$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft File: d1a8u4G6ySFoe23DL0DCd0K0b44.mft (raw, json) Hash identifier: 2tIgQ9BIA8cH+PAdp6Oi826z2K1fRyiZj/FrIfaH+04= Subject key identifier: 43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65 Authority key identifier: 77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E Certificate issuer: /CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E Certificate serial: 1D9C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft Manifest number: 1D9C Signing time: Mon 02 Mar 2026 09:58:35 +0000 Manifest this update: Mon 02 Mar 2026 09:58:35 +0000 Manifest next update: Mon 02 Mar 2026 15:58:35 +0000 Files and hashes: 1: d1a8u4G6ySFoe23DL0DCd0K0b44.crl (hash: D992ahKSdqIYRbQrZU2qV/qA+arxn5iprX8OPUHhrR4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 15:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7580 (0x1d9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7756BCBB81BAC921687B6DC32F40C27742B46F8E Validity Not Before: Mar 2 09:58:35 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4328078950BCC87D9439C57F9FEE8A8A36A87F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:84:7f:79:5c:b0:4a:19:5f:01:60:db:95: 0f:df:72:cd:cc:72:e9:27:40:66:aa:2c:89:05:7f: cf:3c:46:e2:98:d7:7f:74:e7:e6:f4:89:96:76:54: 71:99:30:8b:ef:8b:f5:a3:4d:47:8b:36:7c:66:0a: ce:3f:a3:0d:0f:e1:19:6d:f9:a6:c3:5f:d1:1f:70: 4e:30:46:4d:bb:46:12:dc:91:cf:e5:cc:5e:b4:54: 81:b0:b2:41:e8:58:4d:c7:75:36:6c:aa:8f:be:c1: 22:b0:87:b8:bc:a3:b4:be:8b:3e:ca:d4:b4:4c:9f: d6:40:4f:d1:2b:59:99:1a:5e:cc:a6:05:45:a1:63: 4a:82:be:ec:54:f5:b1:93:df:85:96:98:6f:f9:db: 9c:ba:94:b4:60:45:4a:36:ff:3e:c7:05:d4:5f:57: 54:14:08:1d:06:25:36:43:bf:37:6c:fc:04:54:9d: 91:eb:c7:09:38:fe:6f:d3:11:a6:3e:2a:a3:68:16: 5b:96:f5:91:d5:b8:25:5c:0d:8e:7e:c9:cc:4c:0c: 38:a1:c1:16:e4:ef:49:f4:a2:93:71:41:19:5e:cc: ba:c9:4a:1e:0f:7f:6d:ae:36:cc:3d:38:a5:88:32: 9c:a6:ca:6d:a2:47:ab:20:4a:d9:c4:1b:55:11:bf: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:07:89:50:BC:C8:7D:94:39:C5:7F:9F:EE:8A:8A:36:A8:7F:65 X509v3 Authority Key Identifier: keyid:77:56:BC:BB:81:BA:C9:21:68:7B:6D:C3:2F:40:C2:77:42:B4:6F:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d1a8u4G6ySFoe23DL0DCd0K0b44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3015/d1a8u4G6ySFoe23DL0DCd0K0b44.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c1:86:ea:10:55:2b:98:d0:b1:46:a1:57:88:a5:68:7a:4a: 5d:cc:de:52:e9:c7:98:1f:a9:16:cc:81:1b:fb:60:ee:1e:ee: 37:f9:bc:2e:61:39:5a:e8:70:2d:25:c8:cd:1e:72:9e:2d:db: 93:3e:a0:16:01:98:05:e6:3a:ce:d6:22:17:e8:f0:4f:a5:6c: 4e:b9:cf:e4:cb:e3:0c:35:25:08:80:68:f5:0c:f2:5a:ab:c9: 9f:32:bf:fc:ab:b3:0b:9f:ff:2b:e4:f7:ff:5d:68:31:e3:be: 80:10:df:24:48:df:32:6e:ae:43:6d:8b:56:11:91:2e:ff:b1: ba:84:85:ce:6c:d6:c4:f5:d2:92:86:af:85:87:ce:82:23:ab: a6:c3:75:ee:96:be:6c:3a:82:59:06:80:74:5d:1d:f8:72:63: e2:76:98:22:61:8d:ea:7e:90:a2:6b:bd:d7:8d:6d:87:23:41: c0:bd:5f:73:0d:81:3f:fd:ff:fa:d8:55:83:6b:55:c6:fc:ac: 17:04:4e:c2:f5:06:00:e0:4e:9f:f6:a8:4f:8d:bb:e1:f3:27: 8e:90:b4:5d:22:37:f2:3e:d3:47:78:3c:e9:09:4a:86:d2:b2: 8b:0e:2b:2c:d3:ad:f2:1f:b3:7b:ff:35:15:c7:a9:78:03:01: 2e:88:ca:42 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc1 NkJDQkI4MUJBQzkyMTY4N0I2REMzMkY0MEMyNzc0MkI0NkY4RTAeFw0yNjAzMDIw OTU4MzVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQzMjgwNzg5NTBCQ0M4 N0Q5NDM5QzU3RjlGRUU4QThBMzZBODdGNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKnoR/eVywShlfAWDblQ/fcs3McuknQGaqLIkFf888RuKY1390 5+b0iZZ2VHGZMIvvi/WjTUeLNnxmCs4/ow0P4Rlt+abDX9EfcE4wRk27RhLckc/l zF60VIGwskHoWE3HdTZsqo++wSKwh7i8o7S+iz7K1LRMn9ZAT9ErWZkaXsymBUWh Y0qCvuxU9bGT34WWmG/525y6lLRgRUo2/z7HBdRfV1QUCB0GJTZDvzds/ARUnZHr xwk4/m/TEaY+KqNoFluW9ZHVuCVcDY5+ycxMDDihwRbk70n0opNxQRlezLrJSh4P f22uNsw9OKWIMpymym2iR6sgStnEG1URv8mBAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQygHiVC8yH2UOcV/n+6Kijaof2UwHwYDVR0jBBgwFoAUd1a8u4G6ySFoe23D L0DCd0K0b44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx NS9kMWE4dTRHNnlTRm9lMjNETDBEQ2QwSzBiNDQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2QxYTh1NEc2eVNGb2UyM0RMMERDZDBLMGI0NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTUvZDFhOHU0RzZ5U0Zv ZTIzREwwRENkMEswYjQ0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAnBhuoQVSuY0LFGoVeIpWh6Sl3M3lLpx5gfqRbMgRv7YO4e7jf5vC5hOVro cC0lyM0ecp4t25M+oBYBmAXmOs7WIhfo8E+lbE65z+TL4ww1JQiAaPUM8lqryZ8y v/yrswuf/yvk9/9daDHjvoAQ3yRI3zJurkNti1YRkS7/sbqEhc5s1sT10pKGr4WH zoIjq6bDde6Wvmw6glkGgHRdHfhyY+J2mCJhjep+kKJrvdeNbYcjQcC9X3MNgT/9 //rYVYNrVcb8rBcETsL1BgDgTp/2qE+Nu+HzJ46QtF0iN/I+00d4POkJSobSsosO KyzTrfIfs3v/NRXHqXgDAS6IykI= -----END CERTIFICATE-----Generated at Mon Mar 2 13:11:01 2026 by rpki-client