$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: IhJxYst8mcVrJED+tVSbO6pdVSBXnDnsUP4WrGxpaco= Subject key identifier: 2B:6E:72:87:23:78:EA:00:94:63:A7:27:C2:FD:4F:42:59:92:2A:2B Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 53FE02F1504BC084FA43734DDF778B8CE2C35E83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 4A Signing time: Thu 11 Jun 2026 17:14:05 +0000 Manifest this update: Thu 11 Jun 2026 17:09:05 +0000 Manifest next update: Fri 12 Jun 2026 20:18:05 +0000 Files and hashes: 1: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 2: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 3: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 4: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 5: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: nL5QpWOP903TCEp9xAoGdKmrfIJWchq4whrwMdG494Q=) 6: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fe:02:f1:50:4b:c0:84:fa:43:73:4d:df:77:8b:8c:e2:c3:5e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Jun 11 17:09:05 2026 GMT Not After : Jun 12 20:18:05 2026 GMT Subject: CN=2B6E72872378EA009463A727C2FD4F4259922A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:ea:b1:8b:58:f0:fe:e4:3d:6b:18:18:35: a6:14:d3:21:42:5f:d0:81:40:07:44:b2:1c:1e:2b: 26:c1:ac:29:37:99:3c:e8:44:bf:8b:8e:ac:13:e1: 39:bc:82:22:a2:01:c1:aa:02:44:36:80:e6:f9:38: 86:07:a0:ee:c6:bc:c5:9a:2d:9b:82:9b:49:69:69: a8:b0:90:a3:c9:f6:6d:d7:b1:63:74:b1:73:bc:48: 28:d3:84:cf:dc:d4:ec:e0:cc:e5:73:e5:51:d3:93: 3e:91:4d:77:fb:bf:4a:3b:a9:79:d8:bd:30:6c:ef: 2c:3f:0c:f5:c2:99:6d:fe:8d:3e:0e:82:6f:86:52: 07:99:8a:c9:85:ce:76:75:d7:3b:3d:df:4e:24:bd: ce:23:f9:46:f6:44:08:6a:6f:f6:6a:b5:f6:d7:34: d9:f3:51:3e:b1:be:a3:24:b5:75:24:25:8f:69:7f: 1f:df:c7:2a:97:e7:fc:34:73:27:f2:95:ea:68:bc: ce:01:52:f6:3d:ce:fc:26:f2:e3:74:18:f2:81:ea: 82:81:ce:6d:75:68:b7:56:d4:1c:05:b4:65:9d:30: 4b:84:82:44:a9:73:d3:6a:1c:6d:8e:d3:fb:9c:7f: 72:93:04:87:ba:ff:a6:07:9e:53:37:33:8e:0a:71: c3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6E:72:87:23:78:EA:00:94:63:A7:27:C2:FD:4F:42:59:92:2A:2B X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c2:fb:36:d1:9a:b8:35:26:63:80:d6:c4:dc:ec:12:20:e4: f5:98:c3:d6:c9:b4:48:d4:0a:57:21:dd:65:49:2a:af:1e:d1: 89:a9:3a:00:41:2c:39:58:69:27:c0:ba:c3:7a:c0:5b:74:9e: 34:4b:fa:95:41:9e:de:30:a1:c1:6f:43:3f:69:73:86:54:2b: d4:da:7c:e7:b0:95:e8:03:b2:d0:53:b1:6b:61:af:6c:86:21: 39:28:ce:4d:22:ef:4b:63:03:1a:e6:6c:87:46:99:9b:f7:61: 77:d7:78:04:65:79:e7:f0:15:65:4b:5d:47:85:50:d2:10:94: 46:72:ed:f9:b7:a5:4f:62:aa:d7:cf:5d:74:26:74:82:8f:a4: 88:4e:bf:3e:95:0e:5e:8b:26:01:3c:90:9f:d0:5e:58:36:5f: 85:e8:40:b7:28:06:00:3a:87:68:0f:3a:08:c5:31:1f:23:ff: a4:c2:ec:1f:91:0d:78:0b:b8:58:b0:14:5c:c3:c2:29:f6:1a: 90:4b:bb:55:05:a4:e4:fe:0f:f4:f6:f3:b3:68:b3:96:ca:a4: c3:65:d8:82:99:8a:cc:61:5a:6c:f4:d7:0c:e8:a8:f3:6b:df: 87:41:9a:1f:4b:2e:59:20:ed:b9:26:aa:16:2b:c3:f1:cc:7d: c9:75:91:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU/4C8VBLwIT6Q3NN33eLjOLDXoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA2MTExNzA5MDVaFw0yNjA2MTIyMDE4MDVaMDMxMTAvBgNV BAMTKDJCNkU3Mjg3MjM3OEVBMDA5NDYzQTcyN0MyRkQ0RjQyNTk5MjJBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZeqxi1jw/uQ9axgYNaYU0yFC X9CBQAdEshweKybBrCk3mTzoRL+LjqwT4Tm8giKiAcGqAkQ2gOb5OIYHoO7GvMWa LZuCm0lpaaiwkKPJ9m3XsWN0sXO8SCjThM/c1OzgzOVz5VHTkz6RTXf7v0o7qXnY vTBs7yw/DPXCmW3+jT4Ogm+GUgeZismFznZ11zs9304kvc4j+Ub2RAhqb/ZqtfbX NNnzUT6xvqMktXUkJY9pfx/fxyqX5/w0cyfylepovM4BUvY9zvwm8uN0GPKB6oKB zm11aLdW1BwFtGWdMEuEgkSpc9NqHG2O0/ucf3KTBIe6/6YHnlM3M44KccO/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK25yhyN46gCUY6cnwv1PQlmSKiswHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcL7NtGauDUm Y4DWxNzsEiDk9ZjD1sm0SNQKVyHdZUkqrx7Riak6AEEsOVhpJ8C6w3rAW3SeNEv6 lUGe3jChwW9DP2lzhlQr1Np857CV6AOy0FOxa2GvbIYhOSjOTSLvS2MDGuZsh0aZ m/dhd9d4BGV55/AVZUtdR4VQ0hCURnLt+belT2Kq189ddCZ0go+kiE6/PpUOXosm ATyQn9BeWDZfhehAtygGADqHaA86CMUxHyP/pMLsH5ENeAu4WLAUXMPCKfYakEu7 VQWk5P4P9Pbzs2izlsqkw2XYgpmKzGFabPTXDOio82vfh0GaH0suWSDtuSaqFivD 8cx9yXWRCQ== -----END CERTIFICATE-----Generated at Fri Jun 12 03:56:34 2026 by rpki-client