
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
File: 20CAC8E70B5CB3094E47FF051623A98578C1E315.mft (raw, json)
Hash identifier: 5RBlZ95u+t5jl31dakEj1nNWYx1/dbxXC1OBR7r+XGc=
Subject key identifier: ED:34:C9:A0:D2:B0:66:AD:83:DF:EE:C5:C6:D0:2D:21:B9:8E:8D:A0
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 45335A5B11A55B97E0998FE36F4F0D4C2574BA98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
Manifest number: EE
Signing time: Thu 10 Sep 2026 11:06:23 +0000
Manifest this update: Thu 10 Sep 2026 11:01:23 +0000
Manifest next update: Sun 13 Sep 2026 22:53:23 +0000
Files and hashes: 1: 3130332e3232372e3133362e302f32322d3332203d3e2034383337.roa (hash: jFfl737HqJaZzNLYJsdR7Pi03L4UWt1tpx204x58OHc=)
2: 3135302e3234322e3234382e302f32322d3332203d3e203233373234.roa (hash: vwPEmTIi0cfS54R8Za5ZiN5YnIDWkEMterbti+msZ9U=)
3: 34332e3234372e3138342e302f32322d3332203d3e203536303438.roa (hash: C/FXsL3L/3Jsgkl+fBV8LPbIlHgWxnnbtmRbpXzbwUQ=)
4: 3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (hash: hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=)
5: 34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (hash: EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=)
6: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (hash: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ=)
7: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (hash: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=)
8: 3130332e3234322e3137322e302f32322d3332203d3e203233373234.roa (hash: YZ5T2Oqzq3fS11ORHuNW8S2yOvYweiK41wkkRAaw0Qw=)
9: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (hash: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw=)
10: 3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (hash: Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=)
11: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (hash: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=)
12: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (hash: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=)
13: 3131342e3131322e3130302e302f32322d3332203d3e203233373234.roa (hash: +TlL4Kdz+dQAHCRvyRXNP3LY3euHbF5VUmsAzxQL+aA=)
14: 3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa (hash: t1MCyz1DAzj9QfqaCIoPg515VmpgR6j+fB2e73NIxAE=)
15: 3131342e3131322e3130302e302f32322d3332203d3e203536303438.roa (hash: HDMI1ewe1Lh3K6TdmGE4aoTMsi+MILZ0hJ8SdXtvbW0=)
16: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (hash: unApuc/e3kfVSaMeRVUTrLeBIAxkoNwZX+7xHbEwxiA=)
17: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (hash: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw=)
18: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (hash: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=)
19: 34332e3234372e3138382e302f32322d3332203d3e2034383038.roa (hash: rhGWHb7CEz3GRcQ4JkTEOeeP9/h0igCZc3WCvzS2D2o=)
20: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (hash: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=)
21: 20CAC8E70B5CB3094E47FF051623A98578C1E315.crl (hash: JvA0893EsiKt6edGpWnws152N9l4RPw64JgAR6aUdQY=)
22: 34332e3234372e3138342e302f32322d3332203d3e203233373234.roa (hash: TP0dXFP6J3YoHPWv+68Yw+2qDs8x5/9THiU9vM0SoMI=)
23: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (hash: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=)
24: 3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa (hash: /fsA4C9t9e2ZgCcRFHxITfOAiCAuv4YAWr5CI2QBlwo=)
25: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (hash: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=)
26: 3130332e3234322e3137322e302f32322d3332203d3e203536303438.roa (hash: 8nc7tUDAsYwhhigURDMQwsHhNNYfY1MZLKThQmZ1brU=)
27: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (hash: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI=)
28: 3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa (hash: w5FSzLFmyVddLlA4YHga7R5Drq0hSAp700NDCwLz6y0=)
29: 3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa (hash: qzksNBoqmy2lMtZScdS/0RStTiDB+RJTNhrDYjSfPp8=)
30: 34332e3235342e3133362e302f32322d3332203d3e2034383337.roa (hash: E6EErF6dn2+3RoNEs+Qa/gAie91cIjN/HBs4TkYUFFs=)
31: 3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa (hash: jlPD6Syj2WUMk0/GKQtzo96jxAOhRno6yJr248gVRTs=)
32: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (hash: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o=)
33: 3130332e3233372e3234382e302f32342d3332203d3e2034383038.roa (hash: WwwQRuAQTBMvvKr19C3JnKF0SqXIf8PDBY9whAL8jEk=)
34: 34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (hash: kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=)
35: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (hash: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=)
36: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (hash: F5An/Ut6sPTdTDchjvauI8c+cH9mTLnAPBuANoIQPcs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:33:5a:5b:11:a5:5b:97:e0:99:8f:e3:6f:4f:0d:4c:25:74:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Sep 10 11:01:23 2026 GMT
Not After : Sep 13 22:53:23 2026 GMT
Subject: CN=ED34C9A0D2B066AD83DFEEC5C6D02D21B98E8DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:ae:fe:3b:6a:45:a6:ad:b3:d7:7b:6d:a8:
66:7b:f7:16:c9:8f:51:a5:73:42:4e:86:c5:26:85:
46:0c:97:c0:a4:8a:06:ae:73:1b:4d:2f:4b:dd:da:
8a:b5:44:a2:03:6f:53:12:bf:37:28:3f:50:34:80:
82:16:b2:af:44:ad:ab:bd:cd:57:2e:de:7f:7c:70:
31:7b:b2:c2:fa:17:e1:a3:7d:f6:54:69:02:a5:55:
b4:97:43:44:a9:5e:20:1a:c9:44:a6:1c:d3:f3:16:
e1:c0:98:5e:cf:6d:86:0d:02:11:dc:6d:47:71:35:
d4:fb:92:b9:f8:64:f6:04:3f:99:20:ba:51:d0:ba:
a1:5b:52:ad:11:7c:7f:2b:ff:c9:2e:31:60:46:60:
d1:45:75:55:a0:40:22:b0:d6:97:07:33:37:a3:79:
f1:0d:37:cb:84:45:00:4e:62:15:39:f8:25:bc:da:
9a:26:89:d7:cf:c7:b3:f7:3a:0f:7c:e5:4e:0f:03:
ce:6b:e4:2a:e7:5f:12:23:96:6c:6f:b1:50:51:80:
9d:71:cc:4a:99:23:d1:0d:b1:7e:d3:c4:5f:75:8f:
e0:91:64:4e:ca:92:8e:17:0b:6f:0a:ea:9c:28:3e:
44:7e:74:b6:5a:ae:5f:0a:02:22:62:4c:20:39:d8:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:34:C9:A0:D2:B0:66:AD:83:DF:EE:C5:C6:D0:2D:21:B9:8E:8D:A0
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:78:67:fb:6d:42:6f:0f:82:a8:3d:0c:05:6f:c3:0e:eb:ee:
01:58:ae:11:ea:af:06:2e:5e:c1:05:65:c0:5d:17:83:aa:1e:
bc:e9:43:98:cb:69:ce:e9:51:c1:28:b5:68:2b:cd:4b:e1:40:
49:91:99:3b:f1:f0:e2:bd:65:9f:85:3a:0d:bd:18:64:91:91:
54:c3:44:83:49:a5:37:87:be:02:88:74:67:99:24:17:44:cd:
5d:43:ff:1b:19:72:31:d8:cf:44:d4:27:62:87:d7:19:a0:c4:
f5:c7:8c:dd:72:db:46:e9:64:cb:97:22:87:8c:9c:20:91:65:
e8:e8:c2:7f:fa:a8:d1:33:a6:c0:10:c7:bb:58:0f:2c:7a:82:
27:0a:4d:6b:e9:8a:a6:81:22:d4:95:50:01:82:17:7c:01:87:
7f:01:d7:ae:28:e4:ba:09:c2:ef:fc:f7:28:0e:b9:9d:c0:b4:
63:ab:fe:49:64:5b:5f:ee:83:e5:da:a3:66:62:14:60:4b:5b:
a9:f1:a4:b2:7d:2b:7a:f0:2a:c8:24:c7:07:18:9d:f7:95:d5:
00:57:c8:2b:d8:2b:d3:40:6b:47:4a:c1:33:3c:99:43:e9:0c:
3f:d2:3e:b5:12:96:5a:e0:c7:56:1f:fb:f4:91:84:6f:f9:2c:
6c:64:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:25:09 2026 by rpki-client