$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft File: OpXd7iyMGeRxgIou20cqqm_g9Jg.mft (raw, json) Hash identifier: ipvNqyPFUzeVloLbgkt1cWAO/xmn0eQ6vJWAP0n+2aQ= Subject key identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 Authority key identifier: 3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 Certificate issuer: /CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Certificate serial: 0842 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft Manifest number: 0842 Signing time: Sat 23 Aug 2025 17:02:06 +0000 Manifest this update: Sat 23 Aug 2025 17:02:06 +0000 Manifest next update: Sat 23 Aug 2025 23:02:06 +0000 Files and hashes: 1: OpXd7iyMGeRxgIou20cqqm_g9Jg.crl (hash: Gpatau0tGcWCSLAVMOwaziuxDEfC260edZkApmBmoqI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A95DDEE2C8C19E471808A2EDB472AAA6FE0F498 Validity Not Before: Aug 23 17:02:06 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=024B9897BA27D76C6D9B8F9C57C997D19875C2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:fb:3f:3b:ce:94:d2:81:30:cb:cc:a5:ce: e3:ad:a8:f0:a2:da:6f:11:37:7a:4b:db:83:6e:5b: b2:87:05:0a:37:9b:0d:12:08:f1:cf:a6:99:d7:3d: 13:cc:9e:48:88:0b:43:5e:7c:0f:b3:d3:11:b3:65: ea:db:89:23:e3:79:1f:2a:05:2e:d3:d1:37:d9:30: 6d:1d:ab:a2:2b:fc:7b:93:72:42:42:e2:24:30:ee: 3d:4e:27:fe:90:f8:d1:1b:81:17:1a:56:5a:55:50: e8:ec:ff:93:aa:4a:2f:f0:ad:25:96:3e:83:9d:bd: 66:17:0b:5b:03:ee:92:f3:08:71:44:c1:b5:0b:59: 56:81:b4:e3:de:b6:a7:36:0a:8c:d3:97:2b:ef:aa: 72:5a:bb:d4:47:d3:ed:c1:e5:14:b6:b8:3d:3d:36: 46:06:63:a9:4a:0c:74:c2:25:f9:fd:90:a1:83:24: db:f9:69:2f:61:1d:dc:f7:c5:46:38:ff:96:98:97: 4f:3f:a4:00:f7:db:1d:57:95:b1:3b:90:29:36:7a: e2:bb:99:09:85:89:d2:ad:05:6a:78:a2:7f:5f:ea: 83:8d:cf:c3:46:9f:39:87:39:de:00:46:9f:12:a8: 4e:3a:7d:66:49:5e:98:ba:ef:1d:55:9c:6d:c5:cb: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:98:97:BA:27:D7:6C:6D:9B:8F:9C:57:C9:97:D1:98:75:C2:F0 X509v3 Authority Key Identifier: keyid:3A:95:DD:EE:2C:8C:19:E4:71:80:8A:2E:DB:47:2A:AA:6F:E0:F4:98 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OpXd7iyMGeRxgIou20cqqm_g9Jg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3297/OpXd7iyMGeRxgIou20cqqm_g9Jg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ce:b4:47:66:74:5f:fc:79:4b:05:99:cc:01:66:23:c9:85: 86:c4:32:4c:fb:db:1f:8a:9f:de:41:96:ef:4a:7b:0d:e7:22: 5a:85:56:2c:73:aa:93:3b:f0:e8:b7:a5:09:86:3b:f7:58:bc: 4b:2b:68:a4:4b:17:8b:df:c3:fd:c5:07:35:12:37:85:c7:3c: 66:d8:e6:14:22:11:25:a2:64:44:f9:27:a1:da:e4:1b:19:7d: ac:36:89:2e:21:c9:be:90:e7:d5:22:3f:57:88:d6:03:5e:5e: 11:d3:3d:50:da:df:73:fe:84:50:43:a5:a3:a4:98:df:bf:f5: 85:ef:86:b9:4a:fb:35:c8:fc:cf:7b:f9:e9:21:30:15:30:3d: bc:a7:40:dd:66:31:69:db:57:04:ea:a0:8d:ec:b0:06:27:e4: a1:19:1b:9c:6e:7d:04:19:7b:23:b8:29:3e:a4:6d:58:4c:93: 88:6e:9c:4a:cd:94:0b:80:41:3e:84:6e:0d:28:8a:d2:ac:bf: 20:c1:90:9f:1c:cf:b0:bb:56:e1:e8:af:e8:f9:5d:bf:f0:c2: 5e:9c:84:40:11:f4:8d:ea:f7:32:96:bf:36:d2:2f:cf:1c:ab: 81:05:b1:2f:3e:f5:be:65:6a:31:e8:81:79:6f:af:bf:70:f3: 4f:63:8f:0d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E5 NURERUUyQzhDMTlFNDcxODA4QTJFREI0NzJBQUE2RkUwRjQ5ODAeFw0yNTA4MjMx NzAyMDZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDAyNEI5ODk3QkEyN0Q3 NkM2RDlCOEY5QzU3Qzk5N0QxOTg3NUMyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpmvs/O86U0oEwy8ylzuOtqPCi2m8RN3pL24NuW7KHBQo3mw0S CPHPppnXPRPMnkiIC0NefA+z0xGzZerbiSPjeR8qBS7T0TfZMG0dq6Ir/HuTckJC 4iQw7j1OJ/6Q+NEbgRcaVlpVUOjs/5OqSi/wrSWWPoOdvWYXC1sD7pLzCHFEwbUL WVaBtOPetqc2CozTlyvvqnJau9RH0+3B5RS2uD09NkYGY6lKDHTCJfn9kKGDJNv5 aS9hHdz3xUY4/5aYl08/pAD32x1XlbE7kCk2euK7mQmFidKtBWp4on9f6oONz8NG nzmHOd4ARp8SqE46fWZJXpi67x1VnG3FyzHfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUAkuYl7on12xtm4+cV8mX0Zh1wvAwHwYDVR0jBBgwFoAUOpXd7iyMGeRxgIou 20cqqm/g9JgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ny9PcFhkN2l5TUdlUnhnSW91MjBjcXFtX2c5SmcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL09wWGQ3aXlNR2VSeGdJb3UyMGNxcW1fZzlKZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTcvT3BYZDdpeU1HZVJ4 Z0lvdTIwY3FxbV9nOUpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGrOtEdmdF/8eUsFmcwBZiPJhYbEMkz72x+Kn95Blu9Kew3nIlqFVixzqpM7 8Oi3pQmGO/dYvEsraKRLF4vfw/3FBzUSN4XHPGbY5hQiESWiZET5J6Ha5BsZfaw2 iS4hyb6Q59UiP1eI1gNeXhHTPVDa33P+hFBDpaOkmN+/9YXvhrlK+zXI/M97+ekh MBUwPbynQN1mMWnbVwTqoI3ssAYn5KEZG5xufQQZeyO4KT6kbVhMk4hunErNlAuA QT6Ebg0oitKsvyDBkJ8cz7C7VuHor+j5Xb/wwl6chEAR9I3q9zKWvzbSL88cq4EF sS8+9b5lajHogXlvr79w809jjw0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:54 2025 by rpki-client