$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json) Hash identifier: tSySZ/IDop3XOdOlDDUXJAreexgVvhafmUj2ZO79MzE= Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 20AA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft Manifest number: 206A Signing time: Mon 08 Sep 2025 01:04:07 +0000 Manifest this update: Mon 08 Sep 2025 01:04:07 +0000 Manifest next update: Mon 08 Sep 2025 07:04:07 +0000 Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=) 2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=) 3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=) 4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=) 5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=) 6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: 9BeqKAmloeurH43uvb3c/unWXEWTrvSSd/OjKjzTXn0=) 7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=) 8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=) 9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=) 10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=) 11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=) 12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=) 13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=) 14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=) 15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=) 16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8362 (0x20aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Sep 8 01:04:07 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27: 46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1: 70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30: 20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12: 48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d: 84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07: 9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c: 82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b: 68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54: bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb: 6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e: 23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13: 7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e: b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c: 0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10: 24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23: c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:29:77:b3:57:70:08:ab:16:d2:60:61:6d:14:99:50:c1:fa: 96:58:dd:53:c0:17:bf:0a:4e:0b:13:57:c0:02:66:32:11:51: a1:50:d5:9a:59:af:04:8d:fe:90:8d:11:52:5f:d6:8d:39:b2: d5:5a:a0:a1:e0:7c:83:69:2b:5d:59:1f:e7:7d:d0:ce:55:23: 8d:93:13:e2:80:7b:81:b3:1b:e1:8b:bd:8a:12:68:82:70:9b: 60:6e:c9:41:7b:e4:aa:c7:e2:84:67:a8:2e:75:59:11:a4:23: a0:f8:43:f0:c8:bc:05:fa:1e:7c:07:29:cc:43:08:80:b1:03: f9:77:82:db:75:28:b7:7f:49:b4:0c:c8:9c:f5:22:04:19:bd: 2c:c1:2e:2e:2a:5d:39:80:15:80:4f:93:d2:bd:4f:d5:ec:5f: a0:9f:97:e6:c5:d9:28:c7:75:87:20:4a:21:04:07:73:3c:8d: 10:43:8c:49:49:5c:fe:f4:42:2f:00:9a:d3:8a:e3:ba:cc:c9: 2d:b2:6d:5c:83:46:5f:18:76:ab:66:dd:26:d1:7a:2b:61:79: 27:b6:68:6c:b1:04:4b:a7:8b:c6:77:43:a3:cc:9f:45:03:fd: d3:d0:c7:71:03:6c:88:2f:89:93:27:0f:e5:8f:f6:c9:28:a1: f1:de:e5:45 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTA5MDgw MTA0MDdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY0RDQ4NThENkI5NUE3 QkJGOUY1OEE2RTgyMjRGRTBFOEFCRjYxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1PXArqJAcrnpFJwOJ0ZfhNWVNZYcLf7B42ny4XCEFOnCZ/+W BCp6RjejMCCQEVHgQqQmsrd9Fxx2Ekijj6NmXqqxocHd5Hp+TYTthOiHSVkDcaEk R57XB5uVrvjIPLx3020L4h5WLIJgvhHc7nnuzZfERtRkG2gNEYFeES7I0iFj2Z7H VLvhpxYdDpR0PPlLEDtD627Sd39XRkJX4URnmQREniNGLAjONIpgXBB661UVE39N 2H/45eg4Mfy9GzF8Tredm+IlJn+OIqCM5AlejArgQKUL4yqDhVSwaxJDECSeoLe3 hsP5cyfXNlRZI8P5NKaZbqTSo84Svy7NLLMlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZNSFjWuVp7v59YpugiT+Doq/YZYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvU1VTYlJzcnM1MTBj VllCaE9VMjBBcmJRQ2I0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFEpd7NXcAirFtJgYW0UmVDB+pZY3VPAF78KTgsTV8ACZjIRUaFQ1ZpZrwSN /pCNEVJf1o05stVaoKHgfINpK11ZH+d90M5VI42TE+KAe4GzG+GLvYoSaIJwm2Bu yUF75KrH4oRnqC51WRGkI6D4Q/DIvAX6HnwHKcxDCICxA/l3gtt1KLd/SbQMyJz1 IgQZvSzBLi4qXTmAFYBPk9K9T9XsX6Cfl+bF2SjHdYcgSiEEB3M8jRBDjElJXP70 Qi8AmtOK47rMyS2ybVyDRl8Ydqtm3SbReitheSe2aGyxBEuni8Z3Q6PMn0UD/dPQ x3EDbIgviZMnD+WP9skoofHe5UU= -----END CERTIFICATE-----Generated at Mon Sep 8 05:56:46 2025 by rpki-client