$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json) Hash identifier: 0fI3ysjRpyWofb14yi4ktdv/FDucgXzQsHOAieT3Y+4= Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 2028 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft Manifest number: 1FE8 Signing time: Tue 12 Aug 2025 05:02:58 +0000 Manifest this update: Tue 12 Aug 2025 05:02:58 +0000 Manifest next update: Tue 12 Aug 2025 11:02:58 +0000 Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=) 2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=) 3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=) 4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=) 5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=) 6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: 5Qi7CjkSSzb1fFLXEg9NrbUqWRZYQL4lwLxmFFMS7kg=) 7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=) 8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=) 9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=) 10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=) 11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=) 12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=) 13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=) 14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=) 15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=) 16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8232 (0x2028) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Aug 12 05:02:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27: 46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1: 70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30: 20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12: 48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d: 84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07: 9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c: 82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b: 68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54: bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb: 6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e: 23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13: 7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e: b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c: 0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10: 24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23: c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:47:01:03:3f:18:b5:3a:1c:98:47:e6:9b:34:e9:14:6a:21: ab:b2:04:5a:63:b4:a8:95:a2:5d:74:df:38:61:d2:d4:96:d1: ae:55:27:ad:84:8c:ba:bb:9c:53:d4:ca:39:4a:92:74:fd:de: c6:0c:a4:be:ae:fc:c8:f8:f4:0f:e8:34:a8:af:37:74:f0:13: 4c:19:3e:56:65:b8:0d:1b:d8:e5:af:28:37:7f:f4:0f:04:f0: 0c:c5:f7:27:06:ca:ba:84:67:f5:a7:aa:57:29:6c:db:2a:bf: 84:b8:ce:d3:14:61:74:8e:a4:f1:90:07:d2:23:fc:c1:4e:cf: 55:98:61:10:06:be:a1:55:55:1d:9a:8d:52:00:28:5d:5d:9d: 52:fa:4f:4a:ef:be:8a:d8:51:81:03:cd:e8:1f:83:c4:9b:ff: 16:99:a2:e7:0a:3d:94:54:89:6b:4e:ff:58:a3:38:6f:db:07: 66:bc:12:aa:46:e7:f1:7e:bb:c2:66:1d:fe:10:e3:8b:24:44: fe:48:97:68:0a:62:cd:66:ed:b7:d4:a6:13:d1:81:7c:78:ad: ee:ad:bd:22:07:3f:4e:1e:4a:56:72:ec:01:ed:fa:a5:6b:90: 3b:06:8d:3a:23:bf:4f:96:02:90:30:8e:ef:ed:f7:26:ba:4c: 12:7a:48:cd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICICgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTA4MTIw NTAyNThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY0RDQ4NThENkI5NUE3 QkJGOUY1OEE2RTgyMjRGRTBFOEFCRjYxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1PXArqJAcrnpFJwOJ0ZfhNWVNZYcLf7B42ny4XCEFOnCZ/+W BCp6RjejMCCQEVHgQqQmsrd9Fxx2Ekijj6NmXqqxocHd5Hp+TYTthOiHSVkDcaEk R57XB5uVrvjIPLx3020L4h5WLIJgvhHc7nnuzZfERtRkG2gNEYFeES7I0iFj2Z7H VLvhpxYdDpR0PPlLEDtD627Sd39XRkJX4URnmQREniNGLAjONIpgXBB661UVE39N 2H/45eg4Mfy9GzF8Tredm+IlJn+OIqCM5AlejArgQKUL4yqDhVSwaxJDECSeoLe3 hsP5cyfXNlRZI8P5NKaZbqTSo84Svy7NLLMlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZNSFjWuVp7v59YpugiT+Doq/YZYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvU1VTYlJzcnM1MTBj VllCaE9VMjBBcmJRQ2I0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMdHAQM/GLU6HJhH5ps06RRqIauyBFpjtKiVol103zhh0tSW0a5VJ62EjLq7 nFPUyjlKknT93sYMpL6u/Mj49A/oNKivN3TwE0wZPlZluA0b2OWvKDd/9A8E8AzF 9ycGyrqEZ/WnqlcpbNsqv4S4ztMUYXSOpPGQB9Ij/MFOz1WYYRAGvqFVVR2ajVIA KF1dnVL6T0rvvorYUYEDzegfg8Sb/xaZoucKPZRUiWtO/1ijOG/bB2a8EqpG5/F+ u8JmHf4Q44skRP5Il2gKYs1m7bfUphPRgXx4re6tvSIHP04eSlZy7AHt+qVrkDsG jTojv0+WApAwju/t9ya6TBJ6SM0= -----END CERTIFICATE-----Generated at Tue Aug 12 06:38:00 2025 by rpki-client