$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json) Hash identifier: aiU3hXaN9oOk1oBr/Chvg3Pe9L0dSXxpdGPGVH2So3g= Subject key identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Certificate serial: 23C2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft Manifest number: 238F Signing time: Sun 01 Mar 2026 21:30:46 +0000 Manifest this update: Sun 01 Mar 2026 21:30:45 +0000 Manifest next update: Mon 02 Mar 2026 03:30:45 +0000 Files and hashes: 1: 0hz4vNpH3cYN4VjuM-aZulOR3xo.roa (hash: UzrqhvqM/vUaLsqN+HYGAXOMhCi3XMeKr1jILgQBeko=) 2: 0wKnIyHvpa--iEv_L3renDCAgT8.roa (hash: uj/GurZ0qjYVKzqfziLaKGT30H6iKhzlEVbKTikKMbk=) 3: 7oLS56oLVWQFgDJ7G_OKBqedppA.roa (hash: Xli3CG3IdoQFF03jX9bVA/eHMfGcRvd4jeO2i69pgdY=) 4: 9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa (hash: 7fpEo72xVWsTXdQ08RLuiMacVL4oX9ZxFxBl4Vabug8=) 5: Ga7f36EbcZFDn5BnJcKbsVFAxr8.roa (hash: sKcV/wEFZpASBMvxX6N49WW3WHRyegqNqDOxs98YFbw=) 6: JXBvtyiel8g5EFEAPwcrGCUlCkk.roa (hash: LTgYpvl1WYnm27KZkGoPowwvAQ+ZX3pfeCO1+mhQKxA=) 7: MiXQWz4bAKLej3UXD7mJ0zUbWU8.roa (hash: Rez9UnU+HmL6iBYkHp44DZ2hyEVCrlcqYS5/ZqQdOmo=) 8: Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa (hash: pJe5kK9bBr3GgNUP3olkRHuMNbfpo6YsuKoUg923rTQ=) 9: XXKUC_jUdfsh3-6DY8kDdpvzUuk.roa (hash: VYF+iRwgE2+53/k7HEAnfhbiGDtC8oHgOZL9gcS5l0g=) 10: du9-idjLhmtNt_WZGjHodsNhjEY.roa (hash: AFHHViraLULCCoUufLllkUnnYJFSfAD6sMCSyYmKGsk=) 11: dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa (hash: J+wxu7PUXukwaqOd79OiV/+BrBdd6vjr69m461cuf2c=) 12: flWTftPRRPlV7_loC_xCo-gcWjY.roa (hash: 8nVSzRzOhOCytqAcbzza2FP2A4PsSkJk8sgSN7CHxrA=) 13: lUwqF2RNonoOAHSe2aXPq5--wKI.roa (hash: epnHvBLwILdL66Sw1EsD9BIB0tPp0TvbrcV5gSlCG64=) 14: qOLhgoeMZdL-R63125U-Km2EXxw.roa (hash: vf5E/o4i2S9UWzveKFEsoCO9l+wgDrWyLO9Az9PNUeI=) 15: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: slX0EeuV3MgxyRcZbo5IWhHSzmRtQGftojKCvcAwzn8=) 16: qsCwaakU-eUnX_rSpxh2R-rSnHc.roa (hash: WLid4nIAEdFXZg0aJzBF9Xq0xaE0KIHJaOm3IVQw9CY=) 17: xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa (hash: dALwqyjBUdwVle+qUQNQTDOuYrdy5Rb9aGIhuX+SCj4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 03:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9154 (0x23c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735 Validity Not Before: Mar 1 21:30:45 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e: 31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed: f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d: 82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6: b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87: 86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89: a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b: d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a: c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4: fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca: 56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9: 34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c: eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2: 2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd: ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f: ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a: cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B X509v3 Authority Key Identifier: keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c7:58:24:05:d0:d9:31:74:44:6c:16:f2:b7:5a:3a:96:0d: 20:58:5c:75:c3:8e:55:ca:2e:79:aa:4c:ab:cf:d3:7b:39:13: 88:24:75:a5:b6:c6:97:bf:fb:b9:95:40:7b:43:6a:09:e0:15: 05:51:c0:3a:66:f5:ed:0b:b5:62:bc:d6:e0:5a:fd:4b:b4:29: 4c:81:41:26:26:20:7c:0c:e7:70:9f:7f:a4:eb:eb:e8:dd:7b: ed:46:8a:c0:55:d0:9f:48:3a:9b:1c:9f:f9:9c:7d:22:cc:0f: 64:03:0d:7c:f8:65:79:51:1f:59:a4:4c:eb:fa:03:12:ef:0e: 8f:7f:8f:46:72:ed:63:ff:5b:5a:a6:e2:c2:0e:f2:0b:53:a0: 44:f4:a1:84:5a:46:dd:5e:49:cd:31:c5:1b:99:e8:6e:50:26: 45:37:ca:dd:fe:13:f1:6c:9e:5a:bb:06:fd:32:09:c0:15:f5: 49:df:3f:06:bd:ea:4c:63:75:fa:9a:3b:9d:f9:fb:ae:98:61: 32:41:7e:26:dd:53:0a:df:5b:26:c0:c0:7c:82:bd:41:ec:0f: e1:a6:b7:03:c6:06:3f:ef:44:29:2f:7d:1d:13:b7:95:9a:f0: 67:00:65:23:79:85:1b:8e:47:14:f6:fc:6b:19:4e:d6:13:ab: 9d:46:50:c8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICI8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNjAzMDEy MTMwNDVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJDOThDRkRCQkM0OEE1 RTk0QjMyRjJDNEE3NTQwRTVGMjRBOENCMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWdDDyTkYSAnZCGDxdjjFlh6AN/0+xkmSPgmvC7fC04g1t+aVa Q4tZ+NV7fYJJcWaCdzLehMi6Y/oBxrHk65RHubgu8vZZSkajh4a08A8lCvSjAAuU G6NDiamAIMdKhRLcrE71FYCfm9SRJXsV6YtRQd2T4PB0SsQfdnJGDimylwcAvM3l pP7hOBlUn4W4cFctjP67yla7DNCe2R6hlxbj/JmU6TQeD2n4bWMEkTBkrEY+HOu+ 9NIs/ePKEv4Z5Q4CsipBv/fLGgPh5UpTGwaeze2OHY6ADJhXg1JDmO6/j+zro8kV oMBJMN7g9wBgCsyJWN3UI4RFeC1Q/PdUD8iBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUvJjP27xIpelLMvLEp1QOXySoyxswHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4 OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvcVRxR2NTYUVweTVk OUI4QXI2Qk1Yd0dwZHpVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMDHWCQF0NkxdERsFvK3WjqWDSBYXHXDjlXKLnmqTKvP03s5E4gkdaW2xpe/ +7mVQHtDagngFQVRwDpm9e0LtWK81uBa/Uu0KUyBQSYmIHwM53Cff6Tr6+jde+1G isBV0J9IOpscn/mcfSLMD2QDDXz4ZXlRH1mkTOv6AxLvDo9/j0Zy7WP/W1qm4sIO 8gtToET0oYRaRt1eSc0xxRuZ6G5QJkU3yt3+E/Fsnlq7Bv0yCcAV9UnfPwa96kxj dfqaO535+66YYTJBfibdUwrfWybAwHyCvUHsD+GmtwPGBj/vRCkvfR0Tt5Wa8GcA ZSN5hRuORxT2/GsZTtYTq51GUMg= -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:25 2026 by rpki-client