$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft File: Iq75clj2o_y0l84acaepGCjcIzk.mft (raw, json) Hash identifier: R1G+8AmcuEw2GzQsKzgAp/jRK7OAaj8FEEAaJCun8aI= Subject key identifier: 2B:4F:9C:4E:0F:73:F3:58:55:13:8F:33:06:39:2A:1F:BB:06:57:E5 Authority key identifier: 22:AE:F9:72:58:F6:A3:FC:B4:97:CE:1A:71:A7:A9:18:28:DC:23:39 Certificate issuer: /CN=22AEF97258F6A3FCB497CE1A71A7A91828DC2339 Certificate serial: 20 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Iq75clj2o_y0l84acaepGCjcIzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft Manifest number: 1F Signing time: Wed 04 Mar 2026 16:58:15 +0000 Manifest this update: Wed 04 Mar 2026 16:58:15 +0000 Manifest next update: Wed 04 Mar 2026 22:58:15 +0000 Files and hashes: 1: AoYYwnAcS8KMMiGlwe5y5BVGSvE.roa (hash: srtZ4DM1gKafG3BNbYGZM2h4BgYnRACTG22udaAxFEo=) 2: Iq75clj2o_y0l84acaepGCjcIzk.crl (hash: eMKMxWjGn5ute/NQG6xEyMJrK4jwhvecMQF7XliEoNY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Iq75clj2o_y0l84acaepGCjcIzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22AEF97258F6A3FCB497CE1A71A7A91828DC2339 Validity Not Before: Mar 4 16:58:15 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2B4F9C4E0F73F35855138F3306392A1FBB0657E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2a:73:2b:4c:5b:de:47:bd:9e:4f:a7:87:57: 09:a3:01:7e:95:c8:58:0d:80:18:90:f6:f1:bb:58: db:9d:09:b9:48:3f:e8:62:c9:ab:60:3b:f6:9e:07: 91:7c:30:cd:51:72:e2:40:ec:ad:9b:53:7a:d2:d1: b3:26:bb:98:56:fa:a5:e6:5a:f2:20:9d:84:af:25: 2b:60:eb:18:9a:05:da:94:7a:bc:11:7e:2b:20:f9: 34:a2:6f:35:8b:73:1e:84:f2:d6:6d:d3:96:c6:47: 37:93:6e:89:92:7e:86:9f:de:0f:87:b0:e8:66:59: e1:bd:18:92:99:ef:71:56:77:4c:3a:55:e5:b2:35: 70:77:be:1b:a4:81:18:ba:86:f7:58:08:64:5a:2e: ea:36:67:05:e9:79:d3:f9:6d:f4:d4:dd:74:a6:05: 85:60:e9:ce:17:63:42:b2:da:65:fa:c2:a1:05:a2: 6f:92:94:5f:71:99:6c:d7:f9:f9:3f:13:34:25:f3: 77:65:ef:ab:f6:40:3f:cb:14:2d:13:01:9c:b3:68: a8:0a:27:e9:71:9f:50:45:2a:a8:8e:be:67:1b:36: cd:f2:5b:30:ab:ad:f9:91:a0:d8:ce:62:fc:20:19: 82:b9:e3:c2:42:9f:13:ca:77:06:68:94:16:e3:58: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:9C:4E:0F:73:F3:58:55:13:8F:33:06:39:2A:1F:BB:06:57:E5 X509v3 Authority Key Identifier: keyid:22:AE:F9:72:58:F6:A3:FC:B4:97:CE:1A:71:A7:A9:18:28:DC:23:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Iq75clj2o_y0l84acaepGCjcIzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3418/Iq75clj2o_y0l84acaepGCjcIzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:4e:09:00:a3:c7:66:aa:b9:cf:0b:04:1b:93:c9:9b:cf:85: a3:af:62:1b:51:74:5c:c6:84:70:f6:11:5e:76:39:c5:ea:09: 5b:95:3b:fa:3f:4f:bb:25:63:eb:4b:00:10:c9:d8:81:17:e1: 38:7a:a4:1e:62:42:ba:f9:84:6c:c3:db:90:c5:7c:27:e7:0d: 32:83:94:ad:23:7d:da:cf:04:31:6f:f6:5d:40:c1:0e:ea:8c: d5:da:21:05:79:e4:fe:8d:6a:38:9c:f0:38:3b:13:0e:e4:72: 4d:ce:00:4a:3a:70:cc:63:85:ee:a7:f5:23:72:e4:d8:af:77: d2:ac:26:de:3c:98:40:3e:9d:08:f7:c1:a2:8e:6a:6a:cd:7e: 7d:80:27:f1:12:1d:69:9b:e9:c3:0d:85:35:71:07:17:18:e5: a0:49:85:a9:f1:ef:d3:3a:cb:66:8c:23:d2:54:53:ae:3d:8d: 27:91:48:3d:92:07:89:f8:02:82:33:fe:0e:a7:08:b3:2c:77: 88:ed:ba:af:31:a8:90:4d:04:c9:f7:9a:50:f0:47:51:a5:8a: 26:a6:a0:57:2d:b6:99:1b:04:b5:d0:e3:12:d9:96:33:f4:88: 6c:de:7f:dd:e7:e4:d9:33:e6:b3:be:07:be:00:67:e6:f7:87: 2c:f4:31:0a -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMkFF Rjk3MjU4RjZBM0ZDQjQ5N0NFMUE3MUE3QTkxODI4REMyMzM5MB4XDTI2MDMwNDE2 NTgxNVoXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoMkI0RjlDNEUwRjczRjM1 ODU1MTM4RjMzMDYzOTJBMUZCQjA2NTdFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOwqcytMW95HvZ5Pp4dXCaMBfpXIWA2AGJD28btY250JuUg/6GLJ q2A79p4HkXwwzVFy4kDsrZtTetLRsya7mFb6peZa8iCdhK8lK2DrGJoF2pR6vBF+ KyD5NKJvNYtzHoTy1m3TlsZHN5NuiZJ+hp/eD4ew6GZZ4b0YkpnvcVZ3TDpV5bI1 cHe+G6SBGLqG91gIZFou6jZnBel50/lt9NTddKYFhWDpzhdjQrLaZfrCoQWib5KU X3GZbNf5+T8TNCXzd2Xvq/ZAP8sULRMBnLNoqAon6XGfUEUqqI6+Zxs2zfJbMKut +ZGg2M5i/CAZgrnjwkKfE8p3BmiUFuNYbcsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQrT5xOD3PzWFUTjzMGOSofuwZX5TAfBgNVHSMEGDAWgBQirvlyWPaj/LSXzhpx p6kYKNwjOTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDE4 L0lxNzVjbGoyb195MGw4NGFjYWVwR0NqY0l6ay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSXE3NWNsajJvX3kwbDg0YWNhZXBHQ2pjSXprLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQxOC9JcTc1Y2xqMm9feTBs ODRhY2FlcEdDamNJemsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApE4JAKPHZqq5zwsEG5PJm8+Fo69iG1F0XMaEcPYRXnY5xeoJW5U7+j9PuyVj 60sAEMnYgRfhOHqkHmJCuvmEbMPbkMV8J+cNMoOUrSN92s8EMW/2XUDBDuqM1doh BXnk/o1qOJzwODsTDuRyTc4ASjpwzGOF7qf1I3Lk2K930qwm3jyYQD6dCPfBoo5q as1+fYAn8RIdaZvpww2FNXEHFxjloEmFqfHv0zrLZowj0lRTrj2NJ5FIPZIHifgC gjP+DqcIsyx3iO26rzGokE0EyfeaUPBHUaWKJqagVy22mRsEtdDjEtmWM/SIbN5/ 3efk2TPms74HvgBn5veHLPQxCg== -----END CERTIFICATE-----Generated at Wed Mar 4 19:14:04 2026 by rpki-client