$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: aygs4v8hAyEdajNSrvWvRfUE/hVS0hR5/rUHSk8VVGg= Subject key identifier: AF:88:8C:90:F4:EB:35:F8:23:BE:8B:06:A2:C9:2D:C9:50:E2:EA:9D Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 6F1C802D23A600CD2CA0B2FC2CAD895C57812CAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 21:13:28 +0000 Manifest this update: Thu 26 Mar 2026 21:08:28 +0000 Manifest next update: Fri 27 Mar 2026 23:29:28 +0000 Files and hashes: 1: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 2: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: P2e44Sk84sDEnBWmI6tip1TSic8tZpZwh2zaWYn2mDg=) 3: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 4: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 5: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:1c:80:2d:23:a6:00:cd:2c:a0:b2:fc:2c:ad:89:5c:57:81:2c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Mar 26 21:08:28 2026 GMT Not After : Mar 27 23:29:28 2026 GMT Subject: CN=AF888C90F4EB35F823BE8B06A2C92DC950E2EA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:b8:c6:8e:5f:fc:41:c5:dc:c2:79:bb:09: ba:a1:a1:b2:08:26:d4:38:59:97:76:a7:f6:99:01: 41:21:0e:0c:f0:5b:49:88:63:d7:40:fe:40:9b:52: 5a:a9:5e:c5:f6:d3:2d:42:58:50:de:7f:af:2f:4e: d5:e7:5d:47:ee:8d:72:94:ef:c0:a0:7a:4e:1e:67: e0:2d:13:96:3d:e0:82:30:10:24:59:32:17:56:3f: 93:30:cd:7e:a3:21:82:df:ee:28:32:11:0b:be:1e: 59:ed:c1:a9:49:54:74:1c:7b:8b:a5:cd:f6:7c:17: bd:7a:ab:e4:c5:89:ff:01:f8:1e:bf:2c:77:b1:56: a4:8a:65:d3:18:67:a0:6f:f1:59:5f:76:97:02:77: c5:5e:73:0c:d1:fd:61:1c:bf:10:d6:4d:e9:69:7d: c4:6c:6b:a9:ef:b4:d9:92:86:e9:d6:f4:87:d4:b3: da:55:cf:14:c3:c8:09:83:c8:88:af:e2:70:26:76: a1:ac:5d:fb:81:39:8f:bf:75:9f:71:68:7d:b4:02: c0:cb:8e:3e:3d:d1:d7:be:de:e3:90:87:44:f0:fa: 7c:90:37:50:f2:44:d3:77:49:74:15:54:3f:fd:35: 0d:81:23:24:fc:ac:4a:48:24:b8:79:02:d2:63:e9: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:8C:90:F4:EB:35:F8:23:BE:8B:06:A2:C9:2D:C9:50:E2:EA:9D X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:01:dc:16:4f:27:12:d8:76:34:69:75:29:b2:d3:3f:c0:0f: 22:8b:08:fb:ec:e6:81:b4:6d:ba:3e:fa:4e:a3:4e:1b:6e:7a: 34:0e:44:d4:3d:ba:c1:1c:a3:53:68:9c:98:62:93:9f:80:1a: db:78:06:29:fb:d1:aa:85:67:0f:6b:86:44:24:95:9c:93:f8: 08:23:86:ea:5a:3c:76:d2:9d:8d:37:0a:47:fd:cf:aa:87:23: d9:cd:d8:e3:16:56:b6:9c:6d:a7:7e:da:22:f6:6f:c8:0d:c4: 20:4f:c7:95:e8:0e:e5:f0:c6:77:52:da:49:89:e7:8c:5c:c0: ea:7e:ef:72:98:73:03:cb:d5:15:45:19:0e:97:cf:88:9b:1e: ae:98:19:c0:69:11:0b:3d:1f:d1:a4:60:a6:7f:57:92:12:97: 9f:75:58:2d:2d:63:6b:be:4d:15:2a:b1:cd:ad:bb:33:6b:fd: 37:22:a5:96:09:f4:71:b3:46:f7:52:0b:ab:26:c3:4d:2f:18: 50:57:85:f0:ec:da:dd:34:4e:8d:59:a7:2b:cf:08:30:2d:39: 79:ce:b6:2d:7f:2c:02:f6:fd:62:e7:e1:7a:1e:a1:2b:37:27: 66:ea:33:3e:42:fd:a8:75:32:80:20:bb:e9:3d:c9:93:9b:2a: fc:3a:b8:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbxyALSOmAM0soLL8LK2JXFeBLK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjAzMjYyMTA4MjhaFw0yNjAzMjcyMzI5MjhaMDMxMTAvBgNV BAMTKEFGODg4QzkwRjRFQjM1RjgyM0JFOEIwNkEyQzkyREM5NTBFMkVBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyk7jGjl/8QcXcwnm7CbqhobII JtQ4WZd2p/aZAUEhDgzwW0mIY9dA/kCbUlqpXsX20y1CWFDef68vTtXnXUfujXKU 78Cgek4eZ+AtE5Y94IIwECRZMhdWP5MwzX6jIYLf7igyEQu+HlntwalJVHQce4ul zfZ8F716q+TFif8B+B6/LHexVqSKZdMYZ6Bv8VlfdpcCd8VecwzR/WEcvxDWTelp fcRsa6nvtNmShunW9IfUs9pVzxTDyAmDyIiv4nAmdqGsXfuBOY+/dZ9xaH20AsDL jj490de+3uOQh0Tw+nyQN1DyRNN3SXQVVD/9NQ2BIyT8rEpIJLh5AtJj6R4fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr4iMkPTrNfgjvosGosktyVDi6p0wHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswHcFk8nEth2 NGl1KbLTP8APIosI++zmgbRtuj76TqNOG256NA5E1D26wRyjU2icmGKTn4Aa23gG KfvRqoVnD2uGRCSVnJP4CCOG6lo8dtKdjTcKR/3Pqocj2c3Y4xZWtpxtp37aIvZv yA3EIE/HlegO5fDGd1LaSYnnjFzA6n7vcphzA8vVFUUZDpfPiJserpgZwGkRCz0f 0aRgpn9XkhKXn3VYLS1ja75NFSqxza27M2v9NyKllgn0cbNG91ILqybDTS8YUFeF 8Oza3TROjVmnK88IMC05ec62LX8sAvb9Yufheh6hKzcnZuozPkL9qHUygCC76T3J k5sq/Dq47g== -----END CERTIFICATE-----Generated at Fri Mar 27 03:34:41 2026 by rpki-client