$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: BzahZ6emPFb4Mu5BKEH3oeHR7jIkEe173TMp+8qR6DA= Subject key identifier: 5E:82:F9:0C:D9:93:10:7E:37:D0:68:4E:AF:E1:B9:2D:B4:24:95:76 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 55587A05ED0DDA7D0532E4189EEC44B4CF8D1E34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0144 Signing time: Sun 25 Oct 2026 07:47:21 +0000 Manifest this update: Sun 25 Oct 2026 07:42:21 +0000 Manifest next update: Wed 28 Oct 2026 16:49:21 +0000 Files and hashes: 1: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 2: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 3: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 4: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 5: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 6: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (hash: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI=) 7: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 8: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: sWw09iPDZk9IyKk0JDkEdGiRuoiC5xfTAz+8qrkqVoI=) 9: 3230322e34362e3232342e302f32302d3234203d3e203137363233.roa (hash: 0pGCXDBtG0gqAtGWNS97q9PbYTdSArqdNnHw2SFffsg=) 10: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 11: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 12: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 13: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 14: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 16:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:58:7a:05:ed:0d:da:7d:05:32:e4:18:9e:ec:44:b4:cf:8d:1e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Oct 25 07:42:21 2026 GMT Not After : Oct 28 16:49:21 2026 GMT Subject: CN=5E82F90CD993107E37D0684EAFE1B92DB4249576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:9d:b9:45:e4:28:bb:a0:75:76:d2:fe:e5: b4:83:61:12:72:a7:35:7c:7f:0e:03:47:15:0d:9d: 57:39:15:5b:98:3e:60:85:f7:71:31:e0:6d:c5:ac: 6f:2b:62:05:66:24:a9:a6:c3:72:ed:48:a2:16:2c: d1:a1:36:c7:13:7a:61:14:64:de:eb:8f:43:b0:35: c1:1c:99:29:56:de:5d:85:14:f9:b4:b9:31:12:d9: ed:ac:93:f8:60:b1:d7:41:ac:04:9c:98:7c:43:bf: eb:b2:f4:74:53:b3:64:69:77:a3:5d:32:72:36:18: c0:b1:53:80:68:e3:97:e3:37:fc:60:09:37:4b:c9: 7e:6d:5a:e6:aa:0d:24:2c:1b:6d:5f:39:c7:52:c5: 0f:5f:70:cd:69:db:49:25:2e:ae:fc:69:58:a7:f6: c5:02:d7:38:ee:68:7a:1c:41:11:05:d5:b8:9b:61: c2:25:97:14:b7:07:c7:f7:65:af:51:71:79:fb:6a: 0b:7b:13:5c:eb:25:6e:8c:ca:8e:89:a7:cd:29:41: f0:bb:bb:5d:14:82:73:03:d5:f9:37:3a:11:76:3f: 5c:43:ca:6f:70:94:4a:a9:2e:2d:c5:ed:15:4e:8b: 7e:37:0e:f8:51:50:9c:d9:29:82:c1:94:e0:43:62: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:F9:0C:D9:93:10:7E:37:D0:68:4E:AF:E1:B9:2D:B4:24:95:76 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:78:d8:ad:0d:18:fb:17:9e:4d:b5:e7:b2:15:74:d9:ef: 3d:54:21:37:4d:8d:eb:07:a0:51:e9:76:24:b7:f6:3f:9a:b4: 88:86:89:64:d2:b8:91:9a:bd:ab:b6:49:c8:fc:43:b0:80:45: 2a:fe:79:02:2c:ae:9d:67:55:c5:9f:c1:a7:3e:30:ce:fe:27: 09:34:78:77:d8:c8:6b:4d:52:db:f9:fe:0b:94:ab:f7:70:fb: 09:f3:80:4f:6e:c8:53:95:fb:3e:da:1e:01:7d:e0:b0:84:ea: 84:5d:96:d4:e8:75:a7:d3:4c:b9:50:b1:75:48:e1:46:44:69: ef:ef:f5:8e:54:d1:e6:5a:7d:b2:6f:d1:f1:95:8c:41:f2:de: 7d:d3:f7:1f:64:3d:92:f0:a1:4b:9d:4d:8d:c9:3c:04:40:be: db:19:ed:ee:d3:6a:4c:7e:31:2d:e3:bf:71:f1:5e:a3:a2:a5: e8:50:75:50:0b:52:78:70:d7:87:ea:97:ec:96:bf:b5:b6:3b: c0:96:19:d9:3c:24:47:3d:d6:61:d0:17:d2:78:e0:5e:1a:da: 1c:29:38:3b:29:34:66:0e:b2:60:79:74:f5:23:4f:1f:4b:de: 29:3d:07:84:d4:d4:cf:ba:55:e6:da:7e:09:59:cc:41:93:67: 33:2a:c2:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVVh6Be0N2n0FMuQYnuxEtM+NHjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjEwMjUwNzQyMjFaFw0yNjEwMjgxNjQ5MjFaMDMxMTAvBgNV BAMTKDVFODJGOTBDRDk5MzEwN0UzN0QwNjg0RUFGRTFCOTJEQjQyNDk1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGp25ReQou6B1dtL+5bSDYRJy pzV8fw4DRxUNnVc5FVuYPmCF93Ex4G3FrG8rYgVmJKmmw3LtSKIWLNGhNscTemEU ZN7rj0OwNcEcmSlW3l2FFPm0uTES2e2sk/hgsddBrAScmHxDv+uy9HRTs2Rpd6Nd MnI2GMCxU4Bo45fjN/xgCTdLyX5tWuaqDSQsG21fOcdSxQ9fcM1p20klLq78aVin 9sUC1zjuaHocQREF1bibYcIllxS3B8f3Za9RcXn7agt7E1zrJW6Myo6Jp80pQfC7 u10UgnMD1fk3OhF2P1xDym9wlEqpLi3F7RVOi343DvhRUJzZKYLBlOBDYiMvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXoL5DNmTEH430GhOr+G5LbQklXYwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAle142K0NGPsX nk2157IVdNnvPVQhN02N6wegUel2JLf2P5q0iIaJZNK4kZq9q7ZJyPxDsIBFKv55 AiyunWdVxZ/Bpz4wzv4nCTR4d9jIa01S2/n+C5Sr93D7CfOAT27IU5X7PtoeAX3g sITqhF2W1Oh1p9NMuVCxdUjhRkRp7+/1jlTR5lp9sm/R8ZWMQfLefdP3H2Q9kvCh S51Njck8BEC+2xnt7tNqTH4xLeO/cfFeo6Kl6FB1UAtSeHDXh+qX7Ja/tbY7wJYZ 2TwkRz3WYdAX0njgXhraHCk4Oyk0Zg6yYHl09SNPH0veKT0HhNTUz7pV5tp+CVnM QZNnMyrCTw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:35:49 2026 by rpki-client