$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft File: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft (raw, json) Hash identifier: qPXihoxaqhZ9NmaPBZWFRfizxn1K/8eBHKbrYtgTbTs= Subject key identifier: 82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB Authority key identifier: 03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7 Certificate issuer: /CN=03CB843817F182543A13C9F565D7D119D90199B7 Certificate serial: 17B7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft Manifest number: 17B7 Signing time: Sat 23 Aug 2025 16:03:06 +0000 Manifest this update: Sat 23 Aug 2025 16:03:06 +0000 Manifest next update: Sat 23 Aug 2025 22:03:06 +0000 Files and hashes: 1: A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl (hash: FFVtjKS7Is3XnLf96K+2ZM2omeAiWWPfLYRgA+2fgbE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6071 (0x17b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03CB843817F182543A13C9F565D7D119D90199B7 Validity Not Before: Aug 23 16:03:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8213BDBD887FC14E24BDC62DDA100A70BF98BDAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:f4:da:bf:a7:1c:05:3c:ab:f4:a7:e5:3b: 45:c4:c0:89:e7:9a:f6:43:90:9e:ab:36:ce:67:a5: 4f:5e:ba:5f:cf:b6:74:b8:94:80:cd:4c:b4:b5:e3: 52:fa:5d:1a:b2:12:3b:48:74:a5:52:cf:50:55:fa: cb:ec:52:13:cc:62:c1:3e:30:38:b1:5d:97:de:70: fa:be:38:f8:40:4f:27:6f:8c:c7:93:cf:be:5c:7f: 2a:06:f1:ca:63:3a:0b:d7:0e:37:18:47:c7:bc:c4: 29:a5:c8:df:e3:e0:80:df:d3:51:a3:23:46:86:3b: 3c:e8:c9:69:fb:8f:ba:1c:5f:fa:ae:23:d7:93:6a: b3:c6:fe:4f:ae:d5:6e:e4:f1:41:32:e0:20:6d:43: 62:ee:16:2d:a0:65:78:d2:45:01:68:42:d3:66:ca: 17:58:4e:d2:82:5c:5b:06:0f:b2:50:e7:d6:c0:4e: bf:6e:1a:6d:ef:38:15:03:d2:23:59:34:f4:fa:11: 4f:3b:2b:02:2e:36:08:14:65:af:3c:cc:3d:04:b2: 32:d1:24:c8:ca:24:10:2a:94:62:b6:db:8b:b3:4b: c3:19:dc:06:4b:ad:2d:5d:2d:83:38:7c:34:07:1c: bc:b9:8f:23:52:b4:f1:8f:04:53:25:19:6f:88:39: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:13:BD:BD:88:7F:C1:4E:24:BD:C6:2D:DA:10:0A:70:BF:98:BD:AB X509v3 Authority Key Identifier: keyid:03:CB:84:38:17:F1:82:54:3A:13:C9:F5:65:D7:D1:19:D9:01:99:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3145/A8uEOBfxglQ6E8n1ZdfRGdkBmbc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d2:f2:a7:7c:76:f4:e0:5b:7a:45:85:06:b1:83:32:cc:ef: a2:83:19:94:05:29:e8:24:db:a1:4f:61:cf:3a:a8:94:cd:68: ee:58:41:79:5e:90:86:ef:05:18:17:4e:bf:25:c7:56:52:26: 1b:b4:1b:26:d9:43:03:c4:13:28:6c:1f:c1:4a:9c:8d:aa:f6: 53:42:eb:d5:e0:fe:05:eb:4c:b7:cc:7a:59:de:ef:b8:67:04: ef:69:cc:2d:fe:32:1d:a8:49:6c:96:11:70:38:0e:43:4f:c3: 01:87:55:95:d6:05:9b:e0:a5:6d:76:eb:87:11:88:65:a7:1f: 06:1a:c1:55:38:58:8b:a3:53:6a:81:19:58:29:42:93:2a:8d: a8:76:46:0d:ad:eb:e8:4f:ac:c9:02:10:c9:79:e0:10:b0:9e: 6b:e1:ee:2a:32:13:1e:aa:6a:44:a5:dd:63:d1:a6:d1:38:a7: 5a:a1:49:a6:8c:36:2b:b0:8f:7e:d6:d9:4b:b3:f4:02:fc:41: d5:d0:8f:02:d4:24:1e:74:43:e5:38:6b:8c:c2:10:e7:e0:2a: 11:6d:7e:9f:cb:fa:bc:69:3c:f3:d9:5b:4b:3b:d0:f0:74:e1: 77:64:a0:7b:09:84:98:d4:8b:9d:17:b5:59:7f:3a:b6:9d:85: f2:38:c1:f3 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDND Qjg0MzgxN0YxODI1NDNBMTNDOUY1NjVEN0QxMTlEOTAxOTlCNzAeFw0yNTA4MjMx NjAzMDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDgyMTNCREJEODg3RkMx NEUyNEJEQzYyRERBMTAwQTcwQkY5OEJEQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCQvTav6ccBTyr9KflO0XEwInnmvZDkJ6rNs5npU9eul/PtnS4 lIDNTLS141L6XRqyEjtIdKVSz1BV+svsUhPMYsE+MDixXZfecPq+OPhATydvjMeT z75cfyoG8cpjOgvXDjcYR8e8xCmlyN/j4IDf01GjI0aGOzzoyWn7j7ocX/quI9eT arPG/k+u1W7k8UEy4CBtQ2LuFi2gZXjSRQFoQtNmyhdYTtKCXFsGD7JQ59bATr9u Gm3vOBUD0iNZNPT6EU87KwIuNggUZa88zD0EsjLRJMjKJBAqlGK224uzS8MZ3AZL rS1dLYM4fDQHHLy5jyNStPGPBFMlGW+IORT7AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUghO9vYh/wU4kvcYt2hAKcL+YvaswHwYDVR0jBBgwFoAUA8uEOBfxglQ6E8n1 ZdfRGdkBmbcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 NS9BOHVFT0JmeGdsUTZFOG4xWmRmUkdka0JtYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0E4dUVPQmZ4Z2xRNkU4bjFaZGZSR2RrQm1iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDUvQTh1RU9CZnhnbFE2 RThuMVpkZlJHZGtCbWJjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJbS8qd8dvTgW3pFhQaxgzLM76KDGZQFKegk26FPYc86qJTNaO5YQXlekIbv BRgXTr8lx1ZSJhu0GybZQwPEEyhsH8FKnI2q9lNC69Xg/gXrTLfMelne77hnBO9p zC3+Mh2oSWyWEXA4DkNPwwGHVZXWBZvgpW1264cRiGWnHwYawVU4WIujU2qBGVgp QpMqjah2Rg2t6+hPrMkCEMl54BCwnmvh7ioyEx6qakSl3WPRptE4p1qhSaaMNiuw j37W2Uuz9AL8QdXQjwLUJB50Q+U4a4zCEOfgKhFtfp/L+rxpPPPZW0s70PB04Xdk oHsJhJjUi50XtVl/OradhfI4wfM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:07 2025 by rpki-client