$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft File: wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json) Hash identifier: AYWRc0E+DSQDNs/dOhjFz5+n8bG9rSWXUShqZAcHThs= Subject key identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Certificate issuer: /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Certificate serial: 284C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft Manifest number: 284C Signing time: Sat 23 Aug 2025 19:02:37 +0000 Manifest this update: Sat 23 Aug 2025 19:02:37 +0000 Manifest next update: Sun 24 Aug 2025 01:02:37 +0000 Files and hashes: 1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: ggWPsUgS/aSN3tRJ+0Xi7V+TsThIwFFHgB22/xzIXy8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10316 (0x284c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Validity Not Before: Aug 23 19:02:37 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5: e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25: 16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad: 05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8: 8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0: af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5: 9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e: 50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20: 1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5: 0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74: 3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c: 69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f: 73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac: 45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68: bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32: 3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54: e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A X509v3 Authority Key Identifier: keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:95:a4:a1:9f:5a:a7:f4:83:23:31:8c:3f:69:fe:e5:74:90: a7:26:c7:32:4b:04:ad:63:61:90:97:e9:79:f3:91:1a:03:97: 43:f9:cf:a9:28:35:95:2f:1e:e3:05:94:7f:f3:46:ec:26:42: 7b:1f:d6:83:76:a9:c5:d9:da:65:70:b0:94:e6:48:aa:7c:73: 91:ed:85:c1:09:34:d6:b1:48:db:26:29:c8:e8:e7:f2:b1:9e: d6:6a:d5:c0:95:f8:1c:ca:7f:a9:0c:29:f8:84:1e:53:2e:d1: 67:18:23:13:bc:d8:b9:35:8c:34:ad:7a:11:fc:48:7c:6f:74: c1:6f:84:e3:3e:bf:78:36:f7:5c:14:29:24:0f:16:eb:20:1c: e0:10:f7:1a:db:cf:95:99:67:81:4d:23:21:76:c7:4f:8e:5f: 19:26:52:17:c9:df:96:82:69:77:d4:db:4f:64:b1:ee:7f:88: 44:31:11:4a:34:5c:90:96:e0:e5:7b:a1:dd:c0:68:b4:74:8a: 7b:7f:3f:29:00:e6:4d:c0:aa:10:fc:c6:ce:78:85:6a:20:9f: 47:ea:b3:eb:4b:d0:28:89:4e:e6:71:02:5a:38:10:c5:1e:aa: ba:9e:0d:fa:26:ae:d1:9b:b9:68:52:b2:eb:e7:f1:a3:fd:9f: 8e:0b:64:4b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICKEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC MTA1NTFCMDBBMjFFRUVCRTFFOUM5NDBCNDk5OUVEMTVDMjFGMzAeFw0yNTA4MjMx OTAyMzdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QzZFNUJDRkNBRDIw NDZGMzc1RDJBOEIxMDI0MEY3RENDQUY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJyWncOySiKf1g7dg9eLhi90gsP4TL2ZMP2XyJRa3mNYHm2sD 6WcLU80KrQU2Kbs52YJqD8GNYX8w2Iqx8Bvs/6Bs/2HZElD64K8NMojhI4WG+GYp AAsvtZ2q0Rd+P4HfR5wpDj6rXlDWozbBFhZL+NO0WgohIBpg6FaPBGSN6FkoLPZU 1QpWuN0j7MErj1+PJGtKdD5lCcfQlVvbBxVX0FKhTGmpAkLhlaQMoR7stpJxf3OD 7YAHMxCcjZPO8+ThrEVc7YBwTsoLvZetKJPWaLwuhTgvV4lYiJ1e7Hn+Mjx5qWKq tp0eHyfbX/61VOC5HL9YINOH1+ueX4vwwgsZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdMblvPytIEbzddKosQJA99zK9EowHwYDVR0jBBgwFoAUwrEFUbAKIe7r4enJ QLSZntFcIfMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyRUZVYkFLSWU3cjRlbkpRTFNabnRGY0lmTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvd3JFRlViQUtJZTdy NGVuSlFMU1pudEZjSWZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC2VpKGfWqf0gyMxjD9p/uV0kKcmxzJLBK1jYZCX6XnzkRoDl0P5z6koNZUv HuMFlH/zRuwmQnsf1oN2qcXZ2mVwsJTmSKp8c5HthcEJNNaxSNsmKcjo5/KxntZq 1cCV+BzKf6kMKfiEHlMu0WcYIxO82Lk1jDStehH8SHxvdMFvhOM+v3g291wUKSQP FusgHOAQ9xrbz5WZZ4FNIyF2x0+OXxkmUhfJ35aCaXfU209kse5/iEQxEUo0XJCW 4OV7od3AaLR0int/PykA5k3AqhD8xs54hWogn0fqs+tL0CiJTuZxAlo4EMUeqrqe DfomrtGbuWhSsuvn8aP9n44LZEs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:45 2025 by rpki-client