$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft File: tw-ay_EAFGtabH5NDOLP3_sXgA0.mft (raw, json) Hash identifier: X3vtM/vSI53EjjOXv5/hatz2ATIUXZfKS+jIMKKDejY= Subject key identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98 Authority key identifier: B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D Certificate issuer: /CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Certificate serial: 0845 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft Manifest number: 083F Signing time: Thu 05 Mar 2026 19:01:10 +0000 Manifest this update: Thu 05 Mar 2026 19:01:10 +0000 Manifest next update: Fri 06 Mar 2026 01:01:10 +0000 Files and hashes: 1: 3MKzLGOz3QmJsUndF8T6ajoTyZo.roa (hash: 4L896dvdD7gisLHXlUGakF+hzI7CPBXQcnhbqjLHgUg=) 2: MF6XO1h5tWyAEoasS2UP8bCpZIE.roa (hash: KGjqOIiGrk5B0gayHXAIuw7MZZLoMtK6K+t0VnpthfQ=) 3: PyDtdEk7SDdInPirvHSeb0S9dyI.roa (hash: hrsai+CzpB3uEKss+zEh/wsa25ZUdMenLdtvBxZP5eY=) 4: QNmaUZ9odBUKr7-GsJabU8_NGAo.roa (hash: /2fTnVqeoPrkZWX481e++x3S/mGdslWVB79maUC1fA0=) 5: YP6HNtYypvunlSoIog3xO4pPY4s.roa (hash: UmvJWiELK+WAWticL7Y4JK3MuC5DFGT24tTfsDjGddw=) 6: tw-ay_EAFGtabH5NDOLP3_sXgA0.crl (hash: 6EdexZKBWVJLlNaakKlJuIn5A0PUrAEhGIbg81rcTKE=) 7: xLHVFN7qgJxmVLccIkF7b6UCWvM.roa (hash: 0y2VZNE8QE1kcUhFGsB7s+y1CW28fjzlrS/rQsX8m2Y=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F9ACBF100146B5A6C7E4D0CE2CFDFFB17800D Validity Not Before: Mar 5 19:01:10 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=54D82569197583EE89B0F404B8F55339789F8598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:e3:97:e5:d6:e5:7b:7a:46:f9:98:ea:1f: ab:e8:67:42:de:c4:6e:6c:bd:f2:10:47:c7:39:80: 53:f3:3e:d9:9a:d5:c7:31:45:93:93:ee:25:13:97: bb:87:0a:15:20:8b:a7:87:49:f1:43:17:4f:06:4b: 44:29:12:14:69:17:78:83:a2:3b:94:54:77:2a:a0: f0:86:3d:50:52:06:7c:e3:4c:4c:2e:ba:89:34:ba: 48:d7:2a:87:92:cc:65:e0:eb:4c:8b:5c:ef:a6:30: 44:f2:de:a2:7b:1e:31:bd:d8:79:96:04:1f:74:c8: 6a:42:60:ff:4d:6f:63:36:92:df:f3:55:dd:90:e2: 65:01:3f:e2:88:91:1a:5a:63:74:c7:b1:e3:a8:d8: 9a:4d:ab:e2:24:b8:77:58:f2:db:25:53:a6:22:aa: e5:d2:29:32:54:3c:2b:0c:53:be:dc:31:14:db:ec: c1:00:6e:64:b8:3b:87:f7:f6:3a:bf:c1:0d:50:71: 2b:86:e6:3e:bd:b7:12:02:98:84:6d:e1:42:ea:08: f2:15:47:4a:55:9a:2e:5c:02:3f:ac:cc:de:39:52: e7:0d:d0:78:22:b6:b1:b3:13:a7:5f:73:27:b4:97: e8:8f:0b:b2:9f:b0:a6:1b:4c:50:e2:56:05:09:0b: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:25:69:19:75:83:EE:89:B0:F4:04:B8:F5:53:39:78:9F:85:98 X509v3 Authority Key Identifier: keyid:B7:0F:9A:CB:F1:00:14:6B:5A:6C:7E:4D:0C:E2:CF:DF:FB:17:80:0D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tw-ay_EAFGtabH5NDOLP3_sXgA0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3345/tw-ay_EAFGtabH5NDOLP3_sXgA0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:8b:ca:a4:f4:f3:06:03:04:69:e4:de:8b:5e:a4:99:fa:3a: f8:d9:a4:e0:e4:e2:51:a3:0c:9e:fb:d9:68:f0:e3:a0:3a:80: 5d:47:48:7d:96:4b:a0:2b:72:85:fe:c0:76:93:dc:84:12:53: a2:06:2d:45:4d:a1:1b:2d:d8:13:0c:26:3d:91:26:83:b9:31: fb:88:94:17:b5:d8:83:a7:86:f8:27:c1:b4:9b:d0:49:c8:8e: 19:e7:f3:8f:54:bd:a6:df:6c:9c:76:cf:cc:58:43:74:c4:02: a1:69:5c:c6:3f:7a:88:8d:9b:23:83:19:71:44:06:4b:ff:96: 59:76:c1:40:4f:5b:22:5a:98:2f:99:22:d9:25:fb:6c:69:6c: d8:10:73:23:99:62:80:75:90:fc:64:ad:c6:ea:be:97:71:5f: 8f:8c:aa:6a:23:7a:32:b5:96:76:a3:cd:ee:14:8a:ea:4c:32: 09:ed:b3:af:b6:95:d4:9f:cb:56:ca:0e:6e:36:96:8b:f9:9c: 9d:fd:6f:64:ac:ef:32:f6:c2:f2:38:88:f0:e3:ee:2b:aa:9b: a8:e3:48:94:25:9d:2a:05:6d:bd:5f:1c:72:96:b8:df:73:76: f7:43:8f:f2:e7:8d:de:b4:34:75:72:9d:2d:40:4d:5e:90:0b: a5:ba:8c:b9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjcw RjlBQ0JGMTAwMTQ2QjVBNkM3RTREMENFMkNGREZGQjE3ODAwRDAeFw0yNjAzMDUx OTAxMTBaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDU0RDgyNTY5MTk3NTgz RUU4OUIwRjQwNEI4RjU1MzM5Nzg5Rjg1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFEeOX5dble3pG+ZjqH6voZ0LexG5svfIQR8c5gFPzPtma1ccx RZOT7iUTl7uHChUgi6eHSfFDF08GS0QpEhRpF3iDojuUVHcqoPCGPVBSBnzjTEwu uok0ukjXKoeSzGXg60yLXO+mMETy3qJ7HjG92HmWBB90yGpCYP9Nb2M2kt/zVd2Q 4mUBP+KIkRpaY3THseOo2JpNq+IkuHdY8tslU6YiquXSKTJUPCsMU77cMRTb7MEA bmS4O4f39jq/wQ1QcSuG5j69txICmIRt4ULqCPIVR0pVmi5cAj+szN45UucN0Hgi trGzE6dfcye0l+iPC7KfsKYbTFDiVgUJCwNRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUVNglaRl1g+6JsPQEuPVTOXifhZgwHwYDVR0jBBgwFoAUtw+ay/EAFGtabH5N DOLP3/sXgA0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM0 NS90dy1heV9FQUZHdGFiSDVORE9MUDNfc1hnQTAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3R3LWF5X0VBRkd0YWJINU5ET0xQM19zWGdBMC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNDUvdHctYXlfRUFGR3Rh Ykg1TkRPTFAzX3NYZ0EwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBANKLyqT08wYDBGnk3otepJn6OvjZpODk4lGjDJ772Wjw46A6gF1HSH2WS6Ar coX+wHaT3IQSU6IGLUVNoRst2BMMJj2RJoO5MfuIlBe12IOnhvgnwbSb0EnIjhnn 849UvabfbJx2z8xYQ3TEAqFpXMY/eoiNmyODGXFEBkv/lll2wUBPWyJamC+ZItkl +2xpbNgQcyOZYoB1kPxkrcbqvpdxX4+MqmojejK1lnajze4UiupMMgnts6+2ldSf y1bKDm42lov5nJ39b2Ss7zL2wvI4iPDj7iuqm6jjSJQlnSoFbb1fHHKWuN9zdvdD j/Lnjd60NHVynS1ATV6QC6W6jLk= -----END CERTIFICATE-----Generated at Fri Mar 6 00:54:44 2026 by rpki-client