
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
File: sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft (raw, json)
Hash identifier: RilwtGofEORoU3e8kLvk/0fB/HXNMOeWD+AJmTdUyzE=
Subject key identifier: 70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 22B2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
Manifest number: 2210
Signing time: Mon 20 Oct 2025 17:08:06 +0000
Manifest this update: Mon 20 Oct 2025 17:08:06 +0000
Manifest next update: Mon 20 Oct 2025 23:08:06 +0000
Files and hashes: 1: -B9CGUz8J1scU_M3Fi-lcksfsAA.roa (hash: YD0jFuaVOKqUDo/pY/PT/0oWG21GrDmmJUTPB9oPyow=)
2: -dEmjzmrp3St91V0F0SWkxSM9vc.roa (hash: g2kE3Bmiw6EV6chD81xuqIUDobmIG4QjS3/4lIcf16E=)
3: -iqey9zHJBIPFaAPFlLLzScN7QM.roa (hash: sCSgZcMdpxa9wOlXD4WFlKgI2DAW8y67DiQhtq1UgBM=)
4: 1IIgpi_sz5RY5VQ_bt580-fWcAc.roa (hash: ezpPqow3iSYQrdptIMzWjF5mocNjgDTWlLrWeT4Elq4=)
5: 1ySI3jBnajWatU70tsq1f6s6Eng.roa (hash: 6QckF70I3VSEr81dkehqMtOEyhEC85qv3c4lTdJnr1Y=)
6: 2PjHUZSI_y0JfAIUqmAYQJMp52Q.roa (hash: l3Fkt+YVOUAyuS3dB/eo3mGNW0oZ/PK+5DC6fQRB+DE=)
7: 6Zl0eBnY7mV4bHxmBlSAlZkuu90.roa (hash: VC2ZE485Tz9kJpsWMGvELTXlGcfO+c5nijj+WytKub8=)
8: 6rNkEMwVU98JkGu3MkgIu3jrv90.roa (hash: 2nzkGKO/Q0izzXjrOG20ERt6zT+SkarGb275gWfb8Hg=)
9: 9N0DmiHc5sYqOByshJDwmHs3fnw.roa (hash: aS4esybjp0VrUr6VZjn+hpnrn5QY9g34AoVK8f/C31w=)
10: BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa (hash: bbUHi1fzb2B2KpHotp6GJiaeELWgjCP5WOc4FU74NME=)
11: CZs_Ni5V2gSCjdV78asso1QzGco.roa (hash: z+5V/AgcfNiocZ4OSlh0JDUtnLm9sPDAWh31QNuUcM0=)
12: CfQDx2RPobQ8ei_G8oDyZOBbY6Q.roa (hash: k8NZo9u0YoK71vYenzVDhq4GHFw71niInyzuEbKMm90=)
13: CrIFnN0NEgKCMYmOJQwvOsAXVbk.roa (hash: EJnrpL3EcnjXhSbmqpd0W5EcUoKt7cGvCRuBMaCdot0=)
14: DNdrqkPkUBCvG0OBVHQ5nsSkV08.roa (hash: 3koK8eWBSKquEfgNQ8sfKqT4Y3nIRsxkD2qm3afCQ+U=)
15: DjYhqm8XNcgCYNb0ewnkzzwsjwE.roa (hash: bjV2xZw8SGNl9hlijZaSib/E1EOVGdGdF9Ied8Qr6GM=)
16: E4PP_3uLA1Cw55bmak1f9JGRRx8.roa (hash: 0iP+XezUxrgE6cPJwsyPP1KKF81wf6Crs0sK+eDfBj0=)
17: EExzCfqhzEPTvKs3n3_pPfHSG1M.roa (hash: nd5SJw+9I3Y4ZD1q/qhqcNyVh+RWp4rRS1xXvOpjSyg=)
18: EYtpg2Fpt004YOeleKbQ5n2KMKE.roa (hash: xykkMtbe/DPlhm+qihoVPEMoIuK1LIQt1hlLozqNnIc=)
19: Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa (hash: kfAJ+9FpCgjv2uBV+TEVwaKHUFstqswon24ANpwh1vs=)
20: H73cHR4ff5BfoDuHTKEK9stP98g.roa (hash: sdRzuzq31LeGj+B6OafwVVbnhvm65S77D0j6Nt/s8FE=)
21: HVx6Ak2ORWLwurMuf8L8yw8FlTw.roa (hash: ogRA8hiukAGwxntF9Pn5aum/qW8GiyuKPFXydsVpBG0=)
22: ITJ-lclbGVbML0R7d-vK6Sq2_uI.roa (hash: YESApjrIqSBLUbBkcmKarI8NcsIat2JW6xmNWcbNiEY=)
23: IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa (hash: dHShnRgenGZw938sHM37JJd11wNzAwCG8LhiuALmcKc=)
24: I_yUfdeufBrasGDj6tlyOFMWmMg.roa (hash: TySkQ9SimG8Jp4VlBwqL4O5fpRTpUS1Ck/5Dy1Bdp7w=)
25: JTLwElYIefHasWXqYuKR3EWN7bY.roa (hash: venSy3U5aHWSeY4DFKqNueACcmsfh1BCVAU799UyEeg=)
26: L8FIC0D50FTzJv7_QFKjRNqd8oM.roa (hash: XhPqa1fT2/P0W8hhq7rzeHTGziJSJK4gqUUg/f5hKWQ=)
27: LW0D-IfLZF19h4GVLvBxQ-vkj4Y.roa (hash: kLMpomRHPkhhPs9JM6g7EURjHXkStEYUdHWItoWnf6I=)
28: LmRdUOLN-kjeUWjiT9F0EbJPC80.roa (hash: oUXbwldc730/5lcW1WgbTEDpHpsHjpaUMG8RszcfG/A=)
29: LzhrLvnoJW0aGCrr2pMpxADC_tM.roa (hash: rCCsyq7KuWJYrpkviTjmCGtIJdrguYLWsVXmHDwFo2s=)
30: PFpWuw1FyFC_eFCQM3ElExbhB4g.roa (hash: jmAU+kkp/hPuZnDLgL3JVMM3MVDo1sRvGZwWNwf+lv4=)
31: QpV6nLVqoe2CrAWDkAwUygiRpIg.roa (hash: qGZB4v9IR2W9wOVyS2pgZco1OLZ1Ybim96x7CQI6bdM=)
32: RImqL2wQuPV6N1yaU8ofLwOs0eQ.roa (hash: pvVz2+Tvav+K3Ua+sgadToliNvtPshZneijnHlHkN1M=)
33: T9pRdlsl6fg6K7jfughxYK7CyN4.roa (hash: RebulTZNG/vtXLpKRJoQnTONdtdNWq8QUpc8qmEPx1c=)
34: VYvc0WYrHh5wlIocYAAWe16PlT8.roa (hash: V0VWl58HwmOflFg/8JbWqa8ybFSyuUqIzHGuThFEkH8=)
35: Vought8Kg91Vs3gr3JyNoi27jTQ.roa (hash: ImMnT7weEGXYWytPNtkIc6HxVdmWN9pXhiUnMcenmb8=)
36: Wl72acSPfMZ_-Bo1FFwyZAL2vHQ.roa (hash: hySWu3LAhanaGw5D3zmIYy7doZuepnu9/JPsWdNeGlw=)
37: XGoKwUMQogcQFSKg0HVndGSM_C4.roa (hash: +REXPccvZJLbJeGJLWy8ggUgi4bhBUx4B/VkZS3CImI=)
38: ZacAFC-vejIYocTUXbOxVXw5ibE.roa (hash: fsh7dJ1/BvK82kfwRxQYMNDOmNbq3w6U80nX7K+hWzI=)
39: _kYE-Wm-icz2m-DV9o6uFffwScY.roa (hash: 3JVq1tbyJZD+ITwxj0sBAi2QyihiWD9Zvc6IaKmB+wY=)
40: a7L_07koyPh5_E3ty4kZUu5VtoY.roa (hash: dBeSDiTPBb65QrxLS13TO64umQ7Cfy2EttAVhG9XAP8=)
41: bdkp1Giuk58G9zvgcZpy81qQE5o.roa (hash: YgqHbA4VDHluNabgKNSs/305ak3OnHJ+6CbPuj1dCBE=)
42: df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa (hash: ofJX+uTbB9SRnzmr1dUgEW+yUuWxDAYktAQChsfNRhM=)
43: f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa (hash: IH6eh9ssqqy1jmKk6bmphAQ503e9w0A5X09zCc6p028=)
44: iNjffKRfq1pdBBKFLzXkpbR3UCE.roa (hash: VELR72xPLo3UEZmR8pwjjwA1Q2GBJqPhEmsiQ2GdWhA=)
45: jdk-CSjp-DnsGgxKtNBly3BZLFI.roa (hash: +c7IxUXSeUZyt/aC1lx5lCauSTiFamk05J/CR/f7OLs=)
46: kgr_tJuAU5aMehi8A24HieBDxYE.roa (hash: ++UAW4qrbMj7dzNdeU+MFu8S71u7vkpSDDRcD6UxGsk=)
47: lV8GgcR7O83g2cAegfliD7WU6ME.roa (hash: 5+Ny8kjTfkevzRlJ6fiF3+RDWcqcwJiVV1myrcVULuA=)
48: niDO0bqTwMJ05UyyUog-eWa_UyY.roa (hash: KfUEndsJfIhdasUYWPxebXkoUObHyvy7NgBNShq/IdE=)
49: oyvSlJKAnDZ9Tara9Qopu97jpCw.roa (hash: Tiq+I9nL61MbqaXmMbd/B4LYxZZscoZzJLLb5kH/QyI=)
50: rVGFZWWbX6N5N0vAgeYrq_SA0Pg.roa (hash: Q3Sx/XX7npymXAh4WZzZrN+7I+7RNotN30Ms5sgEFnc=)
51: rxyDbiHjHqHktzT51WBKvqlD2ak.roa (hash: RP/tjO7vhVUbJRR8coeqd0k2i51BmSvwo+RTVGbrXUo=)
52: sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl (hash: 6Ezm6KhMjaGpygP8hqL1iICRnFRvJgF2ceMl+yFMKBU=)
53: skOiHUAuStOibgWnXkZPTQHXwic.roa (hash: vJsU9qOA+657IL4UeFtUAFdZjOKe/Zjb56ZpbdWiXoc=)
54: unECYORprGtkFNHjIqFP1D8mFGI.roa (hash: WpTFyuLSYvX7DRF/XPeyaRA1m5Lwotn263mTwV5KSXQ=)
55: xqMngYF6o_FDcv3kBmsCMk11U9Y.roa (hash: MSt24a56MCTma7VAqromKvi19uCWmTVWhlSJ8fVLNcY=)
56: ykbKfmt8nVGdkDpLB2La71WqU3Q.roa (hash: 5FSSQ06+WtC82oVX9kkMyF+EiQU92a3xnzvUYGpyJeY=)
57: ym0X18TYTkSyYikEbl_NT7RLX4g.roa (hash: PEyNkdr0lIc91yuhmJd/PA9SM2yu8b1bSm7NOfg5xLg=)
58: zm4R_kCop2BzQPynXpR13fGwUgQ.roa (hash: 6WCYS9qHCi1md0uGLJk9jrZsxrJFMoiAvB+5DVzMIvU=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Oct 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8882 (0x22b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Oct 20 17:08:06 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=709D2767D865E6BECCF1F640F30794F5EC0800ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:88:f8:9c:de:4a:a8:b4:7f:66:46:5e:4b:
ad:9e:67:25:04:f7:94:14:9d:82:ea:f5:4b:c3:30:
20:f7:b2:7e:31:92:f3:76:7d:c2:fe:c3:fc:9a:8f:
09:e1:14:68:7d:77:dc:dc:e0:5b:95:9f:ce:c3:ea:
51:89:1a:77:a5:2e:34:ba:41:6e:50:c8:0d:cb:07:
35:72:91:9d:8f:2a:06:1c:f7:7a:53:34:b9:db:f5:
b7:6d:cd:27:76:4a:93:89:d2:4d:25:45:76:36:15:
e4:01:39:bb:1a:0a:00:d2:1b:bd:e3:33:63:be:a1:
c5:e1:8b:1a:13:7c:80:ac:af:06:fd:59:f5:95:60:
04:d9:25:42:0a:20:0c:9d:92:9c:0b:82:c0:d6:22:
da:fb:c2:58:de:f3:07:f3:72:4b:7e:9c:81:a3:35:
8c:1b:e7:3a:74:0a:6e:60:a0:f6:17:03:07:6a:e6:
14:61:e9:4e:e6:bc:b9:c8:7f:55:58:d1:7f:b8:a4:
a2:53:d3:24:96:b7:a4:5f:8c:7b:af:99:12:b5:a4:
76:d5:92:46:93:a3:f5:9c:e6:15:5e:ef:89:7c:e3:
1a:6e:87:d9:d3:73:9f:52:c0:ae:e2:63:34:c5:a5:
14:91:0d:7e:77:83:97:87:74:93:21:82:5f:69:f6:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cd:30:21:2c:53:32:cd:7c:dd:ad:8b:85:2e:09:e5:fd:c6:
e9:54:bb:d0:31:71:06:e6:e1:e9:21:a0:9c:ff:4a:c9:f1:11:
f9:51:e2:ae:12:e4:f5:fa:c8:17:29:e0:8d:8d:24:96:9f:15:
a6:d0:9e:ba:9d:c1:ac:46:f0:de:dd:7f:fd:b8:b3:1f:0a:bc:
d6:5c:31:f8:41:15:b0:ac:b0:7c:9f:51:07:1f:bd:68:86:43:
ba:35:0f:8e:2c:31:49:3f:b9:a2:1f:52:a2:76:6c:89:de:78:
f5:00:a3:ec:61:4d:d4:af:66:f8:7a:b0:6a:65:ad:3e:9f:8c:
3a:6c:d8:52:1a:df:ed:de:c2:55:36:2b:a1:5e:33:db:51:07:
6a:35:16:52:e5:bf:8d:8e:0d:a8:40:c3:b9:17:86:43:f8:51:
bd:bd:2c:0d:4b:d4:36:ef:ec:98:f1:ca:e9:cf:75:b5:d4:dc:
7a:89:2b:d6:e9:bb:6a:e0:cc:1e:45:48:e7:2e:05:cf:15:0e:
6f:cb:57:df:41:19:42:6b:90:1d:33:3c:49:bc:77:36:c1:8f:
67:5f:23:f9:9b:d8:3c:ed:1d:e3:10:23:0a:b9:ed:1d:83:16:
81:5c:cb:68:37:51:da:30:d5:a4:ef:5e:c7:09:8d:fb:20:f2:
d6:05:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:47:51 2025 by rpki-client