$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft File: Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft (raw, json) Hash identifier: UvD0pfiGZi82WIaOPXtZpBVDvPSLRXf5OYnEPaE1+8o= Subject key identifier: 5B:62:CF:F4:F2:DA:D3:3E:A2:7E:8C:3A:5E:DC:F5:33:45:C0:5A:25 Authority key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 Certificate issuer: /CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Certificate serial: 01B8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft Manifest number: 01B5 Signing time: Thu 12 Mar 2026 09:01:28 +0000 Manifest this update: Thu 12 Mar 2026 09:01:28 +0000 Manifest next update: Thu 12 Mar 2026 15:01:28 +0000 Files and hashes: 1: 7qqfCczVpqzPAfV0rFSiOaInTZo.roa (hash: He/3RBMb/hdGBTYVCyG/HVT/wnrhQ3TGFKE110yMwhM=) 2: Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl (hash: HG2HRhgaTfFj8DhvUCLd2BnEwaMct75NSPVkQWXzfiw=) 3: zyd9sNtiUGWk-rPMxkaAwd-jMjU.roa (hash: gJ4z3p20OCkd5sduSBhdXm57HvoUXImlRN+QEWanG2A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 15:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Validity Not Before: Mar 12 09:01:28 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=5B62CFF4F2DAD33EA27E8C3A5EDCF53345C05A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:9d:79:41:41:05:98:86:d6:7d:6c:95:6c: 5f:44:23:23:51:d9:6e:da:c9:b3:b1:2d:fc:e9:e2: f5:e0:be:d6:b2:90:ef:27:c5:aa:29:ec:10:fb:2a: 56:d1:a8:27:d6:03:99:49:44:3c:ef:ad:8d:1f:1b: ac:6c:50:43:f4:6c:d0:dc:a7:f4:94:66:81:f7:b2: 30:8a:cb:fb:17:6f:5f:3a:44:85:d4:dc:d3:7d:6b: d2:4f:56:f5:da:df:e2:46:81:53:c4:55:1d:44:8d: 02:56:cd:3a:c5:28:bd:c2:18:93:d6:47:2d:ca:c6: 8d:06:79:05:66:e8:4d:fa:60:a6:8d:18:a4:98:37: 65:34:87:92:e9:2d:93:25:18:a7:61:91:1c:af:08: 5c:20:d7:76:f8:63:d4:36:a8:95:55:c0:dc:c4:8c: 5a:49:bf:47:d1:f5:0c:f7:fa:49:e4:d3:c4:fc:a1: a4:0c:eb:c1:29:db:e3:20:ba:8f:17:98:cd:8c:d4: 7c:a7:8d:44:dd:82:61:f4:ac:7b:61:92:66:fe:68: 83:a1:8e:0b:de:9b:cc:b4:f9:a2:2b:7e:d8:00:db: 30:56:f7:bd:e0:e4:74:4e:f6:2b:c7:cf:45:73:1c: 53:b0:fd:4f:f0:54:9a:b8:c9:dd:9d:51:5b:f1:56: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:62:CF:F4:F2:DA:D3:3E:A2:7E:8C:3A:5E:DC:F5:33:45:C0:5A:25 X509v3 Authority Key Identifier: keyid:43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:55:39:88:14:73:24:5f:f9:65:ed:e5:ba:9f:18:ac:3c:cc: 36:94:95:00:1d:1a:4d:10:ae:29:0b:d7:5a:98:49:85:1b:1c: 78:a1:9d:66:4a:8a:4e:8a:a2:60:ec:87:4e:55:38:c3:ef:e9: a3:54:5f:92:56:be:69:e5:b9:de:ae:6f:0f:35:67:61:51:24: 45:af:7b:fa:5d:28:61:7c:81:0f:1d:d6:fd:ef:4b:d5:2d:0e: f2:4d:0a:e0:ae:97:f8:27:10:88:51:38:6a:50:f6:9a:f0:8d: 7c:31:c7:a9:f4:77:1b:eb:81:fa:5e:23:a6:4f:cb:03:f3:86: 2d:ef:72:ba:ed:5d:39:9d:54:fe:86:9b:b9:77:06:4c:a3:7f: e2:52:6a:a2:af:a2:1d:0f:2a:6c:ec:d1:cc:7f:2a:c3:29:1c: 68:c6:a1:5f:e1:d5:a1:89:85:00:0b:3d:2f:8a:f8:74:8e:1b: 45:da:75:bc:21:cf:1d:27:c2:45:6f:0e:be:3d:0a:e0:2c:2a: 52:7d:01:57:24:5c:12:3f:89:a1:ec:29:fa:96:19:25:e8:1e: 38:62:53:d6:c4:a1:78:0b:a6:dd:ba:cd:fc:43:3c:09:77:86: e5:b7:50:e1:ca:56:b7:6d:ff:c7:9b:d3:e6:7d:b9:f2:a5:25: ac:f2:33:50 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDNF NkZEQUIwRjE1MEVFOUM0M0NGNUEyQkI3NjU4OEE3RTVGODUwMjAeFw0yNjAzMTIw OTAxMjhaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDVCNjJDRkY0RjJEQUQz M0VBMjdFOEMzQTVFRENGNTMzNDVDMDVBMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV0515QUEFmIbWfWyVbF9EIyNR2W7aybOxLfzp4vXgvtaykO8n xaop7BD7KlbRqCfWA5lJRDzvrY0fG6xsUEP0bNDcp/SUZoH3sjCKy/sXb186RIXU 3NN9a9JPVvXa3+JGgVPEVR1EjQJWzTrFKL3CGJPWRy3Kxo0GeQVm6E36YKaNGKSY N2U0h5LpLZMlGKdhkRyvCFwg13b4Y9Q2qJVVwNzEjFpJv0fR9Qz3+knk08T8oaQM 68Ep2+Mguo8XmM2M1HynjUTdgmH0rHthkmb+aIOhjgvem8y0+aIrftgA2zBW973g 5HRO9ivHz0VzHFOw/U/wVJq4yd2dUVvxVntzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUW2LP9PLa0z6ifow6Xtz1M0XAWiUwHwYDVR0jBBgwFoAUQ+b9qw8VDunEPPWi u3ZYin5fhQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ny9RLWI5cXc4VkR1bkVQUFdpdTNaWWluNWZoUUkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1EtYjlxdzhWRHVuRVBQV2l1M1pZaW41ZmhRSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTcvUS1iOXF3OFZEdW5F UFBXaXUzWllpbjVmaFFJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALhVOYgUcyRf+WXt5bqfGKw8zDaUlQAdGk0QrikL11qYSYUbHHihnWZKik6K omDsh05VOMPv6aNUX5JWvmnlud6ubw81Z2FRJEWve/pdKGF8gQ8d1v3vS9UtDvJN CuCul/gnEIhROGpQ9prwjXwxx6n0dxvrgfpeI6ZPywPzhi3vcrrtXTmdVP6Gm7l3 Bkyjf+JSaqKvoh0PKmzs0cx/KsMpHGjGoV/h1aGJhQALPS+K+HSOG0Xadbwhzx0n wkVvDr49CuAsKlJ9AVckXBI/iaHsKfqWGSXoHjhiU9bEoXgLpt26zfxDPAl3huW3 UOHKVrdt/8eb0+Z9ufKlJazyM1A= -----END CERTIFICATE-----Generated at Thu Mar 12 12:25:28 2026 by rpki-client