$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft File: rfvoMVB70kEq-LhxELshC7RrLH4.mft (raw, json) Hash identifier: tSX+CyIqWhhMNgKf+Cx+YkWc9mOl1nHrehCUORfXtDc= Subject key identifier: 8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04 Authority key identifier: AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E Certificate issuer: /CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E Certificate serial: C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft Manifest number: C1 Signing time: Thu 05 Mar 2026 19:01:37 +0000 Manifest this update: Thu 05 Mar 2026 19:01:37 +0000 Manifest next update: Fri 06 Mar 2026 01:01:37 +0000 Files and hashes: 1: rfvoMVB70kEq-LhxELshC7RrLH4.crl (hash: PMxOOChXZVhnoE9zCMwg8cw1Zv3+LzdzgzCAPmBNvj8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFBE831507BD2412AF8B87110BB210BB46B2C7E Validity Not Before: Mar 5 19:01:37 2026 GMT Not After : Jan 19 07:29:19 2027 GMT Subject: CN=8A55C8D3C2FAF9F1358C44B9E940DC67660BB104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:31:31:7d:40:77:f2:65:22:fc:57:99:66: 02:8e:b1:ad:49:f3:a7:b4:c3:02:59:b6:00:03:6e: e3:d9:72:e5:53:c5:3c:45:20:d5:92:dc:68:11:a2: 57:ac:ac:22:a5:c4:85:67:78:20:ca:d5:8a:3b:85: 84:b9:71:77:25:5b:a8:16:e3:1f:7f:0e:1b:58:cd: 26:31:46:9f:83:e4:1a:6c:ee:29:8b:8b:c8:51:cc: 5d:28:22:60:ed:4e:e5:f8:cc:de:6f:1f:2d:bd:a6: 36:14:9e:6b:de:a6:88:87:65:c2:bd:63:7a:83:c5: d4:42:4c:2b:1c:ae:5d:6c:d0:2d:ce:9e:2a:cb:b5: df:a0:87:8a:06:6b:de:1e:63:7e:76:58:f1:60:6f: 9d:04:a2:8f:b5:92:a5:4d:5e:e3:83:63:ad:94:e1: 95:d0:de:17:b8:c0:fb:e6:e0:f3:24:cb:10:aa:9a: cd:eb:aa:a5:18:5a:98:78:5b:27:80:0b:79:f2:52: 47:cb:64:3f:f4:d0:24:b8:02:01:c1:5a:0d:f3:62: 03:b7:79:91:7e:9f:6a:3d:3f:cc:f1:85:2a:86:12: a8:25:0f:fc:aa:76:bc:83:5c:25:82:ea:37:31:05: ff:8e:2a:34:c2:09:67:ef:ab:ce:1e:f6:b3:43:6a: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:C8:D3:C2:FA:F9:F1:35:8C:44:B9:E9:40:DC:67:66:0B:B1:04 X509v3 Authority Key Identifier: keyid:AD:FB:E8:31:50:7B:D2:41:2A:F8:B8:71:10:BB:21:0B:B4:6B:2C:7E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rfvoMVB70kEq-LhxELshC7RrLH4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3425/rfvoMVB70kEq-LhxELshC7RrLH4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:55:2a:23:2b:5d:4c:45:4d:16:89:c9:c2:a5:cf:dc:8f:00: 52:f2:6e:83:58:f3:ef:79:97:27:43:df:68:17:f8:15:28:19: 08:87:76:63:14:11:83:2c:c3:03:09:30:58:52:9d:82:09:0c: be:57:e6:c8:9f:4b:28:a6:b3:3c:db:95:e3:40:34:46:8d:2d: 66:17:55:1b:63:78:7f:b8:90:40:40:57:5b:93:03:e9:64:69: e2:b9:f6:10:fb:92:43:d8:33:70:9a:82:30:19:a3:31:08:29: 36:41:4e:9b:8f:78:28:86:88:14:37:db:34:a1:e8:62:3d:9a: 54:e9:b8:83:33:1f:05:b8:52:3e:d1:43:64:d0:df:39:9b:4b: 5a:66:3c:90:b2:9b:5e:67:da:51:63:9e:33:bd:20:3d:76:cb: 3f:5f:97:4c:89:c5:b9:05:bc:a0:db:e4:22:3d:9c:11:53:3b: c5:1a:06:41:e3:42:01:d6:87:24:5b:25:1c:74:ee:94:53:ac: c3:13:46:25:51:01:91:bc:f2:8d:17:f8:52:f8:07:43:96:81: 8b:e0:2f:e0:c0:6b:08:4f:88:57:13:20:e5:29:87:f0:96:98: df:24:fa:ed:ef:43:30:ea:83:d1:12:fc:fe:74:7c:cf:4a:a0: f1:4c:36:16 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG QkU4MzE1MDdCRDI0MTJBRjhCODcxMTBCQjIxMEJCNDZCMkM3RTAeFw0yNjAzMDUx OTAxMzdaFw0yNzAxMTkwNzI5MTlaMDMxMTAvBgNVBAMTKDhBNTVDOEQzQzJGQUY5 RjEzNThDNDRCOUU5NDBEQzY3NjYwQkIxMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsfjExfUB38mUi/FeZZgKOsa1J86e0wwJZtgADbuPZcuVTxTxF INWS3GgRolesrCKlxIVneCDK1Yo7hYS5cXclW6gW4x9/DhtYzSYxRp+D5Bps7imL i8hRzF0oImDtTuX4zN5vHy29pjYUnmvepoiHZcK9Y3qDxdRCTCscrl1s0C3OnirL td+gh4oGa94eY352WPFgb50Eoo+1kqVNXuODY62U4ZXQ3he4wPvm4PMkyxCqms3r qqUYWph4WyeAC3nyUkfLZD/00CS4AgHBWg3zYgO3eZF+n2o9P8zxhSqGEqglD/yq dryDXCWC6jcxBf+OKjTCCWfvq84e9rNDav6DAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUilXI08L6+fE1jES56UDcZ2YLsQQwHwYDVR0jBBgwFoAUrfvoMVB70kEq+Lhx ELshC7RrLH4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQy NS9yZnZvTVZCNzBrRXEtTGh4RUxzaEM3UnJMSDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3Jmdm9NVkI3MGtFcS1MaHhFTHNoQzdSckxINC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MjUvcmZ2b01WQjcwa0Vx LUxoeEVMc2hDN1JyTEg0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJVVKiMrXUxFTRaJycKlz9yPAFLyboNY8+95lydD32gX+BUoGQiHdmMUEYMs wwMJMFhSnYIJDL5X5sifSyimszzbleNANEaNLWYXVRtjeH+4kEBAV1uTA+lkaeK5 9hD7kkPYM3CagjAZozEIKTZBTpuPeCiGiBQ32zSh6GI9mlTpuIMzHwW4Uj7RQ2TQ 3zmbS1pmPJCym15n2lFjnjO9ID12yz9fl0yJxbkFvKDb5CI9nBFTO8UaBkHjQgHW hyRbJRx07pRTrMMTRiVRAZG88o0X+FL4B0OWgYvgL+DAawhPiFcTIOUph/CWmN8k +u3vQzDqg9ES/P50fM9KoPFMNhY= -----END CERTIFICATE-----Generated at Fri Mar 6 00:41:29 2026 by rpki-client