$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft File: dLHNkLnEHIANH1u3AQiWQC4auU4.mft (raw, json) Hash identifier: FMs/HJBK6cvxL3HkXeQfIWdEbjHIelKePxf3F7h6Pl4= Subject key identifier: B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0 Authority key identifier: 74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E Certificate issuer: /CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E Certificate serial: 0517 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft Manifest number: 0517 Signing time: Sun 24 Aug 2025 02:04:45 +0000 Manifest this update: Sun 24 Aug 2025 02:04:45 +0000 Manifest next update: Sun 24 Aug 2025 08:04:45 +0000 Files and hashes: 1: dLHNkLnEHIANH1u3AQiWQC4auU4.crl (hash: 6L6bkyRRBGTnExz2WQo/zFAASuXAGZXxchMiIXvb6zY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74B1CD90B9C41C800D1F5BB7010896402E1AB94E Validity Not Before: Aug 24 02:04:45 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B054D270E7FB43E0C777B33D79CAA9F90E5226B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:0f:2d:e4:fc:fd:40:e6:c9:69:06:2c:d0: 63:f2:39:94:44:ab:77:3a:54:18:e1:c0:8b:d4:20: b5:d0:43:40:59:34:7a:aa:f6:39:9f:1e:33:db:12: ee:50:c0:ca:13:fc:45:b1:1d:b7:34:16:6d:80:c6: 5d:34:23:6d:aa:00:3b:ec:a7:1a:3c:5c:ac:75:3b: a9:01:17:f5:1f:18:2e:25:84:b9:d7:6b:4e:9c:10: 87:af:01:0b:e7:59:73:8c:28:a9:50:67:22:9a:cd: 72:96:01:0c:11:76:26:c0:92:aa:9b:34:5d:30:1e: 39:13:38:e1:1c:c6:1c:6e:11:34:f4:ad:4a:e1:13: 04:5e:12:53:7d:59:9c:7f:06:60:84:25:be:29:49: ae:e5:d2:fe:0c:5d:57:0b:7a:ed:33:47:1c:a8:ce: ef:03:5a:09:66:d1:a3:61:45:fa:d1:16:80:84:6d: 04:bf:e8:8f:a1:7a:70:d2:a9:96:dc:48:df:2b:b5: 04:a6:94:f3:4f:30:bb:68:5c:f0:06:6b:8b:88:4f: 60:80:e3:8a:b7:ee:8e:d7:88:58:0a:65:12:73:ae: a1:65:8b:b6:03:f7:c9:08:1c:e7:93:51:38:98:0c: 1d:ef:03:ac:63:26:e3:fd:e3:36:8e:25:6d:83:1f: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:D2:70:E7:FB:43:E0:C7:77:B3:3D:79:CA:A9:F9:0E:52:26:B0 X509v3 Authority Key Identifier: keyid:74:B1:CD:90:B9:C4:1C:80:0D:1F:5B:B7:01:08:96:40:2E:1A:B9:4E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dLHNkLnEHIANH1u3AQiWQC4auU4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3335/dLHNkLnEHIANH1u3AQiWQC4auU4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:81:bc:7a:20:dc:ce:30:99:ac:c5:e3:24:18:45:a1:24:26: a3:62:1d:ca:ae:94:0d:c4:0a:a7:f8:99:b5:dc:50:db:1a:75: 02:06:90:cc:68:d4:3b:9c:95:90:6f:d1:b8:e0:35:57:c9:7d: 3a:7c:c0:94:5c:3b:49:61:03:38:4f:80:20:45:75:d9:a3:e7: 08:41:b2:6e:a3:b7:83:a3:89:1e:41:2d:80:d2:7a:86:3e:7d: 21:f0:2d:9f:9a:94:b9:c6:c3:8b:51:7b:e5:98:8d:a2:72:26: 9e:9e:87:20:99:3c:d2:8f:7b:25:1d:f7:6f:9f:d4:a1:a0:1e: 07:e8:cd:50:c2:ba:8e:49:6c:a1:2d:8e:66:7b:d4:64:fd:88: 95:09:ff:fb:dd:e7:e4:49:96:1d:54:50:77:08:1e:f4:47:75: a7:54:db:2a:91:98:b0:bf:d6:f9:2d:f8:69:99:5d:1c:e6:b9: 24:c3:98:05:f9:b1:da:57:ff:ad:51:98:71:de:2d:bd:94:8c: 73:71:f9:3b:ce:ef:3d:b1:3d:66:90:9d:76:00:40:bf:7b:33: 61:e9:43:15:81:69:69:61:6e:da:6c:f9:6f:7c:7e:85:d3:75: 20:e0:41:8f:5a:7e:43:b4:d1:94:58:a6:a4:fa:f0:07:c0:23: 69:43:40:c4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRC MUNEOTBCOUM0MUM4MDBEMUY1QkI3MDEwODk2NDAyRTFBQjk0RTAeFw0yNTA4MjQw MjA0NDVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEIwNTREMjcwRTdGQjQz RTBDNzc3QjMzRDc5Q0FBOUY5MEU1MjI2QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1gw8t5Pz9QObJaQYs0GPyOZREq3c6VBjhwIvUILXQQ0BZNHqq 9jmfHjPbEu5QwMoT/EWxHbc0Fm2Axl00I22qADvspxo8XKx1O6kBF/UfGC4lhLnX a06cEIevAQvnWXOMKKlQZyKazXKWAQwRdibAkqqbNF0wHjkTOOEcxhxuETT0rUrh EwReElN9WZx/BmCEJb4pSa7l0v4MXVcLeu0zRxyozu8DWglm0aNhRfrRFoCEbQS/ 6I+henDSqZbcSN8rtQSmlPNPMLtoXPAGa4uIT2CA44q37o7XiFgKZRJzrqFli7YD 98kIHOeTUTiYDB3vA6xjJuP94zaOJW2DH1AjAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUsFTScOf7Q+DHd7M9ecqp+Q5SJrAwHwYDVR0jBBgwFoAUdLHNkLnEHIANH1u3 AQiWQC4auU4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz NS9kTEhOa0xuRUhJQU5IMXUzQVFpV1FDNGF1VTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2RMSE5rTG5FSElBTkgxdTNBUWlXUUM0YXVVNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzUvZExITmtMbkVISUFO SDF1M0FRaVdRQzRhdVU0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAKBvHog3M4wmazF4yQYRaEkJqNiHcqulA3ECqf4mbXcUNsadQIGkMxo1Duc lZBv0bjgNVfJfTp8wJRcO0lhAzhPgCBFddmj5whBsm6jt4OjiR5BLYDSeoY+fSHw LZ+alLnGw4tRe+WYjaJyJp6ehyCZPNKPeyUd92+f1KGgHgfozVDCuo5JbKEtjmZ7 1GT9iJUJ//vd5+RJlh1UUHcIHvRHdadU2yqRmLC/1vkt+GmZXRzmuSTDmAX5sdpX /61RmHHeLb2UjHNx+TvO7z2xPWaQnXYAQL97M2HpQxWBaWlhbtps+W98foXTdSDg QY9afkO00ZRYpqT68AfAI2lDQMQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:08:29 2025 by rpki-client