$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: Phi1mhJWU9i3SHNEcJPGcCou/CvtWD4H0/aFL8+o+TA= Subject key identifier: 60:6C:3A:D6:C8:7A:DD:85:A2:46:F2:C3:E5:43:4A:90:48:3D:91:EE Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 5DC4C45879DD27947E5186D81DD7D6A0D3725B18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 13:43:39 +0000 Manifest this update: Thu 12 Mar 2026 13:38:39 +0000 Manifest next update: Fri 13 Mar 2026 16:05:39 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 2: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 3: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 4: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 5: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 6: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 7: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 8: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 9: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 10: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 11: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: zQWPil+otwrs1uY8bhHGcJRF2DIoELGImR88L2rIs4A=) 12: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c4:c4:58:79:dd:27:94:7e:51:86:d8:1d:d7:d6:a0:d3:72:5b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Mar 12 13:38:39 2026 GMT Not After : Mar 13 16:05:39 2026 GMT Subject: CN=606C3AD6C87ADD85A246F2C3E5434A90483D91EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:fb:12:1d:ea:b0:53:e2:5d:8f:af:0b:62: a7:04:16:ef:42:8a:cd:81:64:63:97:46:ea:ca:79: 93:45:8e:57:3f:9e:c1:40:25:58:06:fb:fe:ea:f4: 88:02:f8:8b:57:f5:95:cf:f2:ab:fe:ed:d6:2e:cf: f3:bf:f1:4c:72:21:02:35:19:12:7e:0d:09:43:2d: ef:98:36:05:0c:09:32:47:0a:be:18:90:ef:60:33: cc:a9:40:92:fb:df:dc:18:1b:9e:f8:7f:c2:aa:e8: 6f:6e:4c:26:56:67:97:dc:7a:8e:33:34:78:41:57: 66:2d:fc:27:a1:ad:09:26:0e:47:8f:1a:ca:a9:5a: 7c:04:0b:c9:b4:89:bc:2b:b7:34:2b:c2:39:b1:d9: 75:bc:19:1d:53:01:64:75:db:89:9e:de:9f:05:76: 09:05:f4:f8:97:40:18:3d:5f:dd:7c:d5:1e:60:7c: 06:b3:aa:5f:da:4f:56:4f:45:c1:bd:1f:ce:e0:44: 7c:ac:32:64:58:95:19:dc:7e:f6:60:2c:6c:05:6f: 10:6b:8c:71:e6:40:f7:30:3e:6a:26:77:ef:24:5e: d0:33:b0:ef:c5:ca:ea:26:bb:ec:60:48:ea:26:67: a5:5e:af:47:cf:08:41:a9:9e:06:ff:3d:93:2c:0a: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6C:3A:D6:C8:7A:DD:85:A2:46:F2:C3:E5:43:4A:90:48:3D:91:EE X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:59:52:92:76:fa:28:d3:f9:13:4e:dc:0b:a9:9d:42:94:6d: 1b:e5:40:86:fa:e1:4e:1a:3e:9a:bb:ea:81:e2:03:c2:09:e4: 32:5e:05:eb:a5:4d:31:e0:1f:77:ec:e8:07:77:d7:79:31:41: be:55:e3:e3:b9:b9:2d:23:e9:4a:17:e6:fe:aa:80:0f:cc:3e: 60:4c:c4:1b:79:7c:9f:37:cb:64:cb:f2:69:50:cb:d9:c5:18: 81:26:8a:19:b5:f3:20:81:d7:c9:43:23:9a:cb:5c:de:fa:33: 3b:ff:4b:03:90:4a:57:de:24:ac:a1:49:0c:ad:75:a8:56:34: 4a:a7:cb:44:dc:c2:2e:81:63:ef:52:33:41:1c:10:7d:ae:1a: de:93:7f:f5:e5:ff:7c:47:78:a7:60:4a:ce:90:48:0c:f9:1c: 48:be:16:b9:01:ba:84:53:fe:41:70:57:7a:76:b7:e0:15:bc: 6e:2b:5a:9e:7b:7a:6a:9d:87:bf:d8:c3:e2:a4:e5:1a:da:30: 02:fd:63:6e:fe:62:c4:60:d0:7b:5b:d0:a1:2d:cd:8e:f2:00: fa:61:ed:1a:56:a4:a6:b9:f5:26:07:28:3c:7c:af:de:d9:3a: be:df:22:1f:70:0b:a5:6b:e1:d1:45:67:73:1f:37:13:9d:b3: 59:78:fa:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXcTEWHndJ5R+UYbYHdfWoNNyWxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjAzMTIxMzM4MzlaFw0yNjAzMTMxNjA1MzlaMDMxMTAvBgNV BAMTKDYwNkMzQUQ2Qzg3QUREODVBMjQ2RjJDM0U1NDM0QTkwNDgzRDkxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9vsSHeqwU+Jdj68LYqcEFu9C is2BZGOXRurKeZNFjlc/nsFAJVgG+/7q9IgC+ItX9ZXP8qv+7dYuz/O/8UxyIQI1 GRJ+DQlDLe+YNgUMCTJHCr4YkO9gM8ypQJL739wYG574f8Kq6G9uTCZWZ5fceo4z NHhBV2Yt/CehrQkmDkePGsqpWnwEC8m0ibwrtzQrwjmx2XW8GR1TAWR124me3p8F dgkF9PiXQBg9X9181R5gfAazql/aT1ZPRcG9H87gRHysMmRYlRncfvZgLGwFbxBr jHHmQPcwPmomd+8kXtAzsO/Fyuomu+xgSOomZ6Ver0fPCEGpngb/PZMsCguPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYGw61sh63YWiRvLD5UNKkEg9ke4wHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFlSknb6KNP5 E07cC6mdQpRtG+VAhvrhTho+mrvqgeIDwgnkMl4F66VNMeAfd+zoB3fXeTFBvlXj 47m5LSPpShfm/qqAD8w+YEzEG3l8nzfLZMvyaVDL2cUYgSaKGbXzIIHXyUMjmstc 3vozO/9LA5BKV94krKFJDK11qFY0SqfLRNzCLoFj71IzQRwQfa4a3pN/9eX/fEd4 p2BKzpBIDPkcSL4WuQG6hFP+QXBXena34BW8bitannt6ap2Hv9jD4qTlGtowAv1j bv5ixGDQe1vQoS3NjvIA+mHtGlakprn1JgcoPHyv3tk6vt8iH3ALpWvh0UVncx83 E52zWXj6eQ== -----END CERTIFICATE-----Generated at Fri Mar 13 02:46:27 2026 by rpki-client