$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft File: zgJJuefVZubL61d9djs8y7Gwqy0.mft (raw, json) Hash identifier: 5MoSlRiVPVn3JJMwLfjNc0Fd+3IxaT6WgG/eCh7j5Gs= Subject key identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A Authority key identifier: CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D Certificate issuer: /CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D Certificate serial: 279A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft Manifest number: 2788 Signing time: Sun 01 Mar 2026 23:58:23 +0000 Manifest this update: Sun 01 Mar 2026 23:58:23 +0000 Manifest next update: Mon 02 Mar 2026 05:58:23 +0000 Files and hashes: 1: WyTkXHEhLqcsjNd_oPHvbf674aI.roa (hash: gt/t6rEu5sUWRrRf2e3Slg7FAm0I0chcu0jtaf/OGlg=) 2: cYoSIKX5rPaGhe1jQErFxMn1KlE.roa (hash: sGiqqVrNR6d7HV7W1A6wNpAMcqkm+3f/aPa23FGvVeA=) 3: zgJJuefVZubL61d9djs8y7Gwqy0.crl (hash: r3CBfapurd/nFFRNvwElMM/eJDvVc0LoLO5dsac+pK4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10138 (0x279a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0249B9E7D566E6CBEB577D763B3CCBB1B0AB2D Validity Not Before: Mar 1 23:58:23 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=D735CF064F7BA7C52F1067937F4D16BAF06C5E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:09:3b:af:00:60:89:fe:1c:da:67:e3:72:bb: e8:ad:94:64:0b:0e:e3:b8:81:9f:9f:09:c0:99:4c: 7e:5d:df:36:31:92:48:82:c2:8d:27:f8:66:60:b6: 1a:60:9c:9a:0a:da:a9:8c:fb:0e:a5:cf:6d:64:e4: 6c:b6:b3:c8:d0:15:a2:e6:03:55:bb:14:77:6e:d6: 2b:1a:2e:70:a9:a8:1f:c9:67:b7:de:a3:53:90:48: 88:12:bd:6f:1c:e2:38:aa:40:dd:5c:08:ab:18:8a: 75:5b:ac:1f:be:b1:dd:34:9d:b5:69:92:a8:6f:8d: c5:8f:d6:51:ae:37:72:d2:44:27:f8:4c:6c:8f:d5: 6f:73:87:21:6a:21:4c:77:fd:5d:b0:1c:01:55:e7: 7d:b4:5d:bd:d8:1b:b2:1d:46:05:28:47:f1:82:6f: 94:4a:50:83:56:0c:f8:20:cd:78:f4:0e:fa:a2:41: 6c:76:1b:67:66:a3:32:12:a4:af:45:a4:f6:25:35: 22:cd:f3:b5:bc:ea:8a:2c:f0:64:c9:ba:c4:98:13: 90:16:04:5e:17:23:6f:3c:c1:b6:36:15:2c:09:a0: 73:fb:e3:51:e6:1f:96:63:14:26:bc:48:48:67:eb: 44:67:16:86:ea:59:f5:33:79:b6:5d:49:c9:eb:d5: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:CF:06:4F:7B:A7:C5:2F:10:67:93:7F:4D:16:BA:F0:6C:5E:4A X509v3 Authority Key Identifier: keyid:CE:02:49:B9:E7:D5:66:E6:CB:EB:57:7D:76:3B:3C:CB:B1:B0:AB:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgJJuefVZubL61d9djs8y7Gwqy0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zgJJuefVZubL61d9djs8y7Gwqy0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:52:b9:bd:d6:c2:26:3b:b5:59:d5:b9:97:1a:27:35:c7:5e: 5f:bd:1b:68:b3:b1:e3:09:60:1c:fc:e8:a6:26:9c:4a:48:9e: c7:53:ea:5c:da:b8:ec:5f:4e:f9:39:83:56:6a:86:95:c7:54: 05:78:f3:72:67:77:8c:a5:95:87:a5:80:90:00:1f:4f:c5:db: 8a:28:37:64:4c:9a:e8:4d:7f:59:78:fa:62:18:f1:00:63:bc: f5:90:d1:ab:d5:46:f0:44:36:75:44:4a:5b:3c:d6:96:3a:f8: a8:5b:c7:7a:1f:0a:31:3d:96:33:28:c6:74:d6:3b:43:72:7c: 1f:b2:85:0d:2d:fa:af:42:31:e3:2e:4c:d3:1e:a6:c3:41:46: ca:36:8c:de:f8:fb:e5:f2:ef:9b:a9:11:9f:5a:f5:75:cc:60: 05:07:4a:47:22:08:86:c9:31:ee:0f:87:51:1d:1d:5c:24:f6: 4e:df:7f:c1:6b:ad:f8:bd:14:f0:82:87:e0:5e:18:85:fa:04: df:a4:20:39:f4:77:49:22:1a:2f:d0:27:22:2e:78:20:9a:b1: 10:05:ee:cd:22:e9:f1:37:b4:59:f8:1b:75:1d:00:b8:c4:2a: 4a:53:81:0a:d1:48:7f:54:2c:e3:52:41:36:06:65:a6:6f:c0: ee:50:63:cc -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICJ5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw MjQ5QjlFN0Q1NjZFNkNCRUI1NzdENzYzQjNDQ0JCMUIwQUIyRDAeFw0yNjAzMDEy MzU4MjNaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEQ3MzVDRjA2NEY3QkE3 QzUyRjEwNjc5MzdGNEQxNkJBRjA2QzVFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcCTuvAGCJ/hzaZ+Nyu+itlGQLDuO4gZ+fCcCZTH5d3zYxkkiC wo0n+GZgthpgnJoK2qmM+w6lz21k5Gy2s8jQFaLmA1W7FHdu1isaLnCpqB/JZ7fe o1OQSIgSvW8c4jiqQN1cCKsYinVbrB++sd00nbVpkqhvjcWP1lGuN3LSRCf4TGyP 1W9zhyFqIUx3/V2wHAFV5320Xb3YG7IdRgUoR/GCb5RKUINWDPggzXj0DvqiQWx2 G2dmozISpK9FpPYlNSLN87W86oos8GTJusSYE5AWBF4XI288wbY2FSwJoHP741Hm H5ZjFCa8SEhn60RnFobqWfUzebZdScnr1fHJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU1zXPBk97p8UvEGeTf00WuvBsXkowHwYDVR0jBBgwFoAUzgJJuefVZubL61d9 djs8y7Gwqy0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy L3pnSkp1ZWZWWnViTDYxZDlkanM4eTdHd3F5MC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvemdKSnVlZlZadWJMNjFkOWRqczh5N0d3cXkwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyL3pnSkp1ZWZWWnViTDYx ZDlkanM4eTdHd3F5MC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDNUrm91sImO7VZ1bmXGic1x15fvRtos7HjCWAc/OimJpxKSJ7HU+pc2rjsX075 OYNWaoaVx1QFePNyZ3eMpZWHpYCQAB9PxduKKDdkTJroTX9ZePpiGPEAY7z1kNGr 1UbwRDZ1REpbPNaWOvioW8d6HwoxPZYzKMZ01jtDcnwfsoUNLfqvQjHjLkzTHqbD QUbKNoze+Pvl8u+bqRGfWvV1zGAFB0pHIgiGyTHuD4dRHR1cJPZO33/Ba634vRTw gofgXhiF+gTfpCA59HdJIhov0CciLnggmrEQBe7NIunxN7RZ+Bt1HQC4xCpKU4EK 0Uh/VCzjUkE2BmWmb8DuUGPM -----END CERTIFICATE-----Generated at Mon Mar 2 03:52:29 2026 by rpki-client