$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: 75V7SpYypXYNyPMQpfQ+RNWsQxp3Qh5uqgu+tWDrriM= Subject key identifier: 04:43:C9:72:47:D7:53:D5:C0:29:BC:8C:53:FF:D1:81:FB:3E:47:7C Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 3694AF40C1A0BA6D7DD9FA44E5183D62B4FB7113 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: C6 Signing time: Mon 12 Oct 2026 04:46:33 +0000 Manifest this update: Mon 12 Oct 2026 04:41:33 +0000 Manifest next update: Thu 15 Oct 2026 11:39:33 +0000 Files and hashes: 1: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 2: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 3: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 4: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 5: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 6: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 7: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 8: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: BMpvfXHrgVJm9PR1npghTU3ar6K13LPF8pR3joX2UqE=) 9: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:94:af:40:c1:a0:ba:6d:7d:d9:fa:44:e5:18:3d:62:b4:fb:71:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Oct 12 04:41:33 2026 GMT Not After : Oct 15 11:39:33 2026 GMT Subject: CN=0443C97247D753D5C029BC8C53FFD181FB3E477C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:67:51:5c:b4:67:bc:1f:c8:3f:a4:5b:65: b8:fd:1f:a8:43:2d:ed:9a:91:60:8d:9e:51:c3:14: a5:ab:d3:99:fb:af:f0:d3:7e:cd:f8:74:e2:54:2d: 42:c4:b0:14:6b:15:93:c6:7a:e5:f4:37:e6:77:2f: 72:70:5c:72:a9:42:98:2d:d2:ac:9b:a1:32:4c:cb: 20:9e:04:4a:fc:f9:62:21:35:08:29:4d:42:6c:6d: 51:ac:66:c6:d5:2f:17:df:41:74:9a:6e:66:86:fd: e3:1a:3c:e3:15:07:99:9e:b2:13:0d:6a:17:02:c6: 3a:6b:87:88:0c:59:5d:48:3a:97:9a:4d:88:7c:d3: 83:68:6e:18:93:4b:99:2d:67:1c:ae:9c:57:3e:93: 85:bc:25:52:7b:25:87:6a:b5:7d:40:ad:60:79:30: 2d:97:e7:55:aa:b0:03:ab:6d:f2:31:78:e1:9e:c9: c6:08:79:58:71:16:dd:13:f2:4b:f0:9f:21:1b:b8: 2d:ef:c4:3a:fe:fe:69:6e:43:32:54:94:a9:b5:cf: 84:61:42:5a:af:dc:f7:c1:31:96:e7:36:ce:f0:55: 36:69:43:79:d2:a5:fe:5e:b1:c4:c9:d8:fd:54:78: 41:70:55:64:ae:86:ed:eb:20:b7:2b:8d:61:49:2b: 11:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:C9:72:47:D7:53:D5:C0:29:BC:8C:53:FF:D1:81:FB:3E:47:7C X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:cf:48:30:8a:08:20:26:84:bd:91:5a:b6:00:4f:6a:a8:d3: ea:8d:d4:92:ce:73:07:ca:ca:d4:b9:de:6f:15:61:9b:12:eb: 6e:1c:98:45:5f:0b:0c:2b:7b:27:9f:59:c4:cf:40:c0:49:79: 26:4b:ca:7c:cd:ba:a6:db:4b:5b:0e:70:53:c6:5b:78:f8:99: 79:c3:ac:54:4d:9f:32:59:ec:b3:61:c4:c7:f9:5f:be:88:90: 1d:aa:f8:2d:77:2e:06:0c:ec:25:89:5f:34:19:30:34:2e:c1: c6:8a:f7:d1:c1:95:c4:ff:14:75:f4:5c:52:f9:01:6c:17:f1: 1b:78:65:54:50:ce:d6:a9:34:ee:c8:71:f7:b6:5d:2c:d3:11: 0e:2b:1f:7c:c6:d1:1d:20:d4:c9:8c:21:d8:c3:78:21:6a:c9: 5f:79:79:e4:f1:51:e8:b7:a7:84:96:92:a6:84:84:3d:71:ff: 6e:d8:cd:8f:43:19:57:d4:6d:48:81:ae:32:fe:b2:d3:2c:7a: 8c:20:fd:7b:1c:f4:f5:c1:b3:f1:12:8b:ac:df:7a:1e:c0:8f: db:28:52:a8:53:c5:78:7d:d1:e2:2e:cb:10:5d:4b:a8:f6:de: a4:38:9e:1b:8e:5d:2e:6d:ec:bb:0b:b7:22:4d:86:3c:a1:0c: b5:8d:bc:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNpSvQMGgum192fpE5Rg9YrT7cRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjEwMTIwNDQxMzNaFw0yNjEwMTUxMTM5MzNaMDMxMTAvBgNV BAMTKDA0NDNDOTcyNDdENzUzRDVDMDI5QkM4QzUzRkZEMTgxRkIzRTQ3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rWdRXLRnvB/IP6RbZbj9H6hD Le2akWCNnlHDFKWr05n7r/DTfs34dOJULULEsBRrFZPGeuX0N+Z3L3JwXHKpQpgt 0qyboTJMyyCeBEr8+WIhNQgpTUJsbVGsZsbVLxffQXSabmaG/eMaPOMVB5meshMN ahcCxjprh4gMWV1IOpeaTYh804NobhiTS5ktZxyunFc+k4W8JVJ7JYdqtX1ArWB5 MC2X51WqsAOrbfIxeOGeycYIeVhxFt0T8kvwnyEbuC3vxDr+/mluQzJUlKm1z4Rh Qlqv3PfBMZbnNs7wVTZpQ3nSpf5escTJ2P1UeEFwVWSuhu3rILcrjWFJKxGZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBEPJckfXU9XAKbyMU//Rgfs+R3wwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ89IMIoIICaE vZFatgBPaqjT6o3Uks5zB8rK1LnebxVhmxLrbhyYRV8LDCt7J59ZxM9AwEl5JkvK fM26pttLWw5wU8ZbePiZecOsVE2fMlnss2HEx/lfvoiQHar4LXcuBgzsJYlfNBkw NC7Bxor30cGVxP8UdfRcUvkBbBfxG3hlVFDO1qk07shx97ZdLNMRDisffMbRHSDU yYwh2MN4IWrJX3l55PFR6LenhJaSpoSEPXH/btjNj0MZV9RtSIGuMv6y0yx6jCD9 exz09cGz8RKLrN96HsCP2yhSqFPFeH3R4i7LEF1LqPbepDieG45dLm3suwu3Ik2G PKEMtY28Cg== -----END CERTIFICATE-----Generated at Tue Oct 13 16:21:59 2026 by rpki-client