$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft File: kADdQD0um0CSgjWMWbpbOMPeB-w.mft (raw, json) Hash identifier: w8ZzptL/576JEXcOGI1uUU56PXxxKk3sOJkULD6gNzY= Subject key identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 Authority key identifier: 90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC Certificate issuer: /CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Certificate serial: 0828 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft Manifest number: 0828 Signing time: Sat 23 Aug 2025 21:04:44 +0000 Manifest this update: Sat 23 Aug 2025 21:04:44 +0000 Manifest next update: Sun 24 Aug 2025 03:04:44 +0000 Files and hashes: 1: kADdQD0um0CSgjWMWbpbOMPeB-w.crl (hash: hbSGFyA4Fjstu67LjqFo8+zHD6Y+mLrOfj2Vr/GqTLA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9000DD403D2E9B409282358C59BA5B38C3DE07EC Validity Not Before: Aug 23 21:04:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=714A6D9CD89CE5FB58BA4B8A52D38237E799ED81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:52:6a:0d:89:40:d5:62:f6:bd:31:23:24: aa:a0:39:ed:8a:6b:8f:36:37:e6:f1:dd:aa:23:0e: ad:4b:26:85:a9:ce:7e:6b:bb:3d:1a:ae:da:36:ae: 75:f1:95:7f:4c:ba:26:f0:40:31:78:68:77:4a:6a: 08:75:c1:45:8f:31:06:cd:a7:90:c3:8c:b2:26:44: f3:50:fe:39:cd:91:1e:67:2e:5c:c4:d9:1d:f5:1a: 13:13:cb:fe:19:89:4d:b2:55:58:41:86:4c:27:e1: 9b:28:9c:98:e9:d1:ff:c7:73:dd:79:49:1d:68:9f: 3c:97:dd:64:45:62:6d:f0:e1:4c:a5:74:5a:19:6b: d1:24:fb:7e:c7:db:82:6d:90:ef:eb:c1:4a:be:99: 26:00:0a:34:ab:0b:6d:15:0f:7b:8c:18:75:b1:28: e6:65:6e:65:7a:6d:0e:47:d5:af:83:ee:77:d9:49: 5e:f0:c5:de:44:ed:6e:40:b2:e4:9e:38:26:f4:1a: a9:01:dd:a9:80:e9:70:8d:85:fc:d7:34:37:45:7a: 87:f0:1f:12:ab:f5:b6:39:29:bd:25:07:9e:7b:28: 6a:29:c1:71:01:52:3c:ea:96:50:d6:6c:3a:da:a0: d9:c2:a2:f4:79:d1:a3:fd:5e:df:50:f3:64:06:c3: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4A:6D:9C:D8:9C:E5:FB:58:BA:4B:8A:52:D3:82:37:E7:99:ED:81 X509v3 Authority Key Identifier: keyid:90:00:DD:40:3D:2E:9B:40:92:82:35:8C:59:BA:5B:38:C3:DE:07:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kADdQD0um0CSgjWMWbpbOMPeB-w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3300/kADdQD0um0CSgjWMWbpbOMPeB-w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7d:63:a6:41:47:74:81:40:f9:45:88:b9:00:6b:07:9b:3a: df:44:e4:c0:50:ea:02:9d:3d:f6:c7:ac:c6:88:f2:b9:90:9d: 31:72:4d:7d:8e:75:4f:be:c1:28:05:08:3e:b2:a7:11:61:e0: c7:f0:c1:14:e9:34:d5:5a:7c:23:05:7e:30:ed:92:98:55:73: ba:3b:98:33:02:a4:b2:06:73:56:c7:28:2b:95:29:a7:e3:3a: 65:6e:aa:47:13:61:11:c8:71:0b:84:eb:78:87:61:f2:17:59: 68:65:c4:e5:04:c8:ec:3e:59:b9:27:37:bb:1f:e2:1e:8d:82: ee:1e:d0:c2:42:a5:73:f5:9f:fb:31:af:c5:d1:80:3f:94:97: 5e:48:a2:c0:e2:bc:ef:07:59:5a:ee:60:a3:a4:8b:4f:a7:9b: a5:cf:3b:36:99:ef:00:a6:57:c6:4b:b0:a1:a2:c0:f4:d1:c8: dc:ec:9c:de:91:7d:d3:b4:a4:9d:32:0e:cd:76:70:18:2b:d8: e1:3f:26:29:5a:4c:5d:e4:98:4b:96:28:cc:20:18:02:d1:07: b1:5b:9c:2e:aa:b5:79:6f:3a:7a:0e:9d:48:8d:64:00:47:73: d1:66:63:be:59:6c:10:f9:ca:22:43:f7:5c:f1:ff:4a:25:1c: d6:02:ca:ea -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTAw MERENDAzRDJFOUI0MDkyODIzNThDNTlCQTVCMzhDM0RFMDdFQzAeFw0yNTA4MjMy MTA0NDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDcxNEE2RDlDRDg5Q0U1 RkI1OEJBNEI4QTUyRDM4MjM3RTc5OUVEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2w1JqDYlA1WL2vTEjJKqgOe2Ka482N+bx3aojDq1LJoWpzn5r uz0arto2rnXxlX9MuibwQDF4aHdKagh1wUWPMQbNp5DDjLImRPNQ/jnNkR5nLlzE 2R31GhMTy/4ZiU2yVVhBhkwn4ZsonJjp0f/Hc915SR1onzyX3WRFYm3w4UyldFoZ a9Ek+37H24JtkO/rwUq+mSYACjSrC20VD3uMGHWxKOZlbmV6bQ5H1a+D7nfZSV7w xd5E7W5AsuSeOCb0GqkB3amA6XCNhfzXNDdFeofwHxKr9bY5Kb0lB557KGopwXEB UjzqllDWbDraoNnCovR50aP9Xt9Q82QGw/I5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUcUptnNic5ftYukuKUtOCN+eZ7YEwHwYDVR0jBBgwFoAUkADdQD0um0CSgjWM WbpbOMPeB+wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MC9rQURkUUQwdW0wQ1NnaldNV2JwYk9NUGVCLXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2tBRGRRRDB1bTBDU2dqV01XYnBiT01QZUItdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDAva0FEZFFEMHVtMENT Z2pXTVdicGJPTVBlQi13Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA19Y6ZBR3SBQPlFiLkAawebOt9E5MBQ6gKdPfbHrMaI8rmQnTFyTX2OdU++ wSgFCD6ypxFh4MfwwRTpNNVafCMFfjDtkphVc7o7mDMCpLIGc1bHKCuVKafjOmVu qkcTYRHIcQuE63iHYfIXWWhlxOUEyOw+WbknN7sf4h6Ngu4e0MJCpXP1n/sxr8XR gD+Ul15IosDivO8HWVruYKOki0+nm6XPOzaZ7wCmV8ZLsKGiwPTRyNzsnN6RfdO0 pJ0yDs12cBgr2OE/JilaTF3kmEuWKMwgGALRB7FbnC6qtXlvOnoOnUiNZABHc9Fm Y75ZbBD5yiJD91zx/0olHNYCyuo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:26 2025 by rpki-client