$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft File: ehQ2ihcE3eKwKNJtVNg718g0fOM.mft (raw, json) Hash identifier: qawwGVOE2KRq6fKRDpBc9EhlR6ddNi/LlOWkn9XGas4= Subject key identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C Authority key identifier: 7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 Certificate issuer: /CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Certificate serial: 05B3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft Manifest number: 05B0 Signing time: Sun 01 Mar 2026 21:29:04 +0000 Manifest this update: Sun 01 Mar 2026 21:29:04 +0000 Manifest next update: Mon 02 Mar 2026 03:29:04 +0000 Files and hashes: 1: HfBEtTqWTSkAtipWavXVR-y9-jo.roa (hash: 3hFDbCdIfL+OLtSS0OXYLw7zBn+k/fXqDRXMxteGY5E=) 2: OURKKMBERp6fhyznG4QUV7I1fU8.roa (hash: tEDAKCve4qFLWqxZlyva9GdzhXGBXId4jj4unjkX/zM=) 3: ehQ2ihcE3eKwKNJtVNg718g0fOM.crl (hash: 0UZ+j037rpgOKuYFIVowOFxpPefjn7nCj7h2ZYu2K7w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 03:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1459 (0x5b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A14368A1704DDE2B028D26D54D83BD7C8347CE3 Validity Not Before: Mar 1 21:29:04 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=4BEF53D0EA53374A1D5CA734258AB7819575AE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:c6:32:b6:77:89:30:3d:05:9e:c2:db:5d: 45:51:28:85:3d:87:d8:4f:bc:c4:91:ab:1e:22:5b: 7d:3a:77:2d:fc:42:da:d3:d4:44:38:0d:4a:a6:08: 35:c9:d7:ca:04:4e:61:04:1b:a8:78:c5:e9:a2:d1: 5a:c5:a3:a4:82:a3:1b:83:18:bc:6d:45:bd:ac:46: 86:4c:bb:f1:9a:83:3c:ce:7c:55:9b:2e:e3:77:1c: c1:11:eb:48:ad:7d:89:39:0c:8e:1e:34:08:fe:c8: 1c:e9:1e:fc:c9:e0:64:af:1d:23:6c:78:4b:9e:1d: b3:32:0d:37:66:e5:97:ea:9b:05:38:23:9b:48:d6: 6e:9c:ee:9e:a2:0e:fc:ed:89:c7:9b:76:25:42:31: 7c:f3:b5:84:0e:72:a3:e3:9d:cc:50:86:1b:a8:07: 01:94:66:83:44:8c:23:07:b8:72:77:2b:40:a5:31: 15:7d:70:84:d9:6c:c5:76:dd:2d:96:69:b0:75:76: d1:45:75:f4:47:3a:c2:1b:e2:51:ad:e3:a5:e1:e5: c6:79:0e:97:62:2a:f1:c8:46:7b:de:97:1b:8c:41: 77:9f:8b:f0:4d:3b:00:f3:15:6d:27:5c:3f:f7:d4: f6:ad:e9:da:1c:c8:af:37:46:cf:60:1d:14:34:82: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EF:53:D0:EA:53:37:4A:1D:5C:A7:34:25:8A:B7:81:95:75:AE:5C X509v3 Authority Key Identifier: keyid:7A:14:36:8A:17:04:DD:E2:B0:28:D2:6D:54:D8:3B:D7:C8:34:7C:E3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ehQ2ihcE3eKwKNJtVNg718g0fOM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/715/ehQ2ihcE3eKwKNJtVNg718g0fOM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7a:ac:18:68:b8:25:ba:b0:6d:66:9c:e2:8a:22:59:62:98: 91:2a:e9:bd:85:b2:67:c7:23:90:e0:03:d0:e7:29:8e:84:6a: 66:39:ca:06:d9:59:3e:ee:8c:95:3a:82:d3:28:17:3a:eb:3c: ec:52:ce:e6:47:19:49:a2:da:a2:44:ca:e8:d1:48:d6:18:9f: 4a:5f:f2:c4:7d:d9:6d:b6:b8:09:c1:c7:b7:0b:8e:62:94:2f: 5e:73:40:21:2c:6f:bc:28:6b:65:02:17:15:d8:5c:7e:6c:8e: 5d:29:9f:4b:44:b5:e1:34:64:3d:93:67:ae:17:03:27:1b:23: 4c:67:69:da:8a:57:a6:d8:a3:7a:5e:54:a2:b2:cf:48:bf:84: 5d:fe:9e:e0:d1:b4:c1:5e:44:1f:e9:7a:df:f7:31:3c:bd:4f: 24:8c:1e:37:7a:ea:48:d6:11:dd:53:06:7a:fc:fd:6a:de:8f: 2a:85:ed:77:81:92:dd:05:c0:5e:41:e0:c3:60:b2:ff:87:e6: fe:e5:85:8f:1a:24:5a:ba:5e:cb:19:fa:24:d6:87:1f:32:85: db:0c:8c:11:2d:ab:ff:8c:b2:e6:da:79:80:40:ef:0d:71:19: 83:f5:81:ea:7b:d8:47:a3:05:20:fb:79:8d:7c:15:dc:d6:07: 0d:b2:30:52 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ex NDM2OEExNzA0RERFMkIwMjhEMjZENTREODNCRDdDODM0N0NFMzAeFw0yNjAzMDEy MTI5MDRaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDRCRUY1M0QwRUE1MzM3 NEExRDVDQTczNDI1OEFCNzgxOTU3NUFFNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJC8YytneJMD0FnsLbXUVRKIU9h9hPvMSRqx4iW306dy38QtrT 1EQ4DUqmCDXJ18oETmEEG6h4xemi0VrFo6SCoxuDGLxtRb2sRoZMu/GagzzOfFWb LuN3HMER60itfYk5DI4eNAj+yBzpHvzJ4GSvHSNseEueHbMyDTdm5ZfqmwU4I5tI 1m6c7p6iDvzticebdiVCMXzztYQOcqPjncxQhhuoBwGUZoNEjCMHuHJ3K0ClMRV9 cITZbMV23S2WabB1dtFFdfRHOsIb4lGt46Xh5cZ5DpdiKvHIRnvelxuMQXefi/BN OwDzFW0nXD/31Pat6docyK83Rs9gHRQ0ggpjAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUS+9T0OpTN0odXKc0JYq3gZV1rlwwHwYDVR0jBBgwFoAUehQ2ihcE3eKwKNJt VNg718g0fOMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1 L2VoUTJpaGNFM2VLd0tOSnRWTmc3MThnMGZPTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZWhRMmloY0UzZUt3S05KdFZOZzcxOGcwZk9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzE1L2VoUTJpaGNFM2VLd0tO SnRWTmc3MThnMGZPTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUeqwYaLglurBtZpziiiJZYpiRKum9hbJnxyOQ4APQ5ymOhGpmOcoG2Vk+7oyV OoLTKBc66zzsUs7mRxlJotqiRMro0UjWGJ9KX/LEfdlttrgJwce3C45ilC9ec0Ah LG+8KGtlAhcV2Fx+bI5dKZ9LRLXhNGQ9k2euFwMnGyNMZ2nailem2KN6XlSiss9I v4Rd/p7g0bTBXkQf6Xrf9zE8vU8kjB43eupI1hHdUwZ6/P1q3o8qhe13gZLdBcBe QeDDYLL/h+b+5YWPGiRaul7LGfok1ocfMoXbDIwRLav/jLLm2nmAQO8NcRmD9YHq e9hHowUg+3mNfBXc1gcNsjBS -----END CERTIFICATE-----Generated at Mon Mar 2 02:03:41 2026 by rpki-client