$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: QZ3ooBEkhC292uHm8Ez70T/rmrErir+5fJqbWjWrY2w= Subject key identifier: 70:71:DE:27:A5:2A:5F:DC:77:FA:31:4D:4C:FC:9E:31:A6:A7:AC:B4 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 55278BF74D4A20D338595AD2B1677418D8D82602 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0130 Signing time: Thu 10 Sep 2026 10:01:14 +0000 Manifest this update: Thu 10 Sep 2026 09:56:14 +0000 Manifest next update: Sun 13 Sep 2026 14:05:14 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 2: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 3: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 4: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 5: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 6: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 7: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (hash: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI=) 8: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: PKzKugDf228XpoW8ihl/lLlUKKro4GvbXehspFJk9Cw=) 9: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 10: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 11: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 12: 3230322e34362e3232342e302f32302d3234203d3e203137363233.roa (hash: 0pGCXDBtG0gqAtGWNS97q9PbYTdSArqdNnHw2SFffsg=) 13: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 14: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:8b:f7:4d:4a:20:d3:38:59:5a:d2:b1:67:74:18:d8:d8:26:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Sep 10 09:56:14 2026 GMT Not After : Sep 13 14:05:14 2026 GMT Subject: CN=7071DE27A52A5FDC77FA314D4CFC9E31A6A7ACB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3e:d8:67:1d:61:80:5a:b7:6b:5d:b6:85:3a: a6:53:0f:d2:4d:24:c8:88:92:91:02:c6:b5:a1:d5: 25:1e:db:6a:72:2c:20:e6:f6:20:0d:9b:cb:3f:43: 45:19:aa:51:90:13:35:fe:24:d0:3b:c7:b1:c7:05: b7:8e:da:b9:e7:98:84:18:de:6e:46:ae:04:90:bb: 08:d8:df:76:94:98:79:a4:eb:d3:b1:24:60:05:66: 70:56:88:24:6f:35:14:bd:48:b2:c6:90:d5:23:4a: b3:38:35:f1:63:82:83:79:90:b0:f6:55:2c:b0:65: 20:4b:f2:b7:67:52:f2:e6:73:d0:60:b8:5c:4c:e9: b9:bd:ef:5a:d3:7a:c6:5d:bc:19:7d:8a:5c:cc:ee: 73:22:b1:79:a5:cb:0f:43:88:bd:82:bd:c6:df:f5: f5:f7:1f:2c:e2:2e:dd:51:f3:df:b3:2b:41:70:f6: 16:8f:cc:33:58:5d:1f:a2:e0:44:bf:32:0a:aa:38: e1:d7:8f:a6:19:27:4a:b5:dc:7b:b8:5e:d4:8e:5d: 7d:ad:e0:da:49:9b:f2:dd:a1:f3:35:34:7d:36:d4: f2:83:76:c4:e1:0c:f6:34:8b:8f:4e:ec:0d:eb:c3: b4:4f:b1:d3:1d:1b:42:c4:35:d9:c2:24:44:c2:4a: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:71:DE:27:A5:2A:5F:DC:77:FA:31:4D:4C:FC:9E:31:A6:A7:AC:B4 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6f:6e:1e:13:10:fe:76:ba:00:d0:de:35:42:00:d2:97:62: 9e:23:8e:3c:3f:74:a7:17:98:96:13:11:c0:dd:30:f2:3a:fd: a8:16:ad:b7:ff:1c:35:8c:8f:cb:34:73:50:67:ef:e9:09:fd: 8c:21:21:c0:15:08:b2:ba:e8:c7:85:47:ec:06:4f:8b:94:ab: fe:e9:df:8a:75:4e:eb:3b:18:00:77:ae:24:79:ab:09:e3:03: 02:6f:79:93:47:ec:19:c1:56:b3:ea:1d:aa:e1:2d:d8:6a:a1: f6:e0:30:7d:a3:cf:e4:ee:08:dc:32:ad:e3:27:bd:5c:e4:dd: 97:06:08:dc:44:f4:63:84:ab:51:a8:a3:e8:76:bb:d1:eb:75: d0:0a:2c:16:11:e6:e2:c6:01:5a:60:13:7b:e3:55:26:de:bd: bf:2a:0b:b9:29:be:01:e1:91:bc:70:a9:bc:16:64:f0:11:42: 4b:b2:50:25:2f:2e:07:4e:67:f2:00:ce:6b:af:14:29:63:0b: 42:d6:b7:f1:d3:ed:35:e2:31:a9:29:13:c4:35:9e:9d:ab:1c: 25:01:4e:b3:95:de:54:c5:f5:fa:99:07:96:50:63:f8:8e:87: 79:6e:e7:c6:62:2d:05:d0:16:f8:5e:4b:5b:70:1c:0e:d9:93: ca:6e:a1:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVSeL901KINM4WVrSsWd0GNjYJgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA5MTAwOTU2MTRaFw0yNjA5MTMxNDA1MTRaMDMxMTAvBgNV BAMTKDcwNzFERTI3QTUyQTVGREM3N0ZBMzE0RDRDRkM5RTMxQTZBN0FDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRPthnHWGAWrdrXbaFOqZTD9JN JMiIkpECxrWh1SUe22pyLCDm9iANm8s/Q0UZqlGQEzX+JNA7x7HHBbeO2rnnmIQY 3m5GrgSQuwjY33aUmHmk69OxJGAFZnBWiCRvNRS9SLLGkNUjSrM4NfFjgoN5kLD2 VSywZSBL8rdnUvLmc9BguFxM6bm971rTesZdvBl9ilzM7nMisXmlyw9DiL2Cvcbf 9fX3HyziLt1R89+zK0Fw9haPzDNYXR+i4ES/MgqqOOHXj6YZJ0q13Hu4XtSOXX2t 4NpJm/LdofM1NH021PKDdsThDPY0i49O7A3rw7RPsdMdG0LENdnCJETCSnd7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcHHeJ6UqX9x3+jFNTPyeMaanrLQwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW9uHhMQ/na6 ANDeNUIA0pdiniOOPD90pxeYlhMRwN0w8jr9qBatt/8cNYyPyzRzUGfv6Qn9jCEh wBUIsrrox4VH7AZPi5Sr/unfinVO6zsYAHeuJHmrCeMDAm95k0fsGcFWs+odquEt 2Gqh9uAwfaPP5O4I3DKt4ye9XOTdlwYI3ET0Y4SrUaij6Ha70et10AosFhHm4sYB WmATe+NVJt69vyoLuSm+AeGRvHCpvBZk8BFCS7JQJS8uB05n8gDOa68UKWMLQta3 8dPtNeIxqSkTxDWenascJQFOs5XeVMX1+pkHllBj+I6HeW7nxmItBdAW+F5LW3Ac DtmTym6h9g== -----END CERTIFICATE-----Generated at Thu Sep 10 18:12:53 2026 by rpki-client