
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
File: ahHuR0JdFOuvL80k0gYrClK6BCw.mft (raw, json)
Hash identifier: vBHSusEALTszMI0x9/8c+VqDIuC1nce1g32re3mc9i4=
Subject key identifier: 47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Certificate issuer: /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial: 09BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
Manifest number: 0999
Signing time: Thu 05 Mar 2026 20:28:49 +0000
Manifest this update: Thu 05 Mar 2026 20:28:49 +0000
Manifest next update: Fri 06 Mar 2026 02:28:49 +0000
Files and hashes: 1: -E89D4N6_glvPRY1QjTF7U_BKPE.roa (hash: vcEwDUMVm4BKqrJYztgMB2bUw8q3Hfj0LJXlqSKeocU=)
2: -nuj7q8BFPfekf6cTVL75zjPLIY.roa (hash: vgpCVZVkUes2godlRRRkm8zUfFj/XtEv+DwM/T6idNw=)
3: 2H5WyW5cNRa8IkbGIR4Z-qQQTbA.roa (hash: JNnNIeVZkmRsSAr1xe+j+AWCwO2YjKG9rf+I0P8yogE=)
4: 2QX4LRVEDMVMZXW1VLkEjWdL6-8.roa (hash: Z068Lx8lya3yYS5SZrGWei4fx9iLESPRYnAONqv90Yk=)
5: 37xRn0YrnF65DRPpuh6BeT-Bk84.roa (hash: P/z9uhYEm1wYbj3pldGsSH9FCnVs+LU9BstxFyo/F8U=)
6: 3bI70lwePqNvxlS5-2sld6x6Xqk.roa (hash: u/ZWukSKkfsrsRUqAPuZX9GEV6Qd62PstDasL0r8cB0=)
7: 5I2N3uPkcWAOBhpxMsJYaIrwDeU.roa (hash: 44C95CbZ0Hm+vZjATMtqmTKaIxfp5f2vHE+5kgVPHqo=)
8: 7KZSSQO5r4D3Ieb-_PsGGZgYY9Q.roa (hash: ek833pGdFH247ppWxkBjs3mew0uemmG9ECDMlm7ewQ8=)
9: BiWU9KjSWHYlhOqpHg7ytieiUO4.roa (hash: 8cBM117beh7JbZeV/40GTKOrTbF1k4/KlZSnDexQrPY=)
10: Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa (hash: G25uSTkFkVSIleis6xddxYxuP7PBYQ2MMDOy3Dchr+g=)
11: GOTECNOjWTFMz6wWVdTZEPQ_9bo.roa (hash: CXuG2MW0Dueh9fQQZTyAvsvy/lzW4pf15ITKXbdrS24=)
12: GXfImQrQVd-vGxvJvjNTm6seBI4.roa (hash: XoUwNziJLfVFR+slyVD0X0FZ19KfMWePGBnPAZ+qerQ=)
13: I1h6g9HHUqsU8UmcvX-P4Cy6Zvw.roa (hash: STefs9GzuREnolUBEbWjWZ00x1Z6rhFzgy7c3Wgo2Og=)
14: IUGv5VszsiFbkyVaRYRjYtYbQyQ.roa (hash: rUpLUtXCIX+FxV03p3Y4KmAHDJ2cumgOe//Mdp0JNOk=)
15: JKY302RrnS4GbcRESgtfcZrxR24.roa (hash: 7LQt5OQigcUtAmt+UeQjr/IfjHtRcZFjhgjPGRieVPI=)
16: JXIjNxDoLCtazRHalFUI2M34jsk.roa (hash: LPSlyE3/EmZS72zVIdcaOWuoLHXefq508BqBFzd8FxI=)
17: Oj6fi7piw1Ubrgbmt80npXKCiUE.roa (hash: c/+XPr0AqlFbIvRe/JdcVOc3KuLLU384JCzSmOJHuxg=)
18: Qc5I9YO8gRrSoNRXtgZARh5TvQA.roa (hash: 3oM+ECH1Cq6aZZOT6oeuBtC615qjF1YCuVF8tJwvO4E=)
19: RSL_zN0FFnQyQVaZJF4-WKqogdY.roa (hash: DXvO675SD8xfEXc/+lnJ2lYsI41AG7WtFllLmdhVOrw=)
20: SfKZAWk9P_LG0PIpllxkQTrswjA.roa (hash: 17Tk94ELnYco5sS3XwQYc/SHceZwNMYTalAP553Jp78=)
21: Xa7lYx4yjdKh8irwlnQDp6FoQYo.roa (hash: ugDi61GfY5BE8B1OHrmov+Wim0xa0cuRzFOrmZy4640=)
22: aEodeE0cDL7eIdkRdrhbufTy4Fw.roa (hash: iiURpdfWHfravVPPVcm7aApL8Q38TsH/3ZH5R7b1MbI=)
23: aax82lF49fhC4ZBjSymUg6wnmXU.roa (hash: BRg2TVY/pB6kmzA3Mns7zw73eWP5eBBT90ByQZApmEI=)
24: ahHuR0JdFOuvL80k0gYrClK6BCw.crl (hash: 6CU4MyhLLqJcKeD0atryVa1phWIPHz2h9fS+H1zB2R4=)
25: dzJRSOB3z-IGlo4DzrSkNqTnMiM.roa (hash: fe0R0O/tDcwRGtS8LBxBn0ubT/H+sW0PL+PcZP5HPRE=)
26: eLv3MFDVraelBBgoaDBIEYb50p0.roa (hash: h55xcnKdGmAQHQ25EsAReGi182ULEtw5dKs0RGvOcPM=)
27: m-J4x3FhwTFullWg0U9W94xWX9I.roa (hash: HbhSeKqnZ9B9cPRJpASyX8XI3m9N2CfuC0NBikgxnSA=)
28: nDCLHmUt3JVRgT6s_8N51-CfKTE.roa (hash: uVh4qpdS1FD9FIzpVSXGPHPGna47y7/938mMBYgEWlg=)
29: nKHeBSVGdyRfQOOOfcEj5uvwi0g.roa (hash: Z0L9gxHeBRd/5rGnqDsV53/qHwWy7jlaiwrdJZRzXIM=)
30: nWUiEeNb0oGR9s9FY55-bA6Wq0M.roa (hash: 070k/DBpGXR4lUMTIbd0F7G4H6U8Z+VJrEQmVOhvFzo=)
31: r4AjqVwkDSUNoMgxyQtmIVkoQMc.roa (hash: PM2P1MhouU6OeP4L+yxJmedYMEmSPCxVcGJ0McbUX18=)
32: rrA4HX9wI06YzDfUNoBMWBEAntE.roa (hash: b2oYNQI4mVmF18W9pDJVinzcqA636gK/cMbgTVoSXmc=)
33: tfA4ZtzqRLLsQ9xj8BKhq6Zf1X0.roa (hash: 2siDA33wNcAwT+PBYClWTFXdJvwUdqbj/OCHOOQgEng=)
34: z7EdKWXvbzDkAQ0BpxSFYeSme88.roa (hash: mxeP27boYzCK388c+ZuCcXHKiSjA7ukzDko9gL6sIEQ=)
35: zm20gbQdWTBscs12_-FUO6uMCjs.roa (hash: 4rrJKCCnRlJ45dhdTL3pH8T5ioKEphCwutNN3pWyt7M=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 02:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2491 (0x9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Validity
Not Before: Mar 5 20:28:49 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=478FED130BDC2123D01BE44F5FCF5F0B56062347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:80:81:70:aa:fb:0e:8d:47:e8:26:06:8e:
3b:c5:98:f2:74:a7:54:35:ae:e6:59:f8:76:52:b9:
29:39:d4:09:0b:2a:1f:7c:4c:f6:3d:42:95:76:8f:
5f:34:94:19:8f:7e:ac:0f:e1:23:5c:0d:62:fa:96:
9e:df:bd:c9:86:9b:6a:7a:81:d2:1c:ef:c4:a8:8f:
b9:b2:ce:84:b8:1c:04:7a:07:3b:5f:69:67:c0:85:
59:9f:90:f5:21:b1:0e:cc:22:64:7d:92:42:b3:86:
2e:99:75:a4:d3:27:cf:58:4e:61:b9:73:76:94:98:
b7:1e:ae:b5:33:10:36:7d:3e:45:ae:19:d6:44:3e:
2c:44:15:29:40:bc:0f:af:f7:52:a5:44:4b:7d:65:
29:64:c0:2c:0f:60:71:7f:a3:c2:fa:bd:11:25:2b:
3b:76:63:49:9f:aa:77:b3:0a:4d:eb:5e:1a:1f:e0:
0b:ca:4a:9d:69:a6:37:88:cc:80:84:7d:22:c7:8e:
25:94:10:0f:48:2e:6f:b2:fa:04:d4:c6:b9:86:e8:
a4:1e:f1:15:85:a0:da:c0:d4:c2:93:e8:e4:3a:95:
e5:38:32:e0:e0:ca:9e:10:8c:80:0a:e1:6f:b7:19:
be:f7:89:ed:18:ae:00:3b:26:44:e6:72:86:7f:01:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:ED:13:0B:DC:21:23:D0:1B:E4:4F:5F:CF:5F:0B:56:06:23:47
X509v3 Authority Key Identifier:
keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:b1:e7:85:d5:de:ce:10:32:27:ae:3f:09:7b:bd:b7:f2:
ab:1f:91:c3:05:7e:ba:9f:1c:e9:5a:5b:5e:8a:47:64:f8:41:
7d:48:ec:95:60:d7:79:4b:a4:83:ba:c1:94:42:17:6b:d2:9c:
4c:d8:a6:45:db:a9:ca:43:00:1f:e4:bc:a4:e3:ca:eb:52:ed:
68:af:6d:2d:9c:2f:8d:d2:02:19:e7:65:fb:a1:7c:64:fe:59:
6d:d9:00:de:f6:a3:c7:d3:b4:4b:b2:34:72:fc:02:bc:8d:e2:
ab:4c:1f:0f:24:21:6a:ef:6c:38:23:e0:7f:10:66:36:21:c8:
47:bf:f5:c9:f3:cd:bc:67:c8:da:aa:cb:7e:27:59:18:78:3a:
be:92:6f:95:a0:ef:d3:29:2e:a3:c3:26:96:c1:16:6f:39:5e:
b2:53:82:6f:8e:dd:47:16:d5:85:ee:51:d3:69:eb:d5:6a:96:
d8:95:65:e0:f0:20:3e:09:01:28:2c:f6:af:58:f2:7f:6f:ea:
7d:27:75:06:d9:c0:0c:f2:42:95:46:8c:2a:d8:e7:0a:0b:2c:
b2:40:c8:d1:eb:ac:c3:5d:de:0d:18:3f:7c:f2:57:1a:32:02:
86:c5:de:07:f7:8b:e7:09:1d:03:ba:67:6a:7a:e0:ab:0a:b0:
4f:85:0e:53
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICCbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEx
MUVFNDc0MjVEMTRFQkFGMkZDRDI0RDIwNjJCMEE1MkJBMDQyQzAeFw0yNjAzMDUy
MDI4NDlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQ3OEZFRDEzMEJEQzIx
MjNEMDFCRTQ0RjVGQ0Y1RjBCNTYwNjIzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTj4CBcKr7Do1H6CYGjjvFmPJ0p1Q1ruZZ+HZSuSk51AkLKh98
TPY9QpV2j180lBmPfqwP4SNcDWL6lp7fvcmGm2p6gdIc78Soj7myzoS4HAR6Bztf
aWfAhVmfkPUhsQ7MImR9kkKzhi6ZdaTTJ89YTmG5c3aUmLcerrUzEDZ9PkWuGdZE
PixEFSlAvA+v91KlREt9ZSlkwCwPYHF/o8L6vRElKzt2Y0mfqnezCk3rXhof4AvK
Sp1ppjeIzICEfSLHjiWUEA9ILm+y+gTUxrmG6KQe8RWFoNrA1MKT6OQ6leU4MuDg
yp4QjIAK4W+3Gb73ie0YrgA7JkTmcoZ/Ab3pAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUR4/tEwvcISPQG+RPX89fC1YGI0cwHwYDVR0jBBgwFoAUahHuR0JdFOuvL80k
0gYrClK6BCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy
Ni9haEh1UjBKZEZPdXZMODBrMGdZckNsSzZCQ3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2FoSHVSMEpkRk91dkw4MGswZ1lyQ2xLNkJDdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjYvYWhIdVIwSmRGT3V2
TDgwazBnWXJDbEs2QkN3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBABFXseeF1d7OEDInrj8Je7238qsfkcMFfrqfHOlaW16KR2T4QX1I7JVg13lL
pIO6wZRCF2vSnEzYpkXbqcpDAB/kvKTjyutS7WivbS2cL43SAhnnZfuhfGT+WW3Z
AN72o8fTtEuyNHL8AryN4qtMHw8kIWrvbDgj4H8QZjYhyEe/9cnzzbxnyNqqy34n
WRh4Or6Sb5Wg79MpLqPDJpbBFm85XrJTgm+O3UcW1YXuUdNp69VqltiVZeDwID4J
ASgs9q9Y8n9v6n0ndQbZwAzyQpVGjCrY5woLLLJAyNHrrMNd3g0YP3zyVxoyAobF
3gf3i+cJHQO6Z2p64KsKsE+FDlM=
-----END CERTIFICATE-----
Generated at Fri Mar 6 00:53:57 2026 by rpki-client