$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft File: TKBmowwWxZe0k6YQetAWDYvQCSY.mft (raw, json) Hash identifier: 4ubyIyNDYAOdhPCzOnWLGTc7hQ5QEhp3beR7bQ2UAas= Subject key identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 Authority key identifier: 4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 Certificate issuer: /CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Certificate serial: 039C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft Manifest number: 039B Signing time: Thu 05 Mar 2026 19:00:42 +0000 Manifest this update: Thu 05 Mar 2026 19:00:42 +0000 Manifest next update: Fri 06 Mar 2026 01:00:42 +0000 Files and hashes: 1: TKBmowwWxZe0k6YQetAWDYvQCSY.crl (hash: rPy6i1lE9NaWqUoxgFeimwRT91Mj/a29n7dnxEFO+8Q=) 2: h_8IDYjXQYEVeDqtIisDjvwzBe8.roa (hash: 0fLzHTo7bkIJSkOlZk3sVXzsaWT/arBgec7m86urnq8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA066A30C16C597B493A6107AD0160D8BD00926 Validity Not Before: Mar 5 19:00:42 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=327CFBC75AEE907367E3332E3278BEC1F7916319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:50:b9:3f:fc:f4:ee:33:bc:2c:32:96:19: 9f:c2:06:bc:7b:41:7b:91:94:f3:63:ec:ca:90:f7: ee:15:85:99:33:89:f5:43:24:de:15:8e:ae:1b:45: 64:4e:2c:e3:e8:a6:1f:fb:87:1d:b7:b6:b2:bc:aa: c3:7f:37:80:b0:f2:24:36:d9:43:75:1e:74:e9:3a: bf:a6:c3:a1:ec:85:93:81:36:3b:85:0c:b3:3e:87: 96:4f:fb:55:ed:bf:14:af:34:2a:92:46:2b:97:67: e5:98:3f:e2:1d:08:67:da:57:aa:b3:20:7e:3b:c0: 4b:e9:86:c8:d8:64:db:4b:0e:2c:b4:c9:13:c1:d0: 47:29:8f:dc:a4:2e:fd:df:cb:9b:fc:88:70:51:af: 0b:0b:03:57:a8:fe:c7:73:f0:a3:c3:c8:bd:42:1e: 59:c0:1a:b7:87:3b:2a:ee:e1:83:b7:00:32:c2:bd: 2b:de:f4:42:e9:f4:54:37:cf:19:86:79:40:7c:93: 75:8c:b8:c1:65:26:e2:1c:c5:b0:64:61:ea:91:72: 93:a3:f2:53:e3:1d:d1:a2:3d:8e:86:ee:d8:3c:3a: fd:72:a8:5d:0a:53:82:b3:95:06:64:cd:45:b5:3d: ed:af:0d:d3:05:c3:8e:11:fc:90:f6:ac:ff:b2:87: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7C:FB:C7:5A:EE:90:73:67:E3:33:2E:32:78:BE:C1:F7:91:63:19 X509v3 Authority Key Identifier: keyid:4C:A0:66:A3:0C:16:C5:97:B4:93:A6:10:7A:D0:16:0D:8B:D0:09:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TKBmowwWxZe0k6YQetAWDYvQCSY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2789/TKBmowwWxZe0k6YQetAWDYvQCSY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6b:a2:9a:79:d6:0f:fa:36:28:b4:6d:f3:02:a3:47:01:a1: a7:7f:5b:df:df:e3:8e:07:96:1b:7f:e1:28:56:e0:92:0c:05: 5b:52:66:9e:04:3a:e3:b2:23:88:91:f4:29:13:dc:1d:fa:45: 0d:fb:b3:cf:0c:45:6b:d0:4d:3f:e6:5f:18:d5:ac:13:b9:5c: 7d:8a:ad:9b:1a:de:23:f4:28:a3:54:92:1b:af:36:a4:76:ef: f2:3e:1c:66:de:98:c5:d8:a7:4b:ae:72:66:29:60:75:e0:8f: d0:4b:97:a1:4d:db:ec:c5:6e:e6:77:ca:68:48:c2:23:a3:ca: 76:0b:67:20:af:a1:3a:e2:36:7b:5e:9f:83:88:3b:be:9c:09: 8b:1a:f5:96:9b:fc:e7:ae:15:6e:3f:43:e4:75:04:58:de:7f: b5:82:98:57:6c:4d:c0:7a:20:81:b6:6e:f6:3b:20:f6:d6:b5: 05:ab:a7:9b:0d:41:19:b9:33:8f:42:96:e0:34:6f:f7:5a:6c: 3f:72:bd:c6:7d:fa:c1:b6:f2:55:e9:a8:43:63:50:d1:d4:08: 45:b0:fe:c0:6a:e7:c5:c2:79:6a:0f:3f:13:0c:96:df:7e:61: c7:ee:35:21:56:c3:9e:63:50:29:69:3a:8c:77:8b:63:01:0f: 1d:d3:81:09 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNENB MDY2QTMwQzE2QzU5N0I0OTNBNjEwN0FEMDE2MEQ4QkQwMDkyNjAeFw0yNjAzMDUx OTAwNDJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDMyN0NGQkM3NUFFRTkw NzM2N0UzMzMyRTMyNzhCRUMxRjc5MTYzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWj1C5P/z07jO8LDKWGZ/CBrx7QXuRlPNj7MqQ9+4VhZkzifVD JN4Vjq4bRWROLOPoph/7hx23trK8qsN/N4Cw8iQ22UN1HnTpOr+mw6HshZOBNjuF DLM+h5ZP+1XtvxSvNCqSRiuXZ+WYP+IdCGfaV6qzIH47wEvphsjYZNtLDiy0yRPB 0Ecpj9ykLv3fy5v8iHBRrwsLA1eo/sdz8KPDyL1CHlnAGreHOyru4YO3ADLCvSve 9ELp9FQ3zxmGeUB8k3WMuMFlJuIcxbBkYeqRcpOj8lPjHdGiPY6G7tg8Ov1yqF0K U4KzlQZkzUW1Pe2vDdMFw44R/JD2rP+yh98/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUMnz7x1rukHNn4zMuMni+wfeRYxkwHwYDVR0jBBgwFoAUTKBmowwWxZe0k6YQ etAWDYvQCSYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc4 OS9US0Jtb3d3V3haZTBrNllRZXRBV0RZdlFDU1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RLQm1vd3dXeFplMGs2WVFldEFXRFl2UUNTWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3ODkvVEtCbW93d1d4WmUw azZZUWV0QVdEWXZRQ1NZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA9ropp51g/6Nii0bfMCo0cBoad/W9/f444Hlht/4ShW4JIMBVtSZp4EOuOy I4iR9CkT3B36RQ37s88MRWvQTT/mXxjVrBO5XH2KrZsa3iP0KKNUkhuvNqR27/I+ HGbemMXYp0uucmYpYHXgj9BLl6FN2+zFbuZ3ymhIwiOjynYLZyCvoTriNnten4OI O76cCYsa9Zab/OeuFW4/Q+R1BFjef7WCmFdsTcB6IIG2bvY7IPbWtQWrp5sNQRm5 M49CluA0b/dabD9yvcZ9+sG28lXpqENjUNHUCEWw/sBq58XCeWoPPxMMlt9+Ycfu NSFWw55jUClpOox3i2MBDx3TgQk= -----END CERTIFICATE-----Generated at Fri Mar 6 00:44:20 2026 by rpki-client