$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft File: d1a8u4G6ySFoe23DL0DCd0K0b44.mft (raw, json) Hash identifier: 1qWh7Yr2CXMdCPemFE2LKguLJX8tEFaCpVD8ZAyeFYU= Subject key identifier: 43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65 Authority key identifier: 77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E Certificate issuer: /CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E Certificate serial: 1DAD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft Manifest number: 1DAD Signing time: Thu 05 Mar 2026 18:58:51 +0000 Manifest this update: Thu 05 Mar 2026 18:58:51 +0000 Manifest next update: Fri 06 Mar 2026 00:58:51 +0000 Files and hashes: 1: d1a8u4G6ySFoe23DL0DCd0K0b44.crl (hash: 53eG1+s2idTvfXqGIJUZfAZkNcYRhsF7Ny/aArNQZI0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7597 (0x1dad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E Validity Not Before: Mar 5 18:58:51 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4328078950BCC87D9439C57F9FEE8A8A36A87F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:84:7f:79:5c:b0:4a:19:5f:01:60:db:95: 0f:df:72:cd:cc:72:e9:27:40:66:aa:2c:89:05:7f: cf:3c:46:e2:98:d7:7f:74:e7:e6:f4:89:96:76:54: 71:99:30:8b:ef:8b:f5:a3:4d:47:8b:36:7c:66:0a: ce:3f:a3:0d:0f:e1:19:6d:f9:a6:c3:5f:d1:1f:70: 4e:30:46:4d:bb:46:12:dc:91:cf:e5:cc:5e:b4:54: 81:b0:b2:41:e8:58:4d:c7:75:36:6c:aa:8f:be:c1: 22:b0:87:b8:bc:a3:b4:be:8b:3e:ca:d4:b4:4c:9f: d6:40:4f:d1:2b:59:99:1a:5e:cc:a6:05:45:a1:63: 4a:82:be:ec:54:f5:b1:93:df:85:96:98:6f:f9:db: 9c:ba:94:b4:60:45:4a:36:ff:3e:c7:05:d4:5f:57: 54:14:08:1d:06:25:36:43:bf:37:6c:fc:04:54:9d: 91:eb:c7:09:38:fe:6f:d3:11:a6:3e:2a:a3:68:16: 5b:96:f5:91:d5:b8:25:5c:0d:8e:7e:c9:cc:4c:0c: 38:a1:c1:16:e4:ef:49:f4:a2:93:71:41:19:5e:cc: ba:c9:4a:1e:0f:7f:6d:ae:36:cc:3d:38:a5:88:32: 9c:a6:ca:6d:a2:47:ab:20:4a:d9:c4:1b:55:11:bf: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65 X509v3 Authority Key Identifier: keyid:77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:33:63:b7:7a:f4:15:9c:13:cd:6b:50:e7:1a:fc:a2:fc:92: c7:ac:93:90:5e:69:08:c3:e9:5e:a8:9a:ea:79:f1:02:32:4f: 2d:08:bf:37:ca:db:5f:f5:0a:7d:2f:ab:76:aa:1a:88:99:21: d2:bf:e2:8c:d0:af:71:2d:df:92:c1:77:81:7d:64:6a:3c:b8: 8d:87:5b:fd:9b:13:25:fd:d4:7d:3c:1f:ff:6e:37:bd:b9:0c: 3e:65:60:b4:ba:d6:dd:9a:b5:b5:1c:d7:ec:4d:5b:4c:8b:31: 70:49:ce:4c:f2:25:82:b5:d1:b3:0a:86:a4:f4:eb:6f:7d:dd: 9f:a3:56:ef:50:69:3f:71:cb:f2:f8:f6:7c:44:a9:56:51:77: 7b:dc:a0:b3:70:c3:d8:e9:3d:82:8c:5e:2d:70:4e:dc:5d:43: d5:b6:7d:2e:84:5e:fe:e7:e1:8f:ae:e2:fb:14:1f:b7:ae:49: 8b:aa:29:7d:ef:a5:79:3d:4c:db:22:2a:40:d8:0f:d3:1c:88: cb:d8:6d:16:b0:a2:06:6e:76:21:f0:b1:ac:0f:b2:fe:02:d3: 21:b1:66:53:a9:e7:45:43:e1:5c:f6:06:d2:76:04:64:14:f3: bc:ce:30:ce:ac:ef:38:6c:26:ef:38:5f:6b:ed:e5:18:bf:84: cb:91:fe:79 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHa0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc1 NkJDQkI4MUJBQzkyMTY4N0I2REMzMkY0MEMyNzc0MkI0NkY4RTAeFw0yNjAzMDUx ODU4NTFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzMjgwNzg5NTBCQ0M4 N0Q5NDM5QzU3RjlGRUU4QThBMzZBODdGNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnoR/eVywShlfAWDblQ/fcs3McuknQGaqLIkFf888RuKY1390 5+b0iZZ2VHGZMIvvi/WjTUeLNnxmCs4/ow0P4Rlt+abDX9EfcE4wRk27RhLckc/l zF60VIGwskHoWE3HdTZsqo++wSKwh7i8o7S+iz7K1LRMn9ZAT9ErWZkaXsymBUWh Y0qCvuxU9bGT34WWmG/525y6lLRgRUo2/z7HBdRfV1QUCB0GJTZDvzds/ARUnZHr xwk4/m/TEaY+KqNoFluW9ZHVuCVcDY5+ycxMDDihwRbk70n0opNxQRlezLrJSh4P f22uNsw9OKWIMpymym2iR6sgStnEG1URv8mBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQygHiVC8yH2UOcV/n+6Kijaof2UwHwYDVR0jBBgwFoAUd1a8u4G6ySFoe23D L0DCd0K0b44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NS9kMWE4dTRHNnlTRm9lMjNETDBEQ2QwSzBiNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2QxYTh1NEc2eVNGb2UyM0RMMERDZDBLMGI0NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTUvZDFhOHU0RzZ5U0Zv ZTIzREwwRENkMEswYjQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF8zY7d69BWcE81rUOca/KL8ksesk5BeaQjD6V6omup58QIyTy0IvzfK21/1 Cn0vq3aqGoiZIdK/4ozQr3Et35LBd4F9ZGo8uI2HW/2bEyX91H08H/9uN725DD5l YLS61t2atbUc1+xNW0yLMXBJzkzyJYK10bMKhqT062993Z+jVu9QaT9xy/L49nxE qVZRd3vcoLNww9jpPYKMXi1wTtxdQ9W2fS6EXv7n4Y+u4vsUH7euSYuqKX3vpXk9 TNsiKkDYD9MciMvYbRawogZudiHwsawPsv4C0yGxZlOp50VD4Vz2BtJ2BGQU87zO MM6s7zhsJu84X2vt5Ri/hMuR/nk= -----END CERTIFICATE-----Generated at Fri Mar 6 00:41:30 2026 by rpki-client