$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft File: FhnJhngKE_OA_kXtwo70yEKISEM.mft (raw, json) Hash identifier: sw7Y6amzK6ZjckPwnNtPLi1JTjFSJaN6tvfOc1QkGFk= Subject key identifier: B3:19:AB:CA:A3:55:1D:39:A1:CD:FD:6E:AB:82:73:CD:E8:A7:33:3C Authority key identifier: 16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 Certificate issuer: /CN=1619C986780A13F380FE45EDC28EF4C842884843 Certificate serial: 018F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft Manifest number: 0188 Signing time: Thu 12 Mar 2026 09:01:36 +0000 Manifest this update: Thu 12 Mar 2026 09:01:36 +0000 Manifest next update: Thu 12 Mar 2026 15:01:36 +0000 Files and hashes: 1: 5fZHLT3DwaPtOIKpd7uul75gE4w.roa (hash: kuPo67k9R4XSd7ql3/KGOTV7vsX1Q5zmKuRLHo1K2Rs=) 2: FhnJhngKE_OA_kXtwo70yEKISEM.crl (hash: 2AS1he/gHXpsYNYM8eDXAp1xNl+0EkIB0YvNruFo86M=) 3: OW6iAfwRRHHVt12DS1N-x_ibTBM.roa (hash: luKbZ8aRysLbTsFFTbWnFt3VENVsVo2qhv4TfsEU7TY=) 4: TrV7UsSK143wR8Oshhdn_GGZydU.roa (hash: 86oQ7VZKUGMb85AuA0wIVI2BI50mGbjGriMoWRTGVQs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1619C986780A13F380FE45EDC28EF4C842884843 Validity Not Before: Mar 12 09:01:36 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=B319ABCAA3551D39A1CDFD6EAB8273CDE8A7333C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:14:7d:12:c4:aa:67:10:26:ac:c3:7f:31: 27:e9:cd:ff:6b:22:f5:ad:16:c2:00:26:35:be:ea: a1:59:45:1f:27:2d:13:1f:35:39:ab:90:7e:3b:c6: 69:84:a3:1f:b8:90:86:32:ee:67:37:95:06:00:e7: 45:49:13:23:bf:77:d8:37:7a:30:2c:fe:9b:fe:b3: d6:61:01:4c:2e:47:a6:3b:82:01:de:e8:c1:93:76: 1d:47:ee:aa:c3:95:ee:42:f5:9f:57:64:f5:1a:be: 43:93:c4:f8:ca:6f:25:7d:d0:6f:cf:68:d6:ae:0e: a0:7a:35:64:fe:94:d9:1e:84:50:15:c0:1c:47:cd: 58:aa:29:73:2d:e8:46:43:7b:8b:0c:b1:32:96:38: 27:20:75:fd:a0:7a:5d:50:3f:87:e2:9a:50:92:3f: 9c:85:32:67:b2:ec:d4:37:fa:9c:17:c4:b6:b2:f8: c5:27:fb:24:a4:89:36:dd:f2:8f:bc:3d:a8:ce:cf: 3f:0e:e5:41:91:d0:79:d0:71:b5:de:12:07:57:7a: 59:7b:d7:40:e2:e4:b5:c1:72:41:5a:eb:07:eb:41: 5f:d0:d6:5a:80:2b:6b:ee:ba:9d:8b:d5:3a:c9:af: 4f:ea:d3:f2:64:ba:e7:a5:1f:dc:20:b3:7e:97:57: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:AB:CA:A3:55:1D:39:A1:CD:FD:6E:AB:82:73:CD:E8:A7:33:3C X509v3 Authority Key Identifier: keyid:16:19:C9:86:78:0A:13:F3:80:FE:45:ED:C2:8E:F4:C8:42:88:48:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FhnJhngKE_OA_kXtwo70yEKISEM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/FhnJhngKE_OA_kXtwo70yEKISEM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:99:c3:e6:f3:ca:80:96:22:27:db:dc:0f:56:b9:df:c5:d3: b7:0d:b3:b2:58:c0:ac:82:af:b5:77:92:d8:35:78:00:37:67: 79:8e:50:1e:ef:c4:b7:52:38:62:2e:ff:ea:a0:0a:a9:17:c3: 66:67:b2:94:45:be:62:7d:97:c1:68:be:ce:21:10:d2:29:63: 2e:77:08:ed:7f:6d:82:aa:b4:ca:22:71:d5:f4:9f:8c:06:66: 4f:44:b6:fd:c9:71:01:8f:2d:2e:b5:7e:fc:8e:b0:2b:5e:43: e6:73:3c:f9:3c:b8:63:3f:1e:69:3b:95:cc:63:a0:c4:59:85: fa:ba:5e:39:a6:12:6e:07:f9:21:96:ed:e5:88:db:32:78:e4: 63:53:6b:a3:35:78:b1:4a:08:a2:9d:cb:a8:e1:f3:58:74:40: 1b:58:c8:c3:29:ea:9b:f0:4f:76:0e:91:12:d5:fd:9b:e7:92: 01:5b:ba:f6:b7:c9:94:68:54:e6:a0:0d:d1:c2:b3:36:03:96: ba:b0:5c:09:d8:a5:12:06:21:b5:d8:f9:2d:47:af:94:d6:46: 1b:74:0f:1d:89:8c:99:90:7b:70:fd:43:12:e9:76:42:36:38: af:61:09:43:33:cc:c7:8c:2f:3b:dd:63:e5:05:16:59:e9:41: f3:4f:bd:c5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYx OUM5ODY3ODBBMTNGMzgwRkU0NUVEQzI4RUY0Qzg0Mjg4NDg0MzAeFw0yNjAzMTIw OTAxMzZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEIzMTlBQkNBQTM1NTFE MzlBMUNERkQ2RUFCODI3M0NERThBNzMzM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAxxR9EsSqZxAmrMN/MSfpzf9rIvWtFsIAJjW+6qFZRR8nLRMf NTmrkH47xmmEox+4kIYy7mc3lQYA50VJEyO/d9g3ejAs/pv+s9ZhAUwuR6Y7ggHe 6MGTdh1H7qrDle5C9Z9XZPUavkOTxPjKbyV90G/PaNauDqB6NWT+lNkehFAVwBxH zViqKXMt6EZDe4sMsTKWOCcgdf2gel1QP4fimlCSP5yFMmey7NQ3+pwXxLay+MUn +ySkiTbd8o+8PajOzz8O5UGR0HnQcbXeEgdXell710Di5LXBckFa6wfrQV/Q1lqA K2vuup2L1TrJr0/q0/JkuuelH9wgs36XV+2ZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsxmryqNVHTmhzf1uq4JzzeinMzwwHwYDVR0jBBgwFoAUFhnJhngKE/OA/kXt wo70yEKISEMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9GaG5KaG5nS0VfT0Ffa1h0d283MHlFS0lTRU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZobkpobmdLRV9PQV9rWHR3bzcweUVLSVNFTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvRmhuSmhuZ0tFX09B X2tYdHdvNzB5RUtJU0VNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJSZw+bzyoCWIifb3A9Wud/F07cNs7JYwKyCr7V3ktg1eAA3Z3mOUB7vxLdS OGIu/+qgCqkXw2ZnspRFvmJ9l8Fovs4hENIpYy53CO1/bYKqtMoicdX0n4wGZk9E tv3JcQGPLS61fvyOsCteQ+ZzPPk8uGM/Hmk7lcxjoMRZhfq6XjmmEm4H+SGW7eWI 2zJ45GNTa6M1eLFKCKKdy6jh81h0QBtYyMMp6pvwT3YOkRLV/ZvnkgFbuva3yZRo VOagDdHCszYDlrqwXAnYpRIGIbXY+S1Hr5TWRht0Dx2JjJmQe3D9QxLpdkI2OK9h CUMzzMeMLzvdY+UFFlnpQfNPvcU= -----END CERTIFICATE-----Generated at Thu Mar 12 12:25:03 2026 by rpki-client