$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft File: QIfatnFyg2sIIHXOGL5eX6RdXpU.mft (raw, json) Hash identifier: jjLBhbSXG7XTd8Cn6nd3rbKgZP7LEdY7VAzuymcZcpE= Subject key identifier: CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81 Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Certificate serial: 23DF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft Manifest number: 23CE Signing time: Thu 05 Mar 2026 20:00:12 +0000 Manifest this update: Thu 05 Mar 2026 20:00:12 +0000 Manifest next update: Fri 06 Mar 2026 02:00:12 +0000 Files and hashes: 1: QIfatnFyg2sIIHXOGL5eX6RdXpU.crl (hash: gORZC1tl92IZ4BjO8ERkNe00FVVLG5VLsHKbZhPd7n8=) 2: U8443cAZnEZu7YH0qCr_5GvsUOg.roa (hash: JujS1xrBRsaYFKgle5zA1ZGOFwbzUP0rhV9Z511Y77U=) 3: UtO4YQEprzF8323IVGSBxE0OU0Q.roa (hash: JjMiiSkNMC8s5GDDFZUeAy1wm4lMh9G5+YI9vlNEu00=) 4: a33rVkqEkwXEVLEyvvpVWR84y3M.roa (hash: /TEQim2wP0MTrmnygOnE9S5AlRQLjub1jv2IHHNQ09I=) 5: gHKbb-owHdBUF4fvL6_pSMt32Zs.roa (hash: 56mvpNn9plMsrTiXaQ9HFU9FBsxkgydFNqE/+N0vCKw=) 6: i6PVNqwWSuSLHFg0TyEdYfK1YAs.roa (hash: 7jNuns72rZdmPrL4edJRrxlrEPqNZRaAgqkPY0vOoN0=) 7: y_hqEei13C9t2vq8rsaCvl9-lgs.roa (hash: fMZ/YnCG7pCMsciyeqx0E4p7I1WQhy9tpLxN3uIBH8s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 02:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9183 (0x23df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95 Validity Not Before: Mar 5 20:00:12 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=CE09CE2088BACCACECA60409C320ABA420B6A981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:d6:b0:ae:5c:af:ef:c8:10:46:06:59:c0: 2f:29:3e:47:cd:37:1f:fe:0e:4c:7f:2f:81:e0:cf: a5:c9:8b:a0:8c:b6:3e:5b:03:c0:07:73:b9:28:ae: fd:12:08:0f:cf:34:8d:3d:f4:44:74:2f:a7:0b:49: 06:54:e4:78:4e:9c:98:78:9a:1b:d6:e6:17:a8:91: e1:17:75:da:a6:8a:17:64:10:b2:23:17:42:b4:b3: 26:d5:17:b4:7f:b8:d0:77:9f:71:0c:c2:ed:ff:0d: 7f:2f:06:de:4d:cf:77:ee:5a:9f:80:59:bf:27:94: 59:02:03:6a:35:d7:64:85:09:ba:4b:63:dd:bb:38: 80:bf:5f:66:a4:f0:6c:47:13:38:66:f5:37:27:9b: a3:37:33:bd:fc:ce:c4:54:4a:ed:cd:41:ee:f2:3f: 6d:91:b3:40:01:2b:dd:d1:8b:10:36:7d:4c:d7:35: 13:80:b6:f3:b2:8f:15:39:db:eb:d0:b4:2e:18:41: 56:5a:50:0f:4b:75:c8:b8:08:6c:4b:97:63:fd:9a: 95:19:38:31:b9:fd:83:9a:6a:84:8e:bb:84:9d:b4: 2c:4f:d4:0a:e4:a2:ad:ea:61:94:83:85:67:13:85: 6e:e2:d9:03:0e:57:d7:56:97:20:ff:2e:03:38:4b: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:09:CE:20:88:BA:CC:AC:EC:A6:04:09:C3:20:AB:A4:20:B6:A9:81 X509v3 Authority Key Identifier: keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:94:bd:0a:7e:ee:7c:98:cf:29:90:09:6a:aa:0c:22:8a:e1: 70:22:2e:f6:56:3a:74:5c:4a:df:ae:4f:54:04:45:b7:f2:be: 6f:85:61:be:11:c9:76:e7:85:fe:30:58:e7:72:1e:93:b0:90: 36:5e:5d:36:8b:64:4d:9f:1e:b5:4b:6b:af:90:20:a9:e4:45: 35:7b:91:3f:6c:4c:d2:a7:e6:02:a7:7c:05:dc:98:57:64:4b: 5f:d7:5a:3e:29:23:70:59:79:d9:e8:d9:b5:ef:f9:d8:00:ab: b9:ac:d1:8c:5d:06:a2:49:20:7f:82:e8:5a:92:31:fb:f2:d2: 36:c4:34:74:2d:1a:1d:44:cd:f8:32:c6:29:56:0b:d3:10:10: 3c:1e:eb:39:bd:65:b7:08:a7:2e:da:fe:18:78:ed:90:ed:72: f2:1b:c8:2d:e2:2b:93:5e:3b:6e:4a:c8:93:ca:cf:88:85:c7: 3a:eb:70:14:bd:34:fb:6d:23:b1:f8:0a:af:53:6f:99:ec:35: 7c:1e:29:9c:84:39:04:bb:96:e6:e4:78:f5:ad:c5:29:6f:17: ff:4a:16:cf:6c:7d:d9:c6:fa:31:c5:4c:c6:7f:9d:97:b2:19: 91:a6:2e:00:64:33:60:c8:a4:48:79:b3:ed:6b:20:a8:4d:32: e1:74:94:24 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICI98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4 N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yNjAzMDUy MDAwMTJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKENFMDlDRTIwODhCQUND QUNFQ0E2MDQwOUMzMjBBQkE0MjBCNkE5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7L9awrlyv78gQRgZZwC8pPkfNNx/+Dkx/L4Hgz6XJi6CMtj5b A8AHc7korv0SCA/PNI099ER0L6cLSQZU5HhOnJh4mhvW5heokeEXddqmihdkELIj F0K0sybVF7R/uNB3n3EMwu3/DX8vBt5Nz3fuWp+AWb8nlFkCA2o112SFCbpLY927 OIC/X2ak8GxHEzhm9Tcnm6M3M738zsRUSu3NQe7yP22Rs0ABK93RixA2fUzXNROA tvOyjxU52+vQtC4YQVZaUA9Ldci4CGxLl2P9mpUZODG5/YOaaoSOu4SdtCxP1Ark oq3qYZSDhWcThW7i2QMOV9dWlyD/LgM4S4hnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzgnOIIi6zKzspgQJwyCrpCC2qYEwHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvUUlmYXRuRnlnMnNJ SUhYT0dMNWVYNlJkWHBVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABiUvQp+7nyYzymQCWqqDCKK4XAiLvZWOnRcSt+uT1QERbfyvm+FYb4RyXbn hf4wWOdyHpOwkDZeXTaLZE2fHrVLa6+QIKnkRTV7kT9sTNKn5gKnfAXcmFdkS1/X Wj4pI3BZedno2bXv+dgAq7ms0YxdBqJJIH+C6FqSMfvy0jbENHQtGh1EzfgyxilW C9MQEDwe6zm9ZbcIpy7a/hh47ZDtcvIbyC3iK5NeO25KyJPKz4iFxzrrcBS9NPtt I7H4Cq9Tb5nsNXweKZyEOQS7lubkePWtxSlvF/9KFs9sfdnG+jHFTMZ/nZeyGZGm LgBkM2DIpEh5s+1rIKhNMuF0lCQ= -----END CERTIFICATE-----Generated at Fri Mar 6 00:44:20 2026 by rpki-client