$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: 27A/hVQKBiN321AboNwDyMMoQyFMSEEHYFzYu0FETQc= Subject key identifier: 3B:54:1F:AB:AC:B6:61:3A:C7:50:F9:10:C8:DB:8E:78:F1:27:79:D0 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 1AB7CA38342DFD9A9351AAE281C10EE8857F95EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 0E Signing time: Sun 26 Apr 2026 22:58:34 +0000 Manifest this update: Sun 26 Apr 2026 22:53:34 +0000 Manifest next update: Tue 28 Apr 2026 01:16:34 +0000 Files and hashes: 1: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 2: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: fUH51YbQy/q5iYES1IWvReMP8dJ0fwA5X8PEhFpPJ7U=) 3: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b7:ca:38:34:2d:fd:9a:93:51:aa:e2:81:c1:0e:e8:85:7f:95:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Apr 26 22:53:34 2026 GMT Not After : Apr 28 01:16:34 2026 GMT Subject: CN=3B541FABACB6613AC750F910C8DB8E78F12779D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:75:ea:fe:25:49:8f:56:33:65:76:b8:d6: dd:80:06:0c:f3:dd:3e:e4:06:ad:9b:09:8b:6c:9c: 94:df:54:b2:9f:79:35:e3:7c:b4:f1:9e:85:65:35: 43:49:39:9b:2a:1b:e8:fd:dc:ed:43:dc:6a:6f:76: f6:03:a0:61:86:4a:f0:10:c5:00:de:fa:ff:fc:84: 8f:d8:fc:0e:63:42:d6:7a:b9:d7:8c:41:c6:53:33: b3:54:4b:5e:45:36:a8:e2:aa:e8:69:9c:9a:5b:f2: 0f:27:a8:7f:38:15:2f:9f:c3:0e:c8:a1:7f:fa:02: 21:0f:72:c7:da:18:20:74:87:19:fe:ed:79:f7:a0: 47:17:c4:1b:5f:69:2c:3f:49:9b:b1:7c:46:18:7c: a1:5a:b4:58:7e:bc:91:9b:8f:3d:81:b8:d4:3c:64: f0:b4:98:1c:ad:a3:27:00:5b:21:f1:2e:03:fd:24: 93:4e:0c:39:cf:5b:06:23:45:7f:60:9c:b4:57:7f: cd:66:40:86:84:fe:71:a6:e1:a7:d6:3a:e8:e6:47: 1c:5f:af:f8:99:d1:0a:a8:20:7f:7d:27:30:76:d7: a7:3f:11:0d:69:cf:d0:ef:d1:f2:a5:34:74:84:c1: ec:12:98:dd:ea:35:19:bb:e8:9f:fd:ec:21:46:8d: 51:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:1F:AB:AC:B6:61:3A:C7:50:F9:10:C8:DB:8E:78:F1:27:79:D0 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:7b:c2:73:c5:e1:8e:a1:2a:08:02:92:67:be:60:14:f8: a5:f8:3d:b7:f5:30:7d:95:b3:e1:bb:26:a5:5d:48:16:54:da: 17:10:60:c8:62:39:d8:ae:6e:3e:ce:2f:94:08:c8:ef:5e:22: ba:ad:bd:21:3a:56:4f:5e:61:f9:e2:85:db:24:aa:9f:93:38: 0f:a4:82:96:97:65:ef:b3:7b:80:65:a8:38:fc:8f:08:8f:fc: 69:39:dc:8b:da:b1:38:c8:e4:52:ae:fe:0e:bd:33:c7:a5:bf: f8:b0:50:1e:42:fb:52:8e:f2:d8:38:19:49:88:aa:1e:b9:3b: 71:bd:36:00:c5:e0:9d:4a:2f:53:2a:ff:17:d7:d4:7f:6f:ad: 46:52:df:7b:fc:e0:e7:a7:26:99:eb:ac:32:20:49:e8:58:4b: ab:b4:4f:3d:09:14:38:3b:9e:8b:52:91:88:e3:e7:3b:f8:83: 0c:73:63:57:45:ce:2f:61:89:ca:4e:b1:da:d1:57:23:0d:fb: 04:80:a8:9d:67:45:57:de:33:46:61:f4:96:70:0b:b0:30:ff: 2f:9e:6a:7c:e7:bf:a3:3d:7d:7b:a9:e9:3a:dc:86:8c:f0:81: 79:b0:e3:2e:79:41:8a:f6:a6:39:10:6d:fe:35:e3:bb:00:ea: 0f:d8:55:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGrfKODQt/ZqTUarigcEO6IV/le4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA0MjYyMjUzMzRaFw0yNjA0MjgwMTE2MzRaMDMxMTAvBgNV BAMTKDNCNTQxRkFCQUNCNjYxM0FDNzUwRjkxMEM4REI4RTc4RjEyNzc5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AnXq/iVJj1YzZXa41t2ABgzz 3T7kBq2bCYtsnJTfVLKfeTXjfLTxnoVlNUNJOZsqG+j93O1D3GpvdvYDoGGGSvAQ xQDe+v/8hI/Y/A5jQtZ6udeMQcZTM7NUS15FNqjiquhpnJpb8g8nqH84FS+fww7I oX/6AiEPcsfaGCB0hxn+7Xn3oEcXxBtfaSw/SZuxfEYYfKFatFh+vJGbjz2BuNQ8 ZPC0mBytoycAWyHxLgP9JJNODDnPWwYjRX9gnLRXf81mQIaE/nGm4afWOujmRxxf r/iZ0QqoIH99JzB216c/EQ1pz9Dv0fKlNHSEwewSmN3qNRm76J/97CFGjVFfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO1Qfq6y2YTrHUPkQyNuOePEnedAwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYF7wnPF4Y6h KggCkme+YBT4pfg9t/UwfZWz4bsmpV1IFlTaFxBgyGI52K5uPs4vlAjI714iuq29 ITpWT15h+eKF2ySqn5M4D6SClpdl77N7gGWoOPyPCI/8aTnci9qxOMjkUq7+Dr0z x6W/+LBQHkL7Uo7y2DgZSYiqHrk7cb02AMXgnUovUyr/F9fUf2+tRlLfe/zg56cm meusMiBJ6FhLq7RPPQkUODuei1KRiOPnO/iDDHNjV0XOL2GJyk6x2tFXIw37BICo nWdFV94zRmH0lnALsDD/L55qfOe/oz19e6npOtyGjPCBebDjLnlBivamORBt/jXj uwDqD9hVJg== -----END CERTIFICATE-----Generated at Mon Apr 27 15:02:48 2026 by rpki-client