
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
File: guAWKrqAu-i04flju0W2Ryk0T6E.mft (raw, json)
Hash identifier: HnHig6wB2mrY4zTcgfagvZlClj7/F8uGTu608IjXE/M=
Subject key identifier: F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
Authority key identifier: 82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1
Certificate issuer: /CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
Certificate serial: 2312
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
Manifest number: 22FC
Signing time: Mon 02 Mar 2026 12:31:24 +0000
Manifest this update: Mon 02 Mar 2026 12:31:24 +0000
Manifest next update: Mon 02 Mar 2026 18:31:24 +0000
Files and hashes: 1: 4YOzomKcJUXAFw9fKmEbyIc_I_E.roa (hash: xlrCviDFUJgMiG0Z3VPRhgttohoFYmMqntpCxYLbY14=)
2: 8gJqZBoyYoIMpldq4sHoZ2y88Yc.roa (hash: A5PUZFXjsFs9QK+LXr9/JRSvJmJ+reF3ba8SXabA1/c=)
3: FgobWs3sQ2dJk2kmY2s8-c6R0a0.roa (hash: YC5aSzCQUNfMwbsUmC5AYZ5XOu8a6wKsgO4v1O0H3hY=)
4: PYtXJ6tl5r9WY5sf-s4OqvR_2lY.roa (hash: 2AH+e21KqDdm7qi+016NzWiUE20tGV/t5rYXqMvAfS0=)
5: TP5iwzOIGJrkaLK_VbSQwX5LiiY.roa (hash: 9fF8xSayAIQ4wzITCsmJKy/K8Fv7nR8Q0uKRSdJ+p68=)
6: Ta_itm9cCwLMDRPIADeBG6S47y8.roa (hash: e2n1k/hDBPrm8VUTWum5XntniMTtDYm7llBQxjUHYg8=)
7: TgaC8usR8mFNmSTO2xTS0Y95_kk.roa (hash: Jlkjs7rBGmWQWYqxRd92AzlzxKWZvw5TnHgmNoVDdfU=)
8: UUOAf8Ue_9lm8TIb1fwsmIEpzrM.roa (hash: +qBaZ6oebJXmsn757Re2+hRwFZXz3lAEeQQy268hqfM=)
9: Ycvv9rk043oNS7icGyXynYMt4XY.roa (hash: tqOA/1bpNDXUT7rPK/Q3H7XOiMARr6Gc760M+0Md/hw=)
10: brZW4869o68wYk_harYYp5jHKIA.roa (hash: Ido/784t5WAytSiF2PqHCSPqeJWwgT1fwZXXJeXeLm4=)
11: guAWKrqAu-i04flju0W2Ryk0T6E.crl (hash: srd5pJ9ecT7LeIynLm/D21U1AcKnahyYXnfhFUymyv8=)
12: i4_OXkOkejjlSFmtJl6eHLGLSFo.roa (hash: r0Pw8MBvh/UZUww72GxgSsMnkypDK2kvh+ZH4Ln2+pc=)
13: kaoz9S7xzUO_M_x6qQFszkk2co0.roa (hash: HI7lpzJt9+7KuHpTeQx0TmU/8Ex/R5zlewmJi5duL00=)
14: lBKbeBi7CLkW7Db0v0ETeSgWwUc.roa (hash: 9nLXlJXBaQI0FXe5W2VSj//wUkUeHmPkZvcgHoxZIes=)
15: nI15WrKjxQOirS2-kGeR1FWVoas.roa (hash: aKy6VwHGVk8v13lxjLrefPWr49fFi907wvJu1XZMw3Q=)
16: p5e6uyCFfVpDwOZYwmIjPJj2ZqY.roa (hash: UqfIQtOs/5RQwBgOxogb+2FTcwxu4gPzGvTCdaAdTQY=)
17: pCrL_f8azLFflthoyXFvQZFYyME.roa (hash: iZB/Evq3/fIUnwGXoqQ/0e4PUWqj+5FmRlw8Jeazu4A=)
18: r5YhRoikBQTJwFc97V4GwG_qFcc.roa (hash: IWum0e/0/jFnmYpyRozfuzrMmwJ19yhF29Qj972mx9g=)
19: ssO_IzqK4ZwYf3SksKdeQJndwuU.roa (hash: nK+h2me1yan+kuNYeA2m6/gr4o4V3gAyWDlu2HZlYJs=)
20: tEhPp_yyq9ayqv3EpRZ4RjKHJ5o.roa (hash: 356MZ4hSc9QARM+D4usymioMmw2yqd58VuqXE0/DBNU=)
21: ueu3-o23v8rpf8v8o41oSCQ1Dvk.roa (hash: igZInox99bT8n28UcWqfLjSneOYm8hFSht3GzKzu3wk=)
22: uvPcsxNmtt46kdqqxXAqUGOYvCU.roa (hash: tKVZzcxlx8BOSCwt24MCHMHZ4iqxC42SfX0Yuwqd9qc=)
23: z34wYZAF0BTg_35NeD26SG-T2yQ.roa (hash: 0R5rkpRRDQDX/L982Bs85RVs5FC+cQF5mV7csFDUWE0=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 15:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8978 (0x2312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82E0162ABA80BBE8B4E1F963BB45B64729344FA1
Validity
Not Before: Mar 2 12:31:24 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=F6E4B1FDF66446B6C4851BFC43A9163261C196E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:2f:13:11:4e:c1:4d:64:10:b1:61:cf:b6:
de:9a:85:44:6f:6b:18:6e:4b:2d:4a:e2:5a:23:0b:
dc:c6:c2:d6:e1:da:d5:ea:71:0e:e2:8f:4b:37:13:
0a:c1:40:c5:ca:81:65:42:2c:30:70:71:a5:35:4c:
ec:10:e1:57:18:fa:46:1c:ae:d1:6f:e8:74:2d:ba:
01:9f:25:0e:92:40:e7:0c:fb:6c:5e:f6:3a:a5:20:
87:86:b0:25:26:00:e4:49:80:2c:81:2c:ff:1a:e1:
2a:37:8d:2e:f7:78:f9:fe:2c:db:0f:4a:ad:53:71:
c9:ad:5e:73:ea:67:e0:c7:24:9f:a6:e6:7e:89:f4:
52:83:7a:25:f2:03:c5:bc:4e:34:2b:46:eb:d8:cc:
bf:57:c7:29:43:29:c0:ba:ae:52:24:ac:16:cf:85:
aa:87:41:51:7f:98:9f:df:db:58:3f:4f:a2:3c:2c:
92:f6:a3:23:9b:c4:4b:a6:e1:da:db:9d:79:82:f2:
d0:fd:3a:92:3c:a4:37:81:63:c5:c0:b5:d2:3a:f1:
a4:6b:6c:ed:80:f9:66:e5:f7:a1:d1:72:18:6f:20:
62:a8:1d:f2:a0:f7:0f:77:71:ad:91:ba:ca:88:f0:
55:79:86:b8:74:33:dc:9a:c1:58:6b:ec:e6:27:0a:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:B1:FD:F6:64:46:B6:C4:85:1B:FC:43:A9:16:32:61:C1:96:E5
X509v3 Authority Key Identifier:
keyid:82:E0:16:2A:BA:80:BB:E8:B4:E1:F9:63:BB:45:B6:47:29:34:4F:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/guAWKrqAu-i04flju0W2Ryk0T6E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/121/guAWKrqAu-i04flju0W2Ryk0T6E.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:0c:bf:fe:1a:f9:72:a3:68:b7:37:fa:e4:23:e8:5b:f1:22:
7e:4d:af:e6:40:92:96:b9:b7:5c:38:8d:8c:b8:7d:59:3d:1f:
2b:ad:f7:49:dd:90:f8:90:b6:66:f8:cd:f5:13:f7:c3:28:2e:
9b:23:7f:17:0f:7e:3f:6b:de:a9:97:5f:8a:85:6b:70:2c:95:
93:ee:b7:17:35:b3:60:0f:f8:0d:29:b0:5b:33:a1:5e:2b:c9:
19:5d:64:16:75:e3:f5:f7:88:4b:b2:7a:44:63:7a:74:75:e8:
b3:ca:30:57:ee:70:e5:43:c3:07:d8:3c:97:56:cd:70:27:6f:
4f:9c:67:a2:e0:44:85:52:4a:84:d4:3e:62:1e:95:30:f1:ab:
f2:9b:cc:47:58:38:ed:ac:de:b8:57:01:2e:9f:65:d2:a2:76:
5c:fb:40:08:1a:88:09:8f:00:9e:e6:f7:6d:89:23:92:ff:db:
1f:44:04:0e:d4:a8:55:fb:41:1a:f8:e1:92:c0:b9:cc:cd:da:
7c:38:b7:cc:69:62:ab:ce:ac:38:b3:d5:fa:12:96:8f:91:c1:
47:24:48:7c:57:0d:cc:cd:ad:df:8f:cb:f5:6c:15:6f:3c:af:
0b:e3:82:4c:94:99:87:a8:46:a2:04:df:df:9c:e7:ba:90:f5:
8f:1c:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:19 2026 by rpki-client