$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft File: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft (raw, json) Hash identifier: /WFrZ7m0lPbuC6ztw19xXaPveMwNd3Mc2J8K634jmS0= Subject key identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Certificate serial: 4F70 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft Manifest number: 4EBC Signing time: Sun 07 Sep 2025 23:02:24 +0000 Manifest this update: Sun 07 Sep 2025 23:02:24 +0000 Manifest next update: Mon 08 Sep 2025 05:02:24 +0000 Files and hashes: 1: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (hash: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY=) 2: ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl (hash: QTPVAbgkEXFHhEL7Md1JOW2gx6z8Q8mU2A/uRd5noEs=) 3: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (hash: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y=) 4: I-uQGrh2Q6qg89jrFtkRmzENoe0.roa (hash: Depiq44HBl39EzMJPK1i1nQ9abG5TAtbWX5wWww6tCA=) 5: LiWYQlfqSr9wMOKBXQGhtyFiVRk.roa (hash: efqng/VZ0qObM6O+6R64v60Zms/fZuugEkKrT05KSfU=) 6: fjW9kpn-jSDef962IrBiDPJFxcI.roa (hash: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM=) 7: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (hash: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I=) 8: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (hash: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY=) 9: xybbBi6KI2WCBlZPUU_EJEFp33o.roa (hash: uKhpfiSFW/JaJzaa26g7fqIjZfggQQRITCSjYAE3m1U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20336 (0x4f70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971 Validity Not Before: Sep 7 23:02:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=D7ECBFBA3B3C9A538DBC445F799DC1575CFF0C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:05:cd:b3:1d:34:3a:ba:16:76:0f:10:84: da:ec:7a:92:3c:e4:fb:c9:af:55:95:23:d0:69:ea: da:54:df:3a:2b:5b:d0:b8:79:db:a9:d4:cf:b0:08: 02:0d:6f:69:7c:71:9f:43:68:7a:2d:68:42:80:b8: 25:b7:ef:07:43:7b:82:9c:99:df:c0:61:4d:ad:b7: 59:13:d6:8c:ee:eb:23:71:43:79:6a:d0:9c:0b:61: a0:fa:b6:0d:51:5f:9c:79:fc:f2:0c:78:96:8a:dc: fc:4a:8e:68:db:b2:17:e5:50:af:e3:39:d3:e5:2a: 7e:46:4a:eb:ba:72:5f:6d:31:24:61:dd:a9:d1:f1: 67:eb:d3:76:4a:9c:ff:e7:8c:32:5f:cd:19:e8:72: 5a:9d:18:c3:9a:8d:02:48:07:aa:b9:ee:0d:54:4c: a5:30:e2:61:bd:e7:c2:41:8d:03:e1:87:53:4a:33: 02:e3:40:54:81:53:f5:cd:01:f1:c1:1e:36:16:da: 93:d1:36:13:3d:e5:88:b3:29:37:51:a7:9a:70:9e: 17:33:db:52:19:35:90:0b:3e:f7:24:01:15:bb:98: 98:7e:70:79:85:27:66:96:55:18:c6:02:e7:e1:2a: cb:8f:b1:04:40:b0:1e:bd:ec:65:13:c7:14:c3:4f: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EC:BF:BA:3B:3C:9A:53:8D:BC:44:5F:79:9D:C1:57:5C:FF:0C:2F X509v3 Authority Key Identifier: keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:f8:af:87:aa:61:3e:62:15:64:cf:d3:ab:50:b1:d0:cc: da:15:d6:9c:96:dd:26:29:a9:63:82:cd:42:60:2a:9b:cf:d7: b3:0d:5c:2c:92:4e:b7:28:72:7c:75:43:c9:4e:39:7f:24:a9: e9:a0:a0:fd:7f:3e:74:a1:a7:28:63:24:af:fa:89:8a:69:36: d7:6f:17:fd:2f:40:20:bc:d4:9b:bb:04:f1:ad:3f:3b:04:81: a9:fd:f5:6a:98:4d:f5:64:b5:c5:79:a3:bb:be:3a:a4:b6:aa: 68:ee:cf:1e:81:ee:5f:ec:95:fa:44:88:da:61:25:15:a9:2d: 87:21:67:c7:00:4b:1f:e8:8a:a5:5e:4a:4b:b8:e9:6f:a9:05: 94:8b:b4:33:99:f6:6c:ed:7c:ea:c8:66:8e:d1:cd:41:57:a0: 87:19:e4:61:d0:c0:fc:ec:ea:ce:8f:46:b0:36:20:e5:70:5e: eb:c9:1e:0a:26:ac:d9:0e:61:e9:38:60:81:f2:2f:0b:bd:0b: 2b:50:47:bf:5b:37:d5:50:dc:c5:f8:41:b6:f4:9b:07:43:00: f6:52:59:55:b5:cb:fa:e0:71:d4:d2:2a:6e:a3:d5:ed:62:39: f9:58:48:ab:de:d9:d5:44:6c:33:5f:41:ab:b1:9e:ad:a0:0b: 42:44:cf:b7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICT3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTA5MDcy MzAyMjRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEQ3RUNCRkJBM0IzQzlB NTM4REJDNDQ1Rjc5OURDMTU3NUNGRjBDMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhfwXNsx00OroWdg8QhNrsepI85PvJr1WVI9Bp6tpU3zorW9C4 edup1M+wCAINb2l8cZ9DaHotaEKAuCW37wdDe4Kcmd/AYU2tt1kT1ozu6yNxQ3lq 0JwLYaD6tg1RX5x5/PIMeJaK3PxKjmjbshflUK/jOdPlKn5GSuu6cl9tMSRh3anR 8Wfr03ZKnP/njDJfzRnoclqdGMOajQJIB6q57g1UTKUw4mG958JBjQPhh1NKMwLj QFSBU/XNAfHBHjYW2pPRNhM95YizKTdRp5pwnhcz21IZNZALPvckARW7mJh+cHmF J2aWVRjGAufhKsuPsQRAsB697GUTxxTDT5jDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU1+y/ujs8mlONvERfeZ3BV1z/DC8wHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU /Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvQVRZRUdpOVQ4bXRD RFd2VV9RNmNMWGN5Q1hFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEkE+K+HqmE+YhVkz9OrULHQzNoV1pyW3SYpqWOCzUJgKpvP17MNXCySTrco cnx1Q8lOOX8kqemgoP1/PnShpyhjJK/6iYppNtdvF/0vQCC81Ju7BPGtPzsEgan9 9WqYTfVktcV5o7u+OqS2qmjuzx6B7l/slfpEiNphJRWpLYchZ8cASx/oiqVeSku4 6W+pBZSLtDOZ9mztfOrIZo7RzUFXoIcZ5GHQwPzs6s6PRrA2IOVwXuvJHgomrNkO Yek4YIHyLwu9CytQR79bN9VQ3MX4Qbb0mwdDAPZSWVW1y/rgcdTSKm6j1e1iOflY SKve2dVEbDNfQauxnq2gC0JEz7c= -----END CERTIFICATE-----Generated at Mon Sep 8 00:02:58 2025 by rpki-client