
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json)
Hash identifier: oMXTTW/CVY+p25wOmGwJV1AAJineH0x8Um0LkBWtSfI=
Subject key identifier: DF:7C:26:2A:A6:E8:81:A6:09:EA:5B:DA:45:23:8E:74:26:6A:9F:B8
Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Certificate serial: 2094241FF607314AFA06F4FAB280135C8868FE96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
Manifest number: 83
Signing time: Fri 24 Jul 2026 09:15:52 +0000
Manifest this update: Fri 24 Jul 2026 09:10:52 +0000
Manifest next update: Sat 25 Jul 2026 10:47:52 +0000
Files and hashes: 1: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: ovzVAT62GdE8asfDzx+LmqpVo6a9jrxfIXK6crZGRA0=)
2: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=)
3: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=)
4: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=)
5: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=)
6: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=)
7: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=)
8: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=)
9: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:94:24:1f:f6:07:31:4a:fa:06:f4:fa:b2:80:13:5c:88:68:fe:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Validity
Not Before: Jul 24 09:10:52 2026 GMT
Not After : Jul 25 10:47:52 2026 GMT
Subject: CN=DF7C262AA6E881A609EA5BDA45238E74266A9FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:7b:69:3e:b6:7e:a1:71:ef:03:64:f9:ca:
8c:64:ec:00:4b:5a:a6:e5:af:73:3c:cd:56:e8:dd:
48:35:5a:d9:88:e2:2f:d0:fd:49:f1:c1:6f:51:66:
58:64:b2:ca:8c:22:d2:06:77:d7:7d:29:4f:18:63:
da:55:5d:98:db:24:30:12:55:a6:24:e1:03:41:a6:
65:fa:42:c4:06:d2:a4:c2:e3:e2:58:84:98:74:83:
63:01:2e:b7:b1:fd:ce:2e:e4:36:99:2d:77:7d:54:
6b:42:2d:55:95:3c:9a:74:6b:7d:f2:35:79:26:2d:
ff:1b:97:c1:63:07:cd:e8:bc:41:6f:9a:16:70:36:
46:ea:b1:62:d7:98:7b:30:8c:c0:4d:84:62:14:3e:
9c:dd:b3:b1:30:0f:18:9c:c6:e3:a1:a4:ec:8b:af:
5b:90:05:89:d8:0a:68:d8:34:71:1e:f0:8a:12:b7:
4a:30:24:2f:12:d0:74:49:58:a6:56:06:3c:ae:95:
ad:39:f7:c0:2d:b3:61:19:a3:42:ab:be:93:8e:ec:
4b:64:9d:ae:5b:a1:0e:b1:ba:87:19:bb:c2:8b:4c:
72:24:2b:1b:f7:73:08:2f:b6:7a:90:5d:7c:19:1d:
0e:20:44:f5:b3:90:91:a2:6c:d5:bf:81:f2:2d:15:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:26:2A:A6:E8:81:A6:09:EA:5B:DA:45:23:8E:74:26:6A:9F:B8
X509v3 Authority Key Identifier:
keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:45:42:5c:93:12:11:d4:46:1a:23:10:66:7d:87:71:51:49:
66:92:3f:81:04:40:6e:a9:cd:7c:b1:72:46:51:a6:f6:24:0b:
b0:da:46:c6:29:7b:bf:9f:21:dc:af:47:3f:c0:ef:c9:53:02:
05:ad:34:1c:db:26:e4:80:1b:81:0e:ea:51:70:e6:e9:29:c8:
47:c6:f7:ab:1c:53:8e:ea:0b:1c:37:6b:bd:8c:85:00:ea:28:
91:d5:3b:b7:42:3b:52:69:2f:11:96:5d:32:d4:1d:ed:fb:b9:
9e:b5:e9:c2:40:4d:c4:e7:23:24:8e:71:a8:04:eb:fb:e2:a9:
6a:5b:05:a9:9e:ad:0b:9e:e3:dd:12:d2:62:54:dd:56:06:e6:
08:89:20:00:01:7c:47:65:23:d7:f1:dd:b4:fb:8c:34:91:da:
92:64:69:e7:2e:20:69:f8:63:6e:f8:52:a2:44:ef:8d:bf:83:
4f:72:af:38:d8:79:6e:c9:69:2c:e8:91:24:bc:fa:96:99:49:
2b:45:54:5e:71:f8:aa:58:b6:9e:15:84:3d:57:0d:66:04:d6:
38:c9:a1:79:e6:1f:48:59:18:1d:4f:35:04:31:99:9a:c1:46:
e4:48:33:df:ba:e7:60:0d:c6:88:c8:e6:64:4b:c1:4b:86:a4:
92:9d:d1:4e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUIJQkH/YHMUr6BvT6soATXIho/pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB
OTA5QjU2NzAeFw0yNjA3MjQwOTEwNTJaFw0yNjA3MjUxMDQ3NTJaMDMxMTAvBgNV
BAMTKERGN0MyNjJBQTZFODgxQTYwOUVBNUJEQTQ1MjM4RTc0MjY2QTlGQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDTHtpPrZ+oXHvA2T5yoxk7ABL
Wqblr3M8zVbo3Ug1WtmI4i/Q/UnxwW9RZlhkssqMItIGd9d9KU8YY9pVXZjbJDAS
VaYk4QNBpmX6QsQG0qTC4+JYhJh0g2MBLrex/c4u5DaZLXd9VGtCLVWVPJp0a33y
NXkmLf8bl8FjB83ovEFvmhZwNkbqsWLXmHswjMBNhGIUPpzds7EwDxicxuOhpOyL
r1uQBYnYCmjYNHEe8IoSt0owJC8S0HRJWKZWBjyula0598Ats2EZo0KrvpOO7Etk
na5boQ6xuocZu8KLTHIkKxv3cwgvtnqQXXwZHQ4gRPWzkJGibNW/gfItFYkjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU33wmKqbogaYJ6lvaRSOOdCZqn7gwHwYDVR0j
BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC
MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1
NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUVCXJMSEdRG
GiMQZn2HcVFJZpI/gQRAbqnNfLFyRlGm9iQLsNpGxil7v58h3K9HP8DvyVMCBa00
HNsm5IAbgQ7qUXDm6SnIR8b3qxxTjuoLHDdrvYyFAOookdU7t0I7UmkvEZZdMtQd
7fu5nrXpwkBNxOcjJI5xqATr++KpalsFqZ6tC57j3RLSYlTdVgbmCIkgAAF8R2Uj
1/HdtPuMNJHakmRp5y4gafhjbvhSokTvjb+DT3KvONh5bslpLOiRJLz6lplJK0VU
XnH4qli2nhWEPVcNZgTWOMmheeYfSFkYHU81BDGZmsFG5Egz37rnYA3GiMjmZEvB
S4akkp3RTg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:53 2026 by rpki-client