$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft File: 4slCx2IRPXOTmcfzC8gfLWJqobc.mft (raw, json) Hash identifier: G1GFmkGGS+3N2FPYwH9BupIKWA4mOWS4Kfp9IgcTocY= Subject key identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC Authority key identifier: E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 Certificate issuer: /CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Certificate serial: 09C7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft Manifest number: 09C7 Signing time: Sat 23 Aug 2025 21:02:14 +0000 Manifest this update: Sat 23 Aug 2025 21:02:14 +0000 Manifest next update: Sun 24 Aug 2025 03:02:14 +0000 Files and hashes: 1: 4slCx2IRPXOTmcfzC8gfLWJqobc.crl (hash: 4Z/bbCIoj2Rfvru6y6CtlP45mlFpxuPiYLBwGwVVeVM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2C942C762113D739399C7F30BC81F2D626AA1B7 Validity Not Before: Aug 23 21:02:14 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=ECD0886A534F8BE060B89A2D32AB5AB101692BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:aa:25:ff:2a:95:f7:42:70:b9:92:28:4f: 59:4f:af:85:d1:d3:ec:1b:97:11:2a:33:9b:99:50: 5a:48:e3:ff:41:72:78:0e:8d:6a:0d:09:6a:e7:dd: ad:8b:09:08:95:b6:80:02:8a:11:ff:f1:da:44:0b: 03:4e:cf:a9:ec:21:0c:33:02:45:9d:eb:47:a6:42: b2:33:33:ae:c8:8d:16:7a:1e:b0:58:7a:de:98:51: f7:37:00:6c:91:70:f6:9b:77:0d:30:20:e9:20:da: 92:1f:98:39:6d:f8:8f:ff:cb:fb:cd:4a:55:11:6c: b9:92:dc:18:e1:8e:f0:76:97:51:ad:bc:0a:69:db: 7b:20:9f:3d:1c:4b:54:e1:a9:f6:db:0f:70:d8:f7: 89:5d:b7:14:d9:75:d1:12:21:0d:1a:30:3b:2c:5f: ab:e9:1e:7a:1f:b8:58:83:74:99:f8:ec:9e:85:be: c3:cc:05:ae:02:41:6a:be:b5:f8:42:71:a5:df:dc: 66:c8:10:2b:24:fc:0c:81:36:9c:37:44:e6:93:54: 7f:6b:59:6f:87:12:53:3e:7f:b1:36:c7:14:5a:7f: e2:94:66:da:81:dc:e6:90:a9:ed:6b:93:d3:23:57: 39:53:d9:ab:5b:39:94:c9:97:a8:66:c3:be:31:ce: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:88:6A:53:4F:8B:E0:60:B8:9A:2D:32:AB:5A:B1:01:69:2B:FC X509v3 Authority Key Identifier: keyid:E2:C9:42:C7:62:11:3D:73:93:99:C7:F3:0B:C8:1F:2D:62:6A:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4slCx2IRPXOTmcfzC8gfLWJqobc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3273/4slCx2IRPXOTmcfzC8gfLWJqobc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:9b:5c:10:55:34:e2:08:32:c3:39:e0:db:d8:ef:b8:17:c9: 63:a0:95:40:ef:31:96:86:33:86:c4:b0:9e:f0:f9:2c:58:a2: 5e:b9:e1:7e:9a:27:44:ab:58:b0:ca:07:56:34:40:de:36:f5: dc:9c:95:6e:f2:ee:fa:82:e9:a3:61:88:77:57:d9:32:78:98: ba:ff:ab:b0:46:83:56:5e:6a:d4:2b:1a:5c:46:92:0b:b4:87: 5c:24:de:25:79:22:44:29:ac:c7:c6:49:88:99:20:35:a5:e5: dd:a7:de:a4:c2:90:ad:88:d5:bf:47:93:6c:9d:a7:fa:31:61: 12:75:8e:06:4a:9d:28:eb:44:f1:38:cc:95:7f:94:5f:0b:17: 9a:8c:5f:ed:81:16:29:c9:c3:46:de:33:53:60:fd:a0:84:7a: 63:49:9f:b1:67:f8:49:43:82:b6:5c:b3:c4:40:3b:d0:d8:bd: 05:1a:fa:dd:40:58:b2:b1:2a:0b:06:fb:e5:80:ac:72:1a:bb: e5:04:7f:a4:5b:94:73:dd:25:8c:3c:a0:d7:1c:11:11:dd:28: 89:a0:4e:5e:81:c1:4d:85:b4:32:3f:ed:c8:70:c4:87:9b:29: 7f:04:8f:b6:5f:9f:73:5b:fc:39:8b:6c:74:d0:be:fc:72:bc: f1:83:22:b0 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJD OTQyQzc2MjExM0Q3MzkzOTlDN0YzMEJDODFGMkQ2MjZBQTFCNzAeFw0yNTA4MjMy MTAyMTRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEVDRDA4ODZBNTM0RjhC RTA2MEI4OUEyRDMyQUI1QUIxMDE2OTJCRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6Wqol/yqV90JwuZIoT1lPr4XR0+wblxEqM5uZUFpI4/9BcngO jWoNCWrn3a2LCQiVtoACihH/8dpECwNOz6nsIQwzAkWd60emQrIzM67IjRZ6HrBY et6YUfc3AGyRcPabdw0wIOkg2pIfmDlt+I//y/vNSlURbLmS3BjhjvB2l1GtvApp 23sgnz0cS1ThqfbbD3DY94ldtxTZddESIQ0aMDssX6vpHnofuFiDdJn47J6FvsPM Ba4CQWq+tfhCcaXf3GbIECsk/AyBNpw3ROaTVH9rWW+HElM+f7E2xxRaf+KUZtqB 3OaQqe1rk9MjVzlT2atbOZTJl6hmw74xzphRAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU7NCIalNPi+BguJotMqtasQFpK/wwHwYDVR0jBBgwFoAU4slCx2IRPXOTmcfz C8gfLWJqobcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 My80c2xDeDJJUlBYT1RtY2Z6QzhnZkxXSnFvYmMuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRzbEN4MklSUFhPVG1jZnpDOGdmTFdKcW9iYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzMvNHNsQ3gySVJQWE9U bWNmekM4Z2ZMV0pxb2JjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALGbXBBVNOIIMsM54NvY77gXyWOglUDvMZaGM4bEsJ7w+SxYol654X6aJ0Sr WLDKB1Y0QN429dyclW7y7vqC6aNhiHdX2TJ4mLr/q7BGg1ZeatQrGlxGkgu0h1wk 3iV5IkQprMfGSYiZIDWl5d2n3qTCkK2I1b9Hk2ydp/oxYRJ1jgZKnSjrRPE4zJV/ lF8LF5qMX+2BFinJw0beM1Ng/aCEemNJn7Fn+ElDgrZcs8RAO9DYvQUa+t1AWLKx KgsG++WArHIau+UEf6RblHPdJYw8oNccERHdKImgTl6BwU2FtDI/7chwxIebKX8E j7Zfn3Nb/DmLbHTQvvxyvPGDIrA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:48 2025 by rpki-client