$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: 7lIcIzYclOE+6qZq2EKc9dJjcf5QhyVfZXAbsB9ODXo= Subject key identifier: C8:B3:51:7A:66:A1:E3:E3:32:CD:6A:C1:03:0B:40:49:31:E3:3A:DD Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 3D006AF5C36D03C521E2C84FE9F2C6EC1045EC7B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: F7 Signing time: Fri 24 Jul 2026 07:20:36 +0000 Manifest this update: Fri 24 Jul 2026 07:15:36 +0000 Manifest next update: Sat 25 Jul 2026 07:44:36 +0000 Files and hashes: 1: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 2: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 3: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: e+MIQymMbJs6ZnV0PrVSL8fZdzEYNBYOlLE+PC5TX6s=) 4: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) 5: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:00:6a:f5:c3:6d:03:c5:21:e2:c8:4f:e9:f2:c6:ec:10:45:ec:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: Jul 24 07:15:36 2026 GMT Not After : Jul 25 07:44:36 2026 GMT Subject: CN=C8B3517A66A1E3E332CD6AC1030B404931E33ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:e5:8f:53:6c:cd:cd:96:20:96:5d:f3:b2: 29:22:1f:c5:55:7e:09:99:c6:2c:83:39:a7:10:47: ca:42:0d:d1:c0:59:7b:27:b2:de:59:83:65:8a:c1: e7:94:eb:aa:d6:b7:27:28:44:1d:1b:62:84:5b:12: 2d:ba:0f:0f:33:6c:ae:74:17:6d:95:97:e2:d7:8c: 86:71:95:1b:8d:21:76:ef:75:31:2e:2d:fd:8c:85: 57:de:74:da:dd:95:fe:a9:40:17:61:34:bf:31:e5: d2:3c:e3:06:09:23:71:de:d7:0f:85:6a:06:c5:89: f0:98:b5:e3:f2:c4:77:20:6b:16:8c:d6:7f:36:8a: a5:3e:68:73:d8:13:94:9e:17:c8:a7:8c:a5:3b:1c: 08:e6:65:f3:e6:bd:21:b6:1b:af:2e:57:89:a2:af: 39:b5:81:c8:59:90:1b:e9:c3:98:c3:d1:e7:9d:e7: 63:ad:cc:b7:90:08:c1:ad:0c:4f:38:a1:b2:57:f7: c4:c9:eb:3b:af:e6:75:ec:7b:69:87:c6:d4:8c:0e: 5a:5f:25:26:07:26:dc:92:4f:4d:df:cd:b0:f6:99: 54:92:67:4e:88:8c:f8:60:68:03:ca:70:bb:c8:c6: 5e:eb:6e:13:9a:80:52:7d:fe:08:41:f3:e0:33:3f: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:51:7A:66:A1:E3:E3:32:CD:6A:C1:03:0B:40:49:31:E3:3A:DD X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f4:31:f2:2f:05:ce:8b:15:55:66:13:e6:0c:6e:06:a1:9d: 6a:b3:69:e3:6a:7c:80:03:ba:1a:9f:5e:91:4c:9e:dd:77:63: 03:cf:f7:76:2c:e3:0c:ae:82:ed:2a:b0:c5:5b:38:f8:93:ea: e3:a5:e7:ed:0b:e2:a0:a6:b3:5c:b0:b3:2c:b7:3f:24:c9:10: 26:8e:a9:ea:e0:92:7c:42:87:4d:f3:88:6b:9f:c6:ad:ed:34: 90:1c:b1:1e:89:d7:2f:a2:9f:b7:48:a5:6d:0a:b7:c3:72:4e: ec:8f:86:7c:f6:7e:62:6d:5c:4d:1e:d4:49:57:c2:6c:14:d9: 52:83:2f:e7:0a:9c:53:bc:4d:77:b1:0c:12:d9:bf:a4:55:42: f9:ad:7d:ea:49:f0:60:9e:3c:3c:e6:fc:06:b8:69:00:b7:60: d9:68:08:e0:80:75:55:2b:6d:8f:00:a2:eb:bc:99:c9:22:2a: 15:d2:94:10:e7:56:48:05:6c:0a:70:09:65:d4:fc:49:3a:61: 57:d0:81:e3:a4:90:a0:d4:b2:de:a7:d9:1c:af:f0:c8:e6:3b: f7:6d:d1:d9:58:a6:86:00:e4:7b:f8:fe:a3:b3:e0:ad:75:8e: 0f:0e:11:9c:d1:8f:f0:7e:eb:b1:40:07:53:34:4f:45:98:b3: ca:2f:ec:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPQBq9cNtA8Uh4shP6fLG7BBF7HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA3MjQwNzE1MzZaFw0yNjA3MjUwNzQ0MzZaMDMxMTAvBgNV BAMTKEM4QjM1MTdBNjZBMUUzRTMzMkNENkFDMTAzMEI0MDQ5MzFFMzNBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhuWPU2zNzZYgll3zsikiH8VV fgmZxiyDOacQR8pCDdHAWXsnst5Zg2WKweeU66rWtycoRB0bYoRbEi26Dw8zbK50 F22Vl+LXjIZxlRuNIXbvdTEuLf2MhVfedNrdlf6pQBdhNL8x5dI84wYJI3He1w+F agbFifCYtePyxHcgaxaM1n82iqU+aHPYE5SeF8injKU7HAjmZfPmvSG2G68uV4mi rzm1gchZkBvpw5jD0eed52OtzLeQCMGtDE84obJX98TJ6zuv5nXse2mHxtSMDlpf JSYHJtyST03fzbD2mVSSZ06IjPhgaAPKcLvIxl7rbhOagFJ9/ghB8+AzPz7RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyLNRemah4+MyzWrBAwtASTHjOt0wHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvQx8i8FzosV VWYT5gxuBqGdarNp42p8gAO6Gp9ekUye3XdjA8/3dizjDK6C7SqwxVs4+JPq46Xn 7QvioKazXLCzLLc/JMkQJo6p6uCSfEKHTfOIa5/Gre00kByxHonXL6Kft0ilbQq3 w3JO7I+GfPZ+Ym1cTR7USVfCbBTZUoMv5wqcU7xNd7EMEtm/pFVC+a196knwYJ48 POb8BrhpALdg2WgI4IB1VSttjwCi67yZySIqFdKUEOdWSAVsCnAJZdT8STphV9CB 46SQoNSy3qfZHK/wyOY7923R2VimhgDke/j+o7PgrXWODw4RnNGP8H7rsUAHUzRP RZizyi/s3A== -----END CERTIFICATE-----Generated at Fri Jul 24 19:08:27 2026 by rpki-client