$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json) Hash identifier: lFDRbX4+eN2yPmYoNZyuuWLWXnYDn7u+9w0DakL1Sks= Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Certificate serial: 1FDA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft Manifest number: 1FDA Signing time: Sat 23 Aug 2025 16:04:03 +0000 Manifest this update: Sat 23 Aug 2025 16:04:03 +0000 Manifest next update: Sat 23 Aug 2025 22:04:03 +0000 Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: F2Jxfeg9ydE8G2/qQVmYwNFCGtn9IjJ5owknrvkKL2w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8154 (0x1fda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Validity Not Before: Aug 23 16:04:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76: 24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83: b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df: 09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9: 66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84: e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1: 72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9: ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97: 7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e: 70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f: 88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b: 8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3: 8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb: cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93: c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6: c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5: 5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D X509v3 Authority Key Identifier: keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c5:be:16:22:49:94:7e:6c:13:f2:be:af:a1:4c:32:f7:6e: ce:98:91:f5:12:36:79:6e:86:ff:a7:39:d2:d0:10:27:27:49: 1b:88:d7:7d:90:2e:03:f1:84:e6:73:00:2d:c0:81:0e:f8:7b: b8:68:e5:8b:61:7c:6f:4a:b1:fd:65:fc:9c:ec:96:18:d2:67: b4:61:da:ef:ff:96:5f:ce:94:cf:49:47:f5:6d:0b:d4:f1:be: a3:85:04:19:16:7a:21:25:b7:80:d3:42:74:27:91:04:a4:79: 99:fe:ab:48:f8:21:0c:af:bc:8c:59:90:fb:4c:19:f5:13:72: 7a:c5:31:ea:4c:c6:55:9b:40:55:ce:be:b6:25:02:4c:9b:c6: 28:35:16:9c:7c:c4:12:a5:b0:9d:d4:15:be:4e:3d:a1:c2:4f: 14:c8:96:42:63:6e:f2:69:25:8d:32:ce:f7:df:b8:3d:e3:81: f5:2e:86:85:af:43:53:c5:16:95:af:ec:85:9d:05:2c:99:c0: 5f:2f:f1:6a:ab:64:95:26:18:63:33:aa:b2:a1:b8:69:e7:3d: 19:56:22:fd:27:af:bd:23:7c:db:90:b9:23:8e:23:62:32:bb: dd:3b:1d:45:34:fd:ec:55:aa:39:0f:76:4d:52:c5:e4:8d:f4: 31:b7:d1:cf -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICH9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5 QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTA4MjMx NjA0MDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4 fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT 5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACnFvhYiSZR+bBPyvq+hTDL3bs6YkfUSNnluhv+nOdLQECcnSRuI132QLgPx hOZzAC3AgQ74e7ho5YthfG9Ksf1l/JzslhjSZ7Rh2u//ll/OlM9JR/VtC9TxvqOF BBkWeiElt4DTQnQnkQSkeZn+q0j4IQyvvIxZkPtMGfUTcnrFMepMxlWbQFXOvrYl Akybxig1Fpx8xBKlsJ3UFb5OPaHCTxTIlkJjbvJpJY0yzvffuD3jgfUuhoWvQ1PF FpWv7IWdBSyZwF8v8WqrZJUmGGMzqrKhuGnnPRlWIv0nr70jfNuQuSOOI2Iyu907 HUU0/exVqjkPdk1SxeSN9DG30c8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:44 2025 by rpki-client