$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft File: sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft (raw, json) Hash identifier: +ljI/hqM6NabPiLbAK0OcqLg5kowfkG2jqAYJSmua90= Subject key identifier: 70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708 Certificate serial: 2303 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft Manifest number: 225E Signing time: Wed 05 Nov 2025 10:15:09 +0000 Manifest this update: Wed 05 Nov 2025 10:15:09 +0000 Manifest next update: Wed 05 Nov 2025 16:15:09 +0000 Files and hashes: 1: -B9CGUz8J1scU_M3Fi-lcksfsAA.roa (hash: YD0jFuaVOKqUDo/pY/PT/0oWG21GrDmmJUTPB9oPyow=) 2: -dEmjzmrp3St91V0F0SWkxSM9vc.roa (hash: g2kE3Bmiw6EV6chD81xuqIUDobmIG4QjS3/4lIcf16E=) 3: -iqey9zHJBIPFaAPFlLLzScN7QM.roa (hash: sCSgZcMdpxa9wOlXD4WFlKgI2DAW8y67DiQhtq1UgBM=) 4: 1IIgpi_sz5RY5VQ_bt580-fWcAc.roa (hash: ezpPqow3iSYQrdptIMzWjF5mocNjgDTWlLrWeT4Elq4=) 5: 1ySI3jBnajWatU70tsq1f6s6Eng.roa (hash: 6QckF70I3VSEr81dkehqMtOEyhEC85qv3c4lTdJnr1Y=) 6: 2PjHUZSI_y0JfAIUqmAYQJMp52Q.roa (hash: l3Fkt+YVOUAyuS3dB/eo3mGNW0oZ/PK+5DC6fQRB+DE=) 7: 6Zl0eBnY7mV4bHxmBlSAlZkuu90.roa (hash: VC2ZE485Tz9kJpsWMGvELTXlGcfO+c5nijj+WytKub8=) 8: 6rNkEMwVU98JkGu3MkgIu3jrv90.roa (hash: 2nzkGKO/Q0izzXjrOG20ERt6zT+SkarGb275gWfb8Hg=) 9: 7cKNbHCzvxU6DhdU3W8ob_RzVD4.roa (hash: EYQsAtU8l/oCVuRFsihHv5dKlKDdAyLbmcyPyGj9Nrk=) 10: 9N0DmiHc5sYqOByshJDwmHs3fnw.roa (hash: aS4esybjp0VrUr6VZjn+hpnrn5QY9g34AoVK8f/C31w=) 11: AwDnNdlXhmtGC0ugiFb2pDyPhu8.roa (hash: O6tb1orxfnA1ChZUEGxluLrgm0rspr2hFs3bSnjZsKQ=) 12: BcoIhNLXAk_MeR_es7VC-Hq8E5c.roa (hash: bbUHi1fzb2B2KpHotp6GJiaeELWgjCP5WOc4FU74NME=) 13: CZs_Ni5V2gSCjdV78asso1QzGco.roa (hash: z+5V/AgcfNiocZ4OSlh0JDUtnLm9sPDAWh31QNuUcM0=) 14: CfQDx2RPobQ8ei_G8oDyZOBbY6Q.roa (hash: k8NZo9u0YoK71vYenzVDhq4GHFw71niInyzuEbKMm90=) 15: CrIFnN0NEgKCMYmOJQwvOsAXVbk.roa (hash: EJnrpL3EcnjXhSbmqpd0W5EcUoKt7cGvCRuBMaCdot0=) 16: DNdrqkPkUBCvG0OBVHQ5nsSkV08.roa (hash: 3koK8eWBSKquEfgNQ8sfKqT4Y3nIRsxkD2qm3afCQ+U=) 17: DjYhqm8XNcgCYNb0ewnkzzwsjwE.roa (hash: bjV2xZw8SGNl9hlijZaSib/E1EOVGdGdF9Ied8Qr6GM=) 18: E4PP_3uLA1Cw55bmak1f9JGRRx8.roa (hash: 0iP+XezUxrgE6cPJwsyPP1KKF81wf6Crs0sK+eDfBj0=) 19: EExzCfqhzEPTvKs3n3_pPfHSG1M.roa (hash: nd5SJw+9I3Y4ZD1q/qhqcNyVh+RWp4rRS1xXvOpjSyg=) 20: EYtpg2Fpt004YOeleKbQ5n2KMKE.roa (hash: xykkMtbe/DPlhm+qihoVPEMoIuK1LIQt1hlLozqNnIc=) 21: Fo8e5Zb-PVubJnnh9Uzuv-lOTrI.roa (hash: kfAJ+9FpCgjv2uBV+TEVwaKHUFstqswon24ANpwh1vs=) 22: H73cHR4ff5BfoDuHTKEK9stP98g.roa (hash: sdRzuzq31LeGj+B6OafwVVbnhvm65S77D0j6Nt/s8FE=) 23: HVx6Ak2ORWLwurMuf8L8yw8FlTw.roa (hash: ogRA8hiukAGwxntF9Pn5aum/qW8GiyuKPFXydsVpBG0=) 24: ITJ-lclbGVbML0R7d-vK6Sq2_uI.roa (hash: YESApjrIqSBLUbBkcmKarI8NcsIat2JW6xmNWcbNiEY=) 25: IZ4YCHgcjpkkOwClRI4xgO5kW-8.roa (hash: dHShnRgenGZw938sHM37JJd11wNzAwCG8LhiuALmcKc=) 26: I_yUfdeufBrasGDj6tlyOFMWmMg.roa (hash: TySkQ9SimG8Jp4VlBwqL4O5fpRTpUS1Ck/5Dy1Bdp7w=) 27: JTLwElYIefHasWXqYuKR3EWN7bY.roa (hash: venSy3U5aHWSeY4DFKqNueACcmsfh1BCVAU799UyEeg=) 28: L8FIC0D50FTzJv7_QFKjRNqd8oM.roa (hash: XhPqa1fT2/P0W8hhq7rzeHTGziJSJK4gqUUg/f5hKWQ=) 29: LW0D-IfLZF19h4GVLvBxQ-vkj4Y.roa (hash: kLMpomRHPkhhPs9JM6g7EURjHXkStEYUdHWItoWnf6I=) 30: LmRdUOLN-kjeUWjiT9F0EbJPC80.roa (hash: oUXbwldc730/5lcW1WgbTEDpHpsHjpaUMG8RszcfG/A=) 31: LzhrLvnoJW0aGCrr2pMpxADC_tM.roa (hash: rCCsyq7KuWJYrpkviTjmCGtIJdrguYLWsVXmHDwFo2s=) 32: PFpWuw1FyFC_eFCQM3ElExbhB4g.roa (hash: jmAU+kkp/hPuZnDLgL3JVMM3MVDo1sRvGZwWNwf+lv4=) 33: QpV6nLVqoe2CrAWDkAwUygiRpIg.roa (hash: qGZB4v9IR2W9wOVyS2pgZco1OLZ1Ybim96x7CQI6bdM=) 34: RImqL2wQuPV6N1yaU8ofLwOs0eQ.roa (hash: pvVz2+Tvav+K3Ua+sgadToliNvtPshZneijnHlHkN1M=) 35: SCwb59CNQVCU16AmlWlfv3_zVME.roa (hash: NBfnnFxmlwU+ivV0yq/tNwbvzh0AbMxSw+LKEUJlqp8=) 36: T9pRdlsl6fg6K7jfughxYK7CyN4.roa (hash: RebulTZNG/vtXLpKRJoQnTONdtdNWq8QUpc8qmEPx1c=) 37: VYvc0WYrHh5wlIocYAAWe16PlT8.roa (hash: V0VWl58HwmOflFg/8JbWqa8ybFSyuUqIzHGuThFEkH8=) 38: Vought8Kg91Vs3gr3JyNoi27jTQ.roa (hash: ImMnT7weEGXYWytPNtkIc6HxVdmWN9pXhiUnMcenmb8=) 39: Wl72acSPfMZ_-Bo1FFwyZAL2vHQ.roa (hash: hySWu3LAhanaGw5D3zmIYy7doZuepnu9/JPsWdNeGlw=) 40: XGoKwUMQogcQFSKg0HVndGSM_C4.roa (hash: +REXPccvZJLbJeGJLWy8ggUgi4bhBUx4B/VkZS3CImI=) 41: ZacAFC-vejIYocTUXbOxVXw5ibE.roa (hash: fsh7dJ1/BvK82kfwRxQYMNDOmNbq3w6U80nX7K+hWzI=) 42: _kYE-Wm-icz2m-DV9o6uFffwScY.roa (hash: 3JVq1tbyJZD+ITwxj0sBAi2QyihiWD9Zvc6IaKmB+wY=) 43: a7L_07koyPh5_E3ty4kZUu5VtoY.roa (hash: dBeSDiTPBb65QrxLS13TO64umQ7Cfy2EttAVhG9XAP8=) 44: bdkp1Giuk58G9zvgcZpy81qQE5o.roa (hash: YgqHbA4VDHluNabgKNSs/305ak3OnHJ+6CbPuj1dCBE=) 45: df0pLmZ7mhxLzZLYzEfUCUs_FQ0.roa (hash: ofJX+uTbB9SRnzmr1dUgEW+yUuWxDAYktAQChsfNRhM=) 46: f4xz75YJ0CsbQdGDsqIHk7YiyN4.roa (hash: IH6eh9ssqqy1jmKk6bmphAQ503e9w0A5X09zCc6p028=) 47: iNjffKRfq1pdBBKFLzXkpbR3UCE.roa (hash: VELR72xPLo3UEZmR8pwjjwA1Q2GBJqPhEmsiQ2GdWhA=) 48: jdk-CSjp-DnsGgxKtNBly3BZLFI.roa (hash: +c7IxUXSeUZyt/aC1lx5lCauSTiFamk05J/CR/f7OLs=) 49: kgr_tJuAU5aMehi8A24HieBDxYE.roa (hash: ++UAW4qrbMj7dzNdeU+MFu8S71u7vkpSDDRcD6UxGsk=) 50: lV8GgcR7O83g2cAegfliD7WU6ME.roa (hash: 5+Ny8kjTfkevzRlJ6fiF3+RDWcqcwJiVV1myrcVULuA=) 51: niDO0bqTwMJ05UyyUog-eWa_UyY.roa (hash: KfUEndsJfIhdasUYWPxebXkoUObHyvy7NgBNShq/IdE=) 52: oyvSlJKAnDZ9Tara9Qopu97jpCw.roa (hash: Tiq+I9nL61MbqaXmMbd/B4LYxZZscoZzJLLb5kH/QyI=) 53: rVGFZWWbX6N5N0vAgeYrq_SA0Pg.roa (hash: Q3Sx/XX7npymXAh4WZzZrN+7I+7RNotN30Ms5sgEFnc=) 54: rxyDbiHjHqHktzT51WBKvqlD2ak.roa (hash: RP/tjO7vhVUbJRR8coeqd0k2i51BmSvwo+RTVGbrXUo=) 55: sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl (hash: ZU99FEZvmGIwKzsAMYQMfU5yAahTz6vUkxVXrw8ts/E=) 56: skOiHUAuStOibgWnXkZPTQHXwic.roa (hash: vJsU9qOA+657IL4UeFtUAFdZjOKe/Zjb56ZpbdWiXoc=) 57: unECYORprGtkFNHjIqFP1D8mFGI.roa (hash: WpTFyuLSYvX7DRF/XPeyaRA1m5Lwotn263mTwV5KSXQ=) 58: xqMngYF6o_FDcv3kBmsCMk11U9Y.roa (hash: MSt24a56MCTma7VAqromKvi19uCWmTVWhlSJ8fVLNcY=) 59: ykbKfmt8nVGdkDpLB2La71WqU3Q.roa (hash: 5FSSQ06+WtC82oVX9kkMyF+EiQU92a3xnzvUYGpyJeY=) 60: ym0X18TYTkSyYikEbl_NT7RLX4g.roa (hash: PEyNkdr0lIc91yuhmJd/PA9SM2yu8b1bSm7NOfg5xLg=) 61: zm4R_kCop2BzQPynXpR13fGwUgQ.roa (hash: 6WCYS9qHCi1md0uGLJk9jrZsxrJFMoiAvB+5DVzMIvU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8963 (0x2303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708 Validity Not Before: Nov 5 10:15:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=709D2767D865E6BECCF1F640F30794F5EC0800ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:88:f8:9c:de:4a:a8:b4:7f:66:46:5e:4b: ad:9e:67:25:04:f7:94:14:9d:82:ea:f5:4b:c3:30: 20:f7:b2:7e:31:92:f3:76:7d:c2:fe:c3:fc:9a:8f: 09:e1:14:68:7d:77:dc:dc:e0:5b:95:9f:ce:c3:ea: 51:89:1a:77:a5:2e:34:ba:41:6e:50:c8:0d:cb:07: 35:72:91:9d:8f:2a:06:1c:f7:7a:53:34:b9:db:f5: b7:6d:cd:27:76:4a:93:89:d2:4d:25:45:76:36:15: e4:01:39:bb:1a:0a:00:d2:1b:bd:e3:33:63:be:a1: c5:e1:8b:1a:13:7c:80:ac:af:06:fd:59:f5:95:60: 04:d9:25:42:0a:20:0c:9d:92:9c:0b:82:c0:d6:22: da:fb:c2:58:de:f3:07:f3:72:4b:7e:9c:81:a3:35: 8c:1b:e7:3a:74:0a:6e:60:a0:f6:17:03:07:6a:e6: 14:61:e9:4e:e6:bc:b9:c8:7f:55:58:d1:7f:b8:a4: a2:53:d3:24:96:b7:a4:5f:8c:7b:af:99:12:b5:a4: 76:d5:92:46:93:a3:f5:9c:e6:15:5e:ef:89:7c:e3: 1a:6e:87:d9:d3:73:9f:52:c0:ae:e2:63:34:c5:a5: 14:91:0d:7e:77:83:97:87:74:93:21:82:5f:69:f6: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:27:67:D8:65:E6:BE:CC:F1:F6:40:F3:07:94:F5:EC:08:00:ED X509v3 Authority Key Identifier: keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:43:86:8d:44:97:1d:8a:fd:59:e6:ab:af:36:02:0a:65:96: 67:e4:7c:7d:9c:2b:4d:73:42:ed:60:ad:34:c0:09:a3:26:1a: fc:91:57:c3:ed:b2:a9:26:13:8a:3f:72:b4:14:41:72:9f:72: f7:0b:f3:1a:8d:68:aa:4a:21:e5:4a:1e:ca:36:a1:ac:5b:37: 07:3b:29:97:7e:ef:61:80:30:42:eb:ec:06:75:d5:a8:7b:06: b1:2f:e0:e7:67:e7:67:ff:53:be:af:d4:40:01:88:5e:a2:64: 5f:07:6a:e9:0b:72:8e:93:f6:8e:83:a3:c9:da:39:4f:22:78: ae:e8:49:dc:f4:30:93:48:78:b0:cd:8f:49:45:4a:93:ee:e2: 07:ed:26:f5:3e:41:5f:66:33:7c:84:4c:1b:be:be:1b:d8:d3: 5a:21:08:8e:e8:95:19:94:05:a3:95:46:f5:88:88:b8:69:09: 8f:89:0b:8e:4a:18:1e:41:f2:58:ea:62:24:95:31:60:ba:70: 4f:b1:0f:63:bc:22:72:e5:c5:94:d4:c5:69:92:34:73:b5:c2: 9b:37:f5:ef:44:6a:5a:64:53:d3:04:ab:94:a1:21:ad:03:3a: 42:ad:f8:34:55:bf:96:dd:55:ce:cc:5d:cb:69:bf:14:28:19: 7d:c2:ce:79 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICIwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4 QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTExMDUx MDE1MDlaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDcwOUQyNzY3RDg2NUU2 QkVDQ0YxRjY0MEYzMDc5NEY1RUMwODAwRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhuIj4nN5KqLR/ZkZeS62eZyUE95QUnYLq9UvDMCD3sn4xkvN2 fcL+w/yajwnhFGh9d9zc4FuVn87D6lGJGnelLjS6QW5QyA3LBzVykZ2PKgYc93pT NLnb9bdtzSd2SpOJ0k0lRXY2FeQBObsaCgDSG73jM2O+ocXhixoTfICsrwb9WfWV YATZJUIKIAydkpwLgsDWItr7wlje8wfzckt+nIGjNYwb5zp0Cm5goPYXAwdq5hRh 6U7mvLnIf1VY0X+4pKJT0ySWt6RfjHuvmRK1pHbVkkaTo/Wc5hVe74l84xpuh9nT c59SwK7iYzTFpRSRDX53g5eHdJMhgl9p9sKDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcJ0nZ9hl5r7M8fZA8weU9ewIAO0wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0 NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc0l1UmpTMUZ0amNh eTVkd2REVlQwYjhpUndnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI1Dho1Elx2K/Vnmq682AgpllmfkfH2cK01zQu1grTTACaMmGvyRV8Ptsqkm E4o/crQUQXKfcvcL8xqNaKpKIeVKHso2oaxbNwc7KZd+72GAMELr7AZ11ah7BrEv 4Odn52f/U76v1EABiF6iZF8HaukLco6T9o6Do8naOU8ieK7oSdz0MJNIeLDNj0lF SpPu4gftJvU+QV9mM3yETBu+vhvY01ohCI7olRmUBaOVRvWIiLhpCY+JC45KGB5B 8ljqYiSVMWC6cE+xD2O8InLlxZTUxWmSNHO1wps39e9EalpkU9MEq5ShIa0DOkKt +DRVv5bdVc7MXctpvxQoGX3Cznk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:05:32 2025 by rpki-client