$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft File: f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft (raw, json) Hash identifier: PyY0Jh4VvzkxGzOpMDRMaM5xekidp8x16yZEBZkivm4= Subject key identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C Authority key identifier: 7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 Certificate issuer: /CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Certificate serial: 0BAE Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft Manifest number: 0BA9 Signing time: Mon 08 Sep 2025 04:03:59 +0000 Manifest this update: Mon 08 Sep 2025 04:03:59 +0000 Manifest next update: Mon 08 Sep 2025 10:03:59 +0000 Files and hashes: 1: 3kY-W2DzzQgIYqWj02E7erQNW4c.roa (hash: nRO2jqx2JO4q4Ht0LRbD0tkIA6beoFq/ALxWOLJtGCE=) 2: _BP2LqZJMcOyQvNBpa3Q47BT6oA.roa (hash: yDSr2meIUpsVWLqpJTPM9gyFnwq268HREVuKgOGwG1Y=) 3: f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl (hash: P8UqhfGSAJWcZYQ4LvC/hHe74d5fOOim1fngbIJS98o=) 4: o20OnybD-WkAm5evvwhJNKnM-Ao.roa (hash: 2bSg/d3A1gH/o2Wn28q7GzlM0t0VvvKRE0U+8yda8Rs=) 5: oGei8yg9fd9SkrzhzuLc-JojTYY.roa (hash: 2V/6e6KOfi1svdPiW7H733/F3UuvvZUsPn4oRJj/Udc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F918CF26503D1F9BCFA77DC0AA592A57DDF8245 Validity Not Before: Sep 8 04:03:59 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=229A4488A06AE99167E29F0F5A53BEC21DE1AF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:be:bb:ac:d1:89:8b:e9:9a:bd:0b:83:83: 9c:a1:61:ea:25:ae:7c:c1:ca:6d:8b:87:e0:26:fd: c1:96:8f:48:ce:ef:af:d8:a8:d4:7f:d1:60:3d:53: 7e:5c:f8:19:fb:bc:08:e2:9b:aa:84:76:cc:8f:d1: ff:37:07:44:cd:5f:44:d8:94:2b:8e:47:8e:ee:b6: 26:a5:83:8d:22:a9:b6:b3:2e:83:84:0c:a4:1a:b3: e7:43:ab:32:25:a3:7a:d1:7e:52:6c:6c:63:d5:e3: c7:34:37:4b:81:10:bd:cf:c5:4f:be:90:ea:27:fa: 9b:52:ae:60:00:63:e1:4e:d0:3c:99:d3:e2:59:b4: b6:b3:1b:c1:0a:e2:46:e7:5a:73:f3:b7:86:c7:fc: 5c:fe:0c:29:61:b8:4d:fa:b1:fa:d5:a5:ca:2f:4e: 25:06:03:4c:89:c1:53:ff:18:2c:19:3b:74:b3:76: 1b:75:22:7e:04:00:7d:8d:60:d1:f2:33:df:ec:54: bc:2b:30:4f:8f:d7:11:21:7e:d5:32:5a:74:81:dc: 6c:68:72:4b:32:68:55:4f:6a:1c:1b:0e:7a:86:32: 8e:32:ce:2f:96:03:00:e8:f2:49:45:83:78:8a:51: e5:27:23:8d:c2:1f:b5:7f:8c:e3:eb:7b:e4:24:b1: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:44:88:A0:6A:E9:91:67:E2:9F:0F:5A:53:BE:C2:1D:E1:AF:2C X509v3 Authority Key Identifier: keyid:7F:91:8C:F2:65:03:D1:F9:BC:FA:77:DC:0A:A5:92:A5:7D:DF:82:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f5GM8mUD0fm8-nfcCqWSpX3fgkU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3255/f5GM8mUD0fm8-nfcCqWSpX3fgkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5d:dc:87:47:23:b2:68:bf:71:7f:45:7e:0a:11:f0:6e:24: a5:52:8d:b2:a3:ad:ed:75:fa:cb:bc:03:6c:af:51:25:fc:f7: 6d:22:fc:3b:9a:bc:42:77:30:c6:a4:94:f5:d5:4f:d8:ca:6f: 16:37:86:0d:ba:17:22:05:49:ad:7d:78:94:46:75:39:b6:ab: a2:7d:aa:4c:92:92:e6:d9:b7:c1:ad:4a:ba:e8:8e:c9:f4:e6: a0:2b:00:db:35:cd:7b:09:45:55:af:2d:00:6e:27:9c:2d:1c: fa:f2:f7:98:a2:64:fe:bd:61:d5:3c:ab:3e:69:cf:34:13:e2: 97:71:20:88:cd:3f:68:89:6f:bf:19:6a:c9:6b:9f:60:54:62: d2:9e:7e:0a:bc:4d:37:11:6d:b5:20:fc:2c:6a:a2:35:82:6b: f8:8b:a5:15:8d:9b:fe:fe:ca:4f:75:1e:d7:d2:92:8c:40:bc: d2:e7:9e:36:ab:81:27:e7:cc:2f:32:82:28:5e:0f:c3:cc:8f: 95:79:fc:59:4c:63:12:5c:cf:2f:53:52:ff:52:b4:96:b0:8b: a3:ad:80:e9:76:a0:c3:73:5b:69:6a:ef:2d:79:4d:50:f6:89: 21:ae:ee:c0:d1:ae:29:75:e8:40:54:c0:75:9d:cc:a2:12:3c: 96:a7:39:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICC64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Y5 MThDRjI2NTAzRDFGOUJDRkE3N0RDMEFBNTkyQTU3RERGODI0NTAeFw0yNTA5MDgw NDAzNTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDIyOUE0NDg4QTA2QUU5 OTE2N0UyOUYwRjVBNTNCRUMyMURFMUFGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhb67rNGJi+mavQuDg5yhYeolrnzBym2Lh+Am/cGWj0jO76/Y qNR/0WA9U35c+Bn7vAjim6qEdsyP0f83B0TNX0TYlCuOR47utialg40iqbazLoOE DKQas+dDqzIlo3rRflJsbGPV48c0N0uBEL3PxU++kOon+ptSrmAAY+FO0DyZ0+JZ tLazG8EK4kbnWnPzt4bH/Fz+DClhuE36sfrVpcovTiUGA0yJwVP/GCwZO3Szdht1 In4EAH2NYNHyM9/sVLwrME+P1xEhftUyWnSB3GxocksyaFVPahwbDnqGMo4yzi+W AwDo8klFg3iKUeUnI43CH7V/jOPre+QksWjNAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIppEiKBq6ZFn4p8PWlO+wh3hrywwHwYDVR0jBBgwFoAUf5GM8mUD0fm8+nfc CqWSpX3fgkUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 NS9mNUdNOG1VRDBmbTgtbmZjQ3FXU3BYM2Zna1UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2Y1R004bVVEMGZtOC1uZmNDcVdTcFgzZmdrVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTUvZjVHTThtVUQwZm04 LW5mY0NxV1NwWDNmZ2tVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE5d3IdHI7Jov3F/RX4KEfBuJKVSjbKjre11+su8A2yvUSX8920i/DuavEJ3 MMaklPXVT9jKbxY3hg26FyIFSa19eJRGdTm2q6J9qkySkubZt8GtSrrojsn05qAr ANs1zXsJRVWvLQBuJ5wtHPry95iiZP69YdU8qz5pzzQT4pdxIIjNP2iJb78Zaslr n2BUYtKefgq8TTcRbbUg/CxqojWCa/iLpRWNm/7+yk91HtfSkoxAvNLnnjargSfn zC8ygiheD8PMj5V5/FlMYxJczy9TUv9StJawi6OtgOl2oMNzW2lq7y15TVD2iSGu 7sDRril16EBUwHWdzKISPJanOQg= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:16 2025 by rpki-client