$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft File: 1rsep985B3YngQY-7FeZ2Qdz2cI.mft (raw, json) Hash identifier: rUkkK0QmKIKQboBnN4zvEfj81/dpC8d9wsTgpp1M7tQ= Subject key identifier: A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08 Authority key identifier: D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2 Certificate issuer: /CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2 Certificate serial: 51F7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft Manifest number: 51F7 Signing time: Sat 23 Aug 2025 19:04:51 +0000 Manifest this update: Sat 23 Aug 2025 19:04:51 +0000 Manifest next update: Sun 24 Aug 2025 01:04:51 +0000 Files and hashes: 1: 1rsep985B3YngQY-7FeZ2Qdz2cI.crl (hash: Fgf7MQX+DeUYx4PZ7bQyBy6iGdJRkQgB4nRfSy3qTaU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 01:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20983 (0x51f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BB1EA7DF3907762781063EEC5799D90773D9C2 Validity Not Before: Aug 23 19:04:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=A144D761B98C3D6E46F99E2385934E207F3F5608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:8d:e3:1f:16:6d:a5:05:7c:2e:71:f0:c5: 80:18:2c:f5:ec:f3:a6:6b:0d:9d:64:b9:17:52:69: 6f:ad:06:89:79:31:51:8b:38:54:24:21:0c:51:7f: 7f:2c:03:bc:de:70:b6:81:21:2a:5e:d9:e8:64:c6: 58:ee:55:18:8f:c8:1e:4f:a7:a1:62:0c:c5:e0:d6: 6e:9b:98:24:01:5b:8d:77:19:78:c9:24:d8:d0:72: 11:1a:8a:e8:dc:03:ff:57:96:aa:a7:5f:86:ba:9f: c4:9e:3b:8b:ed:d9:eb:9f:dd:60:33:f4:bc:df:58: 13:04:46:da:ba:9a:30:2e:eb:95:ca:cf:9c:d1:b5: 11:0f:fe:76:dc:74:ac:90:b1:e2:06:77:63:f5:64: 11:97:9d:91:29:55:ba:46:bf:08:bb:94:87:e0:39: a7:0b:f3:e9:5f:c9:f3:1c:9f:10:73:d0:30:ae:23: 6b:b0:d3:5f:47:7e:3f:c8:d1:42:a5:1e:42:12:72: 5d:27:dd:4e:40:ab:b5:0d:ba:05:58:d6:bb:6f:74: 50:2d:45:53:a8:a1:17:22:0c:d7:6f:85:71:f4:22: d4:81:9c:a3:51:c4:06:ed:54:71:07:5f:d7:b2:49: 18:9b:2c:3b:cd:7d:1f:2b:f6:c1:40:71:20:e8:01: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:44:D7:61:B9:8C:3D:6E:46:F9:9E:23:85:93:4E:20:7F:3F:56:08 X509v3 Authority Key Identifier: keyid:D6:BB:1E:A7:DF:39:07:76:27:81:06:3E:EC:57:99:D9:07:73:D9:C2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1rsep985B3YngQY-7FeZ2Qdz2cI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2141/1rsep985B3YngQY-7FeZ2Qdz2cI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:50:42:b1:33:1f:b3:6a:9c:68:bf:9d:1c:02:a5:d2:bf:ab: 89:23:6c:e4:e6:d6:27:c7:7d:0a:6f:3d:5e:06:ad:b2:d7:20: f3:75:56:7b:63:c7:1c:50:e1:cb:04:57:d5:92:05:77:e0:d7: f5:1d:d6:07:6c:03:b7:25:f4:43:c1:66:26:b9:29:52:60:05: 19:bb:64:e2:48:85:26:02:1f:1d:73:49:21:1e:24:5f:66:e9: 6c:41:0a:6b:76:59:3c:94:c5:ea:fe:36:68:c5:d0:0a:b3:c6: bf:db:8c:ac:ff:38:cd:83:8b:1e:67:b0:b9:7c:31:6a:02:f4: a5:11:8f:7f:99:bb:e4:46:ea:a5:22:25:ec:69:ba:32:94:69: c0:d3:68:13:a2:27:21:18:88:74:b1:c0:4d:6f:13:c7:0e:d1: 3c:54:29:49:be:a3:d2:dc:52:0e:c5:b0:78:b2:9f:ba:a6:ff: 1b:a2:f1:de:d6:a8:16:aa:5b:ea:e9:c9:96:95:8d:1d:b2:49: 25:ac:87:8c:b0:fc:ee:ff:b4:9e:e9:2b:59:de:a6:1f:d7:f0: a0:97:9f:1d:20:f0:86:4a:97:16:b4:6a:d6:e6:88:81:b4:95: c0:98:93:9a:fd:4a:a7:65:f3:0f:39:05:2c:1c:2c:e1:8d:b2: 9d:27:5c:1f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICUfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZC QjFFQTdERjM5MDc3NjI3ODEwNjNFRUM1Nzk5RDkwNzczRDlDMjAeFw0yNTA4MjMx OTA0NTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEExNDRENzYxQjk4QzNE NkU0NkY5OUUyMzg1OTM0RTIwN0YzRjU2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClXY3jHxZtpQV8LnHwxYAYLPXs86ZrDZ1kuRdSaW+tBol5MVGL OFQkIQxRf38sA7zecLaBISpe2ehkxljuVRiPyB5Pp6FiDMXg1m6bmCQBW413GXjJ JNjQchEaiujcA/9XlqqnX4a6n8SeO4vt2euf3WAz9LzfWBMERtq6mjAu65XKz5zR tREP/nbcdKyQseIGd2P1ZBGXnZEpVbpGvwi7lIfgOacL8+lfyfMcnxBz0DCuI2uw 019Hfj/I0UKlHkIScl0n3U5Aq7UNugVY1rtvdFAtRVOooRciDNdvhXH0ItSBnKNR xAbtVHEHX9eySRibLDvNfR8r9sFAcSDoAaI/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUoUTXYbmMPW5G+Z4jhZNOIH8/VggwHwYDVR0jBBgwFoAU1rsep985B3YngQY+ 7FeZ2Qdz2cIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjE0 MS8xcnNlcDk4NUIzWW5nUVktN0ZlWjJRZHoyY0kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzFyc2VwOTg1QjNZbmdRWS03RmVaMlFkejJjSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxNDEvMXJzZXA5ODVCM1lu Z1FZLTdGZVoyUWR6MmNJLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAERQQrEzH7NqnGi/nRwCpdK/q4kjbOTm1ifHfQpvPV4GrbLXIPN1VntjxxxQ 4csEV9WSBXfg1/Ud1gdsA7cl9EPBZia5KVJgBRm7ZOJIhSYCHx1zSSEeJF9m6WxB Cmt2WTyUxer+NmjF0Aqzxr/bjKz/OM2Dix5nsLl8MWoC9KURj3+Zu+RG6qUiJexp ujKUacDTaBOiJyEYiHSxwE1vE8cO0TxUKUm+o9LcUg7FsHiyn7qm/xui8d7WqBaq W+rpyZaVjR2ySSWsh4yw/O7/tJ7pK1neph/X8KCXnx0g8IZKlxa0atbmiIG0lcCY k5r9Sqdl8w85BSwcLOGNsp0nXB8= -----END CERTIFICATE-----Generated at Sun Aug 24 00:59:36 2025 by rpki-client