$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json) Hash identifier: etJ8DcLs+nAHVf/g9+YodItXVPX2nDPaA4Mc4r9SiWc= Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 1EDE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft Manifest number: 1E9E Signing time: Fri 06 Jun 2025 12:10:33 +0000 Manifest this update: Fri 06 Jun 2025 12:10:33 +0000 Manifest next update: Fri 06 Jun 2025 18:10:33 +0000 Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=) 2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=) 3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=) 4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=) 5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=) 6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: HYvHIJ+yoC7hRpfdzdlfatR3gkLnF2IKOyemQLk33I0=) 7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=) 8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=) 9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=) 10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=) 11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=) 12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=) 13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=) 14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=) 15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=) 16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7902 (0x1ede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Jun 6 12:10:33 2025 GMT Not After : Apr 9 06:41:08 2026 GMT Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27: 46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1: 70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30: 20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12: 48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d: 84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07: 9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c: 82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b: 68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54: bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb: 6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e: 23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13: 7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e: b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c: 0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10: 24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23: c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:c5:cf:29:7d:68:b6:d5:95:96:55:57:38:66:2a:a1:74: 46:d2:e0:d1:9a:6e:ec:6d:66:51:f2:8b:c7:a9:a5:7d:06:48: 1a:5c:63:08:0c:c1:6d:77:78:cc:68:7b:28:d3:46:69:80:16: 3d:95:e2:e2:e7:58:c2:71:4d:a5:ce:93:c9:9c:5d:87:1a:e5: e1:42:d8:60:e9:67:5b:3c:47:f8:f2:74:0c:33:5f:86:48:ab: c0:2d:19:db:7e:ea:47:9f:52:86:b8:e9:aa:74:a1:7f:6f:af: 39:28:8a:d6:f3:25:81:d5:3d:87:a6:08:48:cf:67:07:09:cd: bf:2c:38:fe:7a:03:09:37:41:8a:2b:d0:ea:5b:eb:aa:01:47: 06:f5:fc:94:d1:b0:50:5b:42:27:b6:19:94:b8:39:91:5b:89: 48:4c:eb:99:af:2c:ea:e0:32:1b:3c:d0:54:8e:80:32:2b:c6: 5f:4b:79:33:4d:b3:db:d7:bb:ca:cf:b5:b5:d7:57:db:8f:c3: ee:d3:4a:e4:bc:b0:eb:e2:d1:2c:16:9f:dc:d8:c1:d2:79:d7: 25:d4:bd:55:c2:10:b7:f6:58:fc:da:68:54:a9:95:d2:09:4a: 2e:8e:b6:15:fe:60:f2:c5:a3:c2:67:4e:76:e6:27:62:78:42: b4:9d:de:77 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTA2MDYx MjEwMzNaFw0yNjA0MDkwNjQxMDhaMDMxMTAvBgNVBAMTKDY0RDQ4NThENkI5NUE3 QkJGOUY1OEE2RTgyMjRGRTBFOEFCRjYxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1PXArqJAcrnpFJwOJ0ZfhNWVNZYcLf7B42ny4XCEFOnCZ/+W BCp6RjejMCCQEVHgQqQmsrd9Fxx2Ekijj6NmXqqxocHd5Hp+TYTthOiHSVkDcaEk R57XB5uVrvjIPLx3020L4h5WLIJgvhHc7nnuzZfERtRkG2gNEYFeES7I0iFj2Z7H VLvhpxYdDpR0PPlLEDtD627Sd39XRkJX4URnmQREniNGLAjONIpgXBB661UVE39N 2H/45eg4Mfy9GzF8Tredm+IlJn+OIqCM5AlejArgQKUL4yqDhVSwaxJDECSeoLe3 hsP5cyfXNlRZI8P5NKaZbqTSo84Svy7NLLMlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZNSFjWuVp7v59YpugiT+Doq/YZYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvU1VTYlJzcnM1MTBj VllCaE9VMjBBcmJRQ2I0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJr7xc8pfWi21ZWWVVc4ZiqhdEbS4NGabuxtZlHyi8eppX0GSBpcYwgMwW13 eMxoeyjTRmmAFj2V4uLnWMJxTaXOk8mcXYca5eFC2GDpZ1s8R/jydAwzX4ZIq8At Gdt+6kefUoa46ap0oX9vrzkoitbzJYHVPYemCEjPZwcJzb8sOP56Awk3QYor0Opb 66oBRwb1/JTRsFBbQie2GZS4OZFbiUhM65mvLOrgMhs80FSOgDIrxl9LeTNNs9vX u8rPtbXXV9uPw+7TSuS8sOvi0SwWn9zYwdJ51yXUvVXCELf2WPzaaFSpldIJSi6O thX+YPLFo8JnTnbmJ2J4QrSd3nc= -----END CERTIFICATE-----Generated at Fri Jun 6 17:29:31 2025 by rpki-client