$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: 0QiMz92EPZ4yrnlszEpzmQ8lSPLVmZzgvVEt9Z7oha4= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 25C7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 252D Signing time: Sat 25 Oct 2025 08:38:36 +0000 Manifest this update: Sat 25 Oct 2025 08:38:36 +0000 Manifest next update: Sat 25 Oct 2025 14:38:36 +0000 Files and hashes: 1: 21-A0JoGyCcKpZZ8vVoDWAAN40k.roa (hash: 8uiQ7I4+StvGCzuamlF3pk33/0d3/cX2h6MOf+zIW2g=) 2: 2KvTCWJY-8XB99EyqNSPZ59JoJM.roa (hash: 8ocBPTG+0U3a7fMjZX+xzYgUziL/LaAZWje4DdvJauw=) 3: 3S-JJhWMuWVyrRY3NMUXWv1Lrkw.roa (hash: WXvd9QB7Uh5iRlrNASzIFlCNdocvZ2KZjUoMp7FqB7Q=) 4: 58THhEXzjthXcJ3JkS4y2F974wo.roa (hash: n6B30sBXQzpOFqAYNXwpmNsB5fr8NsO+S1I7Nm70WUE=) 5: BRCN_L4MnDD87McAMr6V-E_ueCU.roa (hash: DDB+V0eh42p7/RqxbjZ1eEMauER9NPumH6ttwc0sLFQ=) 6: BrysSIqQdjzn0gfaWF9Biuls1Do.roa (hash: 9rEPHaOUkl1UYo5Cr1zp68WZ+p4Rx/ziGVRnheNMvhg=) 7: DffEhWDmtaCM1jB83bMXufAe7RY.roa (hash: EaeMnZx98h6poSMXtPKZEXSKjhjfEAKtvcN7nICbHWY=) 8: GfHRxJhcv-CnwuNLSEA-xhPJnYo.roa (hash: O3uOJ7ULj6RN4qPWvVPqEv5fXFHCsZWl9JOQw0hzgy0=) 9: L53RCzRJkJvv-BoYDtdTaiCN8qo.roa (hash: ixajAdhME9iKF50FD0z5UqyDt+Cx0y0iLNzXMhDXexc=) 10: QN4SStdxiyHsm3cXbHBOKsdo89A.roa (hash: 0XomjnXUTcnvYBeABG8yy1W+UI5UedFeSWuh1nDT7mM=) 11: QW4yGUFhditr5ilZQsfpsitbeOU.roa (hash: tmdIKHdMCSWvblA7C0ncd4sBrDrKhB9g6/WhECJfyVo=) 12: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: 3plKoL6kmciTRZ5SWsTZ6PEXfO2yUzVbF4MakncoHSc=) 13: SVyWpKNRpl4tyYdIhSVCFnBCoh4.roa (hash: 53ZhmWEc2ZHK8EUUT7Ac1FiyMOhnJ2H3BygJVtNZ1Is=) 14: VFjwhr3fby1drTZ9wqQh4LRk32E.roa (hash: 5nNdZZWyDD2RFfSt4B1FQIHJDsA4R6X1XXBRQojkOjI=) 15: Vb5wRMXC-usvaHB537zV7EY76Oo.roa (hash: j5KcCTMlbZnCPHeSlQVy7QhihDXieGy9S9EccvA0LVU=) 16: WfnJFvtvLLmdBDUxHvriGdlK4hw.roa (hash: Ixfrgb+lm3Icpun1ne1PcsUB9coTtYRP1bzFwuCb/rE=) 17: _BI4oBw2PH1jKyNw7eSWx8WZ3Ls.roa (hash: y661gvlrhiLBEEp/Q83VdcU+ArTVsEsGnSbXIcIz+bU=) 18: _VlzV8dzh7rhBTPq-wfYFGXsxgk.roa (hash: 5pB4UEi10H0xoMQhL/t4AEdWEu6yKqixoghd1pCBEts=) 19: aqB4POYyMdAWG6SV-Q2VPPT5Zuw.roa (hash: eywfenig7mEMv2nt+jAecwKHtyZkB/lgMMhScqxfMX8=) 20: b6WKKDhum5UJFtnfdhvacD8Sy3Q.roa (hash: RJmrdGwwjObrPcVeDk4ltJLOy9qjhdDEX1e/9wDgyPw=) 21: igUDn-2X74WAn-QoN1HKSCfTb9A.roa (hash: +iyhqDwdx42ZfAs49jpm3USPbcxKtBDxC0lYr+WcIf8=) 22: lgf6_ZFzKtEcLxQl1sel-TTazqg.roa (hash: vO+LFEDEgh8ONXmg9CgdvthK383AcIyvte4hMyoJKwI=) 23: mLYgklDdgJq4BZWUclcopoxjUEM.roa (hash: zycLMpt4G9DMYaEB1Jf9zPbSYbuxlZozJDeEVu/jDVk=) 24: nIkgv8iTRjiXwVL9S2gtOD72tV0.roa (hash: oPNs2j4mmoIZwZos7nrN9JmyKp8fH3/kih8TnlfPeeM=) 25: nr_7UtplurSwHg7bMbK6TeWDZ2c.roa (hash: j16nDLqiEhN3Ic9pJwYo5tGhSW/JkKi3gHJcXlE/CeQ=) 26: oJ-VdqXAEK1csAUKxqb3bHcbQKs.roa (hash: E6XVmgppcaTjs+7JFW/1rAN0L3YnvjMQ+Age3LHAgOQ=) 27: r-lkf1RnNaAL-vwYsP1QvyJIyDA.roa (hash: 73+P8YEnOnkREsJ9G9W/yLGjc3wGXBcX8195o/XNStU=) 28: r9MlavQXlpRrAh-K-GV5jjQ-vXQ.roa (hash: snqV7We7WUoIqwFxv1ta3Y8yVBy17WGV7rZC2+MvC7o=) 29: vUKFEt0Nqeqe-YRYzaJgk6nqiNY.roa (hash: U1n4me1FUEz6Xijwpn6C7UnGfi9lu5zQ+RCmc+OYR6Q=) 30: wMbDprErtId5YJQC1FBbXCRBP4o.roa (hash: /5Lsu0V1Oj5/DlXeIx1Ms3RS6JCugShTfL+8GZplPPE=) 31: wupW9xO-Pb2A_PVTI4_crq-azI8.roa (hash: 45Zw9LEWmqY3JM84M7tXuIv+GNiqcMJwYp3CyIhBECA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9671 (0x25c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Oct 25 08:38:36 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ff:26:69:52:90:a0:48:ae:15:e2:7c:74:3a:1e:ec:b6:11: aa:ff:8d:f8:e7:fd:a4:e8:f3:dd:d3:4c:95:0a:7b:02:91:12: 91:77:d6:e9:3e:fb:6a:ea:56:0d:4e:51:60:70:fc:b9:1e:ba: b9:d2:9b:70:9e:45:6b:c4:a0:af:92:2b:ca:ca:20:51:c2:b9: 11:c1:92:18:32:74:29:a1:01:0f:b4:62:31:6c:f0:39:dd:01: d2:bd:7e:21:98:ab:56:2d:27:71:e3:9b:82:f9:ba:51:19:00: 7e:cd:b0:bc:17:7e:ed:8f:c4:e0:ea:cf:bd:5b:11:77:da:44: 90:9d:90:65:c7:f8:9e:d4:8b:7d:2e:e1:8a:c5:5f:e3:b7:04: 58:5f:49:4d:58:01:46:5b:51:52:3b:da:14:98:e1:31:3c:e8: fa:92:31:b7:77:65:cb:4e:94:d9:51:7c:fa:73:9e:3d:c8:f6: 8b:08:5e:8f:c0:14:2e:a8:c8:ea:0b:b9:39:12:b9:f2:87:09: 9a:91:68:c0:fb:54:ba:40:3f:a6:f2:b0:65:f1:7f:df:8f:82: 43:1a:3f:25:7f:bd:35:e3:fb:01:6a:4e:9d:85:44:4f:6d:3a: d3:23:42:29:5d:51:d9:dd:18:81:94:64:24:09:f7:21:04:cf: af:50:ad:82 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTEwMjUw ODM4MzZaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMf/JmlSkKBIrhXifHQ6Huy2Ear/jfjn/aTo893TTJUKewKREpF31uk++2rq Vg1OUWBw/LkeurnSm3CeRWvEoK+SK8rKIFHCuRHBkhgydCmhAQ+0YjFs8DndAdK9 fiGYq1YtJ3Hjm4L5ulEZAH7NsLwXfu2PxODqz71bEXfaRJCdkGXH+J7Ui30u4YrF X+O3BFhfSU1YAUZbUVI72hSY4TE86PqSMbd3ZctOlNlRfPpznj3I9osIXo/AFC6o yOoLuTkSufKHCZqRaMD7VLpAP6bysGXxf9+PgkMaPyV/vTXj+wFqTp2FRE9tOtMj QildUdndGIGUZCQJ9yEEz69QrYI= -----END CERTIFICATE-----Generated at Sat Oct 25 12:50:29 2025 by rpki-client