$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft File: ze9xEd6YvXVtkrNNOU2i057_m44.mft (raw, json) Hash identifier: NgcNrOBZOk04LydYHGkf2iRP478EXq3P3bc4+TFOtGc= Subject key identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Certificate serial: 1AA8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft Manifest number: 1A8A Signing time: Sun 01 Mar 2026 18:58:29 +0000 Manifest this update: Sun 01 Mar 2026 18:58:29 +0000 Manifest next update: Mon 02 Mar 2026 00:58:29 +0000 Files and hashes: 1: 2d6rF1UDQxIllkatRJ-mr7m8oMU.roa (hash: TcwupRd15YY2YBpxfUhRaB1v/FIyFEIC/0XkNL/OqVs=) 2: 3h4UlH8rturnB4QapfzB-Bsm90k.roa (hash: qQsALApbC/rcAJSFGaRv1cVh/mwWW7x3ZIWoHtT5m3c=) 3: 51v1-7SFbAKyzOgP8m3zjCVF20k.roa (hash: YeaFYnUGhbnnXH3z+ewuydIgfUXImYLgVAeKpsebS5A=) 4: DMIVqIjJ_jltTHfNxL6qirO1_zs.roa (hash: 6cpAi0dLew9Rg/JUkeoBYdEkKqFO57HbTeJVB1C5vBE=) 5: DtXFiS1ZqnLEaj5mYPqRgWbveZE.roa (hash: 9UDe15X3z7TQUw8ynv5RZspb5vMUBZ5xuNtQIJ8H8X8=) 6: Fo78m_53sv2UreqpK1C1g0cP4YU.roa (hash: jN6lOwJe/qvq++j5f3RSMMZUWBXlZkPNVyPuX1dD11M=) 7: L88njL-RSCT73Exz_J_pLjWlCH8.roa (hash: jsxgJ//CrUroJuIpDq3P/HmRXHvoGFTn36ayjffCqbI=) 8: Xao8lV89CRRujaNr2axAr2UyyIU.roa (hash: EET3Z91LH1uCFtvF0vTuHKfXCUx1vZzSPBZBl1olXks=) 9: ZS3e5nvnMySPCInafYFN5aUd56U.roa (hash: BYFyyo++yIGa6yY1hX4q9CXztJ0lmx5qwWcDMefzmpg=) 10: _Qi0u_xsBCZh0RUOlAHMneI6usk.roa (hash: tNEGk6IOtihyy/XIhc/2jS3KpSE6LcMgnqkNJrMNKpI=) 11: dtCK1EjXFWYXvcTKS3JoyKwOOgw.roa (hash: lhkJ0q8p+wEHMs+h16MaGGdIX5J4f5+rwlOqLwX0Pg8=) 12: hpDRfZfLbmty0CpK9okCo-erNLg.roa (hash: A3GQyRKjDPG/OkNmlsS/2/RH9HbpUXi8SqknTsbjBX8=) 13: jvMSmVTUb2buHeUA9SfLy7hqNyw.roa (hash: /acNPSvaXnOowShGBXGV8JWqb6RFZAMpsGglNuyoRtM=) 14: kL7BXOVSEqv4pv7k7S2vuCeaKN4.roa (hash: MsNx+/cWYgFL+xQO0TGNK0mvMOQr9/WEcDEv4Opq+wc=) 15: nPySr4YUqcjT2Vau-79AwhEOv8w.roa (hash: SkIKGfMA4XgJ3CotbHdXw07DfT2hbxWkBgIruCrvUlQ=) 16: ze9xEd6YvXVtkrNNOU2i057_m44.crl (hash: nLVAeyGz3j5EmePjtHWFga/TAezrlb85AxiLT3UYh5Q=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6824 (0x1aa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E Validity Not Before: Mar 1 18:58:29 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=2A30BAAC6C80DCB960834B58D4E4945741F7D779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ec:c1:50:fb:62:2c:ae:7e:1f:1f:c5:69:be: 9f:6e:8b:51:05:a6:a8:80:48:d4:d9:8e:00:d2:b9: c3:8a:5e:7a:e9:d5:66:b5:e8:f9:4f:88:d2:09:34: a6:fa:6a:36:b9:3a:41:f4:b4:fd:81:c1:2b:51:b5: 06:3d:b0:07:02:df:6a:5e:f8:d3:91:23:6c:e1:40: 22:53:de:88:d2:52:76:1e:ef:fd:57:ef:55:9d:75: b9:25:43:38:cc:48:4b:73:69:11:37:9f:51:4f:92: 91:1c:a6:85:f0:56:8a:62:87:1b:0c:13:00:37:44: 5f:62:62:d2:3f:83:27:1d:85:1a:d6:d2:5d:9b:fd: f8:f3:14:83:47:27:32:da:2c:a7:2b:de:6b:ec:d9: 4f:e2:ec:2f:3e:e3:2a:37:24:32:af:90:8a:2c:5b: 5f:e5:8e:07:17:da:30:68:b0:05:b9:58:48:90:e7: 28:c0:d1:42:c9:96:20:37:c4:d1:49:bb:a5:0d:4b: 34:ae:b9:92:eb:11:db:ef:23:27:8c:48:d4:94:79: e0:58:af:a9:fd:50:8e:d7:81:d3:f6:05:bc:11:81: 6c:f2:7b:34:9a:d6:7f:da:16:1b:6a:ba:92:b5:c1: 30:3b:aa:f2:e8:c9:7c:fe:7d:de:c7:ec:3c:ef:2f: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BA:AC:6C:80:DC:B9:60:83:4B:58:D4:E4:94:57:41:F7:D7:79 X509v3 Authority Key Identifier: keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:43:ae:a4:ea:7e:55:d4:33:c3:ab:f9:5b:61:fd:d3:47:4f: 23:ae:b1:4e:14:af:fb:60:e8:75:e2:d9:92:1e:4c:54:23:f6: 07:95:33:a4:fa:d9:fc:21:c5:bf:ff:9a:23:18:df:fb:db:f8: 05:de:08:42:bb:62:91:2d:77:81:1a:61:8e:ca:34:1d:42:7a: 9f:7b:dc:0b:af:fa:ad:38:f7:ed:54:64:be:46:04:da:aa:c2: f5:d3:73:a1:66:43:0b:2e:c0:2c:65:d9:7a:7f:df:98:80:dd: 79:7b:d8:4f:33:d5:c8:a8:58:20:1e:ce:2a:6c:63:af:88:37: 1e:a8:00:6f:40:6b:a9:32:4d:1e:64:40:fb:ed:cd:29:f2:66: ee:d3:9b:bc:74:21:79:4b:62:d9:c0:92:ee:f7:3b:06:50:21: 73:3d:e1:77:fd:bb:f9:42:de:2a:f0:d9:7e:61:22:34:5a:8e: 47:1c:7c:ea:07:4c:91:eb:87:dc:48:c7:a2:2c:ba:bd:c8:0b: 65:38:5c:15:ba:39:b1:be:c7:e7:0f:76:b1:92:25:d0:93:f0: 39:68:61:e0:f0:9a:a7:28:31:0e:db:ab:cb:e6:8c:2e:38:a2: 71:e4:49:52:c8:1b:3f:94:62:a4:da:f3:a6:38:bf:3d:19:de: e9:a3:9c:1a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICGqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNjAzMDEx ODU4MjlaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDJBMzBCQUFDNkM4MERD Qjk2MDgzNEI1OEQ0RTQ5NDU3NDFGN0Q3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw7MFQ+2Isrn4fH8Vpvp9ui1EFpqiASNTZjgDSucOKXnrp1Wa1 6PlPiNIJNKb6aja5OkH0tP2BwStRtQY9sAcC32pe+NORI2zhQCJT3ojSUnYe7/1X 71WddbklQzjMSEtzaRE3n1FPkpEcpoXwVopihxsMEwA3RF9iYtI/gycdhRrW0l2b /fjzFINHJzLaLKcr3mvs2U/i7C8+4yo3JDKvkIosW1/ljgcX2jBosAW5WEiQ5yjA 0ULJliA3xNFJu6UNSzSuuZLrEdvvIyeMSNSUeeBYr6n9UI7XgdP2BbwRgWzyezSa 1n/aFhtqupK1wTA7qvLoyXz+fd7H7DzvL8iFAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUKjC6rGyA3Llgg0tY1OSUV0H313kwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvemU5eEVkNll2WFZ0 a3JOTk9VMmkwNTdfbTQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABxDrqTqflXUM8Or+Vth/dNHTyOusU4Ur/tg6HXi2ZIeTFQj9geVM6T62fwh xb//miMY3/vb+AXeCEK7YpEtd4EaYY7KNB1Cep973Auv+q049+1UZL5GBNqqwvXT c6FmQwsuwCxl2Xp/35iA3Xl72E8z1cioWCAezipsY6+INx6oAG9Aa6kyTR5kQPvt zSnyZu7Tm7x0IXlLYtnAku73OwZQIXM94Xf9u/lC3irw2X5hIjRajkccfOoHTJHr h9xIx6Isur3IC2U4XBW6ObG+x+cPdrGSJdCT8DloYeDwmqcoMQ7bq8vmjC44onHk SVLIGz+UYqTa86Y4vz0Z3umjnBo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:04 2026 by rpki-client