$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft File: rG7v4uYozkZswlwA92XMjVOKljE.mft (raw, json) Hash identifier: xfHYrjeD88g+QPT+86OpxszJ3NXZ6gdWjibMaZafXB0= Subject key identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 Authority key identifier: AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 Certificate issuer: /CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Certificate serial: 07D5 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft Manifest number: 07D5 Signing time: Sat 23 Aug 2025 16:02:53 +0000 Manifest this update: Sat 23 Aug 2025 16:02:53 +0000 Manifest next update: Sat 23 Aug 2025 22:02:53 +0000 Files and hashes: 1: rG7v4uYozkZswlwA92XMjVOKljE.crl (hash: +9gM6J2RGHUOnydV7dcTcs4HqPqRF9WjR0ahyhavuRs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC6EEFE2E628CE466CC25C00F765CC8D538A9631 Validity Not Before: Aug 23 16:02:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5DBC1774C216B68CB2FB36DF3273F6DA28545505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:ac:7b:44:6c:5d:ff:9e:5f:48:e2:5c:c2: 37:32:a8:5e:a5:34:31:87:30:f0:cf:f6:0b:4b:cc: ac:9c:37:fa:25:e8:d2:c0:e1:84:b2:39:ea:b5:63: 8d:f6:9c:1c:00:e6:13:0c:a8:1a:f0:33:39:ed:65: 24:bc:be:49:b0:50:8c:74:7b:e3:42:91:a1:21:f2: 70:2f:36:66:5e:41:b4:e2:bd:c6:cf:f1:0c:84:04: 12:a8:f2:ed:61:6c:b5:36:65:09:04:f0:a7:aa:82: cc:69:51:7b:c0:76:ef:12:65:50:2f:8b:71:3d:05: bd:d6:37:1e:8a:b7:82:ba:08:77:19:44:e1:31:f9: 82:3c:1a:83:73:e0:cf:e5:82:3d:25:f1:29:25:3d: e0:63:be:5d:d5:08:31:89:bb:3a:c4:53:02:72:18: 1d:4c:1f:40:4c:86:e0:a6:0c:14:f8:6a:e6:06:23: 77:3e:44:06:b1:aa:78:71:e7:22:9b:90:87:44:9d: 60:f9:cd:01:89:3e:43:11:61:ff:72:8a:a1:3e:01: ef:33:45:f3:e8:b0:08:4f:79:73:cd:85:fd:6b:57: ec:42:d9:83:61:77:22:ae:1d:26:b6:12:c3:fb:34: f7:4c:4e:54:00:4d:85:89:7a:cd:55:cf:58:c6:cc: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BC:17:74:C2:16:B6:8C:B2:FB:36:DF:32:73:F6:DA:28:54:55:05 X509v3 Authority Key Identifier: keyid:AC:6E:EF:E2:E6:28:CE:46:6C:C2:5C:00:F7:65:CC:8D:53:8A:96:31 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rG7v4uYozkZswlwA92XMjVOKljE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3302/rG7v4uYozkZswlwA92XMjVOKljE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8b:6d:e7:2f:42:35:2e:fb:01:1b:d5:2f:f6:2e:4d:4a:2a: 54:8d:ff:3b:22:15:d0:49:e1:27:46:b6:ff:73:17:3d:94:9d: e1:d0:22:e7:e1:af:55:db:a5:53:ac:a8:a0:c3:c6:3a:a4:d7: fb:ae:5b:52:4a:86:e3:8f:44:5f:b4:10:5c:20:10:e8:b3:e2: 03:7c:bd:6f:ef:03:52:5d:0d:4f:c5:46:0c:2f:a2:07:c8:e5: 83:5a:81:95:35:5c:43:a0:17:94:2f:f3:e6:9e:98:f5:e8:aa: b2:9f:d1:66:bc:15:0d:ce:6c:fa:72:c2:ba:f4:3d:35:08:ef: 30:ca:2d:b9:d1:d0:40:3e:7e:d5:d6:33:73:e3:1d:e3:ac:7c: 16:c4:a5:39:ca:99:d4:86:28:21:aa:ff:8e:b9:39:e2:69:ac: d0:16:e5:e3:f9:3d:96:8d:c2:3f:fd:f3:49:1f:5c:fa:34:92: 3c:ad:fa:d9:2d:45:f6:0b:9d:5e:63:70:fe:f8:65:88:91:84: d7:a9:39:e9:b8:ef:a7:26:c4:90:62:37:e5:32:c9:f7:51:b1: 0f:6a:f0:e8:fd:18:d6:c5:8e:8d:40:e8:31:8c:41:5b:bb:05: 06:fe:09:5d:0b:d7:21:91:03:6f:ea:2f:48:0f:de:81:86:ed: 0c:4f:63:28 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUM2 RUVGRTJFNjI4Q0U0NjZDQzI1QzAwRjc2NUNDOEQ1MzhBOTYzMTAeFw0yNTA4MjMx NjAyNTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDVEQkMxNzc0QzIxNkI2 OENCMkZCMzZERjMyNzNGNkRBMjg1NDU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0rax7RGxd/55fSOJcwjcyqF6lNDGHMPDP9gtLzKycN/ol6NLA 4YSyOeq1Y432nBwA5hMMqBrwMzntZSS8vkmwUIx0e+NCkaEh8nAvNmZeQbTivcbP 8QyEBBKo8u1hbLU2ZQkE8KeqgsxpUXvAdu8SZVAvi3E9Bb3WNx6Kt4K6CHcZROEx +YI8GoNz4M/lgj0l8SklPeBjvl3VCDGJuzrEUwJyGB1MH0BMhuCmDBT4auYGI3c+ RAaxqnhx5yKbkIdEnWD5zQGJPkMRYf9yiqE+Ae8zRfPosAhPeXPNhf1rV+xC2YNh dyKuHSa2EsP7NPdMTlQATYWJes1Vz1jGzBWfAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUXbwXdMIWtoyy+zbfMnP22ihUVQUwHwYDVR0jBBgwFoAUrG7v4uYozkZswlwA 92XMjVOKljEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw Mi9yRzd2NHVZb3prWnN3bHdBOTJYTWpWT0tsakUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JHN3Y0dVlvemtac3dsd0E5MlhNalZPS2xqRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDIvckc3djR1WW96a1pz d2x3QTkyWE1qVk9LbGpFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA2LbecvQjUu+wEb1S/2Lk1KKlSN/zsiFdBJ4SdGtv9zFz2UneHQIufhr1Xb pVOsqKDDxjqk1/uuW1JKhuOPRF+0EFwgEOiz4gN8vW/vA1JdDU/FRgwvogfI5YNa gZU1XEOgF5Qv8+aemPXoqrKf0Wa8FQ3ObPpywrr0PTUI7zDKLbnR0EA+ftXWM3Pj HeOsfBbEpTnKmdSGKCGq/465OeJprNAW5eP5PZaNwj/980kfXPo0kjyt+tktRfYL nV5jcP74ZYiRhNepOem476cmxJBiN+UyyfdRsQ9q8Oj9GNbFjo1A6DGMQVu7BQb+ CV0L1yGRA2/qL0gP3oGG7QxPYyg= -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:40 2025 by rpki-client