$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft File: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft (raw, json) Hash identifier: MBS03PCCGdF1J3yIna388T1qPTFN1t8pKg6rAHiKd5M= Subject key identifier: 8D:76:2F:64:5B:B3:95:94:48:AA:41:C2:66:07:BC:51:92:58:C3:9F Authority key identifier: 20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 Certificate issuer: /CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Certificate serial: 1AC96B391FA519B79566B2FB7DA1CB2FFC86C49C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft Manifest number: 98 Signing time: Wed 13 May 2026 02:00:51 +0000 Manifest this update: Wed 13 May 2026 01:55:51 +0000 Manifest next update: Thu 14 May 2026 04:32:51 +0000 Files and hashes: 1: 20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl (hash: KOIoSp0Oiz9cTQ+kkpvgMYAp7BU8UDpnJJimT/Uq91w=) 2: 3130332e3233382e39362e302f32322d3234203d3e203539303733.roa (hash: YiQ2wVc7movJ2eggYqh2iJ/IQz0ehHxekBa2CQFQXJQ=) 3: 323430323a393363303a3130303a3a2f34382d3438203d3e203539303733.roa (hash: G3LsYAdGEQ2oSXuWljEC//dYUc8xrMxW9jIj4Msnq/U=) 4: 323430323a393363303a32303a3a2f34382d3438203d3e203539303733.roa (hash: 6Z5TEY4NnGztcc6ca3bnVDmmtmHRpPLzeNVT107thKE=) 5: 323430323a393363303a3a2f34382d3438203d3e203539303733.roa (hash: r1GLgzsyxo+t+ZDc2qID3wQFI2/wsbiaJgUyerMqXrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c9:6b:39:1f:a5:19:b7:95:66:b2:fb:7d:a1:cb:2f:fc:86:c4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A8261A9AC2EF37333A974DDAB5F8F95E360B06 Validity Not Before: May 13 01:55:51 2026 GMT Not After : May 14 04:32:51 2026 GMT Subject: CN=8D762F645BB3959448AA41C26607BC519258C39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:db:75:44:82:1b:49:4e:62:8e:15:95:f3: c5:2b:af:0e:06:2e:a1:56:4c:23:44:f1:16:3e:67: 5f:ed:c4:ad:84:fe:72:2b:ef:0f:a5:74:a9:78:e6: 3f:e8:9c:f8:96:fe:b0:ef:ec:fe:88:6a:c5:4f:4e: 97:5c:2b:0e:de:e1:7e:d3:87:42:1d:b1:9e:98:50: 73:23:8a:70:46:25:fa:78:e5:c9:3e:7c:5f:ea:62: 92:a8:ce:f5:fa:44:79:ac:05:e6:9b:61:b8:c3:c4: 20:5f:23:8d:ca:06:11:3f:5c:a4:a9:ef:8a:50:2f: e5:ee:af:ee:59:a6:fc:76:93:3c:97:a6:b3:5a:8b: cd:78:f0:ed:e4:60:5d:63:d1:ef:60:37:e1:96:95: 36:50:46:26:f1:01:ff:95:3f:36:67:78:2c:30:eb: 2e:f3:91:52:20:af:d5:56:77:d5:3f:88:36:54:95: 33:f3:a9:83:c3:c8:b7:2e:88:00:c2:02:bc:25:bb: cc:57:08:5a:95:07:46:92:fc:69:f3:0d:3e:b9:d1: d1:e1:85:75:de:d8:e2:de:96:2a:51:24:83:b5:61: d7:4a:30:22:fb:b1:17:0e:8f:9e:f7:75:65:68:e2: 94:0e:d0:08:eb:5a:04:44:d3:55:b9:b2:38:98:5c: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:76:2F:64:5B:B3:95:94:48:AA:41:C2:66:07:BC:51:92:58:C3:9F X509v3 Authority Key Identifier: keyid:20:A8:26:1A:9A:C2:EF:37:33:3A:97:4D:DA:B5:F8:F9:5E:36:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394654723/0/20A8261A9AC2EF37333A974DDAB5F8F95E360B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:80:72:5d:5a:cb:f7:60:84:8b:a2:c0:5a:22:aa:2f:4f: 95:e0:73:ae:0b:8d:1f:e9:6d:48:01:7f:1d:ff:33:1b:cd:18: 12:c2:21:a4:45:7f:5b:c5:70:81:7a:44:9a:99:b1:40:8f:a6: 4b:6d:9e:51:3a:7e:b6:a7:1b:73:73:11:c8:0a:ef:e0:13:75: 4d:19:a5:6f:b2:99:5a:40:12:ab:43:6d:4c:27:85:d1:04:18: e0:b9:4b:b7:74:6e:17:d8:6b:76:3e:39:22:fd:01:f8:96:f6: c6:46:81:f6:31:6f:89:4c:2b:2a:82:3f:dd:46:48:c9:fc:f5: c0:12:49:d8:20:22:b5:da:aa:b5:bf:6a:2b:35:37:71:98:de: 46:ab:9e:e8:0d:1c:8a:71:74:2d:94:0a:e3:85:cb:c6:70:10: 19:94:03:e6:f7:b0:bf:ac:e7:4e:f9:3c:47:8b:5e:22:f0:db: e9:4f:80:65:fe:c6:9e:87:9b:60:74:d5:3a:da:54:f2:72:58: 9e:5f:d2:de:3e:89:3d:ef:4b:d3:aa:c4:f8:97:e9:50:fc:20: d9:92:12:be:81:ef:b6:f5:20:62:e9:da:1b:f7:ff:e9:55:d4: c6:c5:de:5e:ed:db:72:36:38:b3:ec:4e:f4:26:a2:3c:b9:c6: 59:80:8e:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGslrOR+lGbeVZrL7faHLL/yGxJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1 RTM2MEIwNjAeFw0yNjA1MTMwMTU1NTFaFw0yNjA1MTQwNDMyNTFaMDMxMTAvBgNV BAMTKDhENzYyRjY0NUJCMzk1OTQ0OEFBNDFDMjY2MDdCQzUxOTI1OEMzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpu9t1RIIbSU5ijhWV88Urrw4G LqFWTCNE8RY+Z1/txK2E/nIr7w+ldKl45j/onPiW/rDv7P6IasVPTpdcKw7e4X7T h0IdsZ6YUHMjinBGJfp45ck+fF/qYpKozvX6RHmsBeabYbjDxCBfI43KBhE/XKSp 74pQL+Xur+5Zpvx2kzyXprNai8148O3kYF1j0e9gN+GWlTZQRibxAf+VPzZneCww 6y7zkVIgr9VWd9U/iDZUlTPzqYPDyLcuiADCArwlu8xXCFqVB0aS/GnzDT650dHh hXXe2OLelipRJIO1YddKMCL7sRcOj573dWVo4pQO0AjrWgRE01W5sjiYXNbFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjXYvZFuzlZRIqkHCZge8UZJYw58wHwYDVR0j BBgwFoAUIKgmGprC7zczOpdN2rX4+V42CwYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDY1NDcyMy8wLzIwQTgyNjFBOUFDMkVGMzczMzNBOTc0RERBQjVG OEY5NUUzNjBCMDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBBODI2MUE5QUMyRUYzNzMzM0E5NzREREFCNUY4Rjk1RTM2MEIwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ2NTQ3MjMvMC8yMEE4MjYxQTlBQzJF RjM3MzMzQTk3NEREQUI1RjhGOTVFMzYwQjA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb6Acl1ay/dg hIuiwFoiqi9PleBzrguNH+ltSAF/Hf8zG80YEsIhpEV/W8VwgXpEmpmxQI+mS22e UTp+tqcbc3MRyArv4BN1TRmlb7KZWkASq0NtTCeF0QQY4LlLt3RuF9hrdj45Iv0B +Jb2xkaB9jFviUwrKoI/3UZIyfz1wBJJ2CAitdqqtb9qKzU3cZjeRque6A0cinF0 LZQK44XLxnAQGZQD5vewv6znTvk8R4teIvDb6U+AZf7GnoebYHTVOtpU8nJYnl/S 3j6JPe9L06rE+JfpUPwg2ZISvoHvtvUgYunaG/f/6VXUxsXeXu3bcjY4s+xO9Cai PLnGWYCOBA== -----END CERTIFICATE-----Generated at Wed May 13 20:21:04 2026 by rpki-client