$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft File: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft (raw, json) Hash identifier: saUVRwu7T/W5aZMGygb8EJsBQyvATaAnoFqH25/6zZg= Subject key identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D Authority key identifier: A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 Certificate issuer: /CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Certificate serial: 03FD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft Manifest number: 03FB Signing time: Sun 01 Mar 2026 23:59:45 +0000 Manifest this update: Sun 01 Mar 2026 23:59:45 +0000 Manifest next update: Mon 02 Mar 2026 05:59:45 +0000 Files and hashes: 1: 9Kmp81LKJ1Do62r1oXF_Gp0nqJE.roa (hash: zHJGB3SpZj0mblC97hMn2aXc1dlXiZkyYkOYrihQVq8=) 2: dEIw97IC--lfB7uZmz6Os4ERyP4.roa (hash: sca1+jICK/ivC1jrdSAkUU0z0/GAdVgbLG2sOFZ34d4=) 3: oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl (hash: w3mgU/HuUeogQv4OOpNCOf85+0fkbK+oC1ETylhRRE8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 05:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1A0ABC5CA6F508F19F7907E94C3162152296934 Validity Not Before: Mar 1 23:59:45 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=23DFAD5DD1384742F40AFB8557D26F94441B217D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:ba:46:ab:26:2c:6e:05:5f:e6:08:ca:5f: f1:0a:6a:99:4b:db:52:a1:58:79:b7:f8:25:5a:2a: b2:84:f8:ef:5e:9a:6d:12:f3:8f:98:9d:08:ec:6d: ec:ae:92:e1:c6:33:fa:ee:c0:05:5d:2b:d3:31:6d: 40:f9:21:6d:e2:6a:25:db:78:67:a2:4a:b7:fa:d8: b1:3a:48:15:03:db:d5:68:1f:12:17:01:1a:04:0c: d8:2e:cc:fc:0b:ed:3b:44:8a:11:35:f0:59:61:32: da:ec:78:59:42:39:05:a3:a6:dc:33:8f:8f:ca:ed: 5d:78:54:70:2c:a8:5e:d9:ef:e2:25:5f:b1:96:c5: b6:42:fb:6e:2a:43:81:08:8e:97:97:8b:bb:af:53: b5:c6:52:e2:1f:8f:a4:25:db:c7:1d:61:ba:19:af: 43:27:a0:64:83:9e:16:93:ab:ef:e2:7d:75:87:ac: 5e:ad:b1:6c:fd:a5:dc:08:91:cf:09:dd:16:d7:b5: 61:e9:4b:39:da:90:88:b4:e3:d9:f1:44:21:34:73: 22:da:b6:f0:af:67:3e:0e:84:49:18:78:61:1b:d6: bc:7c:91:ef:4f:11:06:98:80:b4:07:33:40:5e:99: 4f:90:10:58:d5:f1:57:28:01:76:e2:9a:67:55:ba: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:AD:5D:D1:38:47:42:F4:0A:FB:85:57:D2:6F:94:44:1B:21:7D X509v3 Authority Key Identifier: keyid:A1:A0:AB:C5:CA:6F:50:8F:19:F7:90:7E:94:C3:16:21:52:29:69:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3387/oaCrxcpvUI8Z95B-lMMWIVIpaTQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:5e:af:30:3d:35:7b:76:8f:58:30:18:02:ac:0c:0b:b9: 91:f5:2d:45:83:4b:6f:93:40:b8:54:eb:83:ca:14:14:53:cc: a2:f7:67:5f:20:37:59:be:4c:16:19:09:53:a9:31:e3:f0:26: b7:30:d8:2f:16:bd:f8:fe:d0:fc:73:c4:b2:8c:a6:9e:ad:57: 7f:06:d5:20:71:69:05:5c:45:e4:ab:ce:a6:13:81:db:85:8b: 26:e6:51:88:0b:01:89:58:2d:9c:b5:cc:74:d6:72:ff:a5:47: 6a:d2:52:a5:1e:13:36:57:ec:97:3e:2c:07:f4:99:22:81:98: 61:b6:76:41:12:de:4e:6a:0e:82:58:46:d8:41:eb:64:2b:bf: 1e:2f:e1:f7:a7:ea:0a:19:cd:10:e7:b0:bf:43:91:cc:02:f4: d4:9f:eb:1f:2c:30:76:17:38:6a:bf:d0:a1:1d:0e:8e:70:e9: a9:70:6b:f2:ba:9a:c5:6c:44:4b:84:31:b3:91:49:34:5c:06: 0b:e0:96:52:de:8e:9c:84:31:da:45:91:9b:8f:a3:0a:fe:e8: 73:64:87:93:06:31:7b:65:c9:58:fc:3b:a1:10:e8:10:23:7c: 89:86:00:92:88:80:e2:8f:7a:2a:a4:72:69:33:69:56:9e:a8: 01:14:9a:a5 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTFB MEFCQzVDQTZGNTA4RjE5Rjc5MDdFOTRDMzE2MjE1MjI5NjkzNDAeFw0yNjAzMDEy MzU5NDVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIzREZBRDVERDEzODQ3 NDJGNDBBRkI4NTU3RDI2Rjk0NDQxQjIxN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCty7pGqyYsbgVf5gjKX/EKaplL21KhWHm3+CVaKrKE+O9emm0S 84+YnQjsbeyukuHGM/ruwAVdK9MxbUD5IW3iaiXbeGeiSrf62LE6SBUD29VoHxIX ARoEDNguzPwL7TtEihE18FlhMtrseFlCOQWjptwzj4/K7V14VHAsqF7Z7+IlX7GW xbZC+24qQ4EIjpeXi7uvU7XGUuIfj6Ql28cdYboZr0MnoGSDnhaTq+/ifXWHrF6t sWz9pdwIkc8J3RbXtWHpSznakIi049nxRCE0cyLatvCvZz4OhEkYeGEb1rx8ke9P EQaYgLQHM0BemU+QEFjV8VcoAXbimmdVupSdAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUI9+tXdE4R0L0CvuFV9JvlEQbIX0wHwYDVR0jBBgwFoAUoaCrxcpvUI8Z95B+ lMMWIVIpaTQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ny9vYUNyeGNwdlVJOFo5NUItbE1NV0lWSXBhVFEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL29hQ3J4Y3B2VUk4Wjk1Qi1sTU1XSVZJcGFUUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODcvb2FDcnhjcHZVSTha OTVCLWxNTVdJVklwYVRRLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAG25Xq8wPTV7do9YMBgCrAwLuZH1LUWDS2+TQLhU64PKFBRTzKL3Z18gN1m+ TBYZCVOpMePwJrcw2C8Wvfj+0PxzxLKMpp6tV38G1SBxaQVcReSrzqYTgduFiybm UYgLAYlYLZy1zHTWcv+lR2rSUqUeEzZX7Jc+LAf0mSKBmGG2dkES3k5qDoJYRthB 62Qrvx4v4fen6goZzRDnsL9DkcwC9NSf6x8sMHYXOGq/0KEdDo5w6alwa/K6msVs REuEMbORSTRcBgvgllLejpyEMdpFkZuPowr+6HNkh5MGMXtlyVj8O6EQ6BAjfImG AJKIgOKPeiqkcmkzaVaeqAEUmqU= -----END CERTIFICATE-----Generated at Mon Mar 2 03:17:38 2026 by rpki-client