$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json) Hash identifier: KkynCS5oWkUqE6YjhmFlmfJDRWrIn3Ng3v3HWxVocMg= Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 0574 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft Manifest number: 0572 Signing time: Thu 05 Mar 2026 18:59:48 +0000 Manifest this update: Thu 05 Mar 2026 18:59:48 +0000 Manifest next update: Fri 06 Mar 2026 00:59:48 +0000 Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=) 2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: nT3X3OYAq2LMprRMW/t78mrg8ZYthGO0xcAIiPE/tv4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: Mar 5 18:59:48 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc: 8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68: fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1: fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d: 85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7: 81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83: 4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20: 0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b: d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2: df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea: eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3: bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4: 24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44: cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29: fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d: f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af: 0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:54:8b:69:b4:a5:a2:2c:8c:15:fd:23:78:2a:04:85:52:31: 62:78:db:b6:41:e5:f4:13:43:74:76:c5:7e:4e:bd:e6:c2:cf: 37:7d:9d:75:e7:4d:c3:09:32:09:73:36:c2:3e:60:90:86:10: 73:3e:00:2f:7c:2e:d6:a1:ee:35:7c:cf:12:40:f4:b6:a0:ee: 2c:38:76:39:c3:ae:1b:bd:16:f1:88:bb:d1:f1:fb:f5:04:f2: 2a:56:24:42:95:b2:b4:d8:19:01:81:de:9b:02:1d:bd:b8:27: 52:38:d4:db:ac:ec:de:36:a7:8a:b3:8f:af:b8:fa:71:04:32: 28:7c:6b:99:c5:4f:8e:5b:81:42:c9:ea:7d:7f:53:6a:e4:14: 8f:bc:a3:a1:48:a2:a4:40:19:59:1d:7b:ec:1e:09:fa:6f:ad: ff:7f:7d:61:ab:57:51:41:48:bc:52:39:8a:90:d8:0a:1f:11: 6f:17:e0:8f:a4:cc:58:b8:a8:6e:2d:40:83:97:30:3e:27:49: d5:dd:3a:b2:3c:81:48:58:38:52:76:3a:eb:03:61:92:53:bc: ff:df:fd:49:dd:20:80:cd:76:d0:fe:f0:28:45:1f:60:2f:5d: 34:1e:71:aa:b7:3e:09:90:ce:9c:6b:86:4f:e1:0d:d5:ec:94: a7:34:ac:92 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNjAzMDUx ODU5NDhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAFUi2m0paIsjBX9I3gqBIVSMWJ427ZB5fQTQ3R2xX5OvebCzzd9nXXnTcMJ MglzNsI+YJCGEHM+AC98Ltah7jV8zxJA9Lag7iw4djnDrhu9FvGIu9Hx+/UE8ipW JEKVsrTYGQGB3psCHb24J1I41Nus7N42p4qzj6+4+nEEMih8a5nFT45bgULJ6n1/ U2rkFI+8o6FIoqRAGVkde+weCfpvrf9/fWGrV1FBSLxSOYqQ2AofEW8X4I+kzFi4 qG4tQIOXMD4nSdXdOrI8gUhYOFJ2OusDYZJTvP/f/UndIIDNdtD+8ChFH2AvXTQe caq3PgmQzpxrhk/hDdXslKc0rJI= -----END CERTIFICATE-----Generated at Fri Mar 6 00:52:11 2026 by rpki-client