$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft File: L-CZDiHmrELt9vl6EYfoLsddYJE.mft (raw, json) Hash identifier: fOMq9aZCT+/16hiokyxI2AXGp/kB6Eq70eVsWF3qZtE= Subject key identifier: 9D:6B:46:DB:EE:30:43:A5:73:D7:82:80:6D:0B:C2:FC:21:1B:CA:2E Authority key identifier: 2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 Certificate issuer: /CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091 Certificate serial: 0110 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft Manifest number: 010F Signing time: Mon 02 Mar 2026 04:58:25 +0000 Manifest this update: Mon 02 Mar 2026 04:58:25 +0000 Manifest next update: Mon 02 Mar 2026 10:58:25 +0000 Files and hashes: 1: L-CZDiHmrELt9vl6EYfoLsddYJE.crl (hash: B0T8OhQUJiMhoNSHWpla/XfO5lhPbSGccCiUa+zKJbY=) 2: nwZJ_Z76f5nrAbhm-z61UMpWNLE.roa (hash: YBEQOFqdadnyvGrPq0MmizNCd9b0uYhx6GQloEdvXrY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 10:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FE0990E21E6AC42EDF6F97A1187E82EC75D6091 Validity Not Before: Mar 2 04:58:25 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=9D6B46DBEE3043A573D782806D0BC2FC211BCA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:3f:b1:6b:c0:a4:c9:7d:c1:94:c2:14:82: f1:32:29:76:95:4c:c7:0b:34:23:a1:31:3e:8f:c1: 05:0c:69:61:b6:2f:93:2e:4d:a0:6a:da:82:fe:05: a8:b1:6c:2b:07:d9:d3:56:0e:6a:a9:a8:ed:d0:3e: 1d:63:6f:4b:89:c4:82:7d:e0:f4:6b:2f:3c:be:95: 09:81:cc:9e:e0:3e:26:0c:ac:ba:4d:8c:6e:de:33: 43:ce:a8:44:1c:10:ee:ca:07:b8:5b:51:14:69:7a: aa:04:0c:44:4a:08:37:83:ca:6a:52:55:e6:a9:eb: 43:52:25:0e:68:fb:58:9e:69:0c:c9:1c:00:3e:08: ce:05:35:70:3a:67:d8:ce:c8:52:3e:31:8f:5e:63: 24:c0:b0:06:59:65:3e:e4:ab:07:37:21:19:41:08: e8:43:a7:f0:d2:8c:e9:d7:db:0f:8e:81:be:c3:eb: b3:bc:4e:87:61:0e:24:96:5e:55:9c:93:9e:71:a1: 92:47:f5:c1:ac:75:06:df:fe:04:00:e9:79:16:c0: 3d:c8:d1:7d:09:77:2d:82:f3:2e:38:51:6b:6f:fa: 4b:33:8b:d3:75:f1:12:66:f9:68:4c:0a:b1:e7:0f: b0:d2:00:c7:02:46:b6:2f:4c:0a:63:be:7e:3a:ca: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6B:46:DB:EE:30:43:A5:73:D7:82:80:6D:0B:C2:FC:21:1B:CA:2E X509v3 Authority Key Identifier: keyid:2F:E0:99:0E:21:E6:AC:42:ED:F6:F9:7A:11:87:E8:2E:C7:5D:60:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L-CZDiHmrELt9vl6EYfoLsddYJE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/356/L-CZDiHmrELt9vl6EYfoLsddYJE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:cb:98:72:64:a7:43:24:8a:2f:3c:50:b2:0a:a8:96:78:f6: 2b:04:e6:1e:72:1d:9d:6e:38:d1:c5:4a:5b:b2:51:01:6f:2d: 7a:d7:ea:a8:a9:f8:c7:94:03:38:ee:ac:96:04:6d:c0:35:9f: db:46:7a:a3:8e:95:72:b2:35:e8:85:1f:ef:fe:7c:e0:66:f8: 2e:7e:b0:0a:df:6e:3b:cd:d2:fd:11:16:54:9c:51:2f:e4:aa: 0f:9f:45:08:4b:87:6b:b9:66:1b:f3:57:02:3d:95:37:e7:d9: 45:a2:10:ce:35:03:0d:aa:ca:02:b9:ed:5e:c1:51:8c:b8:d4: 81:55:54:55:bb:ef:fa:cf:40:1c:43:c9:60:1a:71:24:bc:d5: f2:6e:48:23:a7:1e:4b:0a:f2:12:03:bd:86:b1:90:0e:be:46: 35:7f:ac:ed:e0:fc:55:e2:29:5f:e3:11:d8:d5:b9:1f:9e:ee: 5b:d6:9a:38:b6:f2:88:dc:4b:7b:55:ee:c7:a7:d0:e5:cf:7e: ab:b5:4f:a9:f4:0d:4f:3e:24:65:24:b0:bf:6c:4d:bd:9c:5b: 2e:6f:40:68:1b:1d:44:79:3f:05:a9:d5:79:0e:26:63:8c:80: c9:ca:ea:4f:22:50:da:18:5f:ad:4b:bb:1a:a8:ad:5e:eb:2b: bf:64:38:3b -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZF MDk5MEUyMUU2QUM0MkVERjZGOTdBMTE4N0U4MkVDNzVENjA5MTAeFw0yNjAzMDIw NDU4MjVaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDlENkI0NkRCRUUzMDQz QTU3M0Q3ODI4MDZEMEJDMkZDMjExQkNBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClUz+xa8CkyX3BlMIUgvEyKXaVTMcLNCOhMT6PwQUMaWG2L5Mu TaBq2oL+BaixbCsH2dNWDmqpqO3QPh1jb0uJxIJ94PRrLzy+lQmBzJ7gPiYMrLpN jG7eM0POqEQcEO7KB7hbURRpeqoEDERKCDeDympSVeap60NSJQ5o+1ieaQzJHAA+ CM4FNXA6Z9jOyFI+MY9eYyTAsAZZZT7kqwc3IRlBCOhDp/DSjOnX2w+Ogb7D67O8 TodhDiSWXlWck55xoZJH9cGsdQbf/gQA6XkWwD3I0X0Jdy2C8y44UWtv+kszi9N1 8RJm+WhMCrHnD7DSAMcCRrYvTApjvn46ys2ZAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUnWtG2+4wQ6Vz14KAbQvC/CEbyi4wHwYDVR0jBBgwFoAUL+CZDiHmrELt9vl6 EYfoLsddYJEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU2 L0wtQ1pEaUhtckVMdDl2bDZFWWZvTHNkZFlKRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTC1DWkRpSG1yRUx0OXZsNkVZZm9Mc2RkWUpFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU2L0wtQ1pEaUhtckVMdDl2 bDZFWWZvTHNkZFlKRS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCjy5hyZKdDJIovPFCyCqiWePYrBOYech2dbjjRxUpbslEBby161+qoqfjHlAM4 7qyWBG3ANZ/bRnqjjpVysjXohR/v/nzgZvgufrAK3247zdL9ERZUnFEv5KoPn0UI S4druWYb81cCPZU359lFohDONQMNqsoCue1ewVGMuNSBVVRVu+/6z0AcQ8lgGnEk vNXybkgjpx5LCvISA72GsZAOvkY1f6zt4PxV4ilf4xHY1bkfnu5b1po4tvKI3Et7 Ve7Hp9Dlz36rtU+p9A1PPiRlJLC/bE29nFsub0BoGx1EeT8FqdV5DiZjjIDJyupP IlDaGF+tS7saqK1e6yu/ZDg7 -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:29 2026 by rpki-client