$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft File: GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft (raw, json) Hash identifier: IqG02Iy2noFBiAgYc89qAIe6gPaV37+G7vZxDJ0AZNU= Subject key identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD Authority key identifier: 1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 Certificate issuer: /CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Certificate serial: 0160 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft Manifest number: 0160 Signing time: Thu 05 Mar 2026 19:01:35 +0000 Manifest this update: Thu 05 Mar 2026 19:01:35 +0000 Manifest next update: Fri 06 Mar 2026 01:01:35 +0000 Files and hashes: 1: GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl (hash: VfjPz9TAoDm1feEQ+ZO87bx+5/PqB4PgrZTEcVkFT1s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A412BE4CB2DCD173C48FB99EBF07816ED64AD43 Validity Not Before: Mar 5 19:01:35 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7ECF9B376B5F206D2B200CE21F49F5E958A94CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:f7:2e:87:5b:a8:41:83:5c:7e:9c:fe:06: d5:47:58:1e:ae:84:fd:a0:74:92:88:60:ef:e0:6f: 4a:8e:62:74:4e:f5:32:a9:af:a1:a1:0e:1e:5a:f3: 00:35:2c:6e:3e:63:65:b6:6f:ae:5b:f3:46:dc:c0: ea:44:05:1c:23:a6:d1:45:d4:37:bd:d1:8c:16:9e: b4:13:78:26:53:8d:8e:59:14:94:03:28:c9:0c:47: d2:cd:8f:d4:a9:05:57:00:7a:1f:54:da:e4:83:d7: bf:97:6e:cf:92:fd:c8:4c:56:22:aa:f8:e4:a5:49: d7:f2:22:5e:ba:0e:2f:5d:42:4f:4e:27:3a:3f:6e: 87:e6:0c:8b:ac:c2:79:c6:fa:57:8a:a1:cb:fe:5a: 88:a0:2e:fd:6c:7f:bd:9a:e4:ff:84:91:76:96:46: 66:9c:6c:57:49:cd:c5:3d:b3:ea:75:8d:a5:88:d9: 2e:6c:c6:fd:e5:09:2e:0c:ff:f7:3a:4b:b5:5b:b9: c5:fe:bd:8b:4c:c8:10:38:bf:d7:a9:ad:dd:b4:61: 63:92:b7:fa:c0:35:2d:73:fd:ab:69:c8:30:ad:dd: f4:a6:b9:0e:e2:9b:57:be:e4:e5:18:25:70:ea:79: c9:4c:85:e7:ad:2f:4d:a1:9d:cd:70:5c:a4:7e:3f: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:9B:37:6B:5F:20:6D:2B:20:0C:E2:1F:49:F5:E9:58:A9:4C:AD X509v3 Authority Key Identifier: keyid:1A:41:2B:E4:CB:2D:CD:17:3C:48:FB:99:EB:F0:78:16:ED:64:AD:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GkEr5MstzRc8SPuZ6_B4Fu1krUM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1646/GkEr5MstzRc8SPuZ6_B4Fu1krUM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d1:81:89:62:56:da:d7:41:e6:22:3c:b0:38:9f:9b:21:b9: 7e:5e:c9:e2:eb:22:36:dd:74:c9:61:5f:bb:0f:b1:d7:62:d8: c7:25:66:9c:62:8d:62:67:2d:27:d7:87:f7:0c:38:48:f9:53: 33:86:00:51:8c:c7:a7:a0:28:71:15:3f:e2:1a:d6:73:73:44: 97:02:58:dd:bc:76:c7:c5:e2:71:5e:83:b7:7e:12:ea:dc:c9: 0b:95:a0:f0:19:26:cc:b2:61:69:95:d4:ec:f1:d6:15:9a:e1: ce:80:ce:72:c2:b4:7f:c8:17:1a:8b:17:a6:17:03:0e:29:42: 07:24:72:aa:e7:58:69:04:6c:14:01:fc:49:34:2b:9d:f2:65: 8c:75:70:3d:c5:61:98:42:01:71:11:ca:42:39:38:d3:68:00: b6:6c:ff:63:19:55:ab:d7:fa:ce:a0:15:82:c6:c5:67:b8:fd: 93:93:30:1a:2f:23:0c:20:0f:d3:c7:71:2f:9a:dc:d3:09:67: fb:9a:c5:d4:ab:c5:75:a1:43:cb:31:dc:15:b3:39:6d:b4:a4: 42:a8:09:b3:bc:be:9d:f9:86:10:ed:34:85:74:e5:22:56:95: 9d:3d:3b:f5:62:63:27:35:38:69:ed:ae:38:e9:15:b6:dd:d3: b7:6f:79:83 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE0 MTJCRTRDQjJEQ0QxNzNDNDhGQjk5RUJGMDc4MTZFRDY0QUQ0MzAeFw0yNjAzMDUx OTAxMzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdFQ0Y5QjM3NkI1RjIw NkQyQjIwMENFMjFGNDlGNUU5NThBOTRDQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Tfcuh1uoQYNcfpz+BtVHWB6uhP2gdJKIYO/gb0qOYnRO9TKp r6GhDh5a8wA1LG4+Y2W2b65b80bcwOpEBRwjptFF1De90YwWnrQTeCZTjY5ZFJQD KMkMR9LNj9SpBVcAeh9U2uSD17+Xbs+S/chMViKq+OSlSdfyIl66Di9dQk9OJzo/ bofmDIuswnnG+leKocv+WoigLv1sf72a5P+EkXaWRmacbFdJzcU9s+p1jaWI2S5s xv3lCS4M//c6S7VbucX+vYtMyBA4v9eprd20YWOSt/rANS1z/atpyDCt3fSmuQ7i m1e+5OUYJXDqeclMheetL02hnc1wXKR+P485AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUfs+bN2tfIG0rIAziH0n16VipTK0wHwYDVR0jBBgwFoAUGkEr5MstzRc8SPuZ 6/B4Fu1krUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY0 Ni9Ha0VyNU1zdHpSYzhTUHVaNl9CNEZ1MWtyVU0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0drRXI1TXN0elJjOFNQdVo2X0I0RnUxa3JVTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NDYvR2tFcjVNc3R6UmM4 U1B1WjZfQjRGdTFrclVNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKTRgYliVtrXQeYiPLA4n5shuX5eyeLrIjbddMlhX7sPsddi2MclZpxijWJn LSfXh/cMOEj5UzOGAFGMx6egKHEVP+Ia1nNzRJcCWN28dsfF4nFeg7d+EurcyQuV oPAZJsyyYWmV1Ozx1hWa4c6AznLCtH/IFxqLF6YXAw4pQgckcqrnWGkEbBQB/Ek0 K53yZYx1cD3FYZhCAXERykI5ONNoALZs/2MZVavX+s6gFYLGxWe4/ZOTMBovIwwg D9PHcS+a3NMJZ/uaxdSrxXWhQ8sx3BWzOW20pEKoCbO8vp35hhDtNIV05SJWlZ09 O/ViYyc1OGntrjjpFbbd07dveYM= -----END CERTIFICATE-----Generated at Fri Mar 6 00:44:21 2026 by rpki-client