$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft File: G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft (raw, json) Hash identifier: JC3iow+f/CbyfOSM0RZOqCL+Y2j9Iuh4lfHZYZsCXm4= Subject key identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Certificate serial: 0834 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft Manifest number: 080C Signing time: Mon 11 Aug 2025 09:03:59 +0000 Manifest this update: Mon 11 Aug 2025 09:03:59 +0000 Manifest next update: Mon 11 Aug 2025 15:03:59 +0000 Files and hashes: 1: 4WRRBH6wwnIHQhmsfeELuG1Sut4.roa (hash: +Z0bYeHwoGhjvi7LcdZsVFiByFw2ndbQoTq7aD/IyXE=) 2: 4ZR5y4jCzGztCvs7AkXxoeyfbWo.roa (hash: zQDbIzBL7JFOraq+WEHch+Ugn5UI8PmmuiSPrnpYF6c=) 3: 52qJ28LFMGksnZdOvY3NHDKAkPo.roa (hash: 5PUAqFsR0VKvHBewzPenXF12bSJH5iHPZkZ+kof/w0g=) 4: 5sXds976gdDjTvTJvvzlaPF4tns.roa (hash: hsde4QjZmRocuLBhVgqhnenAWzLsv4ghS42xJghfkFQ=) 5: 88UWKDoFzQYMKGF0TwNoEpNbRbg.roa (hash: AvsmW6AeexZCua22EOu9L0XeyLAUUb2nLCYOsWpQy3Y=) 6: 8quQTrVFBsNNsD1G9SKOaAfk3eY.roa (hash: vVpNgEngEb4v8duWH/sOTCiwN1J7qA9QoTh7m+Otcno=) 7: DfOM2s-N7JxO0x90eKPITUNfgo8.roa (hash: 3peMwvBiVSgFn5hZMWiD6cFdO1fmCvYp7pKNTzRWoP4=) 8: EtgRH0CW7H_3T8VzfRA74VAC9rU.roa (hash: g0qR5oI3IGoFzwTdmP+Dqqgxu4q3upIXq/ZhObzqa2A=) 9: G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl (hash: DQOcmVvaYu18t6Ofa8/e99Se9muDOZtRoWCfCSnsuMI=) 10: HAB3qrzke3hwLOzuIbAVbftkZrk.roa (hash: 1KFZm3phURVjPNdXhqsy4NKFRt028oJTtHy67Un4v14=) 11: HBHO8tQ-z4hRkwHMpcvPYSsxbRg.roa (hash: igDgEoqbm9xJIF1mphuETv9quhsY6Xfhqwm4UrPtPMw=) 12: HnRuKgNC5PtSCwgnHRE4jEinoGk.roa (hash: RtSmcZyQZMSPEyvg5q84y6hefhYQiGXaziDVDrnqgDk=) 13: KczSviXnBvy-P-UbHyM1Uju1qXM.roa (hash: K5WHld8+N4EylO/2qEOvksH0fcR7ueMwsQOaIHDErXQ=) 14: Kwjs-P3D3YMnLUhcdu5MEX6cOsc.roa (hash: UiI4TlDWIpuezS4Dbm9cl3AgiERyEMt2p2UwXA9aY60=) 15: M9G958ynnKlta1JlYdgrEtU51Rk.roa (hash: i8nfwXN10nn98cnUMZFgBAhxSDuzv38O3WWAu1Z5Fj8=) 16: NkHAfhiM6mqCCcXRtRoxFHmuBlY.roa (hash: YEw+9TR/n5kLaLSjnzDR3NtcTzcqYz1thgdIeylQ4V4=) 17: XkxfITJS6KXNjdcO4MPaIzhZHAY.roa (hash: c3157+aWAodGnOB+sDYTlohIqzEMle+d0FP3WlWZyPk=) 18: YR7TMEGbVotojv7SFRzgF0eRkk4.roa (hash: 7jtbaxWf2uMWNcVIVnr0VNtY3e9VC27AJNKy8dKhQV0=) 19: bI4LLxofUt_ZROTf3Ub1ab2lnVI.roa (hash: tFMPN6Lx2R1pXXeobEI0u0bkRjvq5vlbaTbVC3XJetU=) 20: ee7NSPQXz7nasw04yXcDex8VXgE.roa (hash: 4u1b2SXnI4j3Neqxm+gogo/2y2+tTzrb+nSSqbd2z+M=) 21: iNKgJh10VKyPgqeuEpZXUo5M22M.roa (hash: ahGrQyC4pgZKgoXcJn8s+38PUfiu1kGN8OAdLTvIFzk=) 22: ieGtJYxfMkpjaTVHoDKB_MN3RzY.roa (hash: /Bmmm7crcze+c7BPrZxo6jJftYmQTM3NjlSZ7Udluu4=) 23: j62s71G-cZ3fjPif5hiGxzQcpI4.roa (hash: xrm120S0nhNiznUYDg7E1X/4dsjXKyElBZ6rTL9Zrn0=) 24: wT_FguQFk15QfkZ4ASXJuEypJ68.roa (hash: NTrLnkfSG/rPk8YngYTzeDFWT14vpnpFNvlPz4xk2CM=) 25: x7LsoUNk0WuhBwx6uu0Cvpzo_9g.roa (hash: nA0g6q/JceSYJ2jvm2w0zQOFkRrhUtlWcTj5Q8V+XS4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B Validity Not Before: Aug 11 09:03:59 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C92091CD704E8E01CB5621F4BFAA3A3F31DF49B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:a9:d9:1e:ae:44:4e:64:08:03:b8:dd:8f: d0:cf:76:8f:f3:30:8d:92:2d:f5:31:26:2c:cb:16: 3d:e4:53:4a:25:55:f4:0c:08:a7:0b:fd:7c:cb:6d: a2:dd:92:63:9b:79:f3:49:82:2c:07:00:ff:8c:46: b5:22:11:04:49:70:35:97:40:f3:6f:f3:35:ab:c1: 3b:26:2b:e6:4a:7a:5e:06:d7:eb:a7:23:7a:c4:ee: 07:38:38:23:35:dc:83:3d:f3:50:e8:69:c9:05:f4: b5:43:13:94:78:2d:49:57:dd:7d:10:05:57:f1:5c: a4:8a:cf:83:13:08:25:fd:7f:cb:b6:71:0b:36:9c: 0a:53:35:51:f5:fd:48:73:7e:f6:61:5b:00:54:14: c0:48:10:74:88:1d:1f:11:0d:f7:c6:81:7c:b9:66: 25:3c:0e:52:cd:9a:7f:9c:f9:e9:6e:dd:49:ca:c9: 3d:57:2a:5e:53:9f:fa:6a:1e:23:49:f1:01:67:5e: 2c:a1:70:bc:18:73:ea:2d:2d:ce:c6:d8:c4:5d:b0: ef:1f:1a:27:e0:f4:c8:49:d0:19:81:44:51:a5:67: d1:43:ed:c1:97:9b:69:72:3c:c2:c9:64:6c:d2:a2: 1f:d5:ef:dc:17:ea:8d:4e:a7:d9:0e:79:e6:65:d9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:91:CD:70:4E:8E:01:CB:56:21:F4:BF:AA:3A:3F:31:DF:49:B7 X509v3 Authority Key Identifier: keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:0a:20:68:64:b3:83:be:33:4b:a2:b1:59:36:9c:70:e6:6a: e3:41:37:f5:52:80:7b:d2:5e:ed:2a:73:37:a8:9b:5c:fd:5d: 10:8c:06:68:29:a0:c8:ef:0f:43:70:a1:04:66:66:07:85:f5: d1:35:7b:99:7b:7e:7c:de:0c:6a:fe:80:cf:f9:91:bd:c7:f2: 89:c8:eb:11:a4:6b:8a:65:ff:2e:d1:f1:5e:b2:a8:d9:fe:3d: 41:0a:44:5d:c0:50:70:bc:eb:59:3e:0d:8f:60:1d:9e:46:80: 70:68:d3:a3:ee:7f:18:b0:d4:18:47:cc:7e:52:d4:ed:c3:a4: 65:dd:a5:8e:0e:99:f1:d4:57:dd:ec:a8:b7:5e:37:9a:56:04: 06:d6:57:f2:70:2b:d8:4b:24:18:2b:3f:52:39:fb:11:83:33: cd:6b:d3:ba:07:ea:61:a6:de:23:e7:97:a3:97:cb:b2:9d:bc: f3:fe:72:65:e0:60:d6:a9:c6:7d:2a:4e:df:64:05:6e:4d:c5: 9b:13:e0:25:3a:72:d3:40:d4:51:51:b6:02:a4:6a:66:3e:b1: 97:70:55:7c:37:53:31:c3:c5:98:0d:02:84:ce:ca:30:ac:5d: a4:86:6f:ce:93:78:7a:97:3a:08:17:fb:c4:51:7b:c7:d2:d6: 6f:c5:c8:9e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJD NkQ5QTlGNEEyMjZBNjFGNUZBMUE5MTYzOTQxRDRCMzVCQTM1QjAeFw0yNTA4MTEw OTAzNTlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM5MjA5MUNENzA0RThF MDFDQjU2MjFGNEJGQUEzQTNGMzFERjQ5QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLiqnZHq5ETmQIA7jdj9DPdo/zMI2SLfUxJizLFj3kU0olVfQM CKcL/XzLbaLdkmObefNJgiwHAP+MRrUiEQRJcDWXQPNv8zWrwTsmK+ZKel4G1+un I3rE7gc4OCM13IM981DoackF9LVDE5R4LUlX3X0QBVfxXKSKz4MTCCX9f8u2cQs2 nApTNVH1/UhzfvZhWwBUFMBIEHSIHR8RDffGgXy5ZiU8DlLNmn+c+elu3UnKyT1X Kl5Tn/pqHiNJ8QFnXiyhcLwYc+otLc7G2MRdsO8fGifg9MhJ0BmBRFGlZ9FD7cGX m2lyPMLJZGzSoh/V79wX6o1Op9kOeeZl2QOjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUySCRzXBOjgHLViH0v6o6PzHfSbcwHwYDVR0jBBgwFoAUG8bZqfSiJqYfX6Gp FjlB1LNbo1swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz NC9HOGJacWZTaUpxWWZYNkdwRmpsQjFMTmJvMXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0c4YlpxZlNpSnFZZlg2R3BGamxCMUxOYm8xcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzQvRzhiWnFmU2lKcVlm WDZHcEZqbEIxTE5ibzFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMsKIGhks4O+M0uisVk2nHDmauNBN/VSgHvSXu0qczeom1z9XRCMBmgpoMjv D0NwoQRmZgeF9dE1e5l7fnzeDGr+gM/5kb3H8onI6xGka4pl/y7R8V6yqNn+PUEK RF3AUHC861k+DY9gHZ5GgHBo06Pufxiw1BhHzH5S1O3DpGXdpY4OmfHUV93sqLde N5pWBAbWV/JwK9hLJBgrP1I5+xGDM81r07oH6mGm3iPnl6OXy7KdvPP+cmXgYNap xn0qTt9kBW5NxZsT4CU6ctNA1FFRtgKkamY+sZdwVXw3UzHDxZgNAoTOyjCsXaSG b86TeHqXOggX+8RRe8fS1m/FyJ4= -----END CERTIFICATE-----Generated at Mon Aug 11 13:04:57 2025 by rpki-client