$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: MUc2mx6Hr32XGW3e7GQOh7diX8YyfwLdnmmxKLn2/Tg= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 013A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 16:02:37 +0000 Manifest this update: Sat 23 Aug 2025 16:02:37 +0000 Manifest next update: Sat 23 Aug 2025 22:02:37 +0000 Files and hashes: 1: 0vXteHc651-iGtEnYAlVi-M2f4o.roa (hash: F2CMw2t7dheHN9vVzrGGD4LZ1xy37GXKvI3rpHWp1GY=) 2: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 3: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 4: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 5: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (hash: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=) 6: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 7: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (hash: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM=) 8: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 9: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: TzqhrNzNwwnZWrbEenCQ/YqUUhokYXrsgRVDbrpKZT8=) 10: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 11: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 12: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) 13: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (hash: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI=) 14: vngUZyTpb2vIiTJqJGIcWBTP5AM.roa (hash: mnCD/psbdkuG8KujuBLdihNjlwEJvUObk3olUpIz7vE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Aug 23 16:02:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:32:2f:c5:aa:46:a5:d0:9a:6c:5c:ac:13:eb:47:7e:c1:b5: bf:0b:99:6b:1d:47:5b:d1:7f:08:b8:f0:23:16:0f:86:8a:d0: 12:5a:b0:1f:58:94:8b:f2:5b:49:8c:49:b3:fb:03:94:71:ad: b6:eb:2e:95:cf:0c:b2:ef:df:9e:8c:6d:6e:1b:54:5b:a4:a8: d8:e3:c0:14:56:9d:43:03:04:5a:27:b5:e6:00:85:80:23:92: e8:c9:63:f4:58:2c:45:36:d8:05:27:39:4a:c5:88:da:21:07: 9b:c8:fa:ee:9a:1a:57:f0:5a:ef:0b:0a:26:06:5d:31:eb:50: 3d:65:db:8c:ac:c6:97:bf:61:f6:03:13:cf:36:60:a4:d0:be: 60:49:27:a1:0a:52:39:4c:c3:d2:0f:60:81:fb:a3:d8:3e:c7: fd:4c:16:80:00:47:09:96:1e:dc:b0:17:a6:b6:d7:dc:19:17: 91:1c:ec:5a:b8:8c:f7:66:62:71:ca:94:77:59:bc:f4:b2:29: 08:76:b5:3b:5e:91:34:d6:c7:77:8f:a4:20:78:3d:9e:21:0f: ae:ff:8c:bf:a7:b5:17:00:32:d8:92:17:ff:8b:6b:ca:f2:41: ba:f4:7e:af:d3:8a:d9:a6:7e:fb:3d:2f:f6:5d:44:57:67:74: a7:be:3b:92 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICATowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA4MjMx NjAyMzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI0NUYzODlDMDc0RTJF MjExQ0ZDMTcwRUYwMkE0RkIwQTNEQUE3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDiEchHQOEQLFcYerhUtxhF/6LyiKgiHPAdRKs2hMJCR1Ea+n v42oIoaeW6nt3VFXvc94ErB452K6NPUE2qgXxSUh9tA99hmawq5eULPKZyOd9gvD MK9J7olD4Bqqt2RK62/eoYomNQoadFN/e700zu8k2BOqN1SAC1+s5+nef9fgu1vh 0O/5uw+Mw+432ycRS2ZH1w2vQrBtoMRTb92fc0w4DFuWUA3MZzs1k77M0WD6TcHd E81N097hwM+dbbiq2/B2NDJ2fvr5nk6Xiy/0Dxi2sb48+x24e77i5zu7Rph7TVm5 p1gCXHQSLIX6yYLwdemSSb0ldF34R1z6GxfTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJF84nAdOLiEc/BcO8CpPsKPap2UwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvYzlJUjFiSVE0N0dX QlUyM0dKTFk0NHBPQ2U4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALcyL8WqRqXQmmxcrBPrR37Btb8LmWsdR1vRfwi48CMWD4aK0BJasB9YlIvy W0mMSbP7A5RxrbbrLpXPDLLv356MbW4bVFukqNjjwBRWnUMDBFonteYAhYAjkujJ Y/RYLEU22AUnOUrFiNohB5vI+u6aGlfwWu8LCiYGXTHrUD1l24ysxpe/YfYDE882 YKTQvmBJJ6EKUjlMw9IPYIH7o9g+x/1MFoAARwmWHtywF6a219wZF5Ec7Fq4jPdm YnHKlHdZvPSyKQh2tTtekTTWx3ePpCB4PZ4hD67/jL+ntRcAMtiSF/+La8ryQbr0 fq/Titmmfvs9L/ZdRFdndKe+O5I= -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:17 2025 by rpki-client