$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: NQQST6SHFdH7l7e8fc3pI7AQ5bDnT/dmF8UN4uGLToY= Subject key identifier: F3:20:BC:0A:31:BC:5E:32:7E:38:E9:21:E2:6A:C2:52:EE:9D:8F:CD Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 71C0A708B68F1327F662D2DD21E2FB5D56C4CA52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: C7 Signing time: Wed 14 Oct 2026 11:44:04 +0000 Manifest this update: Wed 14 Oct 2026 11:39:04 +0000 Manifest next update: Sat 17 Oct 2026 14:20:04 +0000 Files and hashes: 1: 3130332e3232312e3134322e302f32342d3234203d3e2034383337.roa (hash: fVcVCiZUCOZMV+PNenhjs6A0DJNnovQ/i6PtJ+bEEII=) 2: 34352e3235322e3130342e302f32332d3233203d3e2034383337.roa (hash: ah+eVztb7zCbskRR4d/X9mzmgCcbHXoiziEXOU1kvLI=) 3: 3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (hash: k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=) 4: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (hash: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s=) 5: 3130332e3230382e34302e302f32322d3232203d3e2030.roa (hash: ocEFRdz2emo5I6oqki8DF1HoQ/WFTWTb3eYvHraQMtk=) 6: 3130332e3232312e3134302e302f32342d3234203d3e2034383337.roa (hash: kyOqBDdCoXnXCl9BSgSkHNRDPJxoG+vWOWzjrfY5rWE=) 7: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: 7MXEEiezzBPqI0ina5TIHSIWXuEcDq10Cx89xq2bWak=) 8: 34352e3235322e3130362e302f32332d3233203d3e20313337373032.roa (hash: 7GuhD/d0Q9Ke2wak9hgWIFaov5G+D4OytfxXlDX1a3I=) 9: 3130332e3230382e34342e302f32322d3232203d3e2030.roa (hash: 9w15j67yImfKb/JCDv2hsvSCRNipWJ8qJ59slEDpmRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:a7:08:b6:8f:13:27:f6:62:d2:dd:21:e2:fb:5d:56:c4:ca:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Oct 14 11:39:04 2026 GMT Not After : Oct 17 14:20:04 2026 GMT Subject: CN=F320BC0A31BC5E327E38E921E26AC252EE9D8FCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:5a:ea:de:33:ed:93:c3:30:41:43:46:69: f8:13:27:1d:c1:c2:4a:07:bd:79:75:cf:1a:13:03: e4:51:7c:74:f8:a9:85:1d:06:74:12:fa:d3:2e:56: d5:1c:d8:99:4b:62:f9:8a:4e:cc:56:7c:ff:1e:8f: c3:fe:7c:de:b3:49:5f:5e:aa:57:f0:8c:eb:84:13: 42:69:67:e1:f9:ef:94:e7:70:a5:5a:d7:de:48:ad: 07:26:73:26:2c:47:43:c6:9f:cf:4f:ae:5a:94:91: 9e:15:dc:98:35:8a:c9:6a:f9:13:61:0c:46:a4:36: ce:f0:2e:9e:36:18:4d:f6:b5:17:1b:a3:30:17:cd: 3d:f8:2d:18:f9:17:b4:64:87:21:64:98:11:e9:48: 61:b3:78:d6:bb:d0:84:b6:d3:9d:4e:11:3b:ef:6d: 40:7b:30:7f:26:fd:8e:53:35:cc:6b:60:59:a2:09: 23:84:57:b7:e9:fc:16:5f:ae:9c:2e:9b:85:aa:04: 6b:e0:c6:13:0e:72:67:46:8e:2e:58:73:13:c5:71: c5:51:26:38:b9:65:4f:c8:3d:5c:d4:2b:ed:0e:85: 92:1b:19:b6:e7:a4:da:2c:3f:fd:12:ce:ee:04:91: 64:07:2b:ed:46:c0:55:0b:eb:c3:99:d6:8b:88:3d: be:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:BC:0A:31:BC:5E:32:7E:38:E9:21:E2:6A:C2:52:EE:9D:8F:CD X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d0:30:9a:75:f8:c8:c3:1f:84:ff:49:f0:97:7d:05:58:b8: 9c:49:1c:d0:f8:bd:6d:a5:19:86:f3:85:e8:38:a7:fc:42:f8: 6e:4f:1f:35:f7:19:1c:0d:37:6b:a1:a5:8d:98:b2:3e:82:58: 0c:78:23:dd:c8:e0:f2:43:59:2a:a0:3e:71:84:76:d2:3b:6c: 17:c3:8f:8b:84:6a:95:40:38:45:d4:a6:0b:58:72:da:23:43: 24:b4:95:22:29:da:4e:8d:74:29:ed:32:b6:ff:aa:9c:cb:e2: 24:a6:fb:c1:e0:6e:e3:4a:21:cb:80:ed:8b:8f:b6:55:fd:c6: 9c:19:30:de:ea:2d:3e:c5:e3:21:87:50:47:19:23:b3:b2:61: 20:a5:ca:f0:d1:89:02:0b:75:e9:a0:6c:5c:5a:a5:eb:12:ef: 42:0b:97:db:21:e2:d1:3b:04:a6:70:27:e5:56:10:d4:02:42: dd:8f:10:58:f3:bf:32:46:c4:60:2d:2f:16:77:0c:c5:4a:9a: d3:51:ab:6c:d8:03:d7:dd:b3:ea:1c:59:1c:04:bf:17:c1:42: 47:0d:93:3a:3c:74:35:10:de:83:6b:1f:99:a8:14:d9:fa:62: 92:86:10:c9:6f:e8:d1:de:f4:db:73:15:4b:88:45:b9:1b:f9: 3f:53:2d:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUccCnCLaPEyf2YtLdIeL7XVbEylIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjEwMTQxMTM5MDRaFw0yNjEwMTcxNDIwMDRaMDMxMTAvBgNV BAMTKEYzMjBCQzBBMzFCQzVFMzI3RTM4RTkyMUUyNkFDMjUyRUU5RDhGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWFrq3jPtk8MwQUNGafgTJx3B wkoHvXl1zxoTA+RRfHT4qYUdBnQS+tMuVtUc2JlLYvmKTsxWfP8ej8P+fN6zSV9e qlfwjOuEE0JpZ+H575TncKVa195IrQcmcyYsR0PGn89PrlqUkZ4V3Jg1islq+RNh DEakNs7wLp42GE32tRcbozAXzT34LRj5F7RkhyFkmBHpSGGzeNa70IS2051OETvv bUB7MH8m/Y5TNcxrYFmiCSOEV7fp/BZfrpwum4WqBGvgxhMOcmdGji5YcxPFccVR Jji5ZU/IPVzUK+0OhZIbGbbnpNosP/0Szu4EkWQHK+1GwFUL68OZ1ouIPb6zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8yC8CjG8XjJ+OOkh4mrCUu6dj80wHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndAwmnX4yMMf hP9J8Jd9BVi4nEkc0Pi9baUZhvOF6Din/EL4bk8fNfcZHA03a6GljZiyPoJYDHgj 3cjg8kNZKqA+cYR20jtsF8OPi4RqlUA4RdSmC1hy2iNDJLSVIinaTo10Ke0ytv+q nMviJKb7weBu40ohy4Dti4+2Vf3GnBkw3uotPsXjIYdQRxkjs7JhIKXK8NGJAgt1 6aBsXFql6xLvQguX2yHi0TsEpnAn5VYQ1AJC3Y8QWPO/MkbEYC0vFncMxUqa01Gr bNgD192z6hxZHAS/F8FCRw2TOjx0NRDeg2sfmagU2fpikoYQyW/o0d7023MVS4hF uRv5P1MtSA== -----END CERTIFICATE-----Generated at Thu Oct 15 18:31:58 2026 by rpki-client