$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: 1s4k+Cn8QYeG3rKm/0YmvO4zcDfhdnhZ2Qaf0j0mdSQ= Subject key identifier: AE:01:7E:A7:D0:D3:36:61:64:8A:43:E5:33:46:7C:1B:17:0E:C1:03 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 4A194CA0D34AEA52620F10B389C517E7DB4CB9EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0145 Signing time: Tue 27 Oct 2026 16:49:55 +0000 Manifest this update: Tue 27 Oct 2026 16:44:55 +0000 Manifest next update: Fri 30 Oct 2026 23:14:55 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 2: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 3: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (hash: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI=) 4: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 5: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) 6: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 7: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 8: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 9: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 10: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 11: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 12: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: vnBZv/jemRc6RgstJN5IXbrCPmHy6Crn2HeBv/Ve7sM=) 13: 3230322e34362e3232342e302f32302d3234203d3e203137363233.roa (hash: 0pGCXDBtG0gqAtGWNS97q9PbYTdSArqdNnHw2SFffsg=) 14: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:4c:a0:d3:4a:ea:52:62:0f:10:b3:89:c5:17:e7:db:4c:b9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Oct 27 16:44:55 2026 GMT Not After : Oct 30 23:14:55 2026 GMT Subject: CN=AE017EA7D0D33661648A43E533467C1B170EC103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:a4:80:a6:c7:ef:1c:47:49:14:aa:ec:47: de:88:32:44:cf:3f:2d:0a:0a:f1:59:d6:69:4b:a3: 56:a5:38:97:ef:42:bf:22:97:5e:6f:f9:b1:62:84: 5c:78:97:b6:3c:43:db:81:26:8c:f4:b1:03:03:64: e1:e6:b7:3f:3c:c9:8c:f2:e9:c9:11:ee:5d:86:77: ee:96:54:61:fd:56:57:a9:7d:8b:f0:e0:30:3f:e4: d9:17:9c:6d:9d:42:14:b8:d3:11:2f:a2:20:19:cf: fe:d4:47:28:d4:50:00:71:c2:76:33:3a:2d:87:90: ee:f0:2b:aa:04:d4:63:25:50:87:59:de:ef:57:af: da:26:b7:bd:bc:57:28:04:74:01:9e:ae:26:17:6e: ce:ea:ce:f6:c7:b1:3e:84:33:9c:70:39:0a:bc:5e: a1:f4:bc:1f:0b:df:7e:a3:92:12:a3:b9:40:b1:28: 1e:02:28:d0:f6:b1:54:29:05:a7:80:64:58:4e:da: 40:83:e1:1b:74:c1:6f:cc:11:c7:0c:85:d7:31:91: c4:c1:a6:5d:a9:fe:38:ed:96:0a:5c:96:b4:92:2c: ca:44:2b:d4:20:8e:d8:a1:59:2e:3c:b9:9a:70:6a: 43:e9:3c:87:cd:2e:ad:27:fd:90:a8:36:01:c7:42: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:01:7E:A7:D0:D3:36:61:64:8A:43:E5:33:46:7C:1B:17:0E:C1:03 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:07:a3:d6:5c:6e:6e:05:57:45:ca:1f:d6:42:60:7f:11:29: bf:e8:b9:ee:2a:c0:d9:de:44:28:a0:0d:e9:e8:76:35:f3:fb: 05:ce:6c:a5:df:bc:44:f1:f5:a7:ae:87:94:98:99:ce:c8:da: 80:61:81:50:0b:09:56:b3:b7:36:70:29:cd:6a:ea:1d:2d:c8: db:fb:32:a8:09:0c:1a:a0:cc:51:1d:c6:9f:37:8f:11:af:7c: 57:ab:10:4e:14:06:d0:87:34:79:15:61:2e:3f:22:f3:07:d3: 04:92:dc:5f:87:55:fd:b0:39:cc:57:8a:b6:ed:9e:20:33:f3: 82:84:ab:c3:21:73:17:56:b8:8c:31:cd:dc:8c:6f:35:ee:e0: 3b:c3:bf:56:d9:5c:60:90:1e:c1:2d:7d:81:12:e9:9b:56:df: cf:78:99:c5:36:e2:3c:ee:7e:91:71:77:fb:74:8e:73:bc:b0: e5:6c:88:43:6d:d3:19:d2:77:ac:bd:38:db:6a:a3:e6:c4:38: 1e:d6:74:d2:50:95:0d:3b:b8:13:32:6f:9d:d8:b6:d5:fc:74: 6a:f2:e2:de:08:29:da:f1:33:7f:15:bd:10:f2:50:8a:8b:da: 9b:e0:62:e1:70:85:61:ff:1f:48:4b:b8:c7:5f:25:7a:b2:ed: 87:b9:6e:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUShlMoNNK6lJiDxCzicUX59tMue8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjEwMjcxNjQ0NTVaFw0yNjEwMzAyMzE0NTVaMDMxMTAvBgNV BAMTKEFFMDE3RUE3RDBEMzM2NjE2NDhBNDNFNTMzNDY3QzFCMTcwRUMxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/KSApsfvHEdJFKrsR96IMkTP Py0KCvFZ1mlLo1alOJfvQr8il15v+bFihFx4l7Y8Q9uBJoz0sQMDZOHmtz88yYzy 6ckR7l2Gd+6WVGH9VlepfYvw4DA/5NkXnG2dQhS40xEvoiAZz/7URyjUUABxwnYz Oi2HkO7wK6oE1GMlUIdZ3u9Xr9omt728VygEdAGeriYXbs7qzvbHsT6EM5xwOQq8 XqH0vB8L336jkhKjuUCxKB4CKND2sVQpBaeAZFhO2kCD4Rt0wW/MEccMhdcxkcTB pl2p/jjtlgpclrSSLMpEK9QgjtihWS48uZpwakPpPIfNLq0n/ZCoNgHHQlxRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrgF+p9DTNmFkikPlM0Z8GxcOwQMwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAej1lxubgVX Rcof1kJgfxEpv+i57irA2d5EKKAN6eh2NfP7Bc5spd+8RPH1p66HlJiZzsjagGGB UAsJVrO3NnApzWrqHS3I2/syqAkMGqDMUR3GnzePEa98V6sQThQG0Ic0eRVhLj8i 8wfTBJLcX4dV/bA5zFeKtu2eIDPzgoSrwyFzF1a4jDHN3IxvNe7gO8O/VtlcYJAe wS19gRLpm1bfz3iZxTbiPO5+kXF3+3SOc7yw5WyIQ23TGdJ3rL0422qj5sQ4HtZ0 0lCVDTu4EzJvndi21fx0avLi3ggp2vEzfxW9EPJQiovam+Bi4XCFYf8fSEu4x18l erLth7luFA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:28:37 2026 by rpki-client