$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: bCYo4NecjAFvvs6ZS0emvW5UpCL30zFyfAjkIKnAg/U= Subject key identifier: 7B:7D:E7:F3:82:4E:5B:DF:BE:0C:76:3F:16:61:9E:14:6E:EB:3F:3A Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 5A87E9E4018E39611354ABA4B00DC5F72F1DEA40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 013B Signing time: Tue 13 Oct 2026 14:23:06 +0000 Manifest this update: Tue 13 Oct 2026 14:18:06 +0000 Manifest next update: Fri 16 Oct 2026 23:43:06 +0000 Files and hashes: 1: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 2: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: PRB5fh16K5KItwhEGJ0bCI1ChP2eTMkOwDOpY4erzqQ=) 3: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 4: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 5: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 23:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:87:e9:e4:01:8e:39:61:13:54:ab:a4:b0:0d:c5:f7:2f:1d:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Oct 13 14:18:06 2026 GMT Not After : Oct 16 23:43:06 2026 GMT Subject: CN=7B7DE7F3824E5BDFBE0C763F16619E146EEB3F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ff:af:6e:b7:fb:b7:d9:45:47:00:25:6f:8c: 23:cf:74:5a:7d:7c:d4:8d:bb:cf:f7:dc:58:e1:7e: 9a:4a:4f:82:d0:12:37:cc:32:d3:32:f1:b0:7b:ca: 59:72:ab:83:46:16:44:e9:29:11:e2:fa:bc:5e:cf: 94:e4:e4:36:eb:2a:8a:60:36:12:a5:4c:89:43:ec: 57:fe:a3:de:7f:99:01:46:c1:66:2c:e3:3e:0d:cb: 7d:e7:ff:68:57:e9:24:1c:bd:66:c9:5b:6e:37:93: ae:d3:e0:0b:f0:6c:c7:33:c1:e8:de:1f:f5:1d:b3: 2e:dc:40:23:85:85:f4:18:12:be:f9:ce:05:26:0f: 94:06:af:84:03:fe:c4:a0:7f:fe:d3:2c:1f:b9:33: a3:fd:97:b6:07:6f:34:48:7d:95:4a:ab:b3:99:2f: 2c:23:bc:66:9e:33:72:e3:8a:21:32:a2:c1:84:7f: bd:1b:77:05:05:c0:f9:fd:c9:5b:9e:c6:01:4c:85: b0:44:f7:38:33:7c:d1:bc:26:fa:a6:55:3b:70:df: 59:e1:eb:9c:76:1c:af:59:f5:12:60:59:15:0b:6f: a9:e6:f0:b1:29:40:87:26:9b:e2:1e:7e:a7:78:6a: 46:0b:fa:9f:f5:20:f1:47:19:75:ff:98:a4:18:9a: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7D:E7:F3:82:4E:5B:DF:BE:0C:76:3F:16:61:9E:14:6E:EB:3F:3A X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cf:2e:77:a4:55:86:ba:25:dc:3d:07:75:e5:42:fa:b8:e3: 5a:49:24:21:93:84:99:bf:a6:e0:87:bd:69:4f:77:5a:e4:60: 9e:32:04:fc:97:9f:58:c2:f7:6e:87:5a:38:ea:97:b9:b2:4b: cb:a1:8f:58:c1:82:71:c6:66:17:e2:2b:34:f6:98:0d:c6:9a: e9:81:29:d0:6f:a0:21:05:92:c1:24:99:d7:0b:5c:73:76:12: a9:77:a4:b6:91:21:12:fa:00:e4:d6:8c:9f:a8:d4:4c:72:3c: 87:48:0c:b4:3c:45:f0:66:0c:bf:42:80:ff:b8:64:0e:ae:14: 07:19:18:34:b7:89:94:48:ed:e5:34:7a:c2:a3:cd:4a:3d:64: b1:c8:b7:6a:e7:1f:7d:3f:b6:5c:bc:8d:68:3b:7e:84:4a:36: 4a:b9:b3:5d:fe:7e:55:dd:09:f7:61:c9:af:10:16:22:ed:c5: 63:7b:0b:d2:cb:fd:b6:bd:df:9a:24:28:cc:21:3f:c3:af:84: ef:a2:2c:c0:98:9d:ba:90:10:5c:d6:ba:4c:ed:05:ff:6d:fa: b8:69:9b:5d:49:81:72:33:9d:50:09:9c:d5:61:d4:81:d3:f1: 6e:29:fa:c9:4d:ef:f3:d0:41:9c:67:2b:b5:66:6f:11:49:79: 36:7a:36:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWofp5AGOOWETVKuksA3F9y8d6kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjEwMTMxNDE4MDZaFw0yNjEwMTYyMzQzMDZaMDMxMTAvBgNV BAMTKDdCN0RFN0YzODI0RTVCREZCRTBDNzYzRjE2NjE5RTE0NkVFQjNGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh/69ut/u32UVHACVvjCPPdFp9 fNSNu8/33FjhfppKT4LQEjfMMtMy8bB7yllyq4NGFkTpKRHi+rxez5Tk5DbrKopg NhKlTIlD7Ff+o95/mQFGwWYs4z4Ny33n/2hX6SQcvWbJW243k67T4AvwbMczweje H/Udsy7cQCOFhfQYEr75zgUmD5QGr4QD/sSgf/7TLB+5M6P9l7YHbzRIfZVKq7OZ LywjvGaeM3LjiiEyosGEf70bdwUFwPn9yVuexgFMhbBE9zgzfNG8JvqmVTtw31nh 65x2HK9Z9RJgWRULb6nm8LEpQIcmm+Iefqd4akYL+p/1IPFHGXX/mKQYmu7zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe33n84JOW9++DHY/FmGeFG7rPzowHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHc8ud6RVhrol 3D0HdeVC+rjjWkkkIZOEmb+m4Ie9aU93WuRgnjIE/JefWML3bodaOOqXubJLy6GP WMGCccZmF+IrNPaYDcaa6YEp0G+gIQWSwSSZ1wtcc3YSqXektpEhEvoA5NaMn6jU THI8h0gMtDxF8GYMv0KA/7hkDq4UBxkYNLeJlEjt5TR6wqPNSj1ksci3aucffT+2 XLyNaDt+hEo2SrmzXf5+Vd0J92HJrxAWIu3FY3sL0sv9tr3fmiQozCE/w6+E76Is wJidupAQXNa6TO0F/236uGmbXUmBcjOdUAmc1WHUgdPxbin6yU3v89BBnGcrtWZv EUl5Nno25w== -----END CERTIFICATE-----Generated at Thu Oct 15 14:00:21 2026 by rpki-client