$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft File: jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft (raw, json) Hash identifier: pBrCJd/0uoQbZj0njXZJz85j85eBkSkRzucY/oaJ+QU= Subject key identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 Authority key identifier: 8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 Certificate issuer: /CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Certificate serial: 0EE8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft Manifest number: 0EE8 Signing time: Mon 02 Mar 2026 05:00:32 +0000 Manifest this update: Mon 02 Mar 2026 05:00:32 +0000 Manifest next update: Mon 02 Mar 2026 11:00:32 +0000 Files and hashes: 1: jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl (hash: 0EqGvjsn5IhilLVvIH8t0vPOa8VoTvf7Vv8tfsaCnEg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D0AADC35185065D87BC4F20D8C4A6B88931A8B9 Validity Not Before: Mar 2 05:00:32 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=022DFCC8B8C58BCB6CA52C397D4F721AEEFB22F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:36:0a:02:16:fd:27:bb:ee:28:4b:34:c2: c3:be:b8:6d:d8:bc:e4:71:40:84:97:df:29:b5:23: 42:29:fe:6e:ec:3d:a9:f6:98:bb:c9:4c:3f:4f:12: ba:d6:89:77:92:25:5b:fa:af:16:ff:c5:5c:4e:67: 06:5b:a0:64:ac:a8:9b:f7:ea:ef:7a:44:a8:fd:32: 16:b5:d7:28:1f:a2:aa:84:91:15:64:a8:3b:fa:b1: 4f:73:c3:0b:c0:43:8c:a4:16:59:d7:e6:4e:de:7f: c4:e7:b4:db:f5:7f:c5:e9:38:74:d9:cb:92:d3:1a: e0:3e:a2:9f:66:5d:91:1c:a4:91:bf:07:08:a6:42: ab:41:44:05:eb:5a:14:c2:dd:80:78:38:50:d5:d6: 90:ec:e5:87:2c:8b:b3:c7:44:eb:e4:45:e5:6d:b7: d2:c2:aa:f9:08:0a:2c:43:32:27:f2:93:77:dd:61: 17:ec:3e:df:bd:50:ae:a5:19:4a:5a:a5:0b:f9:fa: e4:6b:88:2e:92:02:be:8d:22:6c:98:9b:ff:1e:9f: 53:07:b7:32:91:14:d1:8e:13:fb:e8:06:16:8e:d7: 45:58:d6:39:57:3e:ba:17:e1:ad:73:ac:85:08:9b: c1:00:68:ff:9c:2b:2b:09:89:11:cc:c3:fe:b7:78: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:FC:C8:B8:C5:8B:CB:6C:A5:2C:39:7D:4F:72:1A:EE:FB:22:F3 X509v3 Authority Key Identifier: keyid:8D:0A:AD:C3:51:85:06:5D:87:BC:4F:20:D8:C4:A6:B8:89:31:A8:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jQqtw1GFBl2HvE8g2MSmuIkxqLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3258/jQqtw1GFBl2HvE8g2MSmuIkxqLk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:db:8a:09:e4:fb:5b:73:41:71:87:21:3d:07:47:d7:b9:1e: 27:f0:c4:34:85:27:84:46:38:d1:12:81:50:d6:e9:bf:4e:49: 02:65:6c:5b:f5:ea:12:ad:4d:1a:f6:d5:e3:97:82:5b:70:5b: 4c:74:fd:7f:aa:f9:41:75:83:a3:0f:ce:4b:2e:9d:85:44:0d: ab:55:5d:a9:4e:68:54:89:98:31:34:f0:2b:8c:b9:3c:ec:9b: b4:5b:eb:f7:b3:0d:7b:80:ce:e1:4b:df:27:34:1e:b2:c6:b3: 40:18:45:4f:54:da:6c:52:7c:77:cb:84:15:ac:a4:72:f9:4c: d9:fd:fa:dc:42:04:da:47:f8:ba:8d:24:5f:e2:cd:28:99:8a: 82:27:9a:76:ba:80:36:14:2f:53:68:ba:2b:a3:ef:d5:25:56: bf:eb:bb:4b:8d:2e:6e:51:b9:a4:d6:ab:c1:9c:be:d6:81:d3: b1:36:2f:6b:39:5b:8a:52:08:fd:61:3c:19:4a:66:7c:93:68: 68:d5:b0:d7:85:93:ac:dd:ba:6c:3f:45:2d:11:0b:d1:18:d3: 22:49:48:c0:c3:cc:40:73:88:04:ca:95:b0:07:a5:3b:25:a2: 9f:f8:4b:43:17:d3:22:9b:79:c2:f7:55:69:74:bf:b0:6b:ab: 21:d4:a2:e0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQw QUFEQzM1MTg1MDY1RDg3QkM0RjIwRDhDNEE2Qjg4OTMxQThCOTAeFw0yNjAzMDIw NTAwMzJaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDAyMkRGQ0M4QjhDNThC Q0I2Q0E1MkMzOTdENEY3MjFBRUVGQjIyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEMjYKAhb9J7vuKEs0wsO+uG3YvORxQISX3ym1I0Ip/m7sPan2 mLvJTD9PErrWiXeSJVv6rxb/xVxOZwZboGSsqJv36u96RKj9Mha11ygfoqqEkRVk qDv6sU9zwwvAQ4ykFlnX5k7ef8TntNv1f8XpOHTZy5LTGuA+op9mXZEcpJG/Bwim QqtBRAXrWhTC3YB4OFDV1pDs5Ycsi7PHROvkReVtt9LCqvkICixDMifyk3fdYRfs Pt+9UK6lGUpapQv5+uRriC6SAr6NImyYm/8en1MHtzKRFNGOE/voBhaO10VY1jlX ProX4a1zrIUIm8EAaP+cKysJiRHMw/63eIfjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAi38yLjFi8tspSw5fU9yGu77IvMwHwYDVR0jBBgwFoAUjQqtw1GFBl2HvE8g 2MSmuIkxqLkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 OC9qUXF0dzFHRkJsMkh2RThnMk1TbXVJa3hxTGsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2pRcXR3MUdGQmwySHZFOGcyTVNtdUlreHFMay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTgvalFxdHcxR0ZCbDJI dkU4ZzJNU211SWt4cUxrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHzbignk+1tzQXGHIT0HR9e5HifwxDSFJ4RGONESgVDW6b9OSQJlbFv16hKt TRr21eOXgltwW0x0/X+q+UF1g6MPzksunYVEDatVXalOaFSJmDE08CuMuTzsm7Rb 6/ezDXuAzuFL3yc0HrLGs0AYRU9U2mxSfHfLhBWspHL5TNn9+txCBNpH+LqNJF/i zSiZioInmna6gDYUL1Nouiuj79UlVr/ru0uNLm5RuaTWq8GcvtaB07E2L2s5W4pS CP1hPBlKZnyTaGjVsNeFk6zdumw/RS0RC9EY0yJJSMDDzEBziATKlbAHpTslop/4 S0MX0yKbecL3VWl0v7BrqyHUouA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:43 2026 by rpki-client