$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json) Hash identifier: TzoJ4TcqWYleLDGjHhIFmuM1d4asyyIX6rYRrpDJ6SE= Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Certificate serial: 9F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft Manifest number: 9D Signing time: Mon 08 Sep 2025 01:04:04 +0000 Manifest this update: Mon 08 Sep 2025 01:04:03 +0000 Manifest next update: Mon 08 Sep 2025 07:04:03 +0000 Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=) 2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=) 3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: m4CKw5Sxwck3sOga9t0EM9kDCjU59uk6u7GyYj6Ph68=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Validity Not Before: Sep 8 01:04:03 2025 GMT Not After : Aug 7 05:14:01 2026 GMT Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f: f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a: b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d: ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d: 40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8: b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c: d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32: da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed: 5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5: b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53: b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af: 43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac: 5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5: 61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73: 22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6: bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99: 4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D X509v3 Authority Key Identifier: keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:13:96:f2:9e:ac:cf:e1:b5:bc:da:2b:7d:f3:ce:47:16:e6: 88:6a:52:4c:67:9c:4f:0a:12:f8:9f:40:3f:79:b9:95:b6:8f: 70:27:e7:29:2f:dc:6a:99:c7:ad:60:6f:23:68:8d:71:da:9d: a8:39:91:84:71:0d:15:cc:2e:b7:1e:e6:df:36:cb:cb:2f:5d: 0f:00:a4:44:60:83:c1:20:89:7f:15:31:eb:57:27:66:12:ca: 0d:a4:63:cb:8e:fd:d3:af:ec:47:c7:cb:51:19:d9:b2:21:d1: ab:d9:46:b2:d0:ff:af:71:47:5e:30:4b:88:c4:d2:fe:e5:68: 7e:e5:04:9e:d8:d6:2d:b5:43:82:f8:ef:1a:88:83:31:20:51: 4e:1b:47:e6:4e:30:6c:21:40:2e:78:4c:4e:ad:2d:27:67:31: c3:a0:0c:03:e7:53:7e:ee:29:c6:9c:81:46:4b:41:00:f4:40: 3a:e1:a8:1b:2a:1a:65:6c:24:ef:d9:06:75:c4:83:a0:5d:ea: c1:21:81:0e:bf:fe:de:8e:5e:31:81:31:14:6b:ca:cd:b9:7f: 89:a5:f5:79:0a:18:fa:11:04:27:07:9a:92:31:85:3c:ed:c1: 17:4a:ad:6d:f6:21:be:ca:f7:21:94:72:0d:ad:76:dc:e1:eb: 56:c1:33:eb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNTA5MDgw MTA0MDNaFw0yNjA4MDcwNTE0MDFaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3 NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S 84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+ lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJYTlvKerM/htbzaK33zzkcW5ohqUkxnnE8KEvifQD95uZW2j3An5ykv3GqZ x61gbyNojXHanag5kYRxDRXMLrce5t82y8svXQ8ApERgg8EgiX8VMetXJ2YSyg2k Y8uO/dOv7EfHy1EZ2bIh0avZRrLQ/69xR14wS4jE0v7laH7lBJ7Y1i21Q4L47xqI gzEgUU4bR+ZOMGwhQC54TE6tLSdnMcOgDAPnU37uKcacgUZLQQD0QDrhqBsqGmVs JO/ZBnXEg6Bd6sEhgQ6//t6OXjGBMRRrys25f4ml9XkKGPoRBCcHmpIxhTztwRdK rW32Ib7K9yGUcg2tdtzh61bBM+s= -----END CERTIFICATE-----Generated at Mon Sep 8 06:01:45 2025 by rpki-client