$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft File: c9IR1bIQ47GWBU23GJLY44pOCe8.mft (raw, json) Hash identifier: Wk0xsvEOaGcNft5YNC8T1sf7TmwceoKpgYEhDwaRQhA= Subject key identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 Authority key identifier: 73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF Certificate issuer: /CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Certificate serial: 010A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft Manifest number: FC Signing time: Wed 13 Aug 2025 16:02:22 +0000 Manifest this update: Wed 13 Aug 2025 16:02:22 +0000 Manifest next update: Wed 13 Aug 2025 22:02:22 +0000 Files and hashes: 1: 0vXteHc651-iGtEnYAlVi-M2f4o.roa (hash: F2CMw2t7dheHN9vVzrGGD4LZ1xy37GXKvI3rpHWp1GY=) 2: 2c8Ulmpg6h1-MFjrqABEjkKAqfk.roa (hash: +kI1cDnssN4lE1X8EXDRL1ogPni9K7woXWF/ZULOyqM=) 3: JT72N6S_EYA3mmlM2ip-AjzM4RI.roa (hash: 4tl/25+uQxAUAN0qFimxxmltHs1PvKl6ZgGgmRH6bP0=) 4: KrPweUb8poxWQmE7_awOEyT67Gc.roa (hash: s3dVFoe3qVPclEdRNZFKTj1ouy/vges/T+hgAPxNUYc=) 5: Uv5VVrhP0-QEM2UqSPmijqEJpX0.roa (hash: PhA9NvD31bMCHHDx8SW/9LwuSzNaMF88snVrToOmHbM=) 6: YM-3CpnHniKHloIYaw4EhJh26JQ.roa (hash: zLTJKj3i9QyPCjkxaEyJvq9y6L9d8J+Gq7CWrgrwhPE=) 7: ZvLhd7aTkc-Zf7rp82hTMIBBKEI.roa (hash: LkSHoQGt2WGRKwQ7o3yNPZum1jyoyXyPJ/rusj7iQPM=) 8: bICgxX9gzfqagwtHn3C-XCZ5K_o.roa (hash: qOLH/4wbzxEHmnkgVYOHGh5jcKt7pnSrYyFM+SuxjZo=) 9: c9IR1bIQ47GWBU23GJLY44pOCe8.crl (hash: 3g/CDjnc8tgmAERqgT5WTzIln9OShPF4eCfILu//oJ4=) 10: dTvljnE8RaQon284MBGb3Pze_DA.roa (hash: rOC1jntUoYQjRXyheD/+ucwXVMndIoLBOPirat2mn5s=) 11: o9c-0vAFreiP5dn3zxHpzRYAHXQ.roa (hash: +cwYJdZm3O7MmEFthMOEswTzqEavVmdybhhfTKCcWXY=) 12: rNKBTWQo7UWNzVh2mXv8YwCgAB0.roa (hash: nllRU1a+VNXHaqGR2zHZ5J+GQLKd57tDgPZdCt4stLs=) 13: uZ-RjhDla49pmkkCc2x-hjnzRHA.roa (hash: tt22xdNbLV4EJMOwvGVKTNH+lbbq6f0hxEgv9XMa/BI=) 14: vngUZyTpb2vIiTJqJGIcWBTP5AM.roa (hash: mnCD/psbdkuG8KujuBLdihNjlwEJvUObk3olUpIz7vE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73D211D5B210E3B196054DB71892D8E38A4E09EF Validity Not Before: Aug 13 16:02:22 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=245F389C074E2E211CFC170EF02A4FB0A3DAA765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:21:1c:84:74:0e:11:02:c5:71:87:ab:85: 4b:71:84:5f:fa:2f:28:8a:82:21:cf:01:d4:4a:b3: 68:4c:24:24:75:11:af:a7:bf:8d:a8:22:86:9e:5b: a9:ed:dd:51:57:bd:cf:78:12:b0:78:e7:62:ba:34: f5:04:da:a8:17:c5:25:21:f6:d0:3d:f6:19:9a:c2: ae:5e:50:b3:ca:67:23:9d:f6:0b:c3:30:af:49:ee: 89:43:e0:1a:aa:b7:64:4a:eb:6f:de:a1:8a:26:35: 0a:1a:74:53:7f:7b:bd:34:ce:ef:24:d8:13:aa:37: 54:80:0b:5f:ac:e7:e9:de:7f:d7:e0:bb:5b:e1:d0: ef:f9:bb:0f:8c:c3:ee:37:db:27:11:4b:66:47:d7: 0d:af:42:b0:6d:a0:c4:53:6f:dd:9f:73:4c:38:0c: 5b:96:50:0d:cc:67:3b:35:93:be:cc:d1:60:fa:4d: c1:dd:13:cd:4d:d3:de:e1:c0:cf:9d:6d:b8:aa:db: f0:76:34:32:76:7e:fa:f9:9e:4e:97:8b:2f:f4:0f: 18:b6:b1:be:3c:fb:1d:b8:7b:be:e2:e7:3b:bb:46: 98:7b:4d:59:b9:a7:58:02:5c:74:12:2c:85:fa:c9: 82:f0:75:e9:92:49:bd:25:74:5d:f8:47:5c:fa:1b: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:38:9C:07:4E:2E:21:1C:FC:17:0E:F0:2A:4F:B0:A3:DA:A7:65 X509v3 Authority Key Identifier: keyid:73:D2:11:D5:B2:10:E3:B1:96:05:4D:B7:18:92:D8:E3:8A:4E:09:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/c9IR1bIQ47GWBU23GJLY44pOCe8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2927/c9IR1bIQ47GWBU23GJLY44pOCe8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:01:64:1f:72:f2:95:91:d5:91:33:12:fe:30:4c:9c:85:ec: e6:19:e8:91:a5:08:ed:db:b0:6d:31:5b:6d:7e:47:25:67:85: 77:7f:b6:60:89:de:1a:e3:08:78:c9:a1:9c:02:46:69:ac:2f: 93:70:c4:a7:87:2d:5a:50:de:34:31:1a:de:1e:07:b8:51:8b: 94:95:56:d3:e3:24:3c:c7:fa:ae:87:c1:90:70:46:5b:65:60: 75:91:fe:43:0e:a8:d4:6a:ac:8c:be:0e:7c:23:b0:10:b0:e3: fd:84:de:b1:8b:eb:4a:8c:9b:b6:cf:e4:34:02:ba:6b:51:38: 6c:d4:c3:4d:71:e8:01:6b:a7:4b:c7:ce:de:06:50:34:ad:28: d5:eb:52:70:fc:2f:4b:9f:c8:c5:d9:e7:af:33:de:54:f7:8f: b4:d6:f4:6f:76:b7:62:6a:0d:9c:e1:1b:de:07:e6:48:f8:11: 4b:84:60:9e:c1:43:90:a3:90:05:d0:09:22:8e:47:41:dc:8c: 21:d5:af:d2:e0:31:64:f9:47:4e:7f:4c:d4:d5:4c:df:ff:3f: 4a:ab:49:cd:68:be:bc:6a:8c:e4:a3:45:64:9a:82:ab:8f:42: b4:29:98:0a:a0:9b:e8:4d:24:be:98:02:f8:c4:54:9f:89:08: 75:81:d0:2d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzNE MjExRDVCMjEwRTNCMTk2MDU0REI3MTg5MkQ4RTM4QTRFMDlFRjAeFw0yNTA4MTMx NjAyMjJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDI0NUYzODlDMDc0RTJF MjExQ0ZDMTcwRUYwMkE0RkIwQTNEQUE3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdDiEchHQOEQLFcYerhUtxhF/6LyiKgiHPAdRKs2hMJCR1Ea+n v42oIoaeW6nt3VFXvc94ErB452K6NPUE2qgXxSUh9tA99hmawq5eULPKZyOd9gvD MK9J7olD4Bqqt2RK62/eoYomNQoadFN/e700zu8k2BOqN1SAC1+s5+nef9fgu1vh 0O/5uw+Mw+432ycRS2ZH1w2vQrBtoMRTb92fc0w4DFuWUA3MZzs1k77M0WD6TcHd E81N097hwM+dbbiq2/B2NDJ2fvr5nk6Xiy/0Dxi2sb48+x24e77i5zu7Rph7TVm5 p1gCXHQSLIX6yYLwdemSSb0ldF34R1z6GxfTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUJF84nAdOLiEc/BcO8CpPsKPap2UwHwYDVR0jBBgwFoAUc9IR1bIQ47GWBU23 GJLY44pOCe8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjky Ny9jOUlSMWJJUTQ3R1dCVTIzR0pMWTQ0cE9DZTguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2M5SVIxYklRNDdHV0JVMjNHSkxZNDRwT0NlOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5MjcvYzlJUjFiSVE0N0dX QlUyM0dKTFk0NHBPQ2U4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACQBZB9y8pWR1ZEzEv4wTJyF7OYZ6JGlCO3bsG0xW21+RyVnhXd/tmCJ3hrj CHjJoZwCRmmsL5NwxKeHLVpQ3jQxGt4eB7hRi5SVVtPjJDzH+q6HwZBwRltlYHWR /kMOqNRqrIy+DnwjsBCw4/2E3rGL60qMm7bP5DQCumtROGzUw01x6AFrp0vHzt4G UDStKNXrUnD8L0ufyMXZ568z3lT3j7TW9G92t2JqDZzhG94H5kj4EUuEYJ7BQ5Cj kAXQCSKOR0HcjCHVr9LgMWT5R05/TNTVTN//P0qrSc1ovrxqjOSjRWSagquPQrQp mAqgm+hNJL6YAvjEVJ+JCHWB0C0= -----END CERTIFICATE-----Generated at Wed Aug 13 19:12:07 2025 by rpki-client