$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json) Hash identifier: i6i3t1qxlthO424Co+LTVU9ncRG3c334F+fHMw/wZu0= Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Certificate serial: 04EC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft Manifest number: 04EC Signing time: Sat 23 Aug 2025 16:05:53 +0000 Manifest this update: Sat 23 Aug 2025 16:05:53 +0000 Manifest next update: Sat 23 Aug 2025 22:05:53 +0000 Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: o2O3Nxwc0fN6EsrsoaEqB1J6GhwLgx/EuvVPCyqqVGw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Validity Not Before: Aug 23 16:05:53 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F1422785AEB77794E677E837686C920829C22C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a: 97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11: 97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7: b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a: 86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20: ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9: f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6: b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01: 3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d: 90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a: 71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98: e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7: 3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06: cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32: 1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d: 20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef: 84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 X509v3 Authority Key Identifier: keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:06:44:bd:07:a9:a1:5f:03:10:8b:f4:1f:0c:55:28:61:59: 81:e9:21:f7:1f:1d:29:42:28:1d:27:93:03:94:fc:ef:1b:6f: d4:89:eb:9e:a5:9e:5e:47:a0:ab:e6:5d:8b:9d:b0:be:e3:77: 49:d3:05:d8:ee:a7:94:c2:fb:09:14:f0:5d:b0:db:8e:72:3b: 86:09:c8:71:31:97:9c:da:f1:66:f5:3c:d0:25:55:b7:17:5e: 71:ab:36:03:7b:1c:6a:08:ef:62:76:92:38:43:1d:93:56:6c: 17:51:a1:b0:fa:ef:56:10:87:af:a2:b4:0d:f4:5a:b9:bd:36: fb:a3:e8:07:c1:d1:e6:01:e4:c4:b0:17:15:b8:cc:0c:04:d5: cd:f9:5d:eb:73:79:66:b6:92:db:9b:e3:da:e3:f2:24:02:9c: 77:b9:eb:cb:a0:cf:57:1e:a1:fb:2b:94:eb:7e:45:73:57:ab: a5:34:ea:68:be:6b:ff:97:4d:34:df:41:d5:eb:da:d9:0d:c5: 5a:66:39:c7:5e:61:aa:71:5d:fc:39:fa:4a:6c:9a:50:93:ac: 6c:39:e2:8b:ca:d5:37:6c:c1:3c:75:06:fb:89:68:29:5a:37: b2:e5:ed:51:e0:14:5f:7c:2d:3a:77:86:f0:ec:32:03:1f:62: a4:03:81:04 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVE OUVEQThCQTI4QUYwM0U5RURBNjRDNkFCMTVCNkNGNjJGQTA2MzAeFw0yNTA4MjMx NjA1NTNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYxNDIyNzg1QUVCNzc3 OTRFNjc3RTgzNzY4NkM5MjA4MjlDMjJDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJB8bNi+6ZngpHOCnOpdS5Qnd0ZGyc4pyWvypEZdzx8EThlls vaMlYRlc17VE6EcSFIeFNlPNt4xaCoYiIgXFjhyfJ43QioLzIMo8QZYdUTQhB9h4 evk1+fANTHDIcbV0tjTYOGyIxrhIvSTTKcPXhrgIEvigATxjXzb4NhWQywJiIYtO XZDN6MvXfG/kVAkBd/i8inGQsfymrcEX0GaQtx5TmOHWMOZg7ymMHkjWsM9T1zoi tc1TZI92yksh7JDOBs1LNeB1Av2q/iJ1NpnqMh1OBIpWOgYUD/TVYAKBLSAwX8NI Ve3b53J35iyZ74R947r89sf5ojVGyGVBdp5/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8UInha63d5Tmd+g3aGySCCnCLHAwHwYDVR0jBBgwFoAUldntqLoorwPp7aZM arFbbPYvoGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OS9sZG50cUxvb3J3UHA3YVpNYXJGYmJQWXZvR00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xkbnRxTG9vcndQcDdhWk1hckZiYlBZdm9HTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzkvbGRudHFMb29yd1Bw N2FaTWFyRmJiUFl2b0dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJoGRL0HqaFfAxCL9B8MVShhWYHpIfcfHSlCKB0nkwOU/O8bb9SJ656lnl5H oKvmXYudsL7jd0nTBdjup5TC+wkU8F2w245yO4YJyHExl5za8Wb1PNAlVbcXXnGr NgN7HGoI72J2kjhDHZNWbBdRobD671YQh6+itA30Wrm9Nvuj6AfB0eYB5MSwFxW4 zAwE1c35XetzeWa2ktub49rj8iQCnHe568ugz1ceofsrlOt+RXNXq6U06mi+a/+X TTTfQdXr2tkNxVpmOcdeYapxXfw5+kpsmlCTrGw54ovK1TdswTx1BvuJaClaN7Ll 7VHgFF98LTp3hvDsMgMfYqQDgQQ= -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:38 2025 by rpki-client