
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
File: 20CAC8E70B5CB3094E47FF051623A98578C1E315.mft (raw, json)
Hash identifier: 7I+QOVufTkbGy+RbnL66yseAxqtlfU7TiIhLTQJsJlM=
Subject key identifier: 99:81:15:E8:3E:C3:D1:09:B8:EB:45:4B:BE:45:53:D7:20:22:2E:6F
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 54F17E3B99F61183A1B3A574C47F73608CF0DB62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
Manifest number: FD
Signing time: Wed 14 Oct 2026 08:43:51 +0000
Manifest this update: Wed 14 Oct 2026 08:38:51 +0000
Manifest next update: Sat 17 Oct 2026 18:43:51 +0000
Files and hashes: 1: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (hash: F5An/Ut6sPTdTDchjvauI8c+cH9mTLnAPBuANoIQPcs=)
2: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (hash: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ=)
3: 3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (hash: tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=)
4: 3130332e3233372e3234392e302f32342d3332203d3e2034383038.roa (hash: zkPo1dDtzimtHFbfAofSseznalvCEczDpYj3pcTeccc=)
5: 3135302e3234322e3234382e302f32322d3332203d3e203233373234.roa (hash: vwPEmTIi0cfS54R8Za5ZiN5YnIDWkEMterbti+msZ9U=)
6: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (hash: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=)
7: 3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa (hash: jlPD6Syj2WUMk0/GKQtzo96jxAOhRno6yJr248gVRTs=)
8: 34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (hash: EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=)
9: 3130332e3233372e3234382e302f32342d3332203d3e2034383038.roa (hash: WwwQRuAQTBMvvKr19C3JnKF0SqXIf8PDBY9whAL8jEk=)
10: 34332e3234372e3138382e302f32322d3332203d3e2034383038.roa (hash: rhGWHb7CEz3GRcQ4JkTEOeeP9/h0igCZc3WCvzS2D2o=)
11: 3130332e3234322e3137322e302f32322d3332203d3e2034383038.roa (hash: 5SDEWIOZxAbKfW2wSeN2NxOXCatlRqE4Rm1v97xQjwg=)
12: 34332e3234372e3138342e302f32322d3332203d3e203233373234.roa (hash: TP0dXFP6J3YoHPWv+68Yw+2qDs8x5/9THiU9vM0SoMI=)
13: 34332e3234372e3138342e302f32322d3332203d3e203536303438.roa (hash: C/FXsL3L/3Jsgkl+fBV8LPbIlHgWxnnbtmRbpXzbwUQ=)
14: 20CAC8E70B5CB3094E47FF051623A98578C1E315.crl (hash: Tyi/bs8G6xhCqLGoRjdEFYCHHvr3s1Z4KhwvQBxAU38=)
15: 3131342e3131322e3130302e302f32322d3332203d3e2034383038.roa (hash: QYqVyQxOV3dVX1DrcYiAKU92G8FRWBSKvmNjUchGNcw=)
16: 3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (hash: jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=)
17: 3130332e3233382e3136302e302f32332d3332203d3e2034383337.roa (hash: /fsA4C9t9e2ZgCcRFHxITfOAiCAuv4YAWr5CI2QBlwo=)
18: 3131342e3131322e3130342e302f32322d3332203d3e203233373234.roa (hash: NWeATnkkZmCgyVT4pIfVdOM8sNpxn2iS7ZrMyhL8i1o=)
19: 3131342e3131322e3130302e302f32322d3332203d3e203233373234.roa (hash: +TlL4Kdz+dQAHCRvyRXNP3LY3euHbF5VUmsAzxQL+aA=)
20: 3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa (hash: qzksNBoqmy2lMtZScdS/0RStTiDB+RJTNhrDYjSfPp8=)
21: 3131342e3131322e3130302e302f32322d3332203d3e203536303438.roa (hash: HDMI1ewe1Lh3K6TdmGE4aoTMsi+MILZ0hJ8SdXtvbW0=)
22: 3135302e3234322e3233322e302f32322d3332203d3e2034383337.roa (hash: w5FSzLFmyVddLlA4YHga7R5Drq0hSAp700NDCwLz6y0=)
23: 3130332e3234322e3137322e302f32322d3332203d3e203536303438.roa (hash: 8nc7tUDAsYwhhigURDMQwsHhNNYfY1MZLKThQmZ1brU=)
24: 3130332e3234322e3137322e302f32322d3332203d3e203233373234.roa (hash: YZ5T2Oqzq3fS11ORHuNW8S2yOvYweiK41wkkRAaw0Qw=)
25: 3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa (hash: t1MCyz1DAzj9QfqaCIoPg515VmpgR6j+fB2e73NIxAE=)
26: 3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (hash: Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=)
27: 34332e3234372e3138382e302f32322d3332203d3e203233373234.roa (hash: c4zSZbZY71uga7IrLJ18BUQO0b6emcnskcxvCwnL+wI=)
28: 3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (hash: hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=)
29: 34332e3235342e3133362e302f32322d3332203d3e2034383337.roa (hash: E6EErF6dn2+3RoNEs+Qa/gAie91cIjN/HBs4TkYUFFs=)
30: 3131342e3131322e39362e302f32322d3332203d3e203233373234.roa (hash: 8pHAqJYa23b6fpRrOA0UUI0P3RbCYLqzJ0Yh72ibBXw=)
31: 34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (hash: kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=)
32: 3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (hash: 2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=)
33: 3130332e3233382e342e302f32322d3332203d3e203536303438.roa (hash: 3AYZjUR1pD7h2aKS4M8S8AaJrju1zJtDf4sFnSnpuL0=)
34: 3130332e3233382e3136322e302f32332d3332203d3e2034383038.roa (hash: SPLElGaFtPcpId7FuYNt4xpu3jij/03K/6xEft/mzEY=)
35: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (hash: unApuc/e3kfVSaMeRVUTrLeBIAxkoNwZX+7xHbEwxiA=)
36: 3130332e3232372e3133362e302f32322d3332203d3e2034383337.roa (hash: jFfl737HqJaZzNLYJsdR7Pi03L4UWt1tpx204x58OHc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f1:7e:3b:99:f6:11:83:a1:b3:a5:74:c4:7f:73:60:8c:f0:db:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Oct 14 08:38:51 2026 GMT
Not After : Oct 17 18:43:51 2026 GMT
Subject: CN=998115E83EC3D109B8EB454BBE4553D720222E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:a8:fe:d4:8d:5f:2c:35:af:6a:1f:96:be:
30:b1:c3:4a:29:8d:6c:2d:b1:50:83:50:d6:d0:86:
98:c0:ab:24:41:23:51:a1:25:2b:8d:09:5f:c1:86:
45:b1:10:53:3a:7f:e6:49:e2:b3:d8:7c:42:d1:05:
b3:62:f8:6e:7b:86:ca:69:4e:a3:b5:c1:ea:74:93:
62:7b:a8:7f:f3:61:0c:7c:0d:91:e6:86:44:80:74:
b7:d0:d5:e9:b5:89:b9:a4:b2:d6:d1:27:22:f9:f5:
2f:29:ce:9e:95:5d:56:13:79:1e:bb:e1:9b:90:0a:
95:28:0e:c4:c2:8d:72:5c:23:14:48:81:c5:05:39:
08:ac:44:dc:e9:1c:1f:78:46:2e:1b:52:a1:8b:98:
a9:6c:92:5b:11:b0:e4:05:b6:1f:d8:e4:df:fb:69:
22:23:05:30:a4:94:59:6d:bf:6f:bc:4d:b8:15:b2:
90:b2:16:67:a8:74:39:12:69:50:7d:2a:ce:19:fd:
df:30:f1:ac:a5:e4:ee:52:06:86:e2:c4:34:5d:4a:
9e:3c:fb:19:de:6c:58:7b:8b:63:99:42:c8:99:12:
ef:fd:57:bd:54:35:4c:fe:da:10:b0:51:22:f8:2c:
ab:f9:13:ea:8d:fc:56:fe:96:ef:b4:8e:35:73:72:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:15:E8:3E:C3:D1:09:B8:EB:45:4B:BE:45:53:D7:20:22:2E:6F
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fc:93:f7:64:40:0f:ee:95:16:b0:c2:a8:1a:41:a7:a9:cb:
9f:97:77:df:b3:32:dd:6c:17:f7:d1:3a:19:0a:e2:df:54:7d:
21:72:de:06:09:3a:eb:a2:7c:64:49:b7:08:79:58:8e:0c:c8:
63:ca:ed:66:85:d0:68:7a:f0:d3:11:bd:d1:c5:9e:e3:a1:07:
b0:9b:cc:b4:f1:33:68:cc:e7:42:13:d6:85:be:68:61:8b:fa:
bf:e4:47:c1:30:ca:a8:54:28:13:62:a4:e2:aa:52:e2:7a:e9:
1d:03:60:b9:02:da:1b:2b:aa:10:72:cf:8b:7b:13:34:64:3b:
d1:a6:a7:ad:fc:fd:5b:14:81:51:f6:9b:4b:ee:31:95:56:c4:
ea:f9:60:43:a6:bc:d6:38:5d:69:48:94:e2:e1:0d:3d:cb:8e:
3d:0b:21:32:fe:be:2d:79:3a:46:74:d7:d5:ca:be:7f:b8:cb:
5d:58:3a:b0:c6:20:9f:66:22:5d:b1:39:36:a8:61:51:e9:7f:
52:c3:d4:c7:06:8d:d7:c6:08:2b:74:75:77:08:0c:dd:4f:e6:
91:37:c9:f7:57:d3:43:c9:85:fb:72:f8:48:c4:06:9d:a2:1b:
0f:98:b4:cc:62:f4:89:9f:e2:05:58:b9:b6:d6:30:9c:df:89:
68:22:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:53:50 2026 by rpki-client