$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft File: H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json) Hash identifier: R8VqfZF+tZ6oOnOaWi7uMudEF7PsIZDaui9FeYsmqno= Subject key identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 98 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft Manifest number: 83 Signing time: Mon 08 Sep 2025 01:04:01 +0000 Manifest this update: Mon 08 Sep 2025 01:04:01 +0000 Manifest next update: Mon 08 Sep 2025 07:04:01 +0000 Files and hashes: 1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=) 2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=) 3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=) 4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: HUKNBPUKFoC1HMMBBjFDoFYV0LaIRPeTiXt+YqidywE=) 5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=) 6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=) 7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=) 8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=) 9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=) 10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=) 11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Sep 8 01:04:01 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1: db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33: e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb: 3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1: 3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80: 16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51: 2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b: 90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96: 47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29: 0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77: 9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10: 93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad: 3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e: 76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c: c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3: cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de: 32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:3e:7c:be:18:da:2f:73:c7:05:f7:26:37:fb:11:c0:2e: 98:3d:19:84:21:59:2d:1d:6f:57:d8:9e:2c:03:bd:b8:8d:30: ee:b6:d8:13:44:41:9b:85:11:39:5d:bf:d6:7a:15:c1:5c:fd: 2d:b6:28:a0:35:35:cd:fb:08:76:5a:6f:07:13:b8:6e:16:ea: 00:03:13:4c:93:8f:1c:5f:fc:43:cd:4f:ba:a0:00:cb:28:9a: 17:63:56:30:1e:73:6c:a3:c4:03:8e:6c:25:cb:45:17:f9:70: c4:7a:8f:90:4f:7e:d2:12:80:05:9c:26:2f:06:87:da:76:7b: 1c:97:b3:df:df:27:43:3f:d1:75:39:e2:82:ae:7f:b5:75:73: 8c:39:31:60:c7:f2:56:57:f3:fc:17:6d:8b:d8:dc:0d:67:9b: 0b:fd:c2:8a:27:55:64:5a:b7:2e:22:84:a8:30:bd:ca:cd:2a: 74:a4:a3:0a:29:87:b4:dd:2c:b3:b8:bc:00:19:50:da:c4:20: cb:a6:4d:33:31:bf:7e:d7:39:56:8e:b2:79:ab:24:24:ee:44: ce:02:63:55:44:68:7d:10:62:9d:4e:3d:8b:f0:f5:07:59:06: 92:34:b4:b2:eb:a6:1c:0c:29:34:3c:d5:eb:64:fe:db:fd:d8: e3:c2:f8:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY1 NTJGNkU4QUMyRjk3RTE0NDdCRkFDODEwMDU5Njk1RTJCMzJBOTAeFw0yNTA5MDgw MTA0MDFaFw0yNjA4MTYwMTUyMDFaMDMxMTAvBgNVBAMTKDNFODFDNzVBNjMxMDRF RDBEQkQwMzAzODVBNTYzNkMwOTZDNzk2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBuruEPlbTMZZuctymsdteLqXWvzhAUC7JkTKzM+WUQ33ugZ0r VWGPIC7/6z8Xg68QybWPgPsJSFVh8T614h56ztbt7Kym4wC1gBYi+Fvbln3LKrxV bKLaUS+fgPoQ8jU3PhO3hRgpm5Dza0vd+b6JYQlsSMJRlkcVZ9DOfpSq/aODRkOp KQ29+1N7Y7N8iK29KLG4d5uguus8bIok6DO2LrFPEJNc3mqwoLHSjjjJLPtMrT3x F+Lbarei3qvHZebhXnZxkFepOZXmTGAAMPpEnMRlwBinAzSg3oJybtH008zWev6T 5h/7OFAo1aud3jLwelXbp+WBnOZhXVapwqDpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPoHHWmMQTtDb0DA4WlY2wJbHlgwwHwYDVR0jBBgwFoAUH1UvborC+X4UR7+s gQBZaV4rMqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQx MS9IMVV2Ym9yQy1YNFVSNy1zZ1FCWmFWNHJNcWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MTEvSDFVdmJvckMtWDRV Ujctc2dRQlphVjRyTXFrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABi5Pny+GNovc8cF9yY3+xHALpg9GYQhWS0db1fYniwDvbiNMO622BNEQZuF ETldv9Z6FcFc/S22KKA1Nc37CHZabwcTuG4W6gADE0yTjxxf/EPNT7qgAMsomhdj VjAec2yjxAOObCXLRRf5cMR6j5BPftISgAWcJi8Gh9p2exyXs9/fJ0M/0XU54oKu f7V1c4w5MWDH8lZX8/wXbYvY3A1nmwv9woonVWRaty4ihKgwvcrNKnSkowoph7Td LLO4vAAZUNrEIMumTTMxv37XOVaOsnmrJCTuRM4CY1VEaH0QYp1OPYvw9QdZBpI0 tLLrphwMKTQ81etk/tv92OPC+Ag= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:21 2025 by rpki-client