$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft File: SJqd1TWY9BufnrqYo2RML3Tnb2g.mft (raw, json) Hash identifier: OEZaSUvlUtx4jXw6fRdsnK5Kw3V9hh0VQ+WyI7qCwo0= Subject key identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 Authority key identifier: 48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 Certificate issuer: /CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Certificate serial: 01F7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft Manifest number: 01F7 Signing time: Sun 01 Mar 2026 19:00:21 +0000 Manifest this update: Sun 01 Mar 2026 19:00:21 +0000 Manifest next update: Mon 02 Mar 2026 01:00:21 +0000 Files and hashes: 1: SJqd1TWY9BufnrqYo2RML3Tnb2g.crl (hash: ZS4tu+y8MD2uFIMFxClJ2GnDIDINRasg+w9vr7vShP8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489A9DD53598F41B9F9EBA98A3644C2F74E76F68 Validity Not Before: Mar 1 19:00:21 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=1A7843599819717A32719176B68AB6AD6C9B73E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:3b:6e:e0:2f:94:1a:24:e4:56:6e:3f:c1: ac:d6:53:43:82:fd:d2:55:3a:70:98:78:85:53:ad: 0a:b8:ec:3f:ee:62:2d:0e:bd:d3:66:c5:ff:12:18: 5a:eb:78:1c:92:93:a3:4c:99:9d:5d:85:9d:72:a9: c9:d3:da:3f:25:ba:97:21:2a:c8:ba:5d:3f:c7:d8: ba:9e:24:f6:6b:4f:bc:fa:d6:b7:f1:db:6a:ae:7d: df:2a:76:43:d6:24:14:1d:4c:b7:10:36:33:72:31: 59:96:87:d4:54:6a:cf:30:70:88:d0:38:7c:a1:33: 0f:58:31:20:a7:07:53:9f:25:0e:b6:9c:31:85:97: 68:07:c9:fa:65:3f:13:41:fb:82:bd:99:88:48:22: a9:56:fb:91:3e:bc:c6:37:7e:35:70:2f:5d:cd:bd: ad:ff:a7:8d:73:32:b8:e6:73:3b:f2:47:4e:66:29: 8a:95:85:9a:00:7a:3a:a3:83:b9:4b:e2:ec:ed:af: ab:9e:1c:79:61:05:77:34:59:12:bb:61:ef:fa:98: 0b:b1:d7:f8:ad:41:a8:ea:c4:fa:de:ff:b2:44:88: bf:d4:c1:70:08:4a:a5:18:e4:66:eb:b1:47:39:9a: 70:17:9f:4c:35:44:75:33:42:e5:39:e1:e7:b6:f9: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:43:59:98:19:71:7A:32:71:91:76:B6:8A:B6:AD:6C:9B:73:E8 X509v3 Authority Key Identifier: keyid:48:9A:9D:D5:35:98:F4:1B:9F:9E:BA:98:A3:64:4C:2F:74:E7:6F:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SJqd1TWY9BufnrqYo2RML3Tnb2g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3411/SJqd1TWY9BufnrqYo2RML3Tnb2g.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:8e:a0:1f:f4:bd:9f:65:16:b3:2d:fe:24:1a:59:b0:ee: 11:ce:a9:b7:d7:04:c1:7c:61:2c:01:56:7c:0d:17:50:31:5f: 0d:e3:27:03:27:eb:21:f6:e4:83:c6:5f:56:11:07:41:c9:9d: 72:4d:e5:95:2e:60:c3:c3:d6:28:7d:45:01:7c:29:03:3e:2d: 38:ee:0a:be:99:a6:c8:7a:9b:ee:32:61:ae:12:03:9b:9b:c3: c9:3d:76:c2:57:37:a2:9c:af:d4:d1:28:33:be:74:55:2c:e5: 48:a4:5d:77:9d:ec:ab:7d:cb:5f:5e:c2:b2:6d:eb:07:66:6b: 90:20:ca:a7:70:8c:06:55:f6:64:0c:c0:9d:44:ee:22:8d:7c: 28:be:67:3e:49:a0:2d:aa:c1:e6:a5:bc:78:c0:9f:59:5c:2a: d3:f6:b0:fc:b6:79:d9:aa:a4:9e:a9:df:cf:f1:6f:09:df:a4: 12:9d:42:57:5b:f0:43:61:e0:74:c1:6a:45:8f:50:5a:99:8e: ad:95:23:f2:2e:34:f7:3b:4e:a4:de:fb:24:a7:e5:e7:9c:c0: 73:d3:4b:db:d4:9c:84:26:ef:cc:21:ac:18:9f:67:1a:b0:91: db:1d:ec:17:d5:a8:b0:f3:f4:06:d5:f6:64:78:0b:94:19:2d: e2:e0:9b:a6 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDg5 QTlERDUzNTk4RjQxQjlGOUVCQTk4QTM2NDRDMkY3NEU3NkY2ODAeFw0yNjAzMDEx OTAwMjFaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDFBNzg0MzU5OTgxOTcx N0EzMjcxOTE3NkI2OEFCNkFENkM5QjczRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZFztu4C+UGiTkVm4/wazWU0OC/dJVOnCYeIVTrQq47D/uYi0O vdNmxf8SGFrreBySk6NMmZ1dhZ1yqcnT2j8lupchKsi6XT/H2LqeJPZrT7z61rfx 22qufd8qdkPWJBQdTLcQNjNyMVmWh9RUas8wcIjQOHyhMw9YMSCnB1OfJQ62nDGF l2gHyfplPxNB+4K9mYhIIqlW+5E+vMY3fjVwL13Nva3/p41zMrjmczvyR05mKYqV hZoAejqjg7lL4uztr6ueHHlhBXc0WRK7Ye/6mAux1/itQajqxPre/7JEiL/UwXAI SqUY5GbrsUc5mnAXn0w1RHUzQuU54ee2+WP3AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUGnhDWZgZcXoycZF2toq2rWybc+gwHwYDVR0jBBgwFoAUSJqd1TWY9BufnrqY o2RML3Tnb2gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx MS9TSnFkMVRXWTlCdWZucnFZbzJSTUwzVG5iMmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NKcWQxVFdZOUJ1Zm5ycVlvMlJNTDNUbmIyZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0MTEvU0pxZDFUV1k5QnVm bnJxWW8yUk1MM1RuYjJnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFLqjqAf9L2fZRazLf4kGlmw7hHOqbfXBMF8YSwBVnwNF1AxXw3jJwMn6yH2 5IPGX1YRB0HJnXJN5ZUuYMPD1ih9RQF8KQM+LTjuCr6Zpsh6m+4yYa4SA5ubw8k9 dsJXN6Kcr9TRKDO+dFUs5UikXXed7Kt9y19ewrJt6wdma5AgyqdwjAZV9mQMwJ1E 7iKNfCi+Zz5JoC2qwealvHjAn1lcKtP2sPy2edmqpJ6p38/xbwnfpBKdQldb8ENh 4HTBakWPUFqZjq2VI/IuNPc7TqTe+ySn5eecwHPTS9vUnIQm78whrBifZxqwkdsd 7BfVqLDz9AbV9mR4C5QZLeLgm6Y= -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:12 2026 by rpki-client