$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft File: SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft (raw, json) Hash identifier: aYglsIJmUs4AisI1z7RrlyUG5Q5lvXMxshYfksPdjI4= Subject key identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Certificate serial: 243F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft Manifest number: 23BF Signing time: Mon 11 Aug 2025 04:05:06 +0000 Manifest this update: Mon 11 Aug 2025 04:05:06 +0000 Manifest next update: Mon 11 Aug 2025 10:05:06 +0000 Files and hashes: 1: -9NqEbVLtxcMQGDhsFUsirUgR90.roa (hash: YAPD8DouMRjl8InJgmqoPXZ+pjhCQ4vLb0TAZBDeTVA=) 2: -OwUbQLzqS9CtZr_wtRPxfVPmaw.roa (hash: nU8McGO3g2yTqZQuoumVj83hRYLsBYNlvrV6uYQKZvY=) 3: 0tIdMYbPh52gcnbONKM9sxEByR4.roa (hash: 5KLm0nAa5fOcsr0fbhaiO/JacSV520TVs9rJMJnaPNk=) 4: 4r97Xtcderk2rYaAfCVbfPoW-to.roa (hash: GeqdqfE7ko6jT4bYJmB3zZUkfFl2QdouEXCxGMC+aoA=) 5: 7gi6WSx9-W3Q_-0BTXzk72FY--s.roa (hash: hOgIBhnJyd+67kfMJ+asIvXRzv98Q3BxXFjjyBGTNkc=) 6: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (hash: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=) 7: Ai_3ZGUyOymZlKBltfpaWRLJljU.roa (hash: RXJ0qyo/XfiO+M7uEJrRZHaYreFCxlz3slo/TQRRhOc=) 8: DffEhWDmtaCM1jB83bMXufAe7RY.roa (hash: EaeMnZx98h6poSMXtPKZEXSKjhjfEAKtvcN7nICbHWY=) 9: DmIjqsEP1piPyteKL_AFdbmqZ6Y.roa (hash: JKM3JbUzp8Tp8W8FeRJcZ36tbe3l8DuRQx0dg+sgrBI=) 10: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (hash: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=) 11: HReb-ywFRD2sicgKUd2w0b7x10E.roa (hash: y65mKFijZQhce38APb8340kQcqbx8J1XoRf25Cv+AsE=) 12: Jti-bdW-scu_L4qJSVV8bFC34Hg.roa (hash: von2PiMAe0B935XVhzke3hrz/cpQJvoVxPOBvVAOqbQ=) 13: Kg-iXs-ZgDNd-P3bwxgPfjGf6H4.roa (hash: gT/dloENLe+1DgzIP0bxSsTmtxSc8ITXoF0nYrR0/LM=) 14: L53RCzRJkJvv-BoYDtdTaiCN8qo.roa (hash: ixajAdhME9iKF50FD0z5UqyDt+Cx0y0iLNzXMhDXexc=) 15: MSeUJvFTY9o-_khDapawXnZ-LNI.roa (hash: ZHI2+ejxdkV2JDfHiihk+oNfqwqvO6AtvULRFom7nLg=) 16: Mb88DUngG1AeeJ_spzyhH1MtIe8.roa (hash: rPbaYvCyBWVV6nFsWT4yFzdUpbPZoHNmTE5IeHtHFsA=) 17: OIcAhWMzK_7prvQFEasxweToIj0.roa (hash: xBqcWZW2JugLmKQfZ49aES8JiB/8xJHGQsV4BM/CTao=) 18: SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl (hash: 2zjy3LjmNAZaHzOnqzrYTMmjN3Rh99tey2GYHmM5bsI=) 19: SVyWpKNRpl4tyYdIhSVCFnBCoh4.roa (hash: 53ZhmWEc2ZHK8EUUT7Ac1FiyMOhnJ2H3BygJVtNZ1Is=) 20: WMANHMiWx1g3CI3Gqpc2-P8j_7k.roa (hash: qNeI26rm2x8bpU/OqzZTNDcppRMsi9Yh3o3Np4XxV+s=) 21: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (hash: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=) 22: gjOyscTAwPENBh0n5Aa3QndEX60.roa (hash: HfhectSQmQlUhPpiM7eLV3JM7FPBo3tgWE1WoKdnnqs=) 23: hDX4u7pdx7Zf5kqxUv0PItrx1f4.roa (hash: grzzaZRI5mpPViDtJPvajB5QsdXQjicqtx/xXdx9O+4=) 24: n5ZNxatvv4XCouElRwkMzO6ANTQ.roa (hash: 2V2xIDmOEpYGle2/9Z9l+ERcP87JlV8yB1t7el2xCxY=) 25: tBEau9qaHWyukHWT05JHQ8xv6yU.roa (hash: yhpnPts3yhegRpvu3PBV7bzk7TlZ6bt6sB2BKxLt30s=) 26: tgoxuWcvzb42md0unwEcPBA-z-E.roa (hash: 8U1tCdX/+rNtC4iXplL0V8fy1x9AMLWS0KUZb06OkVk=) 27: tihOEV-WyZh2J6zruajXK8SgAPU.roa (hash: AUMG4eEdxdoP6cesREJuZwDefP4CdbQDPkHCN/F8erw=) 28: tou57tkArzeegu37p7K21QZeqNI.roa (hash: c7KnwcFILTwR2nMiTjzl6YCWDzLXp6oQT5kZn/KHinw=) 29: uzejoKzTeKDkpAiT_kC3H2af84w.roa (hash: pxi1SN6x6SJe2L7OxxGf3guFu+VTbediU/lKPs/cm4c=) 30: wupW9xO-Pb2A_PVTI4_crq-azI8.roa (hash: 45Zw9LEWmqY3JM84M7tXuIv+GNiqcMJwYp3CyIhBECA=) 31: ywYi0okn_GT3W2d2eD_7GQ0HewM.roa (hash: dhJ6G/hO2IpTJvPzX9YY2GzSuWjpi6GsiEi7zCLlzSU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 10:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9279 (0x243f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267 Validity Not Before: Aug 11 04:05:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=9C6C6E7FB1688E0F6F63132D8FDB172695099920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:0f:38:38:03:1f:29:81:ab:f7:b1:7a:2b:18: a3:9d:4a:e4:32:73:df:74:f8:a1:b2:1a:29:8b:53: ca:02:74:b9:0b:c3:da:1d:56:10:89:a0:a7:5d:7a: 95:56:77:83:e9:b8:ff:f5:70:4a:ac:24:f2:66:49: 3c:2d:6b:2a:58:aa:bb:c1:e0:03:9b:4b:61:db:d6: 6c:8c:c1:1e:2e:35:55:9b:55:b6:f6:dc:e9:1e:e9: 34:a3:ac:a0:57:ec:8c:9e:ee:ab:62:0a:8b:55:a7: 8b:1f:9b:84:d0:3c:73:f8:c1:f4:79:e7:cf:2c:71: 05:ca:39:8c:c3:8c:3a:4b:4a:f5:35:bd:bb:5d:42: 14:08:39:1b:b9:70:7d:f6:ef:00:90:89:08:72:3f: 30:ac:8a:76:15:bb:30:c5:25:6c:79:d0:ea:b4:5f: e0:4e:28:01:23:23:3e:1d:b5:09:4e:c9:aa:cf:f2: 91:b1:62:ae:66:61:98:e4:6c:a7:54:28:d6:4e:fc: 8b:91:4a:b1:ae:e8:32:9d:73:56:ca:ad:f4:94:fb: 4b:2c:29:b1:3a:00:e6:b2:ec:e0:17:61:83:1f:b1: 33:ac:a2:e6:fb:1e:e5:99:aa:2c:ae:0b:0b:ac:0f: 84:06:fa:6a:2a:de:0b:f7:77:d9:65:f8:53:3e:80: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:6E:7F:B1:68:8E:0F:6F:63:13:2D:8F:DB:17:26:95:09:99:20 X509v3 Authority Key Identifier: keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ac:22:06:61:0d:57:d1:58:7c:64:c3:7f:52:31:0f:89:82: 02:67:06:92:d3:7a:a4:d5:79:7d:30:1d:62:66:f3:d9:42:cd: 79:19:96:69:51:47:37:95:e8:3c:0b:ba:98:06:a2:9e:39:22: 9b:86:89:a6:0c:17:cf:aa:cd:0b:91:82:96:e8:ac:41:e0:70: fe:11:44:dd:0d:1d:fc:73:a8:ff:34:41:7e:5f:67:95:12:bc: 19:f1:81:4d:d8:e5:a5:8a:38:eb:9e:b8:63:96:5d:b6:bf:85: f9:17:60:a5:0c:88:c5:d3:50:23:44:af:77:85:11:2f:19:28: 75:6c:e8:9e:c6:9b:75:12:b4:35:91:44:09:60:7e:c1:18:83: 2b:67:17:cb:20:e7:d5:0f:89:c9:ae:7a:be:4a:2a:f5:dd:a5: a0:a5:00:72:c0:85:46:8d:15:5e:f6:50:d9:40:da:3d:11:cb: aa:59:f9:94:2a:ac:fb:4f:c4:59:1d:98:3f:26:08:2d:c8:6b: ab:e3:45:dd:1b:09:42:71:a3:3e:a5:1c:91:be:48:9e:7a:1e: e8:b8:dc:4e:c2:bd:87:60:49:d0:85:a4:87:d0:7f:80:b7:9a: 90:84:e5:74:42:94:5b:42:1b:1b:28:b9:76:c6:37:27:54:7e: 52:ae:c4:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICJD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yNTA4MTEw NDA1MDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDlDNkM2RTdGQjE2ODhF MEY2RjYzMTMyRDhGREIxNzI2OTUwOTk5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7Dzg4Ax8pgav3sXorGKOdSuQyc990+KGyGimLU8oCdLkLw9od VhCJoKddepVWd4PpuP/1cEqsJPJmSTwtaypYqrvB4AObS2Hb1myMwR4uNVWbVbb2 3Oke6TSjrKBX7Iye7qtiCotVp4sfm4TQPHP4wfR5588scQXKOYzDjDpLSvU1vbtd QhQIORu5cH327wCQiQhyPzCsinYVuzDFJWx50Oq0X+BOKAEjIz4dtQlOyarP8pGx Yq5mYZjkbKdUKNZO/IuRSrGu6DKdc1bKrfSU+0ssKbE6AOay7OAXYYMfsTOsoub7 HuWZqiyuCwusD4QG+moq3gv3d9ll+FM+gP13AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUnGxuf7Fojg9vYxMtj9sXJpUJmSAwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvU1JITGJWUkxPMmtG VXlsa3lPR2tjcjNMd21jLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMCsIgZhDVfRWHxkw39SMQ+JggJnBpLTeqTVeX0wHWJm89lCzXkZlmlRRzeV 6DwLupgGop45IpuGiaYMF8+qzQuRgpborEHgcP4RRN0NHfxzqP80QX5fZ5USvBnx gU3Y5aWKOOueuGOWXba/hfkXYKUMiMXTUCNEr3eFES8ZKHVs6J7Gm3UStDWRRAlg fsEYgytnF8sg59UPicmuer5KKvXdpaClAHLAhUaNFV72UNlA2j0Ry6pZ+ZQqrPtP xFkdmD8mCC3Ia6vjRd0bCUJxoz6lHJG+SJ56Hui43E7CvYdgSdCFpIfQf4C3mpCE 5XRClFtCGxsouXbGNydUflKuxIY= -----END CERTIFICATE-----Generated at Mon Aug 11 07:44:45 2025 by rpki-client