$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.mft (raw, json) Hash identifier: dsfqX8hMVzyrEiZTrVM1hC/6fRWOdo3R7y0hEEHEl90= Subject key identifier: 65:8F:56:4C:A4:19:05:E2:6E:FC:BB:DF:F0:5D:5F:21:71:98:30:0D Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 2B25C142D1E9F277D131E2A7AB74501A9392A52F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft Manifest number: 01 Signing time: Fri 17 Apr 2026 08:25:05 +0000 Manifest this update: Fri 17 Apr 2026 08:20:05 +0000 Manifest next update: Sat 18 Apr 2026 08:57:05 +0000 Files and hashes: 1: 200F3395B71E54CEA9D9E15A8452B36EA909B567.crl (hash: QuTmj0Bsa8CKQz7z2LBeslaAWbE8YD2P8u5J5EvVeoo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:25:c1:42:d1:e9:f2:77:d1:31:e2:a7:ab:74:50:1a:93:92:a5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Apr 17 08:20:05 2026 GMT Not After : Apr 18 08:57:05 2026 GMT Subject: CN=658F564CA41905E26EFCBBDFF05D5F217198300D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:1c:ad:4f:4b:aa:bf:65:65:1d:2e:50:5c: 97:f5:a3:cf:b3:d4:bb:f9:49:e9:5d:5a:98:06:a3: a7:9c:c0:2b:56:7b:0a:41:3b:eb:a5:a0:c5:3b:6a: 0f:25:d4:b7:6f:04:96:aa:dc:23:c5:00:bc:88:06: bc:43:30:ab:bf:68:a6:13:c0:4b:ce:39:21:81:a4: 46:56:f7:68:dc:21:60:dd:a9:85:45:1e:29:ef:86: 41:5c:cf:87:89:35:3b:7e:79:75:fd:d7:78:1a:67: ce:5c:85:c1:3a:44:3c:e6:3a:72:b8:b2:79:e2:a9: 0f:9c:d7:0a:4d:50:83:cf:e8:0c:f6:13:c0:ca:27: 46:31:7f:a9:42:8e:1e:68:cc:ae:df:29:55:9d:d0: 3f:1c:13:b2:d4:72:dd:98:fe:0f:4a:7a:84:e9:c2: 84:eb:f5:b8:a9:bb:84:20:de:48:f3:be:f0:1e:c6: 11:8b:67:3e:1f:f0:f6:c2:8a:a7:02:8b:a4:86:ee: f2:41:60:9b:8f:b8:eb:79:b5:ef:3e:1e:d3:d9:db: 07:96:1a:78:a5:00:92:79:a8:ee:35:8d:0b:2a:f7: 56:c9:38:4f:88:3c:d4:52:cf:13:4b:d4:b1:2c:dd: 56:0a:78:54:90:5e:28:1e:80:ce:94:8a:e5:6a:f1: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8F:56:4C:A4:19:05:E2:6E:FC:BB:DF:F0:5D:5F:21:71:98:30:0D X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:75:4b:fe:7d:07:4a:e3:4a:3d:42:6e:d6:5e:46:45:48:21: cb:21:e3:f2:13:dc:c2:d1:5a:81:f0:c8:c8:ed:44:a2:d1:5d: 90:77:f7:b3:af:51:42:43:33:fa:b1:c3:c7:b6:c3:71:4f:e4: 98:1e:40:71:3d:a4:d5:37:c5:a7:ca:14:86:e6:f4:36:ec:44: 8b:0f:31:de:75:87:60:a9:22:c6:a5:e9:58:f3:ba:1b:f5:f7: 5f:ff:65:88:54:e1:25:49:54:63:fe:1d:51:dd:48:ac:76:32: a4:a1:22:a4:11:17:e7:fa:a9:77:0f:98:59:2c:19:70:16:b0: 4b:6b:04:3d:85:18:d1:2b:95:40:e3:80:5d:e3:3c:a4:56:5e: 87:d5:cd:f9:2f:b7:c4:02:81:05:db:d5:ff:ef:78:20:11:61: 72:4f:75:6f:52:a1:a1:de:cd:2d:64:ed:2c:93:5f:65:30:86: c3:7a:33:8d:3a:8d:c8:c5:68:bc:80:f6:c6:3f:68:87:a3:39: 7a:ad:ac:e1:37:2e:03:5b:26:4a:9e:6c:b7:31:57:a5:f8:bb: 1f:57:61:ef:1a:ca:52:eb:41:fd:80:4d:da:54:9b:98:4e:12: 89:ca:7e:84:2e:66:d6:e2:7d:97:49:e8:c3:15:69:92:ce:92: b3:aa:a5:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKyXBQtHp8nfRMeKnq3RQGpOSpS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA0MTcwODIwMDVaFw0yNjA0MTgwODU3MDVaMDMxMTAvBgNV BAMTKDY1OEY1NjRDQTQxOTA1RTI2RUZDQkJERkYwNUQ1RjIxNzE5ODMwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lhytT0uqv2VlHS5QXJf1o8+z 1Lv5SeldWpgGo6ecwCtWewpBO+uloMU7ag8l1LdvBJaq3CPFALyIBrxDMKu/aKYT wEvOOSGBpEZW92jcIWDdqYVFHinvhkFcz4eJNTt+eXX913gaZ85chcE6RDzmOnK4 snniqQ+c1wpNUIPP6Az2E8DKJ0Yxf6lCjh5ozK7fKVWd0D8cE7LUct2Y/g9KeoTp woTr9bipu4Qg3kjzvvAexhGLZz4f8PbCiqcCi6SG7vJBYJuPuOt5te8+HtPZ2weW GnilAJJ5qO41jQsq91bJOE+IPNRSzxNL1LEs3VYKeFSQXigegM6UiuVq8T+fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZY9WTKQZBeJu/Lvf8F1fIXGYMA0wHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0Mzc1NjA1OTYwNzA0MDMvMC8yMDBGMzM5NUI3MUU1 NENFQTlEOUUxNUE4NDUyQjM2RUE5MDlCNTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnVL/n0HSuNK PUJu1l5GRUghyyHj8hPcwtFagfDIyO1EotFdkHf3s69RQkMz+rHDx7bDcU/kmB5A cT2k1TfFp8oUhub0NuxEiw8x3nWHYKkixqXpWPO6G/X3X/9liFThJUlUY/4dUd1I rHYypKEipBEX5/qpdw+YWSwZcBawS2sEPYUY0SuVQOOAXeM8pFZeh9XN+S+3xAKB BdvV/+94IBFhck91b1Khod7NLWTtLJNfZTCGw3ozjTqNyMVovID2xj9oh6M5eq2s 4TcuA1smSp5stzFXpfi7H1dh7xrKUutB/YBN2lSbmE4Sicp+hC5m1uJ9l0nowxVp ks6Ss6qlhA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:21:03 2026 by rpki-client