$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: DSn4EoeX/g3t2ksTIHlReew9ZevX9uNGCv+sASjxiDA= Subject key identifier: 8E:CE:B1:CF:3C:0A:41:8C:F1:7F:4E:6C:82:55:B3:00:57:F3:0B:0B Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 758DC3D1ED34D2E7187851F80D443BCB07C734CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 89 Signing time: Tue 28 Jul 2026 19:47:39 +0000 Manifest this update: Tue 28 Jul 2026 19:42:39 +0000 Manifest next update: Wed 29 Jul 2026 22:43:39 +0000 Files and hashes: 1: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) 2: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 3: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 4: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 5: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 6: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: hSrJ0hD+JfI+h0+5wbpjMYcnUsgBb0xzAYoe/KLNm9A=) 7: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) 8: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 9: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:c3:d1:ed:34:d2:e7:18:78:51:f8:0d:44:3b:cb:07:c7:34:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Jul 28 19:42:39 2026 GMT Not After : Jul 29 22:43:39 2026 GMT Subject: CN=8ECEB1CF3C0A418CF17F4E6C8255B30057F30B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:18:6c:27:d7:47:c8:8d:63:93:25:46:f8: 34:f7:3c:f6:38:f0:9d:fd:97:d8:f3:ca:d9:0f:91: a4:06:61:a8:5f:5f:32:c5:95:a7:16:65:eb:a1:d5: 2e:bf:80:15:89:6c:e6:89:33:cb:99:c6:6d:eb:08: d6:dc:b9:b0:af:b5:1c:5e:b4:54:05:cb:94:d3:c1: 6a:c3:8e:74:3b:cd:53:77:4f:98:ef:ed:50:2c:b7: a5:29:fe:ce:7f:cb:db:08:5e:99:81:ac:8c:12:a9: f4:c1:a9:d4:6a:0d:7d:b2:2b:cd:7c:e2:f3:18:6f: 32:88:cc:93:f7:bb:ec:e5:47:12:74:30:e7:8c:8a: bf:e9:f7:51:9f:6e:37:a9:3a:e1:63:28:d0:04:1a: 2b:c1:5c:4d:a3:85:0e:af:26:e2:f6:13:72:5e:80: 54:26:bd:8e:19:62:ab:81:b9:c2:95:04:9d:83:52: ca:8a:bc:6b:6d:74:a3:ed:f0:2d:06:32:5a:c1:36: b4:cb:c2:ec:43:a5:b5:e3:4f:6f:2c:3c:08:4f:2c: 08:12:a2:7d:2f:50:25:0b:27:ca:77:6b:86:d4:a5: 89:d3:53:70:41:7e:bc:6b:33:59:2c:0b:88:b2:29: 5d:06:bb:ca:23:73:f8:97:60:be:fa:b9:94:35:2b: 81:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CE:B1:CF:3C:0A:41:8C:F1:7F:4E:6C:82:55:B3:00:57:F3:0B:0B X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ee:43:dd:ab:25:5c:49:a4:43:9f:8e:cc:95:3c:a9:ac:8f: cb:7f:8e:c2:cc:aa:ab:f3:c0:c2:27:ba:21:84:54:d6:0f:46: df:5b:f3:2e:8f:33:c6:68:d8:a7:14:f1:60:23:10:2b:be:ae: b5:ea:68:8c:9a:fd:e7:cf:8c:34:e7:53:99:c5:14:3a:95:f2: 2a:49:8b:73:00:3e:5d:c6:dd:66:fd:3f:a7:00:ac:c1:59:1a: b8:94:cf:9e:49:c6:0f:48:df:ab:1b:ca:47:61:49:d8:e8:ee: fd:a9:bc:8c:28:d7:5d:8d:37:e9:b8:d5:30:fe:7e:6e:9a:4a: 81:92:10:d2:08:5e:e5:21:ce:f6:92:75:c0:77:fb:e3:9d:07: 0e:a2:de:22:75:17:e6:96:74:99:a4:d5:b3:34:97:fe:cc:b7: f6:37:32:8f:27:fa:85:48:fe:7b:48:5d:d1:ba:00:50:41:89: 4a:ae:b4:77:4f:0e:5b:86:59:ad:86:e6:2e:87:59:aa:17:84: 43:d8:1f:75:bd:bd:ce:5c:ce:52:af:ff:93:04:e7:a1:bf:93: 69:65:05:d1:a6:4d:91:d3:ac:b4:12:78:b1:c2:84:72:66:b4: 6b:9c:76:5e:66:de:ce:73:2e:df:3e:37:ca:6f:0d:9f:da:6f: 9e:9c:5d:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdY3D0e000ucYeFH4DUQ7ywfHNMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA3MjgxOTQyMzlaFw0yNjA3MjkyMjQzMzlaMDMxMTAvBgNV BAMTKDhFQ0VCMUNGM0MwQTQxOENGMTdGNEU2QzgyNTVCMzAwNTdGMzBCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ChhsJ9dHyI1jkyVG+DT3PPY4 8J39l9jzytkPkaQGYahfXzLFlacWZeuh1S6/gBWJbOaJM8uZxm3rCNbcubCvtRxe tFQFy5TTwWrDjnQ7zVN3T5jv7VAst6Up/s5/y9sIXpmBrIwSqfTBqdRqDX2yK818 4vMYbzKIzJP3u+zlRxJ0MOeMir/p91GfbjepOuFjKNAEGivBXE2jhQ6vJuL2E3Je gFQmvY4ZYquBucKVBJ2DUsqKvGttdKPt8C0GMlrBNrTLwuxDpbXjT28sPAhPLAgS on0vUCULJ8p3a4bUpYnTU3BBfrxrM1ksC4iyKV0Gu8ojc/iXYL76uZQ1K4GxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjs6xzzwKQYzxf05sglWzAFfzCwswHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZe5D3aslXEmk Q5+OzJU8qayPy3+Owsyqq/PAwie6IYRU1g9G31vzLo8zxmjYpxTxYCMQK76utepo jJr958+MNOdTmcUUOpXyKkmLcwA+XcbdZv0/pwCswVkauJTPnknGD0jfqxvKR2FJ 2Oju/am8jCjXXY036bjVMP5+bppKgZIQ0ghe5SHO9pJ1wHf7450HDqLeInUX5pZ0 maTVszSX/sy39jcyjyf6hUj+e0hd0boAUEGJSq60d08OW4ZZrYbmLodZqheEQ9gf db29zlzOUq//kwTnob+TaWUF0aZNkdOstBJ4scKEcma0a5x2XmbeznMu3z43ym8N n9pvnpxduA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:44:19 2026 by rpki-client