$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft File: GubvWysCBd1fK0KBGsYIANaP1KA.mft (raw, json) Hash identifier: XVaHGIR4P3Qn5EXfPb8xXdUQjAHDXHhbxEyb2IbEWUE= Subject key identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 Authority key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Certificate issuer: /CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Certificate serial: 04D3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft Manifest number: 04D3 Signing time: Sun 01 Mar 2026 18:59:07 +0000 Manifest this update: Sun 01 Mar 2026 18:59:07 +0000 Manifest next update: Mon 02 Mar 2026 00:59:07 +0000 Files and hashes: 1: GubvWysCBd1fK0KBGsYIANaP1KA.crl (hash: CudH3bN8mQk9N7m7u/Wf1CZDbh/PKHzoeFpIAaE0HDs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Validity Not Before: Mar 1 18:59:07 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=418CE576B99D09444358380CFC60C020975464F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:40:9a:f8:12:e4:af:91:de:39:48:7c:61: 59:4a:26:ff:1c:35:d9:00:a7:47:dd:46:4c:c1:e0: 99:69:4e:e8:b1:ed:eb:8e:38:f5:09:9c:19:02:86: 90:ed:13:8c:09:75:46:c7:47:09:d3:93:c7:02:a8: 9b:58:c3:52:09:40:0d:28:22:58:8f:26:8a:ae:b3: 49:61:7c:ed:2e:31:d2:e5:0e:0c:c2:34:27:9c:7e: ea:de:93:30:70:30:24:ab:25:fd:86:24:b3:44:1b: eb:dc:bd:73:ef:41:5a:d9:82:5e:44:c9:10:52:60: 76:4e:43:e2:be:88:68:48:e5:85:07:3b:4b:37:fc: ed:1e:d4:55:48:40:8d:f1:d2:e7:1f:76:01:2a:ae: 82:d4:dc:bb:3e:68:c0:a7:c9:46:72:4f:76:bb:07: b1:a4:75:19:85:0c:a9:ea:cc:22:53:c8:be:34:bb: 1f:e7:1c:5c:1d:54:6d:a3:d2:68:03:cb:cb:76:2d: 44:e5:04:88:13:e7:f8:55:b7:fb:00:db:94:49:e2: 1b:23:48:0d:61:67:0c:8c:8a:2a:f9:73:cd:a2:24: 0a:e1:f1:94:bd:40:be:f9:21:25:fa:aa:9f:8d:9d: a0:7e:65:79:02:d1:25:2d:88:af:5b:cf:37:cf:ca: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:E5:76:B9:9D:09:44:43:58:38:0C:FC:60:C0:20:97:54:64:F6 X509v3 Authority Key Identifier: keyid:1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:18:d7:b3:12:f4:42:aa:b5:1b:d1:1a:b2:6e:e9:38:e1:49: 60:38:44:c4:3f:ed:24:1d:7e:c1:18:2a:de:8c:4d:8d:e3:8b: e2:fe:09:5e:90:85:56:fc:15:28:e5:a8:8d:5a:d4:de:53:3a: 02:03:dc:9e:a0:df:5c:b2:7b:a0:aa:6e:72:54:f6:97:f5:0f: ab:64:c2:bb:8a:2a:97:29:4e:2f:92:fc:44:de:53:b0:89:39: c0:ad:c4:06:e4:3e:ac:b6:08:90:2a:94:20:b1:f8:72:5f:fc: dc:42:7a:06:fc:ef:f7:cd:d0:9b:79:fe:da:86:81:eb:03:f4: 76:39:ad:d0:98:62:12:80:4c:18:23:84:af:5a:c9:56:ff:2b: 1a:33:7c:7b:f2:27:3a:86:96:5f:2c:6d:76:92:9b:ca:af:21: 74:aa:c8:65:c1:ed:e0:b2:96:71:d6:50:b0:85:bf:81:33:32: b7:f3:20:ed:ac:fd:94:e6:75:59:7e:a6:5f:94:09:4a:d2:52: 62:06:61:6b:40:0e:78:9b:a2:2c:c1:31:1f:f1:28:73:fc:33: f7:d7:6e:44:04:58:98:4e:c2:1d:91:99:22:72:8c:2d:a0:0f: 4f:22:ab:cf:c2:90:da:32:99:20:ae:e0:90:0a:d1:68:f6:0e: 1f:78:81:97 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFF NkVGNUIyQjAyMDVERDVGMkI0MjgxMUFDNjA4MDBENjhGRDRBMDAeFw0yNjAzMDEx ODU5MDdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDQxOENFNTc2Qjk5RDA5 NDQ0MzU4MzgwQ0ZDNjBDMDIwOTc1NDY0RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC54kCa+BLkr5HeOUh8YVlKJv8cNdkAp0fdRkzB4JlpTuix7euO OPUJnBkChpDtE4wJdUbHRwnTk8cCqJtYw1IJQA0oIliPJoqus0lhfO0uMdLlDgzC NCecfurekzBwMCSrJf2GJLNEG+vcvXPvQVrZgl5EyRBSYHZOQ+K+iGhI5YUHO0s3 /O0e1FVIQI3x0ucfdgEqroLU3Ls+aMCnyUZyT3a7B7GkdRmFDKnqzCJTyL40ux/n HFwdVG2j0mgDy8t2LUTlBIgT5/hVt/sA25RJ4hsjSA1hZwyMiir5c82iJArh8ZS9 QL75ISX6qp+NnaB+ZXkC0SUtiK9bzzfPyv9VAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUQYzldrmdCURDWDgM/GDAIJdUZPYwHwYDVR0jBBgwFoAUGubvWysCBd1fK0KB GsYIANaP1KAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM3 OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0d1YnZXeXNDQmQxZkswS0JHc1lJQU5hUDFLQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNzkvR3Vidld5c0NCZDFm SzBLQkdzWUlBTmFQMUtBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABAY17MS9EKqtRvRGrJu6TjhSWA4RMQ/7SQdfsEYKt6MTY3ji+L+CV6QhVb8 FSjlqI1a1N5TOgID3J6g31yye6CqbnJU9pf1D6tkwruKKpcpTi+S/ETeU7CJOcCt xAbkPqy2CJAqlCCx+HJf/NxCegb87/fN0Jt5/tqGgesD9HY5rdCYYhKATBgjhK9a yVb/KxozfHvyJzqGll8sbXaSm8qvIXSqyGXB7eCylnHWULCFv4EzMrfzIO2s/ZTm dVl+pl+UCUrSUmIGYWtADniboizBMR/xKHP8M/fXbkQEWJhOwh2RmSJyjC2gD08i q8/CkNoymSCu4JAK0Wj2Dh94gZc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:47:08 2026 by rpki-client