$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft File: fCewZFm5zh-8LzSJoPxnKF1942A.mft (raw, json) Hash identifier: IsCrcQjO3nQb3AJSADSm5Tm1aRGKHP2WT80rTZV4UeU= Subject key identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A Authority key identifier: 7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 Certificate issuer: /CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Certificate serial: 0839 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft Manifest number: 0839 Signing time: Sat 23 Aug 2025 23:02:08 +0000 Manifest this update: Sat 23 Aug 2025 23:02:08 +0000 Manifest next update: Sun 24 Aug 2025 05:02:08 +0000 Files and hashes: 1: fCewZFm5zh-8LzSJoPxnKF1942A.crl (hash: 3dfnHTZhoF9vNPh44Nqs3rTbxjymReOkbh66kNgcFEA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C27B06459B9CE1FBC2F3489A0FC67285D7DE360 Validity Not Before: Aug 23 23:02:08 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7001E5871E36F731E219A480CB7C61ADFD6CCD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:90:72:05:4e:a9:49:22:a5:80:29:93:b0: a0:68:a4:6f:df:bc:f8:b7:18:cf:00:01:5d:6a:82: 16:ae:f1:d2:95:e9:79:77:92:df:fc:8f:a9:12:04: 91:60:3a:ae:f4:81:f0:ee:0d:7a:d7:48:ae:56:43: 6c:7b:d7:51:d2:cd:c3:33:43:40:31:37:67:18:9a: 17:d2:1b:e1:bc:6d:f4:29:08:8c:be:cc:52:60:96: cc:7f:f4:a8:c0:cf:6a:8a:b6:b4:7d:b2:9f:4a:fe: 0d:53:1c:b8:e8:80:ee:62:62:04:b6:12:bf:89:af: ec:3f:ea:0c:fb:a5:38:bf:af:ca:f3:b7:1a:8b:a3: 0c:67:1d:27:d8:9f:9f:3f:5a:4f:50:cd:db:4a:47: d0:c6:a6:05:b4:95:e1:a9:5b:55:04:d6:a8:da:d5: ab:9e:fd:71:ab:58:ad:8e:ee:29:13:d2:7d:1f:22: 61:78:9d:bf:d7:34:5a:0f:ef:31:8c:df:47:1d:eb: d7:bc:4f:03:d9:18:3d:a4:bd:b4:66:a4:b8:33:f9: da:79:4d:75:f4:d3:40:6e:6d:1a:26:f5:71:fc:8d: 7d:8e:26:ca:a8:bc:39:5a:40:1f:34:da:79:c1:61: 87:0d:8d:1f:f7:d3:f2:06:8b:4b:90:5a:c6:53:75: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:E5:87:1E:36:F7:31:E2:19:A4:80:CB:7C:61:AD:FD:6C:CD:6A X509v3 Authority Key Identifier: keyid:7C:27:B0:64:59:B9:CE:1F:BC:2F:34:89:A0:FC:67:28:5D:7D:E3:60 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fCewZFm5zh-8LzSJoPxnKF1942A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3298/fCewZFm5zh-8LzSJoPxnKF1942A.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b2:1e:b7:1c:92:8e:b3:f3:e3:33:b3:a8:b6:45:20:8e:01: 32:a1:d1:c5:44:19:1e:d7:4c:1e:a2:84:44:90:1e:72:a8:a9: df:2e:ce:47:63:76:6b:e4:64:58:21:9d:47:88:1f:38:5c:2e: 89:46:80:61:49:8e:fa:7b:31:85:5a:d0:8d:64:16:e3:fa:80: 40:ce:2f:17:02:22:d2:2a:44:a1:95:4a:17:87:3b:5e:ab:f7: a3:e2:76:09:f3:35:3f:61:08:58:08:34:25:4b:88:b4:f8:09: a0:80:f9:c3:7e:4e:30:29:e2:c2:84:b6:ba:9f:70:fb:fa:2b: 0e:bb:8d:28:05:a4:4b:3b:04:61:f5:55:1b:1f:6b:3f:56:22: 1a:73:94:d3:bf:b1:81:3d:d3:b9:41:a3:8b:18:bb:09:35:20: d6:b8:3d:4d:1a:58:5c:4a:48:91:69:a0:72:92:4a:7f:b6:7d: 7b:af:0a:b0:37:3a:6b:7a:41:50:8a:3c:11:5f:42:d3:79:e0: 72:84:dc:31:51:fc:95:1f:08:72:44:04:f7:e3:4a:38:35:d9: 36:7f:b8:03:8a:e6:30:7e:d8:a5:65:24:92:96:31:f7:83:39: b1:5a:d2:6f:72:af:74:76:7a:84:33:c1:2a:2b:a0:c2:07:73: 01:68:6d:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0My N0IwNjQ1OUI5Q0UxRkJDMkYzNDg5QTBGQzY3Mjg1RDdERTM2MDAeFw0yNTA4MjMy MzAyMDhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDcwMDFFNTg3MUUzNkY3 MzFFMjE5QTQ4MENCN0M2MUFERkQ2Q0NENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFgJByBU6pSSKlgCmTsKBopG/fvPi3GM8AAV1qghau8dKV6Xl3 kt/8j6kSBJFgOq70gfDuDXrXSK5WQ2x711HSzcMzQ0AxN2cYmhfSG+G8bfQpCIy+ zFJglsx/9KjAz2qKtrR9sp9K/g1THLjogO5iYgS2Er+Jr+w/6gz7pTi/r8rztxqL owxnHSfYn58/Wk9QzdtKR9DGpgW0leGpW1UE1qja1aue/XGrWK2O7ikT0n0fImF4 nb/XNFoP7zGM30cd69e8TwPZGD2kvbRmpLgz+dp5TXX000BubRom9XH8jX2OJsqo vDlaQB802nnBYYcNjR/30/IGi0uQWsZTdRtXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcAHlhx429zHiGaSAy3xhrf1szWowHwYDVR0jBBgwFoAUfCewZFm5zh+8LzSJ oPxnKF1942AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 OC9mQ2V3WkZtNXpoLThMelNKb1B4bktGMTk0MkEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2ZDZXdaRm01emgtOEx6U0pvUHhuS0YxOTQyQS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTgvZkNld1pGbTV6aC04 THpTSm9QeG5LRjE5NDJBLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALqyHrccko6z8+Mzs6i2RSCOATKh0cVEGR7XTB6ihESQHnKoqd8uzkdjdmvk ZFghnUeIHzhcLolGgGFJjvp7MYVa0I1kFuP6gEDOLxcCItIqRKGVSheHO16r96Pi dgnzNT9hCFgINCVLiLT4CaCA+cN+TjAp4sKEtrqfcPv6Kw67jSgFpEs7BGH1VRsf az9WIhpzlNO/sYE907lBo4sYuwk1INa4PU0aWFxKSJFpoHKSSn+2fXuvCrA3Omt6 QVCKPBFfQtN54HKE3DFR/JUfCHJEBPfjSjg12TZ/uAOK5jB+2KVlJJKWMfeDObFa 0m9yr3R2eoQzwSoroMIHcwFobQA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:28:10 2025 by rpki-client