$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft File: H1UvborC-X4UR7-sgQBZaV4rMqk.mft (raw, json) Hash identifier: meCvlJxw9XFusMo6twf2LjAQZwhRYL77P3f8NcYThEs= Subject key identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Certificate serial: 4D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft Manifest number: 38 Signing time: Sat 23 Aug 2025 16:03:16 +0000 Manifest this update: Sat 23 Aug 2025 16:03:16 +0000 Manifest next update: Sat 23 Aug 2025 22:03:16 +0000 Files and hashes: 1: 3brUlupLFNOJTrxKML94I8BrEHQ.roa (hash: Rz7xzH0RnlhaMB3xgZiF+Dwazd6Z1dnQJ+fN8v1gBhI=) 2: 3kux-K6eUv7YAIUgje7JO7SopDM.roa (hash: jhS1alVkDqD1AWD2PpZ4vAb8U/e4KUb5DEUiw2f/Bec=) 3: G-_EUah9OXXnRYOJw30MerVDppU.roa (hash: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=) 4: H1UvborC-X4UR7-sgQBZaV4rMqk.crl (hash: rG95ZyAgeay5jP/ftMCCqJUhcG1s0mlRa99r/Cyla7g=) 5: Tueg8B20i_WKP7hRxycvFmdclRo.roa (hash: mIBoeksWCFsk3OQ5asykOP8wMaYaVaEHEKnRSuCTL2Y=) 6: ZPBDn_-2VH8FGytqw-5eaL7hRCg.roa (hash: aSyw+/vJsuZSosCdmfiZH7lPkBecE7CLyHR6dRA/G0k=) 7: eQZgbRktkJ93WGifr4NOtX4uGLY.roa (hash: L+j9YAcvm1m8U4fzhi3sTXMafQHgPYzU69YFWiv/OV4=) 8: hYK-XjRKskiAn6bAAG5T4Oe--f8.roa (hash: ki0ISRRah8HdJpf+F48KF/abn4Ku+jTiEO0CCXWKn+w=) 9: jyJ7GXgOh5wk2yQ1QkK5PDpY260.roa (hash: xyEZXhnkY9hCIenZfbzG/0yw5LXZElAJDqguy6tatAc=) 10: qhmYe5kKex0rrqDH9ozQxDERun4.roa (hash: f/rKewlfJYMh484wFI5/RwDYm/Uv/x9i2ZR4r3iFEAI=) 11: uGhFTx1EVVAv4s_MVcvYBHC128I.roa (hash: I8iCxg/YMOwkUdcHw0EJGtWVX+MO2uPy0xA5/B8DU7c=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9 Validity Not Before: Aug 23 16:03:16 2025 GMT Not After : Aug 16 01:52:01 2026 GMT Subject: CN=3E81C75A63104ED0DBD030385A5636C096C7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:bb:84:3e:56:d3:31:96:6e:72:dc:a6:b1: db:5e:2e:a5:d6:bf:38:40:50:2e:c9:91:32:b3:33: e5:94:43:7d:ee:81:9d:2b:55:61:8f:20:2e:ff:eb: 3f:17:83:af:10:c9:b5:8f:80:fb:09:48:55:61:f1: 3e:b5:e2:1e:7a:ce:d6:ed:ec:ac:a6:e3:00:b5:80: 16:22:f8:5b:db:96:7d:cb:2a:bc:55:6c:a2:da:51: 2f:9f:80:fa:10:f2:35:37:3e:13:b7:85:18:29:9b: 90:f3:6b:4b:dd:f9:be:89:61:09:6c:48:c2:51:96: 47:15:67:d0:ce:7e:94:aa:fd:a3:83:46:43:a9:29: 0d:bd:fb:53:7b:63:b3:7c:88:ad:bd:28:b1:b8:77: 9b:a0:ba:eb:3c:6c:8a:24:e8:33:b6:2e:b1:4f:10: 93:5c:de:6a:b0:a0:b1:d2:8e:38:c9:2c:fb:4c:ad: 3d:f1:17:e2:db:6a:b7:a2:de:ab:c7:65:e6:e1:5e: 76:71:90:57:a9:39:95:e6:4c:60:00:30:fa:44:9c: c4:65:c0:18:a7:03:34:a0:de:82:72:6e:d1:f4:d3: cc:d6:7a:fe:93:e6:1f:fb:38:50:28:d5:ab:9d:de: 32:f0:7a:55:db:a7:e5:81:9c:e6:61:5d:56:a9:c2: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:81:C7:5A:63:10:4E:D0:DB:D0:30:38:5A:56:36:C0:96:C7:96:0C X509v3 Authority Key Identifier: keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:f6:6e:b7:f4:da:28:10:e2:00:f4:c2:79:8e:2c:04:85:a6: 70:4b:24:82:35:0a:ca:a6:66:3a:b3:d9:6e:d9:d6:f7:bf:60: a8:ce:9d:c1:ba:f1:ab:27:6e:26:f7:7b:b4:0b:1d:b6:3e:6c: 4b:00:1a:67:23:52:e7:69:e7:18:29:8a:b1:51:7d:90:0d:b1: b5:c9:b9:27:2b:29:2d:1e:5c:b2:69:35:b9:ba:fc:db:ec:16: 37:22:a4:93:ce:8a:d9:2e:08:e9:e3:ec:62:b4:67:98:c1:ff: 52:ad:0a:52:68:ea:f7:83:9f:0d:5d:8d:58:30:a1:48:37:ff: d3:03:d6:c0:cb:b7:6b:e4:6e:09:03:b6:7a:ac:06:da:da:1f: 38:cb:2b:d3:a6:7f:c6:40:45:44:52:69:44:99:93:90:52:d5: 35:c2:91:9b:3f:4e:41:59:51:97:8c:ce:7a:09:9a:dd:d9:2b: 20:26:04:60:c5:ff:fc:1f:26:65:60:2d:ee:e4:b2:aa:f9:a5: b8:80:7c:42:f6:cf:50:5f:ce:f1:7b:08:0d:6a:99:16:97:49: 80:62:68:2b:0f:0a:2f:02:80:88:3a:f0:7a:d5:dc:f0:e3:e0: 17:7e:02:9d:96:d5:e3:69:10:5c:a6:b5:db:ae:6f:3d:0b:45: 60:65:aa:a0 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjU1 MkY2RThBQzJGOTdFMTQ0N0JGQUM4MTAwNTk2OTVFMkIzMkE5MB4XDTI1MDgyMzE2 MDMxNloXDTI2MDgxNjAxNTIwMVowMzExMC8GA1UEAxMoM0U4MUM3NUE2MzEwNEVE MERCRDAzMDM4NUE1NjM2QzA5NkM3OTYwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMG6u4Q+VtMxlm5y3Kax214upda/OEBQLsmRMrMz5ZRDfe6BnStV YY8gLv/rPxeDrxDJtY+A+wlIVWHxPrXiHnrO1u3srKbjALWAFiL4W9uWfcsqvFVs otpRL5+A+hDyNTc+E7eFGCmbkPNrS935volhCWxIwlGWRxVn0M5+lKr9o4NGQ6kp Db37U3tjs3yIrb0osbh3m6C66zxsiiToM7YusU8Qk1zearCgsdKOOMks+0ytPfEX 4ttqt6Leq8dl5uFednGQV6k5leZMYAAw+kScxGXAGKcDNKDegnJu0fTTzNZ6/pPm H/s4UCjVq53eMvB6Vdun5YGc5mFdVqnCoOkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQ+gcdaYxBO0NvQMDhaVjbAlseWDDAfBgNVHSMEGDAWgBQfVS9uisL5fhRHv6yB AFlpXisyqTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNDEx L0gxVXZib3JDLVg0VVI3LXNnUUJaYVY0ck1xay5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvSDFVdmJvckMtWDRVUjctc2dRQlphVjRyTXFrLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQxMS9IMVV2Ym9yQy1YNFVS Ny1zZ1FCWmFWNHJNcWsubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhPZut/TaKBDiAPTCeY4sBIWmcEskgjUKyqZmOrPZbtnW979gqM6dwbrxqydu Jvd7tAsdtj5sSwAaZyNS52nnGCmKsVF9kA2xtcm5JyspLR5csmk1ubr82+wWNyKk k86K2S4I6ePsYrRnmMH/Uq0KUmjq94OfDV2NWDChSDf/0wPWwMu3a+RuCQO2eqwG 2tofOMsr06Z/xkBFRFJpRJmTkFLVNcKRmz9OQVlRl4zOegma3dkrICYEYMX//B8m ZWAt7uSyqvmluIB8QvbPUF/O8XsIDWqZFpdJgGJoKw8KLwKAiDrwetXc8OPgF34C nZbV42kQXKa1265vPQtFYGWqoA== -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:14 2025 by rpki-client