$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft File: SMusqvPRm5kth3kQdAxjiyXwtyw.mft (raw, json) Hash identifier: sAk5uIF2vycm3EaPT7t+bvCX8CZj3E3FLGVf+B29mOQ= Subject key identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 Authority key identifier: 48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C Certificate issuer: /CN=48CBACAAF3D19B992D877910740C638B25F0B72C Certificate serial: 0259 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft Manifest number: 0259 Signing time: Sat 23 Aug 2025 16:02:41 +0000 Manifest this update: Sat 23 Aug 2025 16:02:41 +0000 Manifest next update: Sat 23 Aug 2025 22:02:41 +0000 Files and hashes: 1: SMusqvPRm5kth3kQdAxjiyXwtyw.crl (hash: 4HCzHJoUIYOtKCuDPM4ic8AVHvAXQ26sGUAHzeYCACU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CBACAAF3D19B992D877910740C638B25F0B72C Validity Not Before: Aug 23 16:02:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E4CE9F3991E9A36B20DB985D8F15321B45E0BE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:30:86:c0:0b:d3:c3:80:68:3b:d0:99:9b:16: b7:ca:89:af:ca:9f:f0:3f:80:b5:91:b9:ff:73:3b: a7:db:5c:a7:9b:2e:e0:4f:7c:73:25:fa:9a:f7:f9: 31:06:f7:2d:0e:3b:2e:ef:ed:58:36:16:fc:bf:2b: 21:3b:58:6c:0b:25:5d:fd:91:98:c8:18:6d:fa:be: 6e:45:6e:8c:e8:17:17:e8:2f:08:e3:1c:54:87:2a: db:7c:7a:1b:84:10:9b:50:1d:b6:5c:25:98:e0:84: ec:89:f6:a3:82:c4:fc:59:44:a4:4c:5d:6d:a4:43: 5c:09:1a:65:01:f6:f0:c8:ea:46:04:fb:a1:92:fe: 75:a1:f4:c9:b6:67:f7:aa:09:ff:c3:ab:19:f5:d0: aa:48:c7:df:26:6a:f6:49:f3:d9:3d:f0:16:f1:b4: 53:6f:b0:6b:72:61:30:63:f2:61:7f:fb:53:06:cf: e4:6f:c7:f6:56:cc:c2:ec:04:30:3b:b5:bb:8b:89: fc:3c:c0:a7:54:ae:d5:78:24:c5:14:8b:60:a4:6a: 6b:76:b6:ef:3d:e1:1c:74:84:74:bf:e1:6d:20:4b: 94:a7:be:69:2e:0b:aa:e0:75:b1:68:1d:fd:0e:a8: 27:d9:11:49:5e:15:67:48:cf:5c:c4:93:3d:33:35: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:9F:39:91:E9:A3:6B:20:DB:98:5D:8F:15:32:1B:45:E0:BE:68 X509v3 Authority Key Identifier: keyid:48:CB:AC:AA:F3:D1:9B:99:2D:87:79:10:74:0C:63:8B:25:F0:B7:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SMusqvPRm5kth3kQdAxjiyXwtyw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3365/SMusqvPRm5kth3kQdAxjiyXwtyw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:92:92:3d:76:04:2e:9f:07:f0:44:96:f8:cd:5b:d6:53:49: 37:2f:9e:37:74:2f:44:a2:3f:c8:d4:ce:fe:1e:88:56:b9:dc: c1:45:e0:21:86:34:07:8b:4c:96:4e:ea:72:e4:41:45:c8:89: c2:d4:a7:d0:36:69:1b:5e:f2:de:fb:dd:74:ab:6f:3d:2b:2f: 2f:4b:0c:e3:22:be:f2:93:3a:44:18:6d:04:39:49:45:44:24: 5a:7e:29:45:8c:da:5b:93:ba:52:4e:32:b6:f5:85:58:a0:13: 37:fc:cc:01:da:9e:99:50:0e:42:0a:c9:db:5f:63:f7:73:9c: b5:4a:24:8c:71:b5:99:ed:ab:d9:de:5b:e7:68:83:5b:91:41: 36:c6:6c:dc:fd:e3:25:42:d9:7d:35:93:f6:19:13:94:e6:e9: e0:ec:b4:a6:4a:45:d6:02:e9:c3:c9:18:49:78:30:42:d1:93: 9c:25:c9:6d:2f:ad:ed:8f:22:ea:42:d4:dc:73:48:9a:ca:d8: 72:31:7b:c8:1d:be:d3:81:d5:93:8b:9a:21:bd:a5:87:20:d0: ff:f1:f7:b4:f7:26:57:74:35:7e:18:01:1b:d8:b9:d4:84:64: 48:59:54:2e:0c:fe:26:ee:65:8f:86:58:a8:24:ac:0b:55:5c: be:16:7e:18 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhD QkFDQUFGM0QxOUI5OTJEODc3OTEwNzQwQzYzOEIyNUYwQjcyQzAeFw0yNTA4MjMx NjAyNDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEU0Q0U5RjM5OTFFOUEz NkIyMERCOTg1RDhGMTUzMjFCNDVFMEJFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2MIbAC9PDgGg70JmbFrfKia/Kn/A/gLWRuf9zO6fbXKebLuBP fHMl+pr3+TEG9y0OOy7v7Vg2Fvy/KyE7WGwLJV39kZjIGG36vm5FbozoFxfoLwjj HFSHKtt8ehuEEJtQHbZcJZjghOyJ9qOCxPxZRKRMXW2kQ1wJGmUB9vDI6kYE+6GS /nWh9Mm2Z/eqCf/Dqxn10KpIx98mavZJ89k98BbxtFNvsGtyYTBj8mF/+1MGz+Rv x/ZWzMLsBDA7tbuLifw8wKdUrtV4JMUUi2Ckamt2tu894Rx0hHS/4W0gS5Snvmku C6rgdbFoHf0OqCfZEUleFWdIz1zEkz0zNa7NAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU5M6fOZHpo2sg25hdjxUyG0XgvmgwHwYDVR0jBBgwFoAUSMusqvPRm5kth3kQ dAxjiyXwtywwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 NS9TTXVzcXZQUm01a3RoM2tRZEF4aml5WHd0eXcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1NNdXNxdlBSbTVrdGgza1FkQXhqaXlYd3R5dy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjUvU011c3F2UFJtNWt0 aDNrUWRBeGppeVh3dHl3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI6Skj12BC6fB/BElvjNW9ZTSTcvnjd0L0SiP8jUzv4eiFa53MFF4CGGNAeL TJZO6nLkQUXIicLUp9A2aRte8t773XSrbz0rLy9LDOMivvKTOkQYbQQ5SUVEJFp+ KUWM2luTulJOMrb1hVigEzf8zAHanplQDkIKydtfY/dznLVKJIxxtZntq9neW+do g1uRQTbGbNz94yVC2X01k/YZE5Tm6eDstKZKRdYC6cPJGEl4MELRk5wlyW0vre2P IupC1NxzSJrK2HIxe8gdvtOB1ZOLmiG9pYcg0P/x97T3Jld0NX4YARvYudSEZEhZ VC4M/ibuZY+GWKgkrAtVXL4Wfhg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:18 2025 by rpki-client