$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json) Hash identifier: OwlNd0dstHYm0iHpeMILzuTdf2OdMDMbBcRcBwX4N3g= Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Certificate serial: 16D0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft Manifest number: 16D0 Signing time: Sun 24 Aug 2025 00:03:50 +0000 Manifest this update: Sun 24 Aug 2025 00:03:50 +0000 Manifest next update: Sun 24 Aug 2025 06:03:50 +0000 Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: P7UamE2CS5GZBq89T8p5/z7BUtYO6AARr670GJLFo40=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5840 (0x16d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Validity Not Before: Aug 24 00:03:50 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5: fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db: 8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea: 7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4: f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc: 9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab: 0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb: 38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae: e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea: 5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86: 04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4: 37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c: da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9: 00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54: 7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca: 5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2: 89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A X509v3 Authority Key Identifier: keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bd:5c:32:11:d3:cc:12:85:7d:91:be:c7:be:63:b1:70:4c: 78:f9:cf:fd:e3:74:3e:f0:22:82:f3:8c:c9:9f:c2:67:97:bd: a7:cf:bc:45:84:14:02:ca:d9:fe:0a:ad:cf:12:7b:bb:d3:01: 2b:9c:54:04:25:86:d0:41:54:64:a6:d0:d0:32:2e:71:59:0e: 87:07:7b:f7:1b:35:bf:5a:4b:b1:67:46:da:c8:82:a6:4c:de: bf:bd:5b:03:e9:a9:ac:01:26:54:63:90:54:68:8f:38:11:e1: 63:8e:c9:07:6c:54:30:58:a7:fe:1c:aa:8e:bd:52:cc:80:76: 45:91:9e:c1:b2:ab:60:dc:ff:9e:e3:ee:aa:c0:f8:cc:88:ee: 07:0f:3f:58:e5:59:66:d9:a1:e4:d1:a9:ed:91:7c:2f:b8:17: 53:c7:d7:94:6c:15:4a:a3:c7:db:51:b9:b4:70:fa:21:ca:4c: 9c:05:4b:02:b0:ed:7c:0f:30:28:f6:14:bb:38:9b:c7:65:de: 95:71:cb:20:7b:e6:fe:ca:b8:72:41:83:e2:2c:fc:eb:94:88: e4:30:d5:db:85:d3:21:7f:82:85:e9:8b:f8:d4:ee:61:cf:2d: 7f:48:d0:3c:98:cc:65:1d:a6:75:b4:54:80:09:d7:05:d6:a6: 9d:a9:90:72 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQy MzJBNzkyRDA0RkIzNzk3NEVBNUFFRkJBQjFFN0YwQzhFMDIxMzAeFw0yNTA4MjQw MDAzNTBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2RTJCODUyRjMyNkE3 MTRENjMwQjdDNzkzNUUzN0JDNUM2NTY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIo/q7r76Etpw/Sr5Q5fwIW/+x++7z2QaMu7Bq24pSL5JgOWp3 zvcWQeb76n6pKt3DkVMmPmLSDqMj5PI/bf87UULB6tbXAobHzJ7ioMC84FbnJ4Hg U4FBqw6q5p0lGtHIFpZ4M/Sp+zhMpf0t72PWSIvrN3p3ruMvINPCeR0We5tdgHkB 6lwYb87k/wT4qtF36BXWhgRbCQJQumgxNrPOYheKxDeyhLxqxOvqnFwICl+jTNot Kf5rEyO0VMGNWPvS2QB4v538iTGm6GezdOlnVH1mtsuhLRnFNHJnpQSuyl4awtrk a35H4dDtlFvN8omttZbXVrm3mSCSrUn8hPKrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBuK4UvMmpxTWMLfHk143vFxlZkowHwYDVR0jBBgwFoAUXSMqeS0E+zeXTqWu +6sefwyOAhMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU1 Ni9YU01xZVMwRS16ZVhUcVd1LTZzZWZ3eU9BaE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hTTXFlUzBFLXplWFRxV3UtNnNlZnd5T0FoTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NTYvWFNNcWVTMEUtemVY VHFXdS02c2Vmd3lPQWhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABG9XDIR08wShX2Rvse+Y7FwTHj5z/3jdD7wIoLzjMmfwmeXvafPvEWEFALK 2f4Krc8Se7vTASucVAQlhtBBVGSm0NAyLnFZDocHe/cbNb9aS7FnRtrIgqZM3r+9 WwPpqawBJlRjkFRojzgR4WOOyQdsVDBYp/4cqo69UsyAdkWRnsGyq2Dc/57j7qrA +MyI7gcPP1jlWWbZoeTRqe2RfC+4F1PH15RsFUqjx9tRubRw+iHKTJwFSwKw7XwP MCj2FLs4m8dl3pVxyyB75v7KuHJBg+Is/OuUiOQw1duF0yF/goXpi/jU7mHPLX9I 0DyYzGUdpnW0VIAJ1wXWpp2pkHI= -----END CERTIFICATE-----Generated at Sun Aug 24 02:42:39 2025 by rpki-client