$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: cw41JDfoqFYYOiC2HYDxpdqogzeEqnxpaVFX2v2IMPg= Subject key identifier: AF:A7:64:09:E3:91:47:D3:07:C6:45:55:07:54:1D:77:16:E4:15:0F Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 189B4AA82565286178357BDE703387D0C5D89F66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 85 Signing time: Mon 27 Apr 2026 11:58:47 +0000 Manifest this update: Mon 27 Apr 2026 11:53:47 +0000 Manifest next update: Tue 28 Apr 2026 15:35:47 +0000 Files and hashes: 1: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 2: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 3: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 4: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 5: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 6: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 7: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 8: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 9: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 10: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: m+mSX0+kojpjkLo1xXYki/nnhM7VZGyfeaJG4q8iiAg=) 11: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 12: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9b:4a:a8:25:65:28:61:78:35:7b:de:70:33:87:d0:c5:d8:9f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Apr 27 11:53:47 2026 GMT Not After : Apr 28 15:35:47 2026 GMT Subject: CN=AFA76409E39147D307C6455507541D7716E4150F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3b:44:68:8f:56:c0:f1:89:6c:7e:61:1a:9d: c0:69:b1:e6:5b:ec:27:70:80:de:80:1c:0e:e7:e5: 90:ee:d0:32:64:50:50:a2:8c:2b:5f:7d:43:25:60: e5:f1:91:b7:23:26:67:dc:e5:73:c6:5d:11:da:dd: c4:ea:8e:2c:b6:37:b9:6d:42:80:ce:d3:8c:48:ed: 93:f3:08:c7:38:1d:bc:11:8f:a3:83:c6:87:5e:f0: 18:15:40:f4:f8:1f:67:2b:36:0e:11:81:66:de:21: 83:54:17:39:e6:be:46:65:04:18:5a:e1:97:6c:8b: c3:e7:f4:fc:e5:ae:05:05:51:5d:28:08:5a:d6:21: db:1a:2f:cc:37:0d:7a:7e:8f:5e:83:b5:25:ab:aa: 50:81:37:c9:b5:4e:dc:ab:ef:51:17:99:e7:43:52: e1:26:c2:e0:ac:ff:dc:f4:f4:cd:72:19:85:55:81: e1:92:73:66:8b:22:82:11:cb:41:10:0c:10:f2:c0: 95:20:9a:a2:38:cb:02:a5:06:ba:fa:78:b1:08:d5: 96:7a:aa:21:37:82:16:3a:0c:c4:ef:e2:6f:b9:f8: 45:bf:af:78:05:34:30:47:8b:a7:94:b7:5f:03:d1: b7:a9:3a:43:09:95:f9:a2:dd:e5:85:fa:04:9b:fb: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:64:09:E3:91:47:D3:07:C6:45:55:07:54:1D:77:16:E4:15:0F X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ea:72:00:71:b9:c1:b6:35:95:0e:16:1c:10:ed:3a:23:25: d6:75:de:ea:27:ac:9e:b5:4a:da:47:7c:4e:c7:31:c3:b5:ef: 6a:e6:b6:fc:1a:02:39:ed:18:f8:6a:40:ba:d8:0b:b4:eb:ed: 3c:c4:c0:f0:e0:2c:15:fc:75:8d:60:b4:17:3a:cc:9c:6e:7a: 9c:02:3d:33:95:5f:32:36:5f:75:e2:70:fb:25:7c:96:ad:cc: e4:70:5e:b2:cb:27:0a:56:2a:d6:bb:e9:74:1c:6d:d8:36:83: eb:05:9c:39:97:bd:b5:1d:b1:f2:73:57:2a:df:b7:9b:cc:80: f1:a4:49:24:b5:66:ff:d4:dc:83:fb:94:b8:9a:2d:eb:e2:75: 43:5f:cf:42:de:27:67:0b:28:d2:a2:7c:f6:b2:2b:28:4f:76: f2:d2:13:00:6b:5d:92:b1:3d:c5:a2:f4:17:b0:27:a9:a1:bd: 8c:af:90:78:49:ba:81:4c:23:b0:df:4a:40:61:06:bb:cc:06: 28:06:eb:99:58:e8:e3:c0:19:6d:c8:79:82:db:e6:17:3f:e3: b8:78:33:fa:c0:c4:7d:9d:e1:f0:79:10:13:d4:01:d0:11:44: 4e:0c:e3:12:f6:84:24:4b:5f:a8:74:50:22:0d:c6:f8:69:ad: ec:a2:ce:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGJtKqCVlKGF4NXvecDOH0MXYn2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA0MjcxMTUzNDdaFw0yNjA0MjgxNTM1NDdaMDMxMTAvBgNV BAMTKEFGQTc2NDA5RTM5MTQ3RDMwN0M2NDU1NTA3NTQxRDc3MTZFNDE1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuO0Roj1bA8YlsfmEancBpseZb 7CdwgN6AHA7n5ZDu0DJkUFCijCtffUMlYOXxkbcjJmfc5XPGXRHa3cTqjiy2N7lt QoDO04xI7ZPzCMc4HbwRj6ODxode8BgVQPT4H2crNg4RgWbeIYNUFznmvkZlBBha 4Zdsi8Pn9PzlrgUFUV0oCFrWIdsaL8w3DXp+j16DtSWrqlCBN8m1Ttyr71EXmedD UuEmwuCs/9z09M1yGYVVgeGSc2aLIoIRy0EQDBDywJUgmqI4ywKlBrr6eLEI1ZZ6 qiE3ghY6DMTv4m+5+EW/r3gFNDBHi6eUt18D0bepOkMJlfmi3eWF+gSb+5c7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr6dkCeORR9MHxkVVB1QddxbkFQ8wHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+pyAHG5wbY1 lQ4WHBDtOiMl1nXe6iesnrVK2kd8Tscxw7Xvaua2/BoCOe0Y+GpAutgLtOvtPMTA 8OAsFfx1jWC0FzrMnG56nAI9M5VfMjZfdeJw+yV8lq3M5HBesssnClYq1rvpdBxt 2DaD6wWcOZe9tR2x8nNXKt+3m8yA8aRJJLVm/9Tcg/uUuJot6+J1Q1/PQt4nZwso 0qJ89rIrKE928tITAGtdkrE9xaL0F7AnqaG9jK+QeEm6gUwjsN9KQGEGu8wGKAbr mVjo48AZbch5gtvmFz/juHgz+sDEfZ3h8HkQE9QB0BFETgzjEvaEJEtfqHRQIg3G +Gmt7KLOxw== -----END CERTIFICATE-----Generated at Mon Apr 27 16:17:10 2026 by rpki-client