$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft File: H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json) Hash identifier: xfPsJDT9iv70OE1UdF4UWwBnIiN9Dx+TY/rjnXfOjEI= Subject key identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 040A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft Manifest number: 03F5 Signing time: Thu 05 Mar 2026 18:58:42 +0000 Manifest this update: Thu 05 Mar 2026 18:58:42 +0000 Manifest next update: Fri 06 Mar 2026 00:58:42 +0000 Files and hashes: 1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=) 2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=) 3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=) 4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: /jC65865X2AYOadZPLPIE3jDEXam633/95rDLGPeGkQ=) 5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=) 6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=) 7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=) 8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=) 9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=) 10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=) 11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Mar 5 18:58:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1: db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33: e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb: 3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1: 3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80: 16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51: 2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b: 90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96: 47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29: 0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77: 9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10: 93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad: 3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e: 76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c: c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3: cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de: 32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d6:d1:1e:48:68:41:36:ef:11:1d:58:9b:a3:de:20:55:b1: dc:da:c8:68:e8:97:4d:ff:c9:9a:47:c0:b5:52:2c:a6:12:d5: e5:49:ff:24:37:95:b3:f3:c7:61:7a:6d:9b:f2:ef:54:f7:a9: e2:af:88:17:56:ac:7e:11:e7:a9:02:58:8c:0e:bd:c8:2a:a6: 4b:f5:4e:d0:e7:3e:bd:df:0b:f7:ac:96:a2:f7:8b:3e:b4:d3: 00:12:d3:ef:ed:f0:ef:5e:4d:55:b0:a4:a0:b8:33:02:f1:14: 00:2e:42:50:70:ce:dc:d2:a1:ba:9d:30:ae:bc:7d:63:e3:0a: 39:db:64:ea:40:31:ec:4b:f4:44:52:6e:64:c1:b0:49:3a:7e: f0:05:88:26:21:55:bb:8d:7d:70:74:fa:4e:44:33:75:68:7f: 46:82:25:71:66:cb:c3:8f:7d:ac:66:1a:13:a6:0a:a5:ee:2e: c4:bd:42:92:1f:fc:96:0b:76:91:cf:b1:1f:53:1c:7e:84:72: b7:95:23:27:49:a7:1b:67:44:b4:42:e0:f8:17:b0:a8:fc:5b: e3:a1:91:9b:da:1b:dd:6d:d6:c4:52:c8:66:99:35:40:03:f1: a5:6c:fb:9a:c7:c1:ba:f6:f3:09:bc:3a:79:a6:9b:79:ce:51: 23:09:63:4c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUY1 NTJGNkU4QUMyRjk3RTE0NDdCRkFDODEwMDU5Njk1RTJCMzJBOTAeFw0yNjAzMDUx ODU4NDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDNFODFDNzVBNjMxMDRF RDBEQkQwMzAzODVBNTYzNkMwOTZDNzk2MEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBuruEPlbTMZZuctymsdteLqXWvzhAUC7JkTKzM+WUQ33ugZ0r VWGPIC7/6z8Xg68QybWPgPsJSFVh8T614h56ztbt7Kym4wC1gBYi+Fvbln3LKrxV bKLaUS+fgPoQ8jU3PhO3hRgpm5Dza0vd+b6JYQlsSMJRlkcVZ9DOfpSq/aODRkOp KQ29+1N7Y7N8iK29KLG4d5uguus8bIok6DO2LrFPEJNc3mqwoLHSjjjJLPtMrT3x F+Lbarei3qvHZebhXnZxkFepOZXmTGAAMPpEnMRlwBinAzSg3oJybtH008zWev6T 5h/7OFAo1aud3jLwelXbp+WBnOZhXVapwqDpAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUPoHHWmMQTtDb0DA4WlY2wJbHlgwwHwYDVR0jBBgwFoAUH1UvborC+X4UR7+s gQBZaV4rMqkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQx MS9IMVV2Ym9yQy1YNFVSNy1zZ1FCWmFWNHJNcWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI0MTEvSDFVdmJvckMtWDRV Ujctc2dRQlphVjRyTXFrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEHW0R5IaEE27xEdWJuj3iBVsdzayGjol03/yZpHwLVSLKYS1eVJ/yQ3lbPz x2F6bZvy71T3qeKviBdWrH4R56kCWIwOvcgqpkv1TtDnPr3fC/eslqL3iz600wAS 0+/t8O9eTVWwpKC4MwLxFAAuQlBwztzSobqdMK68fWPjCjnbZOpAMexL9ERSbmTB sEk6fvAFiCYhVbuNfXB0+k5EM3Vof0aCJXFmy8OPfaxmGhOmCqXuLsS9QpIf/JYL dpHPsR9THH6EcreVIydJpxtnRLRC4PgXsKj8W+OhkZvaG91t1sRSyGaZNUAD8aVs +5rHwbr28wm8Onmmm3nOUSMJY0w= -----END CERTIFICATE-----Generated at Fri Mar 6 00:58:37 2026 by rpki-client