$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json) Hash identifier: IRWidkJfH5UInY+z3136eXhiyY7X02Tk8dX2Jxe2qYA= Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 2060 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft Manifest number: 2020 Signing time: Sat 23 Aug 2025 21:03:22 +0000 Manifest this update: Sat 23 Aug 2025 21:03:22 +0000 Manifest next update: Sun 24 Aug 2025 03:03:22 +0000 Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=) 2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=) 3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=) 4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=) 5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=) 6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: ebI0axybE28SHUUVMIbmlGA6RUtfJdlc3eIWuIKcmlU=) 7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=) 8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=) 9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=) 10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=) 11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=) 12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=) 13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=) 14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=) 15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=) 16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8288 (0x2060) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Aug 23 21:03:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27: 46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1: 70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30: 20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12: 48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d: 84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07: 9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c: 82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b: 68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54: bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb: 6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e: 23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13: 7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e: b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c: 0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10: 24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23: c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5e:58:51:f4:dd:16:c0:9c:27:8f:59:f4:5a:96:d8:e5:69: af:64:39:e9:5c:1d:10:f6:27:31:ef:b1:6a:cf:2f:50:25:ab: 16:94:dd:1e:f6:7d:83:64:7b:d6:68:13:81:b5:3a:87:6e:88: 56:09:cf:ba:49:ef:fd:64:cb:50:ca:9b:1d:1a:e3:3c:82:e4: 59:15:13:78:4a:85:7f:af:bf:82:c5:7a:59:bf:45:4f:ef:39: ff:0d:02:7e:b9:22:d3:57:6d:0e:1d:3a:60:7e:98:7c:c9:be: f2:73:30:87:bf:86:69:31:7d:13:6c:d3:ed:7b:62:d8:c9:97: b2:70:62:fe:d3:e4:d9:85:0f:06:24:2d:9c:77:79:ac:94:f8: 6a:9e:e7:7a:dd:d5:8d:8e:b5:23:83:0f:26:b7:60:50:2d:fb: 70:4e:b2:70:c8:ee:59:99:b9:77:b3:34:81:e0:d9:f1:ac:99: fa:fb:ad:5c:a7:d2:36:82:2b:b6:25:71:d7:62:e6:54:cc:8e: e5:59:58:74:4e:e0:4d:e4:e2:26:53:77:25:5a:3f:93:c6:bd: 68:8c:da:36:48:f8:61:76:80:4c:d0:43:d9:80:74:3e:39:70: 4e:56:20:5a:b1:9f:b9:d0:a9:c5:4c:ea:4f:d4:e9:31:cf:be: 11:a8:3e:7d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTA4MjMy MTAzMjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY0RDQ4NThENkI5NUE3 QkJGOUY1OEE2RTgyMjRGRTBFOEFCRjYxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1PXArqJAcrnpFJwOJ0ZfhNWVNZYcLf7B42ny4XCEFOnCZ/+W BCp6RjejMCCQEVHgQqQmsrd9Fxx2Ekijj6NmXqqxocHd5Hp+TYTthOiHSVkDcaEk R57XB5uVrvjIPLx3020L4h5WLIJgvhHc7nnuzZfERtRkG2gNEYFeES7I0iFj2Z7H VLvhpxYdDpR0PPlLEDtD627Sd39XRkJX4URnmQREniNGLAjONIpgXBB661UVE39N 2H/45eg4Mfy9GzF8Tredm+IlJn+OIqCM5AlejArgQKUL4yqDhVSwaxJDECSeoLe3 hsP5cyfXNlRZI8P5NKaZbqTSo84Svy7NLLMlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZNSFjWuVp7v59YpugiT+Doq/YZYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvU1VTYlJzcnM1MTBj VllCaE9VMjBBcmJRQ2I0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAKleWFH03RbAnCePWfRaltjlaa9kOelcHRD2JzHvsWrPL1AlqxaU3R72fYNk e9ZoE4G1OoduiFYJz7pJ7/1ky1DKmx0a4zyC5FkVE3hKhX+vv4LFelm/RU/vOf8N An65ItNXbQ4dOmB+mHzJvvJzMIe/hmkxfRNs0+17YtjJl7JwYv7T5NmFDwYkLZx3 eayU+Gqe53rd1Y2OtSODDya3YFAt+3BOsnDI7lmZuXezNIHg2fGsmfr7rVyn0jaC K7Ylcddi5lTMjuVZWHRO4E3k4iZTdyVaP5PGvWiM2jZI+GF2gEzQQ9mAdD45cE5W IFqxn7nQqcVM6k/U6THPvhGoPn0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:05 2025 by rpki-client