$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: o4Aq+y0fdmnmTM+Vn1fEjUqGjd+aRS9BUZ+4fVor7AU= Subject key identifier: B9:88:EA:05:0E:83:59:74:A6:DF:2D:91:0E:DC:D2:3F:A1:A6:4D:EA Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 16DC474356D56D2AF70E54838700F7A7AA4BE244 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: C0 Signing time: Mon 28 Sep 2026 09:35:39 +0000 Manifest this update: Mon 28 Sep 2026 09:30:39 +0000 Manifest next update: Thu 01 Oct 2026 16:37:39 +0000 Files and hashes: 1: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 2: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 3: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 4: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 5: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 6: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) 7: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 8: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 9: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: 1eGUt8tdyZiTrgE0lXnXjQobkItdKvdL7xnuiqikVhs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:dc:47:43:56:d5:6d:2a:f7:0e:54:83:87:00:f7:a7:aa:4b:e2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Sep 28 09:30:39 2026 GMT Not After : Oct 1 16:37:39 2026 GMT Subject: CN=B988EA050E835974A6DF2D910EDCD23FA1A64DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:37:6d:2e:50:09:fa:cd:92:02:50:b3:8b: 34:9a:f4:9f:7c:90:10:ba:d5:f3:51:e5:93:fa:5b: 7e:a9:35:38:a9:4e:37:8d:8e:d1:f2:d9:3e:87:72: f4:39:f2:fc:f7:11:6c:25:2b:f3:df:b5:31:a9:36: 7c:2e:bd:4a:65:06:2f:f9:aa:d0:a2:d2:76:85:dc: c2:cf:e9:f0:cf:b8:c2:e9:43:0d:44:2d:82:f1:bb: b1:94:be:a5:ed:d0:fc:ff:6a:08:5a:1f:d2:0a:43: 64:98:32:05:a0:92:96:ba:d6:33:26:7a:ae:88:bf: 47:cd:f9:dc:7b:9e:6e:e7:93:86:05:25:e3:9e:0a: ed:bd:52:5e:0f:9b:0d:cb:60:36:de:07:b7:3e:a4: 12:d6:34:ce:cc:db:d7:05:ff:84:79:90:b5:d7:84: 19:60:e1:04:21:22:6e:b7:7d:65:1a:d4:db:33:9b: 1b:c2:fd:9c:53:f2:5f:db:2b:3a:b8:29:f9:d8:60: 52:51:4d:72:f7:ac:55:0f:ee:35:15:df:9b:10:60: 7a:8c:1a:af:fb:d4:69:a5:fd:55:e0:34:e1:1c:b6: 5b:9f:95:bc:83:dc:66:61:c6:84:9e:0d:e8:99:ac: 64:22:7b:bd:90:41:1e:73:91:39:4e:85:95:31:79: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:88:EA:05:0E:83:59:74:A6:DF:2D:91:0E:DC:D2:3F:A1:A6:4D:EA X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:70:56:68:ab:a0:e7:24:c3:99:aa:24:85:62:42:c7:52:da: e1:26:42:20:78:a0:60:ef:48:6b:50:43:3c:ee:40:45:c6:65: 86:57:dc:57:b8:88:69:f0:db:25:01:77:7f:bc:c4:b5:17:90: 03:fc:9d:52:19:49:00:e5:69:88:37:bf:dd:21:e6:0b:f6:de: b0:ec:77:6d:be:f9:54:cd:e8:e8:74:53:35:5d:e1:c5:a5:29: d0:2e:06:fa:09:2c:5e:f5:e3:79:0c:e5:69:8c:7f:49:d6:61: c0:4b:88:52:fe:f0:14:29:f7:ec:90:b5:d0:4d:35:a0:1e:3f: 6a:90:e3:2f:7d:e3:0d:78:48:e6:57:a7:ea:b8:b5:dc:8c:f0: 76:89:2a:f4:fa:59:a1:87:bf:44:ac:42:4b:ac:bb:df:1a:4f: b0:cf:9a:e6:cc:dd:b7:0a:a0:69:43:41:8e:7b:66:78:98:ff: ef:f5:c1:71:2d:39:5a:56:0f:ce:f6:b6:3a:e0:2b:50:6c:d8: fa:49:72:f8:cf:60:d6:94:06:49:0e:43:8e:9c:9a:6d:07:a5: ee:0d:33:47:56:ef:09:da:d5:fa:e7:09:3d:17:ed:98:e6:61: 8e:3c:3a:b1:8d:fb:5c:18:13:44:2d:34:75:3d:da:f9:4c:97: f2:75:ef:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFtxHQ1bVbSr3DlSDhwD3p6pL4kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA5MjgwOTMwMzlaFw0yNjEwMDExNjM3MzlaMDMxMTAvBgNV BAMTKEI5ODhFQTA1MEU4MzU5NzRBNkRGMkQ5MTBFRENEMjNGQTFBNjRERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKDdtLlAJ+s2SAlCzizSa9J98 kBC61fNR5ZP6W36pNTipTjeNjtHy2T6HcvQ58vz3EWwlK/PftTGpNnwuvUplBi/5 qtCi0naF3MLP6fDPuMLpQw1ELYLxu7GUvqXt0Pz/aghaH9IKQ2SYMgWgkpa61jMm eq6Iv0fN+dx7nm7nk4YFJeOeCu29Ul4Pmw3LYDbeB7c+pBLWNM7M29cF/4R5kLXX hBlg4QQhIm63fWUa1NszmxvC/ZxT8l/bKzq4KfnYYFJRTXL3rFUP7jUV35sQYHqM Gq/71Gml/VXgNOEctluflbyD3GZhxoSeDeiZrGQie72QQR5zkTlOhZUxebtTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuYjqBQ6DWXSm3y2RDtzSP6GmTeowHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXBWaKug5yTD maokhWJCx1La4SZCIHigYO9Ia1BDPO5ARcZlhlfcV7iIafDbJQF3f7zEtReQA/yd UhlJAOVpiDe/3SHmC/besOx3bb75VM3o6HRTNV3hxaUp0C4G+gksXvXjeQzlaYx/ SdZhwEuIUv7wFCn37JC10E01oB4/apDjL33jDXhI5len6ri13Izwdokq9PpZoYe/ RKxCS6y73xpPsM+a5szdtwqgaUNBjntmeJj/7/XBcS05WlYPzva2OuArUGzY+kly +M9g1pQGSQ5DjpyabQel7g0zR1bvCdrV+ucJPRftmOZhjjw6sY37XBgTRC00dT3a +UyX8nXvag== -----END CERTIFICATE-----Generated at Tue Sep 29 05:34:51 2026 by rpki-client