$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: s4cWSAkeeU1kYX2kjlpT8oijfx7jIt0IUdlFGxVHucM= Subject key identifier: 0E:8F:27:C3:C3:CF:FE:30:E2:6C:C2:3B:2B:BF:4F:1F:ED:D8:7F:98 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 7F331265B3C35C51862811FA1961EE5413632C53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 23 Signing time: Wed 13 May 2026 06:06:00 +0000 Manifest this update: Wed 13 May 2026 06:01:00 +0000 Manifest next update: Thu 14 May 2026 09:50:00 +0000 Files and hashes: 1: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 2: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 3: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 4: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: tpFI/U8S81wa8JnNKqGtSTulZXGsvhXwTE+Y18ZV9zA=) 5: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 6: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:33:12:65:b3:c3:5c:51:86:28:11:fa:19:61:ee:54:13:63:2c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: May 13 06:01:00 2026 GMT Not After : May 14 09:50:00 2026 GMT Subject: CN=0E8F27C3C3CFFE30E26CC23B2BBF4F1FEDD87F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:94:3f:8e:b2:e6:09:62:40:dd:e5:ee:b3: 21:7d:ea:39:44:8d:c3:26:7c:de:96:c9:56:f4:5a: 60:a5:6d:37:58:15:b6:b9:9e:f0:44:2e:7e:3a:97: 40:e4:e9:3a:0e:53:03:4f:01:df:76:da:aa:1a:9b: 3e:75:5c:2c:83:9f:5b:77:4c:1c:12:a2:e2:f8:50: 35:90:91:00:3b:39:03:03:00:a8:68:38:75:e4:21: 1c:d2:36:00:a1:8f:3f:81:73:28:2b:8b:a6:6e:c6: 63:d4:8d:b3:37:9f:da:d5:c4:1b:c1:7d:dc:81:dd: 43:5f:01:e1:2a:94:60:ea:88:2f:28:f2:00:c9:53: 14:b5:e9:5b:96:4f:66:1b:e9:7a:bf:73:fa:63:37: a2:e4:1d:13:70:1f:e4:a9:71:5e:af:c9:03:af:d7: 85:b8:36:e9:7b:d3:c8:52:de:87:17:f7:1f:81:c9: 93:4a:72:a7:e6:d1:1f:cc:b2:1a:73:0e:63:1d:25: ce:f0:f2:92:01:70:ba:25:60:f4:64:fb:9e:d9:6e: d4:29:c7:09:bb:08:7a:03:a5:a4:99:a0:51:ac:b7: 4c:69:5f:20:80:ec:34:de:58:08:78:cd:f7:39:f1: 05:79:53:13:f1:ef:ab:20:58:26:ae:27:8d:ec:d6: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8F:27:C3:C3:CF:FE:30:E2:6C:C2:3B:2B:BF:4F:1F:ED:D8:7F:98 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:57:c6:f3:3e:4e:fb:25:c4:12:ef:d5:15:9b:da:3d:21:d5: 32:fc:db:70:1a:b7:0a:20:83:0b:8b:41:2c:b0:46:19:4b:e0: b2:bd:c7:2e:73:15:d3:ca:57:e6:59:d4:f8:8e:3f:5d:21:3a: 5b:e0:f9:ee:08:59:f7:c4:86:64:bc:56:03:9b:22:bb:72:d5: 89:5f:44:01:76:7e:b9:54:ca:44:79:99:81:7f:57:18:22:5f: 81:9d:28:20:ec:f3:c3:78:37:ec:77:9e:51:b1:ee:91:b0:e0: 9d:5a:35:4f:2f:a5:3c:8f:2c:04:e8:26:55:95:88:eb:86:77: f2:be:e9:3b:cd:77:81:97:ae:a7:be:75:86:e3:e7:0e:f2:86: 9c:c9:18:42:07:d1:51:74:97:de:79:fb:53:d8:da:88:1c:51: b9:0a:f5:6a:44:46:ec:e8:32:da:35:74:17:6c:99:99:7f:0b: 22:77:9e:43:f2:7c:1e:9e:3a:96:1a:04:2a:cd:f2:bb:0b:42: 57:10:b6:2b:0a:ea:98:78:da:31:fe:84:e0:35:67:c6:92:94: 70:3e:cd:a3:11:8e:f7:ae:3d:06:cb:f6:03:db:c5:a9:ac:b8: 66:bb:83:93:3f:39:7f:06:2f:9b:2e:3a:cf:d4:0f:82:f1:d2: 04:75:3d:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfzMSZbPDXFGGKBH6GWHuVBNjLFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA1MTMwNjAxMDBaFw0yNjA1MTQwOTUwMDBaMDMxMTAvBgNV BAMTKDBFOEYyN0MzQzNDRkZFMzBFMjZDQzIzQjJCQkY0RjFGRUREODdGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8JQ/jrLmCWJA3eXusyF96jlE jcMmfN6WyVb0WmClbTdYFba5nvBELn46l0Dk6ToOUwNPAd922qoamz51XCyDn1t3 TBwSouL4UDWQkQA7OQMDAKhoOHXkIRzSNgChjz+Bcygri6ZuxmPUjbM3n9rVxBvB fdyB3UNfAeEqlGDqiC8o8gDJUxS16VuWT2Yb6Xq/c/pjN6LkHRNwH+SpcV6vyQOv 14W4Nul708hS3ocX9x+ByZNKcqfm0R/MshpzDmMdJc7w8pIBcLolYPRk+57ZbtQp xwm7CHoDpaSZoFGst0xpXyCA7DTeWAh4zfc58QV5UxPx76sgWCauJ43s1jQJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDo8nw8PP/jDibMI7K79PH+3Yf5gwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFfG8z5O+yXE Eu/VFZvaPSHVMvzbcBq3CiCDC4tBLLBGGUvgsr3HLnMV08pX5lnU+I4/XSE6W+D5 7ghZ98SGZLxWA5siu3LViV9EAXZ+uVTKRHmZgX9XGCJfgZ0oIOzzw3g37HeeUbHu kbDgnVo1Ty+lPI8sBOgmVZWI64Z38r7pO813gZeup751huPnDvKGnMkYQgfRUXSX 3nn7U9jaiBxRuQr1akRG7Ogy2jV0F2yZmX8LIneeQ/J8Hp46lhoEKs3yuwtCVxC2 KwrqmHjaMf6E4DVnxpKUcD7NoxGO9649Bsv2A9vFqay4ZruDkz85fwYvmy46z9QP gvHSBHU9qQ== -----END CERTIFICATE-----Generated at Wed May 13 13:44:59 2026 by rpki-client