$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft File: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft (raw, json) Hash identifier: TfoaJh8mqZbJHlq0QE0eB7qV/Z0KXO7rtPF67UuTPoY= Subject key identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 Authority key identifier: 6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB Certificate issuer: /CN=6FE13AA555489412B2892267A49DAEC44693A6AB Certificate serial: 0AFB Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft Manifest number: 0AFB Signing time: Sun 24 Aug 2025 10:03:02 +0000 Manifest this update: Sun 24 Aug 2025 10:03:02 +0000 Manifest next update: Sun 24 Aug 2025 16:03:02 +0000 Files and hashes: 1: b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl (hash: G+ylWsbC784xb29Y+HEhQIXz2N+QYLXXwKQwS5OYM/s=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FE13AA555489412B2892267A49DAEC44693A6AB Validity Not Before: Aug 24 10:03:02 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=62AED79DED1AD2E1327501BE06B5E7C5A4F1CFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:e8:18:68:cb:77:75:de:fd:11:52:33:a7: 9f:bb:ca:56:d9:e1:7e:e1:c3:f3:97:1d:8b:73:fc: 24:6b:ef:6e:8a:6a:05:0a:ca:70:b2:2c:3f:11:a7: e0:ac:8f:4d:5c:35:6e:43:ad:b1:96:82:1d:ba:d2: f5:bf:03:36:d4:13:60:6a:a0:87:09:71:95:f6:77: bc:6c:18:00:80:72:7c:31:ef:9c:03:50:2e:32:d5: 95:b0:a7:67:9e:b1:a5:01:b7:7d:c7:e9:bd:1c:0b: f9:0c:b5:7f:e1:e7:b7:a7:a6:75:04:5c:1b:ea:eb: 14:9d:f6:88:22:d1:a8:d9:5e:56:82:a5:a3:29:12: 80:7d:8a:ea:26:7f:e4:76:dc:52:06:84:d8:87:6e: f6:70:92:e9:cb:23:95:a1:4c:36:1c:b7:70:96:85: 1f:78:08:87:dc:d4:cf:87:09:a1:a7:5e:b7:ba:c6: 6c:93:77:3f:50:76:fe:f0:5c:b5:27:75:1a:bb:52: 77:63:9c:70:ed:47:b5:a5:d3:cb:f2:6c:69:9a:2d: 5f:b2:62:4c:5e:e7:5b:4a:a3:44:7b:f8:e3:b4:3a: 23:f3:46:6e:c5:92:91:43:1a:0f:f0:39:00:d5:72: 40:e0:9c:0a:3f:9b:1b:a7:ee:28:f8:34:45:f7:31: 14:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AE:D7:9D:ED:1A:D2:E1:32:75:01:BE:06:B5:E7:C5:A4:F1:CF:D9 X509v3 Authority Key Identifier: keyid:6F:E1:3A:A5:55:48:94:12:B2:89:22:67:A4:9D:AE:C4:46:93:A6:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/b-E6pVVIlBKyiSJnpJ2uxEaTpqs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e3:0b:14:06:b3:66:02:cf:5c:ba:58:52:2e:bf:44:97:89: 66:9c:61:6e:00:bb:5d:5c:4f:15:4a:1f:56:41:42:f7:f2:e4: 6b:58:26:b9:f1:37:3a:35:76:c8:0a:f8:6a:44:3a:0e:cd:d6: af:8c:b9:c9:92:f5:66:76:39:1a:e3:5e:4f:54:42:8f:a1:82: 90:42:f0:a3:1d:5d:06:0c:9b:5f:70:12:43:e8:21:08:ef:73: 8c:50:82:94:a7:d5:86:c3:35:1a:00:55:c1:98:d9:73:b2:f3: bf:65:8c:9c:6c:73:75:10:2c:54:09:9d:8a:16:c1:da:3f:55: 9c:ff:f8:9b:66:f3:65:e4:5d:33:bb:61:59:68:ce:9c:da:d3: 92:4a:32:2c:51:7b:13:13:f9:8b:42:29:8b:97:78:d6:59:1b: 39:25:86:f5:85:b6:9b:21:6f:d1:f9:e0:70:47:e7:66:1e:23: a7:a2:6d:ba:0e:06:0d:01:8a:74:8c:7c:cc:22:42:05:ea:33: d9:d3:dc:93:8b:f5:69:35:25:9c:be:21:54:99:5b:b1:43:60: 09:45:b9:3a:d4:24:a0:6b:8e:ef:cb:c1:95:dc:a6:28:3a:bb: b9:11:bf:78:69:dd:9d:d6:a3:42:18:1b:33:bc:e6:48:2e:94: 62:08:0a:da -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZF MTNBQTU1NTQ4OTQxMkIyODkyMjY3QTQ5REFFQzQ0NjkzQTZBQjAeFw0yNTA4MjQx MDAzMDJaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYyQUVENzlERUQxQUQy RTEzMjc1MDFCRTA2QjVFN0M1QTRGMUNGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7+gYaMt3dd79EVIzp5+7ylbZ4X7hw/OXHYtz/CRr726KagUK ynCyLD8Rp+Csj01cNW5DrbGWgh260vW/AzbUE2BqoIcJcZX2d7xsGACAcnwx75wD UC4y1ZWwp2eesaUBt33H6b0cC/kMtX/h57enpnUEXBvq6xSd9ogi0ajZXlaCpaMp EoB9iuomf+R23FIGhNiHbvZwkunLI5WhTDYct3CWhR94CIfc1M+HCaGnXre6xmyT dz9Qdv7wXLUndRq7UndjnHDtR7Wl08vybGmaLV+yYkxe51tKo0R7+OO0OiPzRm7F kpFDGg/wOQDVckDgnAo/mxun7ij4NEX3MRT/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUYq7Xne0a0uEydQG+BrXnxaTxz9kwHwYDVR0jBBgwFoAUb+E6pVVIlBKyiSJn pJ2uxEaTpqswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI2 Ni9iLUU2cFZWSWxCS3lpU0pucEoydXhFYVRwcXMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ItRTZwVlZJbEJLeWlTSm5wSjJ1eEVhVHBxcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNjYvYi1FNnBWVklsQkt5 aVNKbnBKMnV4RWFUcHFzLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALnjCxQGs2YCz1y6WFIuv0SXiWacYW4Au11cTxVKH1ZBQvfy5GtYJrnxNzo1 dsgK+GpEOg7N1q+MucmS9WZ2ORrjXk9UQo+hgpBC8KMdXQYMm19wEkPoIQjvc4xQ gpSn1YbDNRoAVcGY2XOy879ljJxsc3UQLFQJnYoWwdo/VZz/+Jtm82XkXTO7YVlo zpza05JKMixRexMT+YtCKYuXeNZZGzklhvWFtpshb9H54HBH52YeI6eibboOBg0B inSMfMwiQgXqM9nT3JOL9Wk1JZy+IVSZW7FDYAlFuTrUJKBrju/LwZXcpig6u7kR v3hp3Z3Wo0IYGzO85kgulGIICto= -----END CERTIFICATE-----Generated at Sun Aug 24 12:10:08 2025 by rpki-client