$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft File: 5rGE-nKUtniPAEZzeWmhCOpgUCA.mft (raw, json) Hash identifier: HWILgIXda6pMEm5am6VzZtKm0NxFAd8AVR1LevlwAO4= Subject key identifier: 96:E7:62:22:DE:BA:86:4E:37:12:32:A2:D7:9E:5C:5D:63:75:B6:A0 Authority key identifier: E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20 Certificate issuer: /CN=E6B184FA7294B6788F0046737969A108EA605020 Certificate serial: 0EDA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft Manifest number: 0EDA Signing time: Thu 12 Mar 2026 13:20:47 +0000 Manifest this update: Thu 12 Mar 2026 13:20:47 +0000 Manifest next update: Thu 12 Mar 2026 19:20:47 +0000 Files and hashes: 1: 5rGE-nKUtniPAEZzeWmhCOpgUCA.crl (hash: isCQNXiFY/wj6ofDkyzUaMeZPuoBa4kie3mPq+VLgLE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 19:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3802 (0xeda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6B184FA7294B6788F0046737969A108EA605020 Validity Not Before: Mar 12 13:20:47 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=96E76222DEBA864E371232A2D79E5C5D6375B6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:40:a3:be:35:60:7d:93:95:6a:8e:9e:9c: a7:e4:96:8b:64:6f:04:38:fd:5b:a5:57:d6:bf:5b: 10:8f:20:de:d1:da:88:4a:e4:de:d0:88:84:04:90: a3:ee:87:32:48:8c:7e:c7:7b:36:ad:89:1f:be:59: 06:c6:46:b6:f4:a2:d2:10:77:d1:14:29:24:f3:77: 03:f5:ca:09:54:21:ad:92:62:d4:82:8d:30:a3:9a: f7:c9:da:2b:7d:6c:51:00:5b:de:33:80:4c:08:16: 25:e9:2e:3c:f4:0d:42:98:2a:f9:7c:1a:c3:a3:57: 44:86:6e:25:d5:d4:b2:3a:cf:b7:43:48:ab:9a:ef: 0b:b0:92:69:5f:03:3d:73:8b:ed:7b:b2:3f:0b:9a: dd:17:5a:8d:7c:81:d5:8c:f8:25:fe:86:2e:cf:77: 55:c2:fc:8b:e2:d4:83:e1:49:bc:9a:c9:08:aa:e6: 00:c5:c7:98:86:d4:0d:1e:14:e5:34:fa:25:ce:d9: 55:f5:c8:2f:09:16:4c:32:d5:48:36:ba:56:03:67: 6e:63:88:6f:91:ab:20:b5:2d:86:d2:68:56:1e:26: 42:b2:ff:e3:4c:d2:65:3e:92:bc:ac:47:82:3f:69: d6:fc:40:3d:1b:36:56:1d:a4:a2:ea:13:f7:7e:98: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E7:62:22:DE:BA:86:4E:37:12:32:A2:D7:9E:5C:5D:63:75:B6:A0 X509v3 Authority Key Identifier: keyid:E6:B1:84:FA:72:94:B6:78:8F:00:46:73:79:69:A1:08:EA:60:50:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5rGE-nKUtniPAEZzeWmhCOpgUCA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3263/5rGE-nKUtniPAEZzeWmhCOpgUCA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:f2:27:1e:54:bd:f4:f3:a6:f4:f4:9f:e2:4a:ce:19:07: a2:6b:4f:df:5f:bb:5a:e6:82:e1:b5:3e:c9:7e:d8:ee:6f:39: a6:77:84:8a:6c:08:2b:11:7f:21:7f:4d:a7:7d:49:f0:32:12: d8:ff:52:2e:dd:3c:29:13:7f:1f:8b:3a:ff:dd:69:4c:72:eb: b2:8f:a1:d8:cd:6d:83:dd:3d:35:25:0b:dc:6e:76:4a:fa:75: 58:0e:34:60:66:1c:39:f8:49:88:d4:ef:40:b9:06:9f:a0:0c: 17:45:b2:fc:32:df:9b:da:cb:8c:c1:0b:c5:3f:c0:d5:2c:5c: 03:25:e3:18:cd:20:dd:6c:0d:c7:23:09:8c:fa:a3:45:33:a5: be:09:39:23:22:c0:11:4d:29:5e:55:41:06:51:e8:1e:41:d9: 17:3c:1e:b3:16:b9:0c:98:41:54:e4:d0:ab:8d:3c:52:fc:14: 60:87:5f:ed:22:00:31:ab:76:51:a8:6c:01:e6:ff:00:ea:0f: ec:93:6e:6c:f6:0a:cd:92:35:87:ff:4b:e5:7a:90:0d:65:b8: 72:70:b5:41:4a:a7:04:67:45:c5:7c:db:6f:3d:7d:1c:e8:95: e0:5f:03:78:f4:5b:c7:06:35:88:b1:07:e9:18:58:bd:27:55: c6:9e:48:f7 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTZC MTg0RkE3Mjk0QjY3ODhGMDA0NjczNzk2OUExMDhFQTYwNTAyMDAeFw0yNjAzMTIx MzIwNDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDk2RTc2MjIyREVCQTg2 NEUzNzEyMzJBMkQ3OUU1QzVENjM3NUI2QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgDECjvjVgfZOVao6enKfklotkbwQ4/VulV9a/WxCPIN7R2ohK 5N7QiIQEkKPuhzJIjH7HezatiR++WQbGRrb0otIQd9EUKSTzdwP1yglUIa2SYtSC jTCjmvfJ2it9bFEAW94zgEwIFiXpLjz0DUKYKvl8GsOjV0SGbiXV1LI6z7dDSKua 7wuwkmlfAz1zi+17sj8Lmt0XWo18gdWM+CX+hi7Pd1XC/Ivi1IPhSbyayQiq5gDF x5iG1A0eFOU0+iXO2VX1yC8JFkwy1Ug2ulYDZ25jiG+RqyC1LYbSaFYeJkKy/+NM 0mU+krysR4I/adb8QD0bNlYdpKLqE/d+mJC1AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUludiIt66hk43EjKi155cXWN1tqAwHwYDVR0jBBgwFoAU5rGE+nKUtniPAEZz eWmhCOpgUCAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 My81ckdFLW5LVXRuaVBBRVp6ZVdtaENPcGdVQ0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzVyR0UtbktVdG5pUEFFWnplV21oQ09wZ1VDQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjMvNXJHRS1uS1V0bmlQ QUVaemVXbWhDT3BnVUNBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ8T8iceVL3086b09J/iSs4ZB6JrT99fu1rmguG1Psl+2O5vOaZ3hIpsCCsR fyF/Tad9SfAyEtj/Ui7dPCkTfx+LOv/daUxy67KPodjNbYPdPTUlC9xudkr6dVgO NGBmHDn4SYjU70C5Bp+gDBdFsvwy35vay4zBC8U/wNUsXAMl4xjNIN1sDccjCYz6 o0Uzpb4JOSMiwBFNKV5VQQZR6B5B2Rc8HrMWuQyYQVTk0KuNPFL8FGCHX+0iADGr dlGobAHm/wDqD+yTbmz2Cs2SNYf/S+V6kA1luHJwtUFKpwRnRcV82289fRzoleBf A3j0W8cGNYixB+kYWL0nVcaeSPc= -----END CERTIFICATE-----Generated at Thu Mar 12 16:28:28 2026 by rpki-client