$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: GiGn6jpCbxvwa89lyQ6RtBzbBeOUpCEk6uA1VltIfjY= Subject key identifier: C2:D4:9E:5C:6D:AA:C4:4E:7C:87:64:91:ED:F6:4B:DE:25:CA:28:42 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 4F5A3481084C0254F26E2B94B393130462BCD559 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: CD Signing time: Tue 27 Oct 2026 12:19:41 +0000 Manifest this update: Tue 27 Oct 2026 12:14:41 +0000 Manifest next update: Fri 30 Oct 2026 12:51:41 +0000 Files and hashes: 1: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) 2: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 3: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 4: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 5: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: vRVL4Pq3tq6+6HMjbgAaqcg3GK9mY6LeEMDgJiIC0xc=) 6: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 7: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 8: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 9: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 12:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5a:34:81:08:4c:02:54:f2:6e:2b:94:b3:93:13:04:62:bc:d5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Oct 27 12:14:41 2026 GMT Not After : Oct 30 12:51:41 2026 GMT Subject: CN=C2D49E5C6DAAC44E7C876491EDF64BDE25CA2842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:1a:1a:6a:a9:3a:ca:72:90:71:2d:a5:95: d5:f7:51:73:d7:da:36:60:81:0f:c2:8d:79:ec:75: ae:c7:26:1e:09:4c:00:a0:57:ce:ba:38:90:eb:5c: 6a:82:31:1e:c1:51:52:0d:6b:a5:f5:28:d6:77:c9: 9c:79:d9:5b:34:cc:d7:f6:96:b7:fb:3f:90:0a:6b: d0:ba:f9:5a:5f:2a:c8:ce:0b:32:33:fb:c7:60:f8: 8c:3f:1a:85:61:3a:76:1f:20:77:3a:d7:48:15:d8: 9b:7e:9c:b8:97:20:e7:10:26:d2:71:4d:70:e0:5e: 3a:78:28:84:8b:31:8e:4b:19:3b:4d:08:36:c5:44: 83:a4:0f:89:3b:50:a0:ef:7f:ff:18:e4:d1:3b:92: 00:d4:bb:b4:83:c3:09:58:fe:34:86:9c:90:46:e0: 4d:48:d9:89:b1:e7:61:6a:fd:7c:81:43:c3:6d:35: 6e:3e:27:25:88:d1:b6:86:db:34:a1:fb:d8:0a:32: 94:dc:d8:af:36:27:3f:8a:dc:90:42:ae:eb:56:41: e5:5a:4f:8b:5e:a0:b6:09:85:f5:08:34:bf:25:de: 72:02:f3:9d:50:6b:dc:4d:de:e8:2b:b4:0e:08:4e: 2f:5c:71:69:92:c8:81:ab:90:9f:ed:54:01:9d:5f: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:9E:5C:6D:AA:C4:4E:7C:87:64:91:ED:F6:4B:DE:25:CA:28:42 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2f:63:c7:d9:5c:ef:81:d6:58:20:43:2f:e4:09:83:7a:09: ab:c2:1b:ac:36:00:00:14:7f:12:44:46:4e:73:3a:c8:e4:d8: 51:40:1e:d2:64:66:73:18:69:75:51:6e:4f:6b:50:ca:b7:6e: 27:7a:26:f9:5d:63:2a:61:11:61:1c:9f:f1:a1:ef:ab:2e:05: 22:7d:65:22:53:1c:4b:1a:cb:1b:9f:00:87:ac:14:ce:0a:50: 86:7b:8a:47:59:73:1b:a6:62:2e:d9:14:09:e4:c8:6c:b5:23: ea:85:a7:ec:fc:62:20:d7:46:f9:b1:9b:f0:55:de:2d:56:5d: 46:b5:c3:dd:ac:af:5f:6d:eb:99:48:b7:b1:0d:0d:d8:90:b8: a3:c2:22:35:44:46:74:f4:d5:fd:c9:7f:22:c6:36:de:c8:62: fc:17:4b:04:75:4d:94:87:40:ee:a1:79:73:41:2d:2e:ab:66: 6f:84:16:64:ae:8b:5b:9c:fa:65:72:97:4e:93:72:8f:c5:91: 41:c8:e7:61:c9:ec:61:09:34:62:e4:b2:ef:c8:1c:85:5e:8a: 61:6c:41:68:b3:82:61:a2:7c:da:ef:e4:96:07:e3:a6:88:32: 10:bf:30:82:0c:3e:8d:a2:42:e4:09:fb:94:2e:a7:0b:4c:7c: b0:3b:ca:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT1o0gQhMAlTybiuUs5MTBGK81VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjEwMjcxMjE0NDFaFw0yNjEwMzAxMjUxNDFaMDMxMTAvBgNV BAMTKEMyRDQ5RTVDNkRBQUM0NEU3Qzg3NjQ5MUVERjY0QkRFMjVDQTI4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUqhoaaqk6ynKQcS2lldX3UXPX 2jZggQ/CjXnsda7HJh4JTACgV866OJDrXGqCMR7BUVINa6X1KNZ3yZx52Vs0zNf2 lrf7P5AKa9C6+VpfKsjOCzIz+8dg+Iw/GoVhOnYfIHc610gV2Jt+nLiXIOcQJtJx TXDgXjp4KISLMY5LGTtNCDbFRIOkD4k7UKDvf/8Y5NE7kgDUu7SDwwlY/jSGnJBG 4E1I2Ymx52Fq/XyBQ8NtNW4+JyWI0baG2zSh+9gKMpTc2K82Jz+K3JBCrutWQeVa T4teoLYJhfUINL8l3nIC851Qa9xN3ugrtA4ITi9ccWmSyIGrkJ/tVAGdX+7DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwtSeXG2qxE58h2SR7fZL3iXKKEIwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS9jx9lc74HW WCBDL+QJg3oJq8IbrDYAABR/EkRGTnM6yOTYUUAe0mRmcxhpdVFuT2tQyrduJ3om +V1jKmERYRyf8aHvqy4FIn1lIlMcSxrLG58Ah6wUzgpQhnuKR1lzG6ZiLtkUCeTI bLUj6oWn7PxiINdG+bGb8FXeLVZdRrXD3ayvX23rmUi3sQ0N2JC4o8IiNURGdPTV /cl/IsY23shi/BdLBHVNlIdA7qF5c0EtLqtmb4QWZK6LW5z6ZXKXTpNyj8WRQcjn YcnsYQk0YuSy78gchV6KYWxBaLOCYaJ82u/klgfjpogyEL8wggw+jaJC5An7lC6n C0x8sDvKVA== -----END CERTIFICATE-----Generated at Wed Oct 28 10:33:18 2026 by rpki-client