$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json) Hash identifier: L/NT9JQJRJqmuQQ7S3jpqFgxNov1hL9ykNN2E/YeatY= Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Certificate serial: 0259 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft Manifest number: 0259 Signing time: Sat 23 Aug 2025 21:02:29 +0000 Manifest this update: Sat 23 Aug 2025 21:02:29 +0000 Manifest next update: Sun 24 Aug 2025 03:02:29 +0000 Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: Sw2Tl138kc5b6rnG911czK5zHyFYc1LNn5HZoTTSwb8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Validity Not Before: Aug 23 21:02:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76: b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54: 23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04: 17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d: e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e: 6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e: 36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f: a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2: 01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0: 89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6: b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67: 4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03: 1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c: 88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b: f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23: 42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3: ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 X509v3 Authority Key Identifier: keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:b9:f0:74:e1:1c:d7:51:fc:1e:09:a9:3d:f9:b0:af:ee:99: 90:0a:8a:67:a7:6a:c8:c1:4e:e5:c4:70:d8:af:3b:19:6c:5b: ef:ea:85:4f:16:c9:53:39:7d:b8:bb:63:ec:3f:40:65:f8:02: d8:5e:85:77:f2:2e:5b:86:6b:13:77:9c:33:59:39:77:a2:80: f7:64:47:57:ad:67:ec:da:be:fe:0f:88:2b:76:5d:a8:40:2c: 3e:91:58:54:f5:9a:76:99:89:5a:17:e9:5b:2a:ad:77:60:2d: a6:3d:5f:1f:7a:e8:fa:45:4f:9a:d6:50:82:75:00:24:bb:e0: 01:3e:74:85:94:a6:f4:85:47:38:29:af:a3:00:ad:2a:5a:5d: e5:e8:e0:f6:d9:72:7e:5e:9a:c2:49:b6:29:2d:4f:d5:d8:d7: 3d:02:e7:ca:60:01:3b:e1:3c:4f:9a:45:a6:1a:0b:4c:11:26: 21:08:d3:4b:ef:7f:d4:a3:ff:a7:f8:bd:35:b1:6d:ee:b6:1c: 28:22:98:f5:b1:c7:8d:5a:e1:e7:ef:48:4f:f1:ea:26:06:56: 33:11:50:91:d9:d6:e6:f8:2c:09:9d:75:ad:77:c8:6d:67:5f: 0c:2a:2c:f0:5e:07:99:47:6d:73:1e:50:59:cb:5c:1b:0f:4e: 28:f2:ea:e8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY2 Q0Q1MDk0NDVFNThENzU1QkMxQTg1MjU2M0Y5QkIyRkVFQ0RCOTAeFw0yNTA4MjMy MTAyMjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY1MkFDNkQ0NUQ3NEYw MDBGRkZDQTVBNkFGQjAyNjkwNjUxQTg4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIfKaUtNFbeTcrFBvqdreh2+jxi0S9xA8+uNGgVCNk18jOZG8g dlbKAa6GBBcpqmDjTaKxcjqwtDmODeay6hMTKl7Dq5PqZrDcXmtlzjFhReIWMIgJ ole9Ljaw71GY36g9Nj4aN0dxH6ObZ2/VTfOHgrPOswjVogFP/kaQixXfpsdLJkr2 sIlsDK2FEVs2B2GQC9h+1rAyBGqAmo8ywt9M6Bt5Z0/CIbBiw3Jx8sVPyaMKAx5b /rb030cJi9IhskaPjIhyzKcv7uNSqmC88jSpi/lZL1fvkmZY9tqn1rfAI0Jrobok nqNKu5j1rZb2s+pRyrqqFopcKRGWjxRJOiIlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZSrG1F108AD//KWmr7AmkGUaiBIwHwYDVR0jBBgwFoAUlmzVCUReWNdVvBqF JWP5uy/uzbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 Ni9sbXpWQ1VSZVdOZFZ2QnFGSldQNXV5X3V6YmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xtelZDVVJlV05kVnZCcUZKV1A1dXlfdXpiay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjYvbG16VkNVUmVXTmRW dkJxRkpXUDV1eV91emJrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAM258HThHNdR/B4JqT35sK/umZAKimenasjBTuXEcNivOxlsW+/qhU8WyVM5 fbi7Y+w/QGX4AthehXfyLluGaxN3nDNZOXeigPdkR1etZ+zavv4PiCt2XahALD6R WFT1mnaZiVoX6VsqrXdgLaY9Xx966PpFT5rWUIJ1ACS74AE+dIWUpvSFRzgpr6MA rSpaXeXo4PbZcn5emsJJtiktT9XY1z0C58pgATvhPE+aRaYaC0wRJiEI00vvf9Sj /6f4vTWxbe62HCgimPWxx41a4efvSE/x6iYGVjMRUJHZ1ub4LAmdda13yG1nXwwq LPBeB5lHbXMeUFnLXBsPTijy6ug= -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:04 2025 by rpki-client