$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: hOM3q+oljiZIeMRMzYb8Z+QrXT/DY9+dPhFWFN7U9Tc= Subject key identifier: 4A:B4:A4:1B:A7:93:10:65:4E:33:67:09:61:D1:68:75:FD:94:26:33 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 1917A6AF709AEB8AF0F00699B6F127A2B390F62A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 87 Signing time: Mon 27 Jul 2026 09:38:48 +0000 Manifest this update: Mon 27 Jul 2026 09:33:48 +0000 Manifest next update: Tue 28 Jul 2026 09:59:48 +0000 Files and hashes: 1: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 2: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 3: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: u7+mHOtFs3NJiSZXWYPJn+5LKzHG7T1oigoaSkxVXFM=) 4: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 5: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 6: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 7: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 8: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 9: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:17:a6:af:70:9a:eb:8a:f0:f0:06:99:b6:f1:27:a2:b3:90:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Jul 27 09:33:48 2026 GMT Not After : Jul 28 09:59:48 2026 GMT Subject: CN=4AB4A41BA79310654E33670961D16875FD942633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d3:92:4e:31:ee:6b:1f:d0:60:6e:5c:91:f5: d6:2e:b8:95:39:29:ae:cd:9b:e4:97:bb:9b:2c:42: 92:35:b4:c0:4a:78:38:34:e0:8a:52:d7:20:ef:0e: 68:db:71:df:19:47:c6:08:44:0e:e1:83:21:6f:47: 97:5f:4f:3e:b4:bb:97:d5:df:dc:0c:e9:2a:7a:a3: e0:16:bc:fc:3a:2a:d5:90:7e:98:c9:c6:c6:6f:64: e1:cf:e1:47:04:44:91:40:55:ab:aa:17:ed:7a:25: 78:9e:f1:ee:de:97:81:96:b6:56:93:5a:3d:95:e4: 35:97:0f:86:e9:e9:96:39:69:d7:a1:6f:68:32:e9: 55:2f:49:8f:33:91:1a:0a:f6:89:4e:1b:fe:23:ad: 4f:89:92:bd:ac:50:8b:dd:78:7d:80:48:e2:a5:a3: 42:0a:fa:40:4c:ff:83:1e:dc:cb:69:b6:01:f1:3e: 7c:25:8c:28:23:d5:cf:76:84:60:0d:b1:23:70:20: 6b:f9:72:78:11:cb:f8:6e:e5:10:92:b6:46:aa:1f: 5e:10:90:e1:3a:16:e8:a4:45:4e:cb:c1:34:71:dd: 53:44:83:47:06:d4:bd:72:7c:c1:5c:9a:ea:16:6e: 34:cf:08:c9:9b:47:3c:86:22:7e:37:6b:76:8f:6f: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:A4:1B:A7:93:10:65:4E:33:67:09:61:D1:68:75:FD:94:26:33 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:6d:81:51:e6:8e:54:6c:ab:17:ab:02:7f:1a:3a:64:68: db:f4:c6:b5:98:69:7c:26:15:6d:ca:26:38:f5:f5:51:e6:ea: 67:94:df:9c:bd:21:d0:80:3d:74:a6:1e:5d:15:da:cf:4e:45: d6:b9:09:7a:30:c9:ce:42:5c:eb:87:e5:c0:50:b6:88:80:61: cd:8e:6e:44:13:8a:2d:a5:a6:9f:ab:ad:9a:98:77:51:14:10: 5b:de:2e:c0:e3:7a:d7:82:4a:81:47:fc:a5:2e:21:26:1a:d1: f9:e7:a5:67:e8:1c:65:f6:6c:e6:3b:0e:d2:17:7f:ac:98:26: 07:65:7f:93:e8:b8:8a:b7:b3:6f:71:2e:cf:3c:78:4c:26:c8: 31:1b:5b:21:57:5c:f8:ed:fa:fb:3b:01:b7:70:49:3e:55:5f: 19:8d:43:67:e9:1b:05:fd:8b:5d:5c:a6:d4:5d:af:e4:26:d7: 9f:4a:fe:59:ea:60:2f:ed:f7:11:68:f7:be:48:37:fa:53:ff: 1b:31:ed:e2:43:c7:98:f4:6c:41:bb:45:bf:fb:5e:a7:2d:60: 7d:63:65:6f:7a:eb:50:c6:49:ea:31:fb:08:2b:ab:9b:b0:a4: 06:29:62:8b:08:02:5c:17:2e:33:67:26:b6:49:f5:db:32:e6: 8f:17:ae:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGRemr3Ca64rw8AaZtvEnorOQ9iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA3MjcwOTMzNDhaFw0yNjA3MjgwOTU5NDhaMDMxMTAvBgNV BAMTKDRBQjRBNDFCQTc5MzEwNjU0RTMzNjcwOTYxRDE2ODc1RkQ5NDI2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD005JOMe5rH9BgblyR9dYuuJU5 Ka7Nm+SXu5ssQpI1tMBKeDg04IpS1yDvDmjbcd8ZR8YIRA7hgyFvR5dfTz60u5fV 39wM6Sp6o+AWvPw6KtWQfpjJxsZvZOHP4UcERJFAVauqF+16JXie8e7el4GWtlaT Wj2V5DWXD4bp6ZY5adehb2gy6VUvSY8zkRoK9olOG/4jrU+Jkr2sUIvdeH2ASOKl o0IK+kBM/4Me3MtptgHxPnwljCgj1c92hGANsSNwIGv5cngRy/hu5RCStkaqH14Q kOE6FuikRU7LwTRx3VNEg0cG1L1yfMFcmuoWbjTPCMmbRzyGIn43a3aPb69FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSrSkG6eTEGVOM2cJYdFodf2UJjMwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKptgVHmjlRs qxerAn8aOmRo2/TGtZhpfCYVbcomOPX1UebqZ5TfnL0h0IA9dKYeXRXaz05F1rkJ ejDJzkJc64flwFC2iIBhzY5uRBOKLaWmn6utmph3URQQW94uwON614JKgUf8pS4h JhrR+eelZ+gcZfZs5jsO0hd/rJgmB2V/k+i4irezb3Euzzx4TCbIMRtbIVdc+O36 +zsBt3BJPlVfGY1DZ+kbBf2LXVym1F2v5CbXn0r+WepgL+33EWj3vkg3+lP/GzHt 4kPHmPRsQbtFv/tepy1gfWNlb3rrUMZJ6jH7CCurm7CkBiliiwgCXBcuM2cmtkn1 2zLmjxeutg== -----END CERTIFICATE-----Generated at Mon Jul 27 13:59:23 2026 by rpki-client