$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json) Hash identifier: f1i0Yb/6ragkRHImzVoiOMo8G0yNqQW+3Ad+ACxmIiY= Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Certificate serial: 0EFA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft Manifest number: 0EFA Signing time: Thu 05 Mar 2026 20:00:21 +0000 Manifest this update: Thu 05 Mar 2026 20:00:21 +0000 Manifest next update: Fri 06 Mar 2026 02:00:21 +0000 Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: p79YEqWseP2n7Nycul769cI2yb/TLhIrUCOoRdkhQAs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Validity Not Before: Mar 5 20:00:21 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2: c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23: 42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12: ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67: 06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32: 16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1: 4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f: c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a: e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42: ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6: 90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7: d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61: 17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa: e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f: 53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7: 45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b: c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 X509v3 Authority Key Identifier: keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3d:f5:6a:07:e5:ac:ff:fd:a3:f0:66:52:66:47:70:3b:82: c1:44:c1:7c:67:34:02:92:47:fa:2f:5f:70:15:cc:5b:03:78: f7:51:25:dd:1c:4b:fc:bd:7a:fa:c3:0b:5f:35:19:15:26:ec: 26:f7:5b:b1:1d:4d:c1:82:6b:74:a6:34:8c:5e:9b:ee:77:c9: b1:e1:1f:88:36:41:fc:a7:1d:6e:61:9e:45:1d:5d:b7:04:18: f2:56:41:01:79:e5:5a:c0:88:25:98:69:23:35:2b:35:ad:0d: f0:8c:a3:70:73:76:29:92:72:cb:cb:1c:92:b7:79:8d:f4:89: 3b:6b:6c:e2:1c:60:45:6b:3a:e6:96:ff:6a:30:da:5e:a3:16: c5:ae:12:f6:13:29:e7:84:fb:15:92:24:f8:c5:8d:ad:5b:a3: c5:99:5b:8a:f3:88:43:73:82:5f:08:bb:45:d7:40:b7:71:0f: 90:9e:dd:35:cc:b5:3d:42:88:3e:93:3a:62:ad:b4:2c:9b:49: 9f:fb:6d:1c:70:d8:cf:55:f5:e4:00:46:d5:ba:f6:a5:15:fa: 3e:b7:36:80:5e:ba:5e:13:80:35:26:16:eb:1e:ea:67:9d:3f: de:35:43:19:cb:02:3d:5e:2a:87:16:50:79:3d:e9:d7:f2:4c: 9d:58:16:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQw QUFEQzM1MTg1MDY1RDg3QkM0RjIwRDhDNEE2Qjg4OTMxQThCOTAeFw0yNjAzMDUy MDAwMjFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAyMkRGQ0M4QjhDNThC Q0I2Q0E1MkMzOTdENEY3MjFBRUVGQjIyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMjYKAhb9J7vuKEs0wsO+uG3YvORxQISX3ym1I0Ip/m7sPan2 mLvJTD9PErrWiXeSJVv6rxb/xVxOZwZboGSsqJv36u96RKj9Mha11ygfoqqEkRVk qDv6sU9zwwvAQ4ykFlnX5k7ef8TntNv1f8XpOHTZy5LTGuA+op9mXZEcpJG/Bwim QqtBRAXrWhTC3YB4OFDV1pDs5Ycsi7PHROvkReVtt9LCqvkICixDMifyk3fdYRfs Pt+9UK6lGUpapQv5+uRriC6SAr6NImyYm/8en1MHtzKRFNGOE/voBhaO10VY1jlX ProX4a1zrIUIm8EAaP+cKysJiRHMw/63eIfjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAi38yLjFi8tspSw5fU9yGu77IvMwHwYDVR0jBBgwFoAUjQqtw1GFBl2HvE8g 2MSmuIkxqLkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9qUXF0dzFHRkJsMkh2RThnMk1TbXVJa3hxTGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pRcXR3MUdGQmwySHZFOGcyTVNtdUlreHFMay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvalFxdHcxR0ZCbDJI dkU4ZzJNU211SWt4cUxrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIo99WoH5az//aPwZlJmR3A7gsFEwXxnNAKSR/ovX3AVzFsDePdRJd0cS/y9 evrDC181GRUm7Cb3W7EdTcGCa3SmNIxem+53ybHhH4g2QfynHW5hnkUdXbcEGPJW QQF55VrAiCWYaSM1KzWtDfCMo3BzdimScsvLHJK3eY30iTtrbOIcYEVrOuaW/2ow 2l6jFsWuEvYTKeeE+xWSJPjFja1bo8WZW4rziENzgl8Iu0XXQLdxD5Ce3TXMtT1C iD6TOmKttCybSZ/7bRxw2M9V9eQARtW69qUV+j63NoBeul4TgDUmFuse6medP941 QxnLAj1eKocWUHk96dfyTJ1YFio= -----END CERTIFICATE-----Generated at Fri Mar 6 00:51:35 2026 by rpki-client