksAv0j3wOIyDWXHDPnIglU GXKdkbr9IA+lUvAqhdLddeZjuu+HHrII25xwfJcKrXVmNS3OGOFpZY/wBPqRpvKH FrBKec4Tn0i6zy7gL6hgWSci5Vv84w4HvRxOAa/BVmwMXL9YX/sVmWwogSTfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhCjfkhbUw378wRVbREOKdJvoX7IwHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHDIU2rke52T x9xOranpD2+1U0S9OhILy9RP/6C9XG6udrvfkQmsfoEG5ld8iXgoLlwLbnlEX5Cr gv9j1M1t5xmcRBxZamFiuYqT9G0nSWD1PjvKehYL39UuqJVBR2in0df4Kcrcxri6 r9LSqaurnAF+PHofcNySJyM60InH+koX8pAP4CNAUmxr/jMoehF2Nb2WLurhDYk+ hKZbHRbDQq8Ev9mE93+VEP6gMsLhPzINeHr0bSFfnMQNSOIgUjXBlDxScio/Glal GJjOz44K0QUfNJjmypD7ddUgNz+cC18QBKPejZuWLQuPaTSZhkC9k8qp6lDmvORZ w7i0oTe2Nw== -----END CERTIFICATE-----Generated at Mon Feb 23 02:07:13 2026 by rpki-client