$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft File: YSzbncPTddppVnrclwg281suC-I.mft (raw, json) Hash identifier: Om2C2Aw/1vnJEFXYjXWc1kQCG97qx9K8jnGO4max58o= Subject key identifier: 4C:E7:52:52:D6:88:D8:E8:FF:42:BA:C6:19:39:41:F6:5F:87:09:60 Authority key identifier: 61:2C:DB:9D:C3:D3:75:DA:69:56:7A:DC:97:08:36:F3:5B:2E:0B:E2 Certificate issuer: /CN=612CDB9DC3D375DA69567ADC970836F35B2E0BE2 Certificate serial: 3C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YSzbncPTddppVnrclwg281suC-I.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft Manifest number: 3C Signing time: Sat 23 Aug 2025 22:03:05 +0000 Manifest this update: Sat 23 Aug 2025 22:03:05 +0000 Manifest next update: Sun 24 Aug 2025 04:03:05 +0000 Files and hashes: 1: YSzbncPTddppVnrclwg281suC-I.crl (hash: fSZixoWxFo1eIPEsEUWemYaw1gaXVR9lZh2vSEe+cR4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YSzbncPTddppVnrclwg281suC-I.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 04:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=612CDB9DC3D375DA69567ADC970836F35B2E0BE2 Validity Not Before: Aug 23 22:03:05 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4CE75252D688D8E8FF42BAC6193941F65F870960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:68:8f:ad:42:77:b4:a8:92:91:58:85:41:1f: ab:a5:5b:3e:6a:b8:b5:12:c0:05:86:8b:f8:29:6e: be:bd:15:d5:ff:24:77:a9:e4:a0:8c:47:97:f7:32: b0:02:c6:a4:72:a8:fa:f3:4b:24:51:cc:2d:1a:52: e9:1f:9e:06:02:8a:7d:ab:01:f9:23:99:b6:e1:40: 97:29:1e:cd:a2:41:54:ba:31:f4:89:86:10:21:e4: 90:10:7f:ef:af:b6:0d:1d:8a:a7:d5:79:71:b5:c7: f0:be:35:8f:01:1d:15:72:47:c7:95:e9:b4:3c:3c: 53:c2:8e:11:9f:fc:c5:5c:d6:19:09:ea:42:0f:98: b6:ad:31:dc:ef:a1:9d:c8:92:bf:ec:ca:4c:89:b3: a2:10:dc:82:3f:c2:19:c1:2a:fc:4d:f7:b8:c7:59: 31:6e:80:0a:5d:df:0e:d0:f7:4e:06:cc:d8:cf:fb: 18:35:3b:e6:2d:57:c9:d2:7f:4b:65:39:d5:c9:02: 71:6b:97:fb:ca:e7:d2:96:3c:39:9b:32:c4:1c:50: ab:a9:b3:54:85:dc:f3:2a:8a:86:45:df:20:ac:1e: 62:a1:53:dd:12:0d:cf:59:ca:1b:e9:18:8e:63:2b: 41:6e:b5:99:dc:e9:54:ff:30:33:e0:61:99:05:3e: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E7:52:52:D6:88:D8:E8:FF:42:BA:C6:19:39:41:F6:5F:87:09:60 X509v3 Authority Key Identifier: keyid:61:2C:DB:9D:C3:D3:75:DA:69:56:7A:DC:97:08:36:F3:5B:2E:0B:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YSzbncPTddppVnrclwg281suC-I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/YSzbncPTddppVnrclwg281suC-I.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c7:e5:ee:e4:c3:b8:e0:e4:6a:69:99:10:82:d6:13:20:d5: 27:d8:f5:91:4e:48:70:f8:59:df:d3:9b:ff:c2:7e:26:d6:52: 74:79:1d:a9:cf:38:af:d9:fc:fc:10:78:75:9b:51:ee:7e:28: dd:d3:2c:61:f8:34:b3:b9:85:c5:16:0c:b0:de:72:58:79:6e: 80:6d:27:27:b8:23:9a:17:3b:39:fb:b9:8a:2b:8d:fa:c4:41: 31:89:29:50:44:10:4e:ea:8e:49:f3:d7:6c:8f:3c:f6:ba:0c: f6:08:7c:75:f3:ee:4d:96:99:e3:96:fc:dd:c4:ae:0b:97:00: 31:82:d7:74:23:a4:55:23:d0:9f:fb:26:28:86:8f:c2:49:55: 8a:8d:fb:7e:a7:a5:d9:6e:67:a4:46:0f:7d:03:cc:2d:d1:f9: 2d:4d:98:2b:c2:22:fa:93:03:9a:d2:0e:28:c7:82:92:a8:e6: 69:8e:f9:ee:c4:11:71:0c:84:b9:84:70:26:af:a9:f9:45:40: 90:80:c8:5a:62:cf:69:88:7d:0c:42:63:16:01:2a:44:68:8c: 68:70:04:c5:c9:4c:23:0a:7d:dc:9e:f9:25:06:96:40:1b:b9: bf:4a:ce:a3:0d:ae:92:12:8a:64:50:c1:82:63:46:23:c7:9d: 18:82:23:26 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTJD REI5REMzRDM3NURBNjk1NjdBREM5NzA4MzZGMzVCMkUwQkUyMB4XDTI1MDgyMzIy MDMwNVoXDTI2MDgwMzA4NDQ0MFowMzExMC8GA1UEAxMoNENFNzUyNTJENjg4RDhF OEZGNDJCQUM2MTkzOTQxRjY1Rjg3MDk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5oj61Cd7SokpFYhUEfq6VbPmq4tRLABYaL+Cluvr0V1f8kd6nk oIxHl/cysALGpHKo+vNLJFHMLRpS6R+eBgKKfasB+SOZtuFAlykezaJBVLox9ImG ECHkkBB/76+2DR2Kp9V5cbXH8L41jwEdFXJHx5XptDw8U8KOEZ/8xVzWGQnqQg+Y tq0x3O+hnciSv+zKTImzohDcgj/CGcEq/E33uMdZMW6ACl3fDtD3TgbM2M/7GDU7 5i1XydJ/S2U51ckCcWuX+8rn0pY8OZsyxBxQq6mzVIXc8yqKhkXfIKweYqFT3RIN z1nKG+kYjmMrQW61mdzpVP8wM+BhmQU+gusCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRM51JS1ojY6P9CusYZOUH2X4cJYDAfBgNVHSMEGDAWgBRhLNudw9N12mlWetyX CDbzWy4L4jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzI2 L1lTemJuY1BUZGRwcFZucmNsd2cyODFzdUMtSS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWVN6Ym5jUFRkZHBwVm5yY2x3ZzI4MXN1Qy1JLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMyNi9ZU3pibmNQVGRkcHBW bnJjbHdnMjgxc3VDLUkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJcfl7uTDuODkammZEILWEyDVJ9j1kU5IcPhZ39Ob/8J+JtZSdHkdqc84r9n8 /BB4dZtR7n4o3dMsYfg0s7mFxRYMsN5yWHlugG0nJ7gjmhc7Ofu5iiuN+sRBMYkp UEQQTuqOSfPXbI889roM9gh8dfPuTZaZ45b83cSuC5cAMYLXdCOkVSPQn/smKIaP wklVio37fqel2W5npEYPfQPMLdH5LU2YK8Ii+pMDmtIOKMeCkqjmaY757sQRcQyE uYRwJq+p+UVAkIDIWmLPaYh9DEJjFgEqRGiMaHAExclMIwp93J75JQaWQBu5v0rO ow2ukhKKZFDBgmNGI8edGIIjJg== -----END CERTIFICATE-----Generated at Sun Aug 24 03:32:23 2025 by rpki-client