$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: FhjzYOc+LDCrvT4vHXs5sAidkqfzs/c9L54FEqCtCkE= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 018A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: 017C Signing time: Tue 09 Sep 2025 02:03:34 +0000 Manifest this update: Tue 09 Sep 2025 02:03:34 +0000 Manifest next update: Tue 09 Sep 2025 08:03:34 +0000 Files and hashes: 1: 0vXteHc651-iGtEnYAlVi-M2f4o.roa (hash: F2CMw2t7dheHN9vVzrGGD4LZ1xy37GXKvI3rpHWp1GY=) 2: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 3: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 4: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 5: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (hash: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=) 6: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 7: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (hash: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM=) 8: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 9: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: V0KmxO6Uf9qTHdRAU6p4dXfs7LKIP/rvhczyB0wyG+c=) 10: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 11: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 12: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) 13: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (hash: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI=) 14: vngUZyTpb2vIiTJqJGIcWBTP5AM.roa (hash: mnCD/psbdkuG8KujuBLdihNjlwEJvUObk3olUpIz7vE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Sep 9 02:03:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:7d:dd:b0:8b:2c:3b:85:13:77:25:f0:b1:41:2c:0f:3e: 0b:ee:7d:62:a9:d3:0b:3a:43:d4:2b:8f:6c:6a:2b:a3:11:39: 3b:22:0d:ab:87:f5:73:9e:fe:41:72:47:4e:42:e5:db:9f:84: ce:ea:da:5e:04:b4:26:43:08:ff:00:93:b8:c2:93:ae:79:d6: f9:1a:3f:6d:56:59:38:9e:cc:42:54:dc:55:1a:9c:fe:cf:9f: e2:eb:cf:2b:0f:c9:a4:98:78:30:0c:70:92:a2:4a:95:32:f2: d8:3d:48:77:51:f1:41:6b:21:61:42:79:4c:19:35:fe:56:56: e1:69:6f:48:60:af:23:7d:76:18:d0:1a:23:22:c6:84:82:f9: 1e:a5:8f:4e:c2:33:b8:a9:b2:ad:94:e7:9a:c0:3b:c4:1e:91: 3d:d8:bd:ae:29:e7:8e:84:79:a8:38:b5:89:a6:c1:0d:fe:05: e3:f2:9f:28:51:83:02:b7:d1:3f:79:97:f6:4d:d9:8d:87:e5: 33:a9:a3:36:02:da:78:99:41:6e:dd:d2:2d:1c:21:a0:2b:6a: 00:a8:bc:2d:90:99:17:f0:6e:a0:54:42:e0:2b:13:3a:aa:86: 48:b7:f5:52:20:57:74:6e:f6:6e:70:e2:bd:66:59:fb:61:b3: e6:6b:15:7d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA5MDkw MjAzMzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI0NUYzODlDMDc0RTJF MjExQ0ZDMTcwRUYwMkE0RkIwQTNEQUE3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDiEchHQOEQLFcYerhUtxhF/6LyiKgiHPAdRKs2hMJCR1Ea+n v42oIoaeW6nt3VFXvc94ErB452K6NPUE2qgXxSUh9tA99hmawq5eULPKZyOd9gvD MK9J7olD4Bqqt2RK62/eoYomNQoadFN/e700zu8k2BOqN1SAC1+s5+nef9fgu1vh 0O/5uw+Mw+432ycRS2ZH1w2vQrBtoMRTb92fc0w4DFuWUA3MZzs1k77M0WD6TcHd E81N097hwM+dbbiq2/B2NDJ2fvr5nk6Xiy/0Dxi2sb48+x24e77i5zu7Rph7TVm5 p1gCXHQSLIX6yYLwdemSSb0ldF34R1z6GxfTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJF84nAdOLiEc/BcO8CpPsKPap2UwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvYzlJUjFiSVE0N0dX QlUyM0dKTFk0NHBPQ2U4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAn2fd2wiyw7hRN3JfCxQSwPPgvufWKp0ws6Q9Qrj2xqK6MROTsiDauH9XOe /kFyR05C5dufhM7q2l4EtCZDCP8Ak7jCk6551vkaP21WWTiezEJU3FUanP7Pn+Lr zysPyaSYeDAMcJKiSpUy8tg9SHdR8UFrIWFCeUwZNf5WVuFpb0hgryN9dhjQGiMi xoSC+R6lj07CM7ipsq2U55rAO8QekT3Yva4p546Eeag4tYmmwQ3+BePynyhRgwK3 0T95l/ZN2Y2H5TOpozYC2niZQW7d0i0cIaAragCovC2QmRfwbqBUQuArEzqqhki3 9VIgV3Ru9m5w4r1mWfths+ZrFX0= -----END CERTIFICATE-----Generated at Tue Sep 9 05:48:24 2025 by rpki-client