$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: Ntc3MdwZoBOd8JqN0SB/c3eovHAS63gUCiVj324WaYU= Subject key identifier: C5:EA:E5:50:83:06:37:47:D7:2B:E5:4B:46:48:64:49:10:E2:40:F5 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 3487DA980C52C03A1285F9E15A1D46BBA65FE404 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: B8 Signing time: Thu 10 Sep 2026 11:16:25 +0000 Manifest this update: Thu 10 Sep 2026 11:11:25 +0000 Manifest next update: Sun 13 Sep 2026 15:46:25 +0000 Files and hashes: 1: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 2: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) 3: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 4: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 5: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: UsZjp1WoMCF6BCVSFWaS9ydpNvYLMqOVa8Aqw95EMbE=) 6: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 7: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 8: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 9: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:87:da:98:0c:52:c0:3a:12:85:f9:e1:5a:1d:46:bb:a6:5f:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Sep 10 11:11:25 2026 GMT Not After : Sep 13 15:46:25 2026 GMT Subject: CN=C5EAE55083063747D72BE54B4648644910E240F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:91:a0:35:6e:e5:7f:8f:97:cb:d5:0d:56: b1:91:0a:b8:f4:32:d5:cd:4c:e1:9b:08:1a:a9:60: 68:96:28:f7:ac:ac:ad:87:cb:47:0d:99:6b:e7:8d: c9:d7:fb:e1:fb:e5:53:c8:b6:87:75:19:c3:40:2f: 16:9d:41:63:9a:fe:0f:a8:e5:0c:a7:57:49:ff:0f: 44:74:a9:fc:e8:ea:ce:8c:be:49:11:8a:44:e7:63: ab:f2:81:91:7f:a4:cb:4f:6b:55:85:25:3d:a0:75: 75:6d:e7:c8:60:7b:8c:2e:7a:a5:23:cc:85:ed:0b: 24:f9:71:63:4d:83:16:23:ee:f2:89:73:aa:5d:30: 4c:04:bd:5b:39:1d:64:9b:60:1a:eb:70:8b:13:d0: cb:80:28:0f:36:79:50:c7:2f:be:0e:00:2d:79:c5: da:71:21:96:ad:ae:97:fe:c6:97:9e:16:9c:d7:97: 45:3c:76:d5:8e:e3:5d:22:91:f2:45:c7:ff:a3:e8: 5c:46:a2:ed:1b:e5:ed:ca:d2:77:3a:de:ae:3f:8c: 45:a4:39:fd:9b:96:5c:f0:63:25:17:96:7c:45:00: f3:ff:22:2c:89:3f:e6:ed:6d:87:da:f9:35:ac:64: d3:71:1f:28:76:da:86:70:3f:2f:36:7a:61:6d:2b: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:E5:50:83:06:37:47:D7:2B:E5:4B:46:48:64:49:10:E2:40:F5 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c0:bb:77:2b:b3:1c:6f:9c:da:f0:b7:75:23:bb:64:8c:b4: 2f:e1:0e:d6:b6:5a:a6:5e:3f:d1:19:38:d0:11:e5:70:8a:b4: 11:86:fb:de:4c:c3:e0:fb:3f:8e:31:c4:23:d4:be:b8:2d:0c: 5a:de:c1:59:73:cf:68:45:22:83:b7:ce:fb:df:4a:f4:36:7e: e1:09:f9:b7:e1:5b:84:21:b0:0d:e8:df:aa:a4:c4:d6:4f:a8: 89:3e:38:98:21:e5:ac:ef:90:3f:4a:0c:c8:a8:a7:f6:1e:6d: 91:1b:bc:55:2b:2e:d1:61:d2:8a:65:f8:03:c2:da:d0:a7:23: d9:2c:fe:0b:b2:49:36:f0:83:67:12:36:8c:1d:a9:0f:a0:4d: 6d:fc:42:3c:fc:f1:0a:78:6d:04:69:c2:d0:d3:13:58:0b:b0: 5e:ef:c3:73:f4:c1:91:64:f4:b8:e1:f7:ba:06:bd:57:bf:d4: df:c0:48:a0:44:58:78:1e:85:e3:06:c1:6d:02:6a:56:e4:92: 7b:92:c7:64:a5:bf:23:d5:f8:72:cb:2c:e3:79:2e:79:05:86: 08:a8:45:e6:d1:a4:8a:d6:49:27:8a:12:0f:10:4e:16:b3:84: e0:10:ac:2f:47:90:d2:2f:e0:3d:5c:e3:eb:df:de:04:56:e3: ff:e0:08:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNIfamAxSwDoShfnhWh1Gu6Zf5AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA5MTAxMTExMjVaFw0yNjA5MTMxNTQ2MjVaMDMxMTAvBgNV BAMTKEM1RUFFNTUwODMwNjM3NDdENzJCRTU0QjQ2NDg2NDQ5MTBFMjQwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKJGgNW7lf4+Xy9UNVrGRCrj0 MtXNTOGbCBqpYGiWKPesrK2Hy0cNmWvnjcnX++H75VPItod1GcNALxadQWOa/g+o 5QynV0n/D0R0qfzo6s6MvkkRikTnY6vygZF/pMtPa1WFJT2gdXVt58hge4wueqUj zIXtCyT5cWNNgxYj7vKJc6pdMEwEvVs5HWSbYBrrcIsT0MuAKA82eVDHL74OAC15 xdpxIZatrpf+xpeeFpzXl0U8dtWO410ikfJFx/+j6FxGou0b5e3K0nc63q4/jEWk Of2bllzwYyUXlnxFAPP/IiyJP+btbYfa+TWsZNNxHyh22oZwPy82emFtK5NhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxerlUIMGN0fXK+VLRkhkSRDiQPUwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACcC7dyuzHG+c 2vC3dSO7ZIy0L+EO1rZapl4/0Rk40BHlcIq0EYb73kzD4Ps/jjHEI9S+uC0MWt7B WXPPaEUig7fO+99K9DZ+4Qn5t+FbhCGwDejfqqTE1k+oiT44mCHlrO+QP0oMyKin 9h5tkRu8VSsu0WHSimX4A8La0Kcj2Sz+C7JJNvCDZxI2jB2pD6BNbfxCPPzxCnht BGnC0NMTWAuwXu/Dc/TBkWT0uOH3uga9V7/U38BIoERYeB6F4wbBbQJqVuSSe5LH ZKW/I9X4csss43kueQWGCKhF5tGkitZJJ4oSDxBOFrOE4BCsL0eQ0i/gPVzj69/e BFbj/+AIog== -----END CERTIFICATE-----Generated at Thu Sep 10 17:42:45 2026 by rpki-client