$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft File: yWewb7xL_3HCRTp9vkkVFDS7jW8.mft (raw, json) Hash identifier: G8OuIzttWDQ8+43K0gL2dPrIIOYkZpPDnIJD2mSp6NQ= Subject key identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E Authority key identifier: C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F Certificate issuer: /CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Certificate serial: 0E6F Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft Manifest number: 0E6F Signing time: Sat 23 Aug 2025 16:02:52 +0000 Manifest this update: Sat 23 Aug 2025 16:02:52 +0000 Manifest next update: Sat 23 Aug 2025 22:02:52 +0000 Files and hashes: 1: yWewb7xL_3HCRTp9vkkVFDS7jW8.crl (hash: 08qWrF30+Gjg6nNfvBrCee6CJUtND6HxuwAJ+BHhZhQ=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C967B06FBC4BFF71C2453A7DBE49151434BB8D6F Validity Not Before: Aug 23 16:02:52 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=894F37F63950F05EB10F706A509A4894914F608E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:42:42:64:e9:69:8a:58:4a:14:ac:ad:1b: aa:3d:86:55:37:d2:e9:45:06:57:01:57:fb:eb:4e: 9a:93:2c:5f:5b:25:14:d1:ff:f4:6a:47:47:90:7c: a6:43:28:ff:82:5f:9b:b2:1d:d6:69:8e:ac:76:02: fc:d0:5a:6e:ee:6a:7f:6f:98:82:54:57:f7:de:97: 9f:7b:a4:6d:ec:0c:81:78:ca:eb:52:95:cd:51:cf: 82:a7:a8:00:74:51:2f:32:34:da:42:85:bb:5e:b6: c6:37:a0:a8:ef:ea:02:a7:06:5c:06:b4:a8:d8:f1: 9e:d9:b2:98:35:55:a1:b5:06:1d:5f:80:ab:d5:9a: b9:f2:49:55:98:c5:e6:83:fa:ba:78:5b:8a:e0:68: fa:df:41:0c:49:6f:0e:57:0e:a2:10:40:27:9d:4f: 06:eb:84:0c:95:3f:73:20:c2:bb:ea:6c:0a:51:4e: 35:30:3e:e0:11:e9:12:84:cd:88:b3:29:97:e9:67: 70:62:d6:0d:ab:a6:e3:5c:de:86:55:89:c5:ff:82: db:5e:b0:7b:fa:86:57:eb:94:1d:56:09:66:ae:29: b9:e6:27:94:4d:5e:d4:2f:5f:fb:4b:f7:ac:bc:9f: 95:6d:c6:64:68:7a:83:fb:0d:d6:6a:fd:b0:fe:cd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:37:F6:39:50:F0:5E:B1:0F:70:6A:50:9A:48:94:91:4F:60:8E X509v3 Authority Key Identifier: keyid:C9:67:B0:6F:BC:4B:FF:71:C2:45:3A:7D:BE:49:15:14:34:BB:8D:6F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yWewb7xL_3HCRTp9vkkVFDS7jW8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3216/yWewb7xL_3HCRTp9vkkVFDS7jW8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:26:2e:37:7c:06:db:94:24:73:91:23:ec:bb:89:5c:eb:11: 49:34:24:f6:97:d2:ec:df:a9:14:f8:26:24:87:39:1d:f8:75: b5:02:ec:29:10:d1:9b:0a:63:44:8f:03:7a:9e:db:a9:e9:9b: 83:b3:fe:31:e9:cc:d8:10:15:67:e1:81:99:01:f1:d7:43:5d: c9:61:db:17:54:93:53:e4:20:6e:6a:17:42:c2:7c:e0:15:e7: e7:24:ac:1c:60:51:ab:53:05:d9:4d:db:23:99:38:ec:7d:63: c2:4c:a6:a7:02:9b:b5:df:78:c6:a0:ec:c4:55:0a:9b:5e:0c: 5c:f1:d9:99:eb:14:ea:9f:cc:23:1a:1c:9d:df:96:ec:c7:8d: de:e8:bb:cb:80:89:5a:35:16:b7:f7:d2:7c:86:03:e4:00:5e: 84:7a:99:47:03:96:17:70:bb:6f:a7:5e:b0:f7:3c:a9:ab:2d: 78:b8:73:c0:ba:7b:4b:ee:0f:5b:5f:4d:26:52:91:3a:47:c8: 4c:73:69:b7:5c:c5:8a:59:07:8d:98:76:1e:99:6c:14:b4:58: 11:a2:5a:8d:4e:8d:a3:64:87:a2:06:95:27:17:ae:f0:5c:2c: 1d:e1:de:b6:2d:53:66:4f:9d:a9:31:c4:f2:ff:48:47:0d:36: 6e:05:eb:e1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk2 N0IwNkZCQzRCRkY3MUMyNDUzQTdEQkU0OTE1MTQzNEJCOEQ2RjAeFw0yNTA4MjMx NjAyNTJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDg5NEYzN0Y2Mzk1MEYw NUVCMTBGNzA2QTUwOUE0ODk0OTE0RjYwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDc9EJCZOlpilhKFKytG6o9hlU30ulFBlcBV/vrTpqTLF9bJRTR //RqR0eQfKZDKP+CX5uyHdZpjqx2AvzQWm7uan9vmIJUV/fel597pG3sDIF4yutS lc1Rz4KnqAB0US8yNNpChbtetsY3oKjv6gKnBlwGtKjY8Z7Zspg1VaG1Bh1fgKvV mrnySVWYxeaD+rp4W4rgaPrfQQxJbw5XDqIQQCedTwbrhAyVP3MgwrvqbApRTjUw PuAR6RKEzYizKZfpZ3Bi1g2rpuNc3oZVicX/gttesHv6hlfrlB1WCWauKbnmJ5RN XtQvX/tL96y8n5VtxmRoeoP7DdZq/bD+zdpXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUiU839jlQ8F6xD3BqUJpIlJFPYI4wHwYDVR0jBBgwFoAUyWewb7xL/3HCRTp9 vkkVFDS7jW8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIx Ni95V2V3Yjd4TF8zSENSVHA5dmtrVkZEUzdqVzguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3lXZXdiN3hMXzNIQ1JUcDl2a2tWRkRTN2pXOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMTYveVdld2I3eExfM0hD UlRwOXZra1ZGRFM3alc4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALwmLjd8BtuUJHORI+y7iVzrEUk0JPaX0uzfqRT4JiSHOR34dbUC7CkQ0ZsK Y0SPA3qe26npm4Oz/jHpzNgQFWfhgZkB8ddDXclh2xdUk1PkIG5qF0LCfOAV5+ck rBxgUatTBdlN2yOZOOx9Y8JMpqcCm7XfeMag7MRVCpteDFzx2ZnrFOqfzCMaHJ3f luzHjd7ou8uAiVo1Frf30nyGA+QAXoR6mUcDlhdwu2+nXrD3PKmrLXi4c8C6e0vu D1tfTSZSkTpHyExzabdcxYpZB42Ydh6ZbBS0WBGiWo1OjaNkh6IGlScXrvBcLB3h 3rYtU2ZPnakxxPL/SEcNNm4F6+E= -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:00 2025 by rpki-client