$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft File: SUSbRsrs510cVYBhOU20ArbQCb4.mft (raw, json) Hash identifier: pewhnPdoJNeHDBPi5mcgF5KRyjvD7pPrmtUAHURsTkg= Subject key identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 Authority key identifier: 49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE Certificate issuer: /CN=49449B46CAECE75D1C558061394DB402B6D009BE Certificate serial: 21C9 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft Manifest number: 2189 Signing time: Wed 05 Nov 2025 15:11:44 +0000 Manifest this update: Wed 05 Nov 2025 15:11:44 +0000 Manifest next update: Wed 05 Nov 2025 21:11:44 +0000 Files and hashes: 1: 6Cg7vrfLUbx1bEkIDCoYYjgRMz4.roa (hash: jvxNASBJ8HYeMGwdmuE0Do8y27av35KDualjxDl1ZZc=) 2: ATDiQVa7Jj6pl5_4jJGxxS0F_7s.roa (hash: BCuFDNtjX7hVl/3kgchlrCUKd45djLfUOZoxOoF5UZE=) 3: BsKRKSP14HMV2MuJplyiqG8gZe8.roa (hash: UZCCmKzoNzVaF2WPr86X28fx6/jvUYBNDRxL0CpmKdU=) 4: EwjhYV-CmPQQud2H6Crvi5nsZSM.roa (hash: MQr8WPZZ5OJm434/duoDl2GetDpNQEyk5dgxTJcEf9Y=) 5: LGzL1dFEcgx2HvjRnHZUEaqM0a0.roa (hash: VXfqzQ0y8qqt7GB0EUujrXiDsSRGCYb15YbbiSOlh0M=) 6: SUSbRsrs510cVYBhOU20ArbQCb4.crl (hash: vsEg3CmHBeg0R+E6QIb2sx1xIP+1mY+NCD9BYBk0b4c=) 7: TNM0bOx89sqLGF8ArkipUAnlSkI.roa (hash: QWfrGSwlS5yPilKaM/EJFjH27owGMxOaXZC8OOAcQgI=) 8: X4JvVuGdcXsbxEDv2fu1SDsj7-o.roa (hash: nS17ZYrG5GzmGNKneTnDmM0UG1AAyXiPtyrsoY0sJ8s=) 9: bgutjGAyJGJRePju94GFjM0Usg4.roa (hash: hepbNeV+GkI0UGcTbTCzuchd2lmlX9j9lBveUHGi5Zg=) 10: ewPuzfo9SfVGDnCVq5QDcf5FnRc.roa (hash: 58YVeTq2wuprv93yVJiYQlI6hmLc19F2MhjQwYFdoH0=) 11: f0ZGUO9bch1Jbut4POBt4zNBCHQ.roa (hash: HGksMQn/YUxBt47YKCnsegoZZk895LLzuOqfQcOcZp4=) 12: fKRKWoNVHasenYqVwcXvWJub9rk.roa (hash: eci49L3yuoD5uSyBYLh0DekEYnElRTpgQGCzlKAVBPc=) 13: pz76TCk7H2wZdRts-v6maSBGQ8U.roa (hash: K3HUiDbVrYBIfzs+mzByHwCzFokHC+XMNvlObDassGU=) 14: wLav8diVujIwKx1aw07gOQsWsL4.roa (hash: DyvLuJFL609u79QsP8lUNkZDdfhgx1CbYAFHu7rGoFo=) 15: wtvTPuhmzVJCd_X7b2rh9ryeHF8.roa (hash: l8TmmsUONvk+RcsfGvugUdYcEvXw0az+pgPY+bq0Rko=) 16: zlTbfC8OutzwAyWNWihTKaBFQHU.roa (hash: CF6792H/L28ug8uEoZfWiV67r6POVtN9sNK2zJHxNEI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8649 (0x21c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49449B46CAECE75D1C558061394DB402B6D009BE Validity Not Before: Nov 5 15:11:44 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=64D4858D6B95A7BBF9F58A6E8224FE0E8ABF6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:f5:c0:ae:a2:40:72:b9:e9:14:9c:0e:27: 46:5f:84:d5:95:35:96:1c:2d:fe:c1:e3:69:f2:e1: 70:84:14:e9:c2:67:ff:96:04:2a:7a:46:37:a3:30: 20:90:11:51:e0:42:a4:26:b2:b7:7d:17:1c:76:12: 48:a3:8f:a3:66:5e:aa:b1:a1:c1:dd:e4:7a:7e:4d: 84:ed:84:e8:87:49:59:03:71:a1:24:47:9e:d7:07: 9b:95:ae:f8:c8:3c:bc:77:d3:6d:0b:e2:1e:56:2c: 82:60:be:11:dc:ee:79:ee:cd:97:c4:46:d4:64:1b: 68:0d:11:81:5e:11:2e:c8:d2:21:63:d9:9e:c7:54: bb:e1:a7:16:1d:0e:94:74:3c:f9:4b:10:3b:43:eb: 6e:d2:77:7f:57:46:42:57:e1:44:67:99:04:44:9e: 23:46:2c:08:ce:34:8a:60:5c:10:7a:eb:55:15:13: 7f:4d:d8:7f:f8:e5:e8:38:31:fc:bd:1b:31:7c:4e: b7:9d:9b:e2:25:26:7f:8e:22:a0:8c:e4:09:5e:8c: 0a:e0:40:a5:0b:e3:2a:83:85:54:b0:6b:12:43:10: 24:9e:a0:b7:b7:86:c3:f9:73:27:d7:36:54:59:23: c3:f9:34:a6:99:6e:a4:d2:a3:ce:12:bf:2e:cd:2c: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:85:8D:6B:95:A7:BB:F9:F5:8A:6E:82:24:FE:0E:8A:BF:61:96 X509v3 Authority Key Identifier: keyid:49:44:9B:46:CA:EC:E7:5D:1C:55:80:61:39:4D:B4:02:B6:D0:09:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SUSbRsrs510cVYBhOU20ArbQCb4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/SUSbRsrs510cVYBhOU20ArbQCb4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6e:2f:1b:62:87:bd:7b:0b:e4:e6:10:51:35:2f:85:8d:1a: 35:7e:c4:a1:20:41:e4:3f:8d:39:5e:9d:ea:8a:da:83:fb:a4: a6:e7:1d:c8:14:9b:00:0d:19:23:a7:ae:65:a6:57:23:97:3d: 9e:e8:ef:b6:67:56:0f:3f:22:bb:ba:60:c6:12:6f:bd:e0:a6: 39:78:a7:e3:36:17:e3:95:6d:97:85:9f:65:77:aa:5c:c0:60: 92:d0:e0:63:d2:ba:c7:7a:d0:f4:49:1a:f1:59:48:db:4c:31: bb:d9:01:53:bc:31:15:41:47:d3:3d:80:bd:8c:0c:f6:86:7d: dd:2b:ba:b6:27:bd:1b:ec:3c:bf:52:b7:a0:7e:ca:37:83:73: bd:9f:dd:37:55:7b:2a:93:1f:55:be:b9:30:7d:62:2d:7f:5b: ff:8e:5d:f9:34:10:0b:1c:d5:29:aa:c5:b7:9d:27:40:c7:e1: 13:08:96:3b:1b:5c:3f:59:85:ae:f7:8e:7c:bd:be:d9:87:26: 75:fb:76:53:4e:fb:4e:e4:a1:3a:1e:32:2c:ed:3a:79:31:92: 06:5b:3f:b3:89:a2:6a:a9:6d:53:06:41:7c:e1:fe:3a:6f:6b: 4e:f6:ba:56:da:07:44:b5:f1:14:89:19:77:10:07:b4:17:08: 1a:de:5c:de -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDk0 NDlCNDZDQUVDRTc1RDFDNTU4MDYxMzk0REI0MDJCNkQwMDlCRTAeFw0yNTExMDUx NTExNDRaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDY0RDQ4NThENkI5NUE3 QkJGOUY1OEE2RTgyMjRGRTBFOEFCRjYxOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx1PXArqJAcrnpFJwOJ0ZfhNWVNZYcLf7B42ny4XCEFOnCZ/+W BCp6RjejMCCQEVHgQqQmsrd9Fxx2Ekijj6NmXqqxocHd5Hp+TYTthOiHSVkDcaEk R57XB5uVrvjIPLx3020L4h5WLIJgvhHc7nnuzZfERtRkG2gNEYFeES7I0iFj2Z7H VLvhpxYdDpR0PPlLEDtD627Sd39XRkJX4URnmQREniNGLAjONIpgXBB661UVE39N 2H/45eg4Mfy9GzF8Tredm+IlJn+OIqCM5AlejArgQKUL4yqDhVSwaxJDECSeoLe3 hsP5cyfXNlRZI8P5NKaZbqTSo84Svy7NLLMlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZNSFjWuVp7v59YpugiT+Doq/YZYwHwYDVR0jBBgwFoAUSUSbRsrs510cVYBh OU20ArbQCb4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4 Ny9TVVNiUnNyczUxMGNWWUJoT1UyMEFyYlFDYjQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NVU2JSc3JzNTEwY1ZZQmhPVTIwQXJiUUNiNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvU1VTYlJzcnM1MTBj VllCaE9VMjBBcmJRQ2I0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEduLxtih717C+TmEFE1L4WNGjV+xKEgQeQ/jTleneqK2oP7pKbnHcgUmwAN GSOnrmWmVyOXPZ7o77ZnVg8/Iru6YMYSb73gpjl4p+M2F+OVbZeFn2V3qlzAYJLQ 4GPSusd60PRJGvFZSNtMMbvZAVO8MRVBR9M9gL2MDPaGfd0rurYnvRvsPL9St6B+ yjeDc72f3TdVeyqTH1W+uTB9Yi1/W/+OXfk0EAsc1SmqxbedJ0DH4RMIljsbXD9Z ha73jny9vtmHJnX7dlNO+07koToeMiztOnkxkgZbP7OJomqpbVMGQXzh/jpva072 ulbaB0S18RSJGXcQB7QXCBreXN4= -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:47 2025 by rpki-client