$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft File: tsENcoo4JDG6wfFJMND8HgdZU6Y.mft (raw, json) Hash identifier: i2zQffNYPuJ5boscnPGc+F2/w/Wb2md02FXeWQVTURs= Subject key identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 0312 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft Manifest number: 030D Signing time: Sun 01 Mar 2026 18:59:58 +0000 Manifest this update: Sun 01 Mar 2026 18:59:58 +0000 Manifest next update: Mon 02 Mar 2026 00:59:58 +0000 Files and hashes: 1: 4nqQEbmG5-tk2PmgeC70UF2Ux80.roa (hash: grvjlGV4OM3wanOWcRcLJfzdxkeMU6EBUZZZ+Tz/55Y=) 2: nQce1nvUS3_KBtyqZS82clt4Qnw.roa (hash: jlOrCmAoz12G3LIGTw1U2/pi7zidJN5e0Tp74mbj6Aw=) 3: tsENcoo4JDG6wfFJMND8HgdZU6Y.crl (hash: 5Rjqi/bz4F4Noq8ua8gKb0xfjl33CNoH27hMEcPWmiw=) 4: xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa (hash: K+sM/+rrSQS0X4vGh3Ql2cxPFoYrnh28YFqumpJmHEc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Mar 1 18:59:58 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BBA6129164418AB343C2331CCD2D9CD8222A5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:30:2d:a8:ac:f2:dc:74:58:28:b1:59:3a: 73:e2:3b:c4:29:cf:f1:f6:a2:13:4b:62:e7:e8:af: 8a:dc:d8:b8:f7:92:87:ba:52:76:46:82:19:8e:fe: 61:f7:14:cc:d4:c4:ad:85:99:0f:51:5a:5c:d3:49: 2e:86:62:8e:2d:a5:78:f6:e5:c0:d1:c9:8d:d3:8c: f1:91:f5:2b:f1:ac:b2:79:c1:5f:4f:a9:8d:2e:b4: 6f:a4:cf:32:ec:eb:db:40:7f:6d:f8:06:b3:31:ec: 92:27:80:ff:2f:c4:87:fc:a7:12:f5:32:23:a4:ec: bd:8f:56:8e:20:59:b0:76:47:14:33:65:2c:c0:e9: 6d:54:72:d9:a8:63:d5:ca:bd:d9:57:de:55:f3:e0: 3f:bd:4e:c8:86:e1:d7:07:59:84:2b:18:4d:b2:d3: fc:20:9b:64:ac:49:53:98:c7:37:fe:bf:f7:f9:76: 4d:af:b6:b2:fc:10:c1:e3:18:d0:7d:62:68:ca:d7: 6b:e4:e4:1b:35:85:de:98:cd:65:ce:45:05:9f:74: 9d:c4:65:70:4a:57:65:16:fc:f4:77:75:74:8a:fc: d2:19:1d:50:59:2e:59:2f:10:eb:b0:ca:c2:46:63: d0:fd:9f:6b:75:69:4b:21:eb:d8:50:ae:6e:97:de: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9f:17:3d:b8:ba:84:67:87:8c:19:29:8a:7a:65:2a:19:06: cd:b5:6a:bf:27:46:1d:b6:e9:13:96:71:0a:b6:d0:a9:28:93: 1f:c3:23:fb:c0:13:44:00:4a:36:44:79:79:73:1c:15:2b:ba: 7a:fe:3d:cd:59:4b:1e:2e:9b:b5:d4:9c:ac:60:e3:63:68:fa: aa:ca:75:60:7b:3f:65:62:ec:81:7d:04:6e:b7:ef:52:a3:41: 51:d5:91:ff:6a:20:3b:ae:1b:1c:d4:41:bf:a4:f2:72:54:9d: 07:cc:86:e2:5a:85:27:d5:68:41:a1:0b:c4:fd:13:f4:38:ce: 78:18:8f:e1:da:05:a0:18:9f:62:d0:a7:50:99:00:e3:86:ab: 43:04:db:f6:81:69:e7:92:3a:ba:99:5c:94:b6:73:54:9b:ee: 6f:33:20:39:82:a6:68:98:84:c9:c9:45:80:81:f3:37:db:45: 62:c6:1b:a2:ba:83:bc:f7:8f:bc:e4:9b:68:e1:14:58:1d:6b: 3d:af:9f:fa:05:53:62:64:0a:d1:97:6f:b9:49:d7:a5:aa:d7: 91:aa:b1:ed:cd:9f:7d:be:c7:dc:16:52:71:bf:e3:07:15:9b: a9:ce:a3:b2:40:1b:8c:96:52:73:52:ca:78:bd:e5:9f:b2:0d: e3:fc:e4:ab -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNjAzMDEx ODU5NThaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJCQTYxMjkxNjQ0MThB QjM0M0MyMzMxQ0NEMkQ5Q0Q4MjIyQTU2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMTAtqKzy3HRYKLFZOnPiO8Qpz/H2ohNLYufor4rc2Lj3koe6 UnZGghmO/mH3FMzUxK2FmQ9RWlzTSS6GYo4tpXj25cDRyY3TjPGR9SvxrLJ5wV9P qY0utG+kzzLs69tAf234BrMx7JIngP8vxIf8pxL1MiOk7L2PVo4gWbB2RxQzZSzA 6W1UctmoY9XKvdlX3lXz4D+9TsiG4dcHWYQrGE2y0/wgm2SsSVOYxzf+v/f5dk2v trL8EMHjGNB9YmjK12vk5Bs1hd6YzWXORQWfdJ3EZXBKV2UW/PR3dXSK/NIZHVBZ LlkvEOuwysJGY9D9n2t1aUsh69hQrm6X3tnzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUu6YSkWRBirNDwjMczS2c2CIqVlYwHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvdHNFTmNvbzRKREc2 d2ZGSk1ORDhIZ2RaVTZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADGfFz24uoRnh4wZKYp6ZSoZBs21ar8nRh226ROWcQq20Kkokx/DI/vAE0QA SjZEeXlzHBUrunr+Pc1ZSx4um7XUnKxg42No+qrKdWB7P2Vi7IF9BG6371KjQVHV kf9qIDuuGxzUQb+k8nJUnQfMhuJahSfVaEGhC8T9E/Q4zngYj+HaBaAYn2LQp1CZ AOOGq0ME2/aBaeeSOrqZXJS2c1Sb7m8zIDmCpmiYhMnJRYCB8zfbRWLGG6K6g7z3 j7zkm2jhFFgdaz2vn/oFU2JkCtGXb7lJ16Wq15Gqse3Nn32+x9wWUnG/4wcVm6nO o7JAG4yWUnNSyni95Z+yDeP85Ks= -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:10 2026 by rpki-client