$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json) Hash identifier: 709NyJKQ4vSfmaecxhtDl+AKmIDGBinisqJMX1Tsnqk= Subject key identifier: 0B:73:7A:07:08:F4:38:3C:D7:52:2F:AE:7F:02:26:40:4C:8B:03:B8 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 4222C754D66046951BCE91F3F890115678971F11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft Manifest number: 0136 Signing time: Wed 23 Sep 2026 17:30:24 +0000 Manifest this update: Wed 23 Sep 2026 17:25:24 +0000 Manifest next update: Sat 26 Sep 2026 18:58:24 +0000 Files and hashes: 1: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=) 2: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: TSwr1z9/h2mpbRondA4iFxa7+qOystel3cHhjOuLliM=) 3: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=) 4: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=) 5: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=) 6: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=) 7: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=) 8: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=) 9: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=) 10: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (hash: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI=) 11: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=) 12: 3230322e34362e3232342e302f32302d3234203d3e203137363233.roa (hash: 0pGCXDBtG0gqAtGWNS97q9PbYTdSArqdNnHw2SFffsg=) 13: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=) 14: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 18:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:c7:54:d6:60:46:95:1b:ce:91:f3:f8:90:11:56:78:97:1f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Sep 23 17:25:24 2026 GMT Not After : Sep 26 18:58:24 2026 GMT Subject: CN=0B737A0708F4383CD7522FAE7F0226404C8B03B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:13:db:1b:72:34:e2:e5:8c:0a:a9:8c:a4:d3: 60:1a:3b:20:86:97:9a:02:56:76:b0:e0:e0:d4:89: cc:c8:b1:31:bb:3f:af:0b:a9:14:3d:3b:12:41:c1: dd:1f:ae:a4:e4:ed:66:b7:3d:f9:b0:d0:26:83:21: 08:d4:f0:c0:1e:21:ba:1a:84:24:bf:9e:69:4e:3f: 28:a8:96:33:a1:a9:7c:5b:52:a9:85:e3:2d:70:50: 87:76:49:25:f3:48:9e:5f:5f:d7:a0:ed:be:f1:3b: 5d:f5:a1:b3:10:ac:06:b8:31:cf:37:d9:07:96:12: 21:2e:93:f0:1d:84:15:44:59:a4:a3:b5:6c:5c:6f: 6b:e6:ce:2f:8b:32:3b:c0:98:81:9b:dd:db:b1:9a: ff:b9:ad:b7:32:1f:cc:ba:94:30:3c:3e:78:32:ff: 4e:82:22:85:da:be:d2:c5:2e:51:c2:be:4a:87:6d: 59:05:11:7c:da:4a:9a:1a:17:bb:bb:8f:3d:8f:15: 7d:6e:67:97:c4:e6:84:69:64:b6:1d:b8:e0:9c:81: 51:ff:d4:a6:b8:85:02:56:3a:97:6c:d1:d7:cf:57: ed:61:12:a6:57:dd:72:b6:0d:91:fe:33:29:f2:0c: 39:49:db:60:16:70:21:e5:fd:29:9d:bb:68:51:bd: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:73:7A:07:08:F4:38:3C:D7:52:2F:AE:7F:02:26:40:4C:8B:03:B8 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:36:1d:7f:e2:ba:06:8a:f5:d9:c5:df:bf:6b:dd:5c:21:e5: a0:2e:40:d5:cf:92:7a:95:6d:e1:64:fe:73:64:06:fc:48:d9: f3:ca:1f:1b:74:54:94:36:b4:71:ee:61:8d:34:c1:1a:ef:ce: 05:32:03:a6:76:2d:54:36:23:61:17:b2:0a:da:16:a0:25:fa: 63:ac:bd:f8:34:10:9d:c3:ab:fa:f7:a3:72:ea:31:0e:67:28: d3:c8:4c:25:56:23:f5:ac:3e:5e:ed:a1:6c:16:3c:08:77:ce: 45:a6:6c:33:90:50:98:39:75:32:0c:42:a7:e6:9f:db:77:73: cf:f4:eb:70:20:3f:9e:94:e4:6b:da:ed:0f:5c:83:3e:d1:c6: 7a:90:53:5f:35:30:f7:d9:8e:82:eb:75:2c:6a:f7:20:c5:1b: 3e:e9:60:92:79:80:62:89:b3:39:c3:53:b8:a7:57:22:35:aa: f7:71:a0:31:91:15:75:68:34:b8:b0:09:57:40:cc:b2:17:f1: c6:67:35:48:6a:cf:b5:20:ed:5c:0f:c1:4a:46:ee:63:3d:1b: bb:b3:be:ad:5f:f5:00:a1:10:b4:a1:7d:de:71:66:dd:33:ac: 12:72:be:a2:6f:d6:4f:c8:29:ac:d2:4e:4a:a7:08:bb:30:f6: c7:e6:5c:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQiLHVNZgRpUbzpHz+JARVniXHxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA5MjMxNzI1MjRaFw0yNjA5MjYxODU4MjRaMDMxMTAvBgNV BAMTKDBCNzM3QTA3MDhGNDM4M0NENzUyMkZBRTdGMDIyNjQwNEM4QjAzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE9sbcjTi5YwKqYyk02AaOyCG l5oCVnaw4ODUiczIsTG7P68LqRQ9OxJBwd0frqTk7Wa3Pfmw0CaDIQjU8MAeIboa hCS/nmlOPyioljOhqXxbUqmF4y1wUId2SSXzSJ5fX9eg7b7xO131obMQrAa4Mc83 2QeWEiEuk/AdhBVEWaSjtWxcb2vmzi+LMjvAmIGb3duxmv+5rbcyH8y6lDA8Pngy /06CIoXavtLFLlHCvkqHbVkFEXzaSpoaF7u7jz2PFX1uZ5fE5oRpZLYduOCcgVH/ 1Ka4hQJWOpds0dfPV+1hEqZX3XK2DZH+MynyDDlJ22AWcCHl/Smdu2hRvSItAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC3N6Bwj0ODzXUi+ufwImQEyLA7gwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC9DRTIwQUQ2MEI1RkYy MDZENTM0MDkyMzZBMTFGNDdGRDRGMzFBQ0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjYdf+K6Bor1 2cXfv2vdXCHloC5A1c+SepVt4WT+c2QG/EjZ88ofG3RUlDa0ce5hjTTBGu/OBTID pnYtVDYjYReyCtoWoCX6Y6y9+DQQncOr+vejcuoxDmco08hMJVYj9aw+Xu2hbBY8 CHfORaZsM5BQmDl1MgxCp+af23dzz/TrcCA/npTka9rtD1yDPtHGepBTXzUw99mO gut1LGr3IMUbPulgknmAYomzOcNTuKdXIjWq93GgMZEVdWg0uLAJV0DMshfxxmc1 SGrPtSDtXA/BSkbuYz0bu7O+rV/1AKEQtKF93nFm3TOsEnK+om/WT8gprNJOSqcI uzD2x+ZcAA== -----END CERTIFICATE-----Generated at Thu Sep 24 11:12:32 2026 by rpki-client