$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: bEGRySrCF3XfEhvUZkITMoTSvy5BA6B32vbD0jmtHxM= Subject key identifier: DB:E1:AD:34:2A:58:F5:AC:24:E5:8B:01:50:FC:67:18:1B:7E:FF:95 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 637E3F5742C614A2756183F1D06828018D2998E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: FE Signing time: Mon 27 Jul 2026 00:17:53 +0000 Manifest this update: Mon 27 Jul 2026 00:12:52 +0000 Manifest next update: Tue 28 Jul 2026 02:58:52 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 2: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 3: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 4: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 5: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 6: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 7: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 8: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 9: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 3Hiu/zTGl1VtlGgfkzzk/dXKbonFQ7eQ2KF1k5yQQ6A=) 10: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 11: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 12: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7e:3f:57:42:c6:14:a2:75:61:83:f1:d0:68:28:01:8d:29:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Jul 27 00:12:52 2026 GMT Not After : Jul 28 02:58:52 2026 GMT Subject: CN=DBE1AD342A58F5AC24E58B0150FC67181B7EFF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:ce:63:db:d6:46:ef:02:87:93:ad:68:40: 25:10:43:d0:9c:49:87:83:a9:90:e3:22:06:01:ee: 8a:24:cc:15:8a:cb:4e:c0:4a:79:8b:3e:44:8c:7e: 08:4a:90:8f:ae:aa:00:e1:55:93:a3:00:07:a3:3c: 81:dc:ef:bd:5f:10:9c:66:18:2d:82:f5:72:e9:3a: 54:51:4d:39:39:6d:a7:05:ae:cf:0e:c7:41:6f:0e: d0:27:48:9d:8b:6c:6e:0a:2b:12:de:0b:a6:9c:95: e0:d4:b8:63:d7:13:4d:ec:33:80:42:ff:e0:2b:74: 1b:68:d1:7f:dd:20:22:5f:0e:3f:eb:88:d7:a5:d5: 47:c6:b2:f2:62:26:b1:b6:91:54:c4:b8:95:7b:3f: f9:2c:68:4f:4e:24:a5:5f:2c:3d:63:fc:aa:b8:dd: 6a:25:99:67:1d:15:a0:29:1c:a4:15:c6:b4:13:99: 31:69:57:7d:32:94:96:bd:6c:d1:51:3d:a6:a9:42: 9c:69:ea:5d:dd:25:07:5b:e0:70:e1:b9:74:53:89: 3b:60:6f:95:0d:87:5a:da:93:3a:c1:7b:ea:6b:9d: f6:2e:5c:4b:98:fb:fd:06:49:73:31:a7:65:ff:9b: 11:af:e5:2e:3b:89:50:cb:96:c8:71:43:be:77:7a: 9f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E1:AD:34:2A:58:F5:AC:24:E5:8B:01:50:FC:67:18:1B:7E:FF:95 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b4:b9:06:15:a5:eb:d8:ef:ca:64:f8:9d:b7:a9:ee:5d:ee: 86:e1:1a:8f:68:6c:d6:57:0d:b7:70:e1:79:e5:07:23:08:1c: f8:22:a5:9a:e8:0b:f9:6e:aa:0a:6a:f0:46:6c:83:ca:f6:f1: 81:82:6c:02:eb:1c:f7:1f:57:6e:86:5f:ad:c6:36:27:97:e3: 58:d0:57:ba:fe:a5:cc:85:3e:dd:c5:9d:29:2b:0a:7a:83:7e: be:a0:0f:e9:01:e1:6b:55:90:fd:84:f4:19:f7:dd:6f:9b:83: 34:0b:0c:55:eb:0a:90:6e:a8:bc:b6:eb:e5:73:66:5b:90:a1: f0:45:80:a7:87:48:15:41:9e:ce:60:b5:b5:bc:fb:67:c6:8a: e6:66:06:d2:c5:a2:60:c1:dc:b2:0b:21:d8:50:cd:6b:ad:50: 97:0e:42:f2:87:cd:cf:21:61:a4:0f:2d:ce:26:1b:26:b4:8e: 1c:97:61:45:cb:2b:36:cc:2e:6d:78:27:41:0f:be:ad:97:c7: 4e:0a:7c:88:ff:d0:2c:c1:40:c7:3f:91:4c:48:d3:c4:12:c3: 6c:0a:87:70:e0:19:58:8d:33:76:ea:d4:8d:c0:67:bd:2c:61: db:a4:06:4f:64:06:c2:13:36:39:c4:a3:2e:95:90:01:84:0e: 7c:45:93:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY34/V0LGFKJ1YYPx0GgoAY0pmOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA3MjcwMDEyNTJaFw0yNjA3MjgwMjU4NTJaMDMxMTAvBgNV BAMTKERCRTFBRDM0MkE1OEY1QUMyNEU1OEIwMTUwRkM2NzE4MUI3RUZGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgc5j29ZG7wKHk61oQCUQQ9Cc SYeDqZDjIgYB7ookzBWKy07ASnmLPkSMfghKkI+uqgDhVZOjAAejPIHc771fEJxm GC2C9XLpOlRRTTk5bacFrs8Ox0FvDtAnSJ2LbG4KKxLeC6acleDUuGPXE03sM4BC /+ArdBto0X/dICJfDj/riNel1UfGsvJiJrG2kVTEuJV7P/ksaE9OJKVfLD1j/Kq4 3WolmWcdFaApHKQVxrQTmTFpV30ylJa9bNFRPaapQpxp6l3dJQdb4HDhuXRTiTtg b5UNh1rakzrBe+prnfYuXEuY+/0GSXMxp2X/mxGv5S47iVDLlshxQ753ep9FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2+GtNCpY9awk5YsBUPxnGBt+/5UwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLS5BhWl69jv ymT4nbep7l3uhuEaj2hs1lcNt3DheeUHIwgc+CKlmugL+W6qCmrwRmyDyvbxgYJs Ausc9x9XboZfrcY2J5fjWNBXuv6lzIU+3cWdKSsKeoN+vqAP6QHha1WQ/YT0Gffd b5uDNAsMVesKkG6ovLbr5XNmW5Ch8EWAp4dIFUGezmC1tbz7Z8aK5mYG0sWiYMHc sgsh2FDNa61Qlw5C8ofNzyFhpA8tziYbJrSOHJdhRcsrNswubXgnQQ++rZfHTgp8 iP/QLMFAxz+RTEjTxBLDbAqHcOAZWI0zdurUjcBnvSxh26QGT2QGwhM2OcSjLpWQ AYQOfEWTZg== -----END CERTIFICATE-----Generated at Mon Jul 27 11:33:30 2026 by rpki-client