$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json) Hash identifier: CON5H25jr6wcot2CPBl8l7EzEKTWiLbwriodOIqF5zs= Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 1A9D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft Manifest number: 1A91 Signing time: Sun 01 Mar 2026 21:28:37 +0000 Manifest this update: Sun 01 Mar 2026 21:28:37 +0000 Manifest next update: Mon 02 Mar 2026 03:28:37 +0000 Files and hashes: 1: 97-7C3dDSirb66rQWLzjN8EVFeQ.roa (hash: aSwLkN0n0aTA4qY8RZgyH3sQrimuRFxnnD7txCNU8sw=) 2: LYlIwabI9y1aUm1iS6_deSSPdQ4.roa (hash: sMZ2ffWy01w7sJigLlIkp0LMbKutBmFWKnBXY1e2GyY=) 3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: cT4/GSZ07C8oZkv31BT5x8jg7cUTXZavB463vlDtW1I=) 4: u6Ak-r7u8luLfAvXH-20LWPkKnc.roa (hash: TxLPFcmNBaJHMcJxiM8fkAKJG66sXfl9PccECAWbdoI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 03:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6813 (0x1a9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Mar 1 21:28:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5: 5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f: f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90: 6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9: 14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc: ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c: 3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2: 68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a: 3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e: a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1: 23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54: 76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47: 5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8: 8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7: b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59: 48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91: 7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5b:eb:30:26:49:a3:96:68:fa:1e:81:e2:91:88:36:ae:e4: 44:1c:9f:00:94:2c:b8:21:1c:d5:d1:56:fc:eb:88:1d:93:a9: 0d:75:f2:a9:4d:58:9c:67:7b:29:4f:63:ec:07:12:54:92:7b: ad:58:f0:70:16:4d:f5:7e:67:82:ae:f3:48:89:01:1c:ab:6e: 2f:0d:1c:48:33:09:4e:f4:44:96:86:d2:26:20:92:cb:99:3e: 56:a1:02:32:85:b2:7c:7a:8f:73:4b:3c:d2:0b:03:1c:27:68: f3:4a:4b:fb:0b:b4:0f:aa:04:5f:db:4a:7a:c9:6d:f2:4f:9e: 3a:3e:53:cf:1b:6a:a6:5e:6a:6d:59:ed:d1:be:00:9a:73:e6: fc:58:36:9b:85:b0:1b:c9:37:2b:fb:48:9f:fd:85:47:fe:bf: d3:4e:ae:45:45:be:12:ab:a7:16:f6:41:e7:f4:21:3d:10:a1: f4:a4:02:fd:37:1b:c5:35:00:64:cf:5c:fe:a6:0a:2a:1b:b1: 2f:39:0c:67:5a:7b:4b:aa:33:e6:11:0c:4e:07:7e:81:1b:e9: e7:37:2c:85:63:66:25:03:8b:34:e2:76:05:fb:09:7d:67:d6: cf:35:19:1e:68:e1:40:d1:4c:4c:09:0e:b4:06:9c:82:37:b5: ae:9a:1e:cb -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNjAzMDEy MTI4MzdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2 OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf 3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR 24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACJb6zAmSaOWaPoegeKRiDau5EQcnwCULLghHNXRVvzriB2TqQ118qlNWJxn eylPY+wHElSSe61Y8HAWTfV+Z4Ku80iJARyrbi8NHEgzCU70RJaG0iYgksuZPlah AjKFsnx6j3NLPNILAxwnaPNKS/sLtA+qBF/bSnrJbfJPnjo+U88baqZeam1Z7dG+ AJpz5vxYNpuFsBvJNyv7SJ/9hUf+v9NOrkVFvhKrpxb2Qef0IT0QofSkAv03G8U1 AGTPXP6mCiobsS85DGdae0uqM+YRDE4HfoEb6ec3LIVjZiUDizTidgX7CX1n1s81 GR5o4UDRTEwJDrQGnII3ta6aHss= -----END CERTIFICATE-----Generated at Mon Mar 2 02:30:28 2026 by rpki-client