$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: ReqMh4ZECc+e8odTXREPPhVoFqxF/sbod/htq1hTecw= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 08BE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 0896 Signing time: Tue 09 Sep 2025 00:04:29 +0000 Manifest this update: Tue 09 Sep 2025 00:04:29 +0000 Manifest next update: Tue 09 Sep 2025 06:04:29 +0000 Files and hashes: 1: 4WRRBH6wwnIHQhmsfeELuG1Sut4.roa (hash: +Z0bYeHwoGhjvi7LcdZsVFiByFw2ndbQoTq7aD/IyXE=) 2: 4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa (hash: zQDbIzBL7JFOraq+WEHch+Ugn5UI8PmmuiSPrnpYF6c=) 3: 52qJ28LFMGksnZdOvY3NHDKAkPo.roa (hash: 5PUAqFsR0VKvHBewzPenXF12bSJH5iHPZkZ+kof/w0g=) 4: 5sXds976gdDjTvTJvvzlaPF4tns.roa (hash: hsde4QjZmRocuLBhVgqhnenAWzLsv4ghS42xJghfkFQ=) 5: 88UWKDoFzQYMKGF0TwNoEpNbRbg.roa (hash: AvsmW6AeexZCua22EOu9L0XeyLAUUb2nLCYOsWpQy3Y=) 6: 8quQTrVFBsNNsD1G9SKOaAfk3eY.roa (hash: vVpNgEngEb4v8duWH/sOTCiwN1J7qA9QoTh7m+Otcno=) 7: DfOM2s-N7JxO0x90eKPITUNfgo8.roa (hash: 3peMwvBiVSgFn5hZMWiD6cFdO1fmCvYp7pKNTzRWoP4=) 8: EtgRH0CW7H_3T8VzfRA74VAC9rU.roa (hash: g0qR5oI3IGoFzwTdmP+Dqqgxu4q3upIXq/ZhObzqa2A=) 9: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: 2x/FS2nqTUgJ+8kFZlV1lH7/71dQeOXsrE/q0wb5NDU=) 10: HAB3qrzke3hwLOzuIbAVbftkZrk.roa (hash: 1KFZm3phURVjPNdXhqsy4NKFRt028oJTtHy67Un4v14=) 11: HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa (hash: igDgEoqbm9xJIF1mphuETv9quhsY6Xfhqwm4UrPtPMw=) 12: HnRuKgNC5PtSCwgnHRE4jEinoGk.roa (hash: RtSmcZyQZMSPEyvg5q84y6hefhYQiGXaziDVDrnqgDk=) 13: KczSviXnBvy-P-UbHyM1Uju1qXM.roa (hash: K5WHld8+N4EylO/2qEOvksH0fcR7ueMwsQOaIHDErXQ=) 14: Kwjs-P3D3YMnLUhcdu5MEX6cOsc.roa (hash: UiI4TlDWIpuezS4Dbm9cl3AgiERyEMt2p2UwXA9aY60=) 15: M9G958ynnKlta1JlYdgrEtU51Rk.roa (hash: i8nfwXN10nn98cnUMZFgBAhxSDuzv38O3WWAu1Z5Fj8=) 16: NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa (hash: YEw+9TR/n5kLaLSjnzDR3NtcTzcqYz1thgdIeylQ4V4=) 17: XkxfITJS6KXNjdcO4MPaIzhZHAY.roa (hash: c3157+aWAodGnOB+sDYTlohIqzEMle+d0FP3WlWZyPk=) 18: YR7TMEGbVotojv7SFRzgF0eRkk4.roa (hash: 7jtbaxWf2uMWNcVIVnr0VNtY3e9VC27AJNKy8dKhQV0=) 19: bI4LLxofUt_ZROTf3Ub1ab2lnVI.roa (hash: tFMPN6Lx2R1pXXeobEI0u0bkRjvq5vlbaTbVC3XJetU=) 20: ee7NSPQXz7nasw04yXcDex8VXgE.roa (hash: 4u1b2SXnI4j3Neqxm+gogo/2y2+tTzrb+nSSqbd2z+M=) 21: iNKgJh10VKyPgqeuEpZXUo5M22M.roa (hash: ahGrQyC4pgZKgoXcJn8s+38PUfiu1kGN8OAdLTvIFzk=) 22: ieGtJYxfMkpjaTVHoDKB_MN3RzY.roa (hash: /Bmmm7crcze+c7BPrZxo6jJftYmQTM3NjlSZ7Udluu4=) 23: j62s71G-cZ3fjPif5hiGxzQcpI4.roa (hash: xrm120S0nhNiznUYDg7E1X/4dsjXKyElBZ6rTL9Zrn0=) 24: wT_FguQFk15QfkZ4ASXJuEypJ68.roa (hash: NTrLnkfSG/rPk8YngYTzeDFWT14vpnpFNvlPz4xk2CM=) 25: x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa (hash: nA0g6q/JceSYJ2jvm2w0zQOFkRrhUtlWcTj5Q8V+XS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Sep 9 00:04:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:b4:64:8c:8b:3e:07:5c:fe:ef:ae:22:ee:ae:f8:5b:be: 95:89:ab:8f:a4:46:1d:4f:5f:52:71:94:cd:2d:4c:8c:88:64: b0:f2:85:34:2a:d6:43:b0:5c:0e:f1:f7:55:3b:e5:64:b5:42: a0:f7:b9:6a:9c:c7:2a:5f:a9:54:60:1f:5e:1f:4b:52:90:f8: 70:51:17:51:86:c7:58:c8:1f:cc:58:2a:d0:3e:bb:1d:13:35: 34:45:62:e8:cd:d0:ff:c5:03:fb:36:6f:a1:1c:8a:6f:02:1f: e8:a9:82:6e:2f:2e:b5:ef:f5:4b:6d:89:57:85:62:2e:2f:50: ff:77:95:f7:e8:ca:42:c0:90:2c:b4:82:66:b6:90:a8:65:0d: 46:48:6f:43:07:0c:14:7a:40:4b:a9:ad:fe:32:8a:dc:6d:fc: 52:b2:87:9b:f6:1b:b7:ed:e8:37:1e:70:70:41:b0:13:65:7e: 47:8b:7d:9b:37:bd:88:18:b6:40:61:18:d7:a8:29:af:37:f3: fd:a3:6b:58:96:22:36:e0:8b:11:ec:f3:fa:c5:71:d3:0b:fb: 57:32:48:60:83:fa:b8:6b:e1:74:50:8b:41:54:c3:47:db:60: f0:cb:e7:9f:56:f1:9f:5c:71:d7:36:40:57:df:fc:de:b3:30: 7e:94:2b:9c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA5MDkw MDA0MjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADH0tGSMiz4HXP7vriLurvhbvpWJq4+kRh1PX1JxlM0tTIyIZLDyhTQq1kOw XA7x91U75WS1QqD3uWqcxypfqVRgH14fS1KQ+HBRF1GGx1jIH8xYKtA+ux0TNTRF YujN0P/FA/s2b6Ecim8CH+ipgm4vLrXv9UttiVeFYi4vUP93lffoykLAkCy0gma2 kKhlDUZIb0MHDBR6QEuprf4yitxt/FKyh5v2G7ft6DcecHBBsBNlfkeLfZs3vYgY tkBhGNeoKa838/2ja1iWIjbgixHs8/rFcdML+1cySGCD+rhr4XRQi0FUw0fbYPDL 559W8Z9ccdc2QFff/N6zMH6UK5w= -----END CERTIFICATE-----Generated at Tue Sep 9 04:26:09 2025 by rpki-client