$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft File: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft (raw, json) Hash identifier: 5Vh7Cz+ljZn83lcIeRie3ttGNMMYBy+qA8QPieQrnaU= Subject key identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 Authority key identifier: CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 Certificate issuer: /CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Certificate serial: 056E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft Manifest number: 056E Signing time: Sat 23 Aug 2025 21:05:28 +0000 Manifest this update: Sat 23 Aug 2025 21:05:28 +0000 Manifest next update: Sun 24 Aug 2025 03:05:28 +0000 Files and hashes: 1: zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl (hash: acjp6HRWSPmpKvnO/QW8mX3xJNvx/jxyHl/1W3Asg5U=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0478FABE9196B54D0BD1AA84CB39073D6CF9F9 Validity Not Before: Aug 23 21:05:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=525E66191215ECC061974ADA55D626ACF4E5D5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:c6:7c:39:63:96:f1:d6:55:de:3a:6e:e7: d5:a7:5b:44:06:e6:54:93:82:46:5a:f7:cb:3d:fb: ba:4e:6c:47:e8:a4:84:dc:83:a3:3d:e1:bd:3d:8a: 38:9e:0c:98:eb:f0:da:e6:dd:b4:92:45:bc:c6:02: af:25:cb:91:01:db:b9:58:b8:0b:5d:bb:d4:e4:db: f0:02:b9:81:1c:bf:5f:d5:e4:7a:f3:fc:25:6b:76: 4d:e9:0e:72:0b:dc:f9:2b:7c:ad:d6:47:ac:ef:eb: b4:23:5d:bb:f9:cf:ef:ce:bf:53:24:20:7a:fb:15: 02:fc:d5:bb:c6:27:8b:e2:3b:ec:2f:43:94:8e:77: 56:f5:37:17:11:33:8f:e8:6d:af:92:0d:47:5d:e5: 75:08:ac:7b:05:30:51:d1:cc:dd:6e:ca:6c:cc:e7: 7e:15:16:d8:72:24:e1:f6:aa:77:21:69:46:75:10: 3f:ca:2f:06:51:60:63:96:3b:ac:38:78:a2:a3:93: 75:72:74:9f:2b:9f:b5:cd:de:0f:62:3e:7a:ad:bb: ac:c8:88:0d:73:ce:8b:f2:8a:96:14:28:07:91:fb: 0c:53:ee:e5:66:11:eb:40:96:72:23:8f:f5:e0:a8: a9:ae:2e:11:e8:7f:a9:bb:af:29:7f:a3:55:9b:2a: d3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:66:19:12:15:EC:C0:61:97:4A:DA:55:D6:26:AC:F4:E5:D5:A7 X509v3 Authority Key Identifier: keyid:CE:04:78:FA:BE:91:96:B5:4D:0B:D1:AA:84:CB:39:07:3D:6C:F9:F9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3329/zgR4-r6RlrVNC9GqhMs5Bz1s-fk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5e:50:07:97:17:70:43:82:b6:d9:80:05:50:61:76:9e:b8: ae:69:48:6f:57:0c:c4:09:d9:92:f4:c6:1a:51:1a:95:84:70: 49:73:16:5a:e5:b7:41:65:68:39:55:b2:ae:5e:94:e8:7a:59: 6a:f3:37:1d:00:47:fc:e6:0f:6c:51:67:bf:2f:ce:fb:33:38: 41:ff:7a:d7:d9:08:25:6d:52:01:0c:8c:8f:41:9a:82:ec:f4: fa:d0:d1:3f:c4:c4:de:66:d5:04:66:64:8b:80:dc:2d:06:24: cc:41:d0:d0:4f:2f:9e:3e:27:1e:3c:e3:ed:13:66:a3:2d:37: 22:42:ca:43:c3:a7:44:26:34:ab:a5:fd:2c:53:38:7f:37:8c: 3d:6b:7b:97:e3:02:a9:14:d9:d6:75:d9:42:e5:fc:96:cb:41: cc:97:a9:17:8a:e9:14:33:aa:ca:5c:b0:21:96:c2:2a:fe:c1: 11:cf:44:94:a6:8a:8a:52:17:6e:db:34:0f:53:a1:3e:b8:a8: c2:03:6c:1e:c4:45:f6:e7:6a:f2:5f:2f:4f:de:dc:b5:eb:0c: c9:25:6b:d4:a1:18:33:71:06:11:8d:06:ba:ae:27:92:c9:d0: 0d:a8:2f:e1:5c:cb:f0:73:e4:74:a9:cd:6f:92:b1:30:05:53: 3d:a1:01:5e -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Uw NDc4RkFCRTkxOTZCNTREMEJEMUFBODRDQjM5MDczRDZDRjlGOTAeFw0yNTA4MjMy MTA1MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUyNUU2NjE5MTIxNUVD QzA2MTk3NEFEQTU1RDYyNkFDRjRFNUQ1QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7YMZ8OWOW8dZV3jpu59WnW0QG5lSTgkZa98s9+7pObEfopITc g6M94b09ijieDJjr8Nrm3bSSRbzGAq8ly5EB27lYuAtdu9Tk2/ACuYEcv1/V5Hrz /CVrdk3pDnIL3PkrfK3WR6zv67QjXbv5z+/Ov1MkIHr7FQL81bvGJ4viO+wvQ5SO d1b1NxcRM4/oba+SDUdd5XUIrHsFMFHRzN1uymzM534VFthyJOH2qnchaUZ1ED/K LwZRYGOWO6w4eKKjk3VydJ8rn7XN3g9iPnqtu6zIiA1zzovyipYUKAeR+wxT7uVm EetAlnIjj/XgqKmuLhHof6m7ryl/o1WbKtPTAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUl5mGRIV7MBhl0raVdYmrPTl1acwHwYDVR0jBBgwFoAUzgR4+r6RlrVNC9Gq hMs5Bz1s+fkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy OS96Z1I0LXI2UmxyVk5DOUdxaE1zNUJ6MXMtZmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3pnUjQtcjZSbHJWTkM5R3FoTXM1Qnoxcy1may5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjkvemdSNC1yNlJsclZO QzlHcWhNczVCejFzLWZrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAExeUAeXF3BDgrbZgAVQYXaeuK5pSG9XDMQJ2ZL0xhpRGpWEcElzFlrlt0Fl aDlVsq5elOh6WWrzNx0AR/zmD2xRZ78vzvszOEH/etfZCCVtUgEMjI9BmoLs9PrQ 0T/ExN5m1QRmZIuA3C0GJMxB0NBPL54+Jx484+0TZqMtNyJCykPDp0QmNKul/SxT OH83jD1re5fjAqkU2dZ12ULl/JbLQcyXqReK6RQzqspcsCGWwir+wRHPRJSmiopS F27bNA9ToT64qMIDbB7ERfbnavJfL0/e3LXrDMkla9ShGDNxBhGNBrquJ5LJ0A2o L+Fcy/Bz5HSpzW+SsTAFUz2hAV4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:54 2025 by rpki-client