$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: CZNb/EqrNhUy1tyGip7iNCqShqJdn1QfZ7TK8qkK7XI= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 24C5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 2445 Signing time: Sun 07 Sep 2025 23:05:38 +0000 Manifest this update: Sun 07 Sep 2025 23:05:38 +0000 Manifest next update: Mon 08 Sep 2025 05:05:38 +0000 Files and hashes: 1: -9NqEbVLtxcMQGDhsFUsirUgR90.roa (hash: YAPD8DouMRjl8InJgmqoPXZ+pjhCQ4vLb0TAZBDeTVA=) 2: -OwUbQLzqS9CtZr_wtRPxfVPmaw.roa (hash: nU8McGO3g2yTqZQuoumVj83hRYLsBYNlvrV6uYQKZvY=) 3: 0tIdMYbPh52gcnbONKM9sxEByR4.roa (hash: 5KLm0nAa5fOcsr0fbhaiO/JacSV520TVs9rJMJnaPNk=) 4: 4r97Xtcderk2rYaAfCVbfPoW-to.roa (hash: GeqdqfE7ko6jT4bYJmB3zZUkfFl2QdouEXCxGMC+aoA=) 5: 7gi6WSx9-W3Q_-0BTXzk72FY--s.roa (hash: hOgIBhnJyd+67kfMJ+asIvXRzv98Q3BxXFjjyBGTNkc=) 6: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (hash: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=) 7: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (hash: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=) 8: DffEhWDmtaCM1jB83bMXufAe7RY.roa (hash: EaeMnZx98h6poSMXtPKZEXSKjhjfEAKtvcN7nICbHWY=) 9: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (hash: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=) 10: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (hash: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=) 11: HReb-ywFRD2sicgKUd2w0b7x10E.roa (hash: y65mKFijZQhce38APb8340kQcqbx8J1XoRf25Cv+AsE=) 12: Jti-bdW-scu_L4qJSVV8bFC34Hg.roa (hash: von2PiMAe0B935XVhzke3hrz/cpQJvoVxPOBvVAOqbQ=) 13: Kg-iXs-ZgDNd-P3bwxgPfjGf6H4.roa (hash: gT/dloENLe+1DgzIP0bxSsTmtxSc8ITXoF0nYrR0/LM=) 14: L53RCzRJkJvv-BoYDtdTaiCN8qo.roa (hash: ixajAdhME9iKF50FD0z5UqyDt+Cx0y0iLNzXMhDXexc=) 15: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (hash: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=) 16: Mb88DUngG1AeeJ_spzyhH1MtIe8.roa (hash: rPbaYvCyBWVV6nFsWT4yFzdUpbPZoHNmTE5IeHtHFsA=) 17: OIcAhWMzK_7prvQFEasxweToIj0.roa (hash: xBqcWZW2JugLmKQfZ49aES8JiB/8xJHGQsV4BM/CTao=) 18: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: uU/H+yQahqtgBstkhPodPk/jOQLxT0Iu2k7iez8Wvdw=) 19: SVyWpKNRpl4tyYdIhSVCFnBCoh4.roa (hash: 53ZhmWEc2ZHK8EUUT7Ac1FiyMOhnJ2H3BygJVtNZ1Is=) 20: WMANHMiWx1g3CI3Gqpc2-P8j_7k.roa (hash: qNeI26rm2x8bpU/OqzZTNDcppRMsi9Yh3o3Np4XxV+s=) 21: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (hash: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=) 22: gjOyscTAwPENBh0n5Aa3QndEX60.roa (hash: HfhectSQmQlUhPpiM7eLV3JM7FPBo3tgWE1WoKdnnqs=) 23: hDX4u7pdx7Zf5kqxUv0PItrx1f4.roa (hash: grzzaZRI5mpPViDtJPvajB5QsdXQjicqtx/xXdx9O+4=) 24: n5ZNxatvv4XCouElRwkMzO6ANTQ.roa (hash: 2V2xIDmOEpYGle2/9Z9l+ERcP87JlV8yB1t7el2xCxY=) 25: tBEau9qaHWyukHWT05JHQ8xv6yU.roa (hash: yhpnPts3yhegRpvu3PBV7bzk7TlZ6bt6sB2BKxLt30s=) 26: tgoxuWcvzb42md0unwEcPBA-z-E.roa (hash: 8U1tCdX/+rNtC4iXplL0V8fy1x9AMLWS0KUZb06OkVk=) 27: tihOEV-WyZh2J6zruajXK8SgAPU.roa (hash: AUMG4eEdxdoP6cesREJuZwDefP4CdbQDPkHCN/F8erw=) 28: tou57tkArzeegu37p7K21QZeqNI.roa (hash: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=) 29: uzejoKzTeKDkpAiT_kC3H2af84w.roa (hash: pxi1SN6x6SJe2L7OxxGf3guFu+VTbediU/lKPs/cm4c=) 30: wupW9xO-Pb2A_PVTI4_crq-azI8.roa (hash: 45Zw9LEWmqY3JM84M7tXuIv+GNiqcMJwYp3CyIhBECA=) 31: ywYi0okn_GT3W2d2eD_7GQ0HewM.roa (hash: dhJ6G/hO2IpTJvPzX9YY2GzSuWjpi6GsiEi7zCLlzSU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9413 (0x24c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Sep 7 23:05:38 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e5:70:35:5b:45:bc:4a:48:5c:8a:ca:54:5c:de:68:85:71: d2:c0:0b:5d:28:c4:be:91:5c:50:03:6d:35:83:20:71:f2:a8: 75:e8:35:8a:8c:cc:2c:b2:2c:8a:4d:68:c7:de:5f:60:5e:6a: 44:13:1b:95:5e:65:be:34:30:36:7d:d5:0f:02:b4:b2:c5:c2: 92:12:b5:7f:cf:e7:51:3c:b9:ea:8d:45:99:cf:81:da:dc:37: dd:2f:14:50:e0:14:20:f2:a9:d8:40:c4:7a:c2:b7:84:4a:6e: a9:6d:5b:7e:2f:85:3e:63:d0:af:18:46:63:af:f4:8b:f8:d5: 52:fa:87:76:74:60:90:4a:c8:a6:72:f9:24:20:01:57:ed:e5: 33:51:12:00:58:08:5d:0e:94:1d:c7:3a:9c:ff:a6:8d:49:8d: a7:f7:42:e4:5a:a9:20:4c:92:64:09:a9:a7:a0:49:7f:14:26: 9a:5d:20:aa:c0:08:58:af:a4:b1:3d:92:12:e9:9a:e1:c6:cb: f6:98:35:7a:fe:9a:2c:ad:d8:33:f4:83:78:99:d9:33:fb:65: 9c:c3:90:2d:69:17:15:e0:37:68:50:98:26:6d:9b:75:88:aa: 32:3e:ec:0e:eb:cc:f5:c8:53:a5:46:54:c5:dd:78:92:81:55: 5e:ee:53:35 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA5MDcy MzA1MzhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC7lcDVbRbxKSFyKylRc3miFcdLAC10oxL6RXFADbTWDIHHyqHXoNYqMzCyy LIpNaMfeX2BeakQTG5VeZb40MDZ91Q8CtLLFwpIStX/P51E8ueqNRZnPgdrcN90v FFDgFCDyqdhAxHrCt4RKbqltW34vhT5j0K8YRmOv9Iv41VL6h3Z0YJBKyKZy+SQg AVft5TNREgBYCF0OlB3HOpz/po1Jjaf3QuRaqSBMkmQJqaegSX8UJppdIKrACFiv pLE9khLpmuHGy/aYNXr+miyt2DP0g3iZ2TP7ZZzDkC1pFxXgN2hQmCZtm3WIqjI+ 7A7rzPXIU6VGVMXdeJKBVV7uUzU= -----END CERTIFICATE-----Generated at Mon Sep 8 02:22:17 2025 by rpki-client