$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json) Hash identifier: eBIm41lKafwtFh/B9JMgyE+GAOJNx8hSkaczlq20z2s= Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893 Certificate serial: A1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft Manifest number: A1 Signing time: Sat 23 Aug 2025 21:02:58 +0000 Manifest this update: Sat 23 Aug 2025 21:02:58 +0000 Manifest next update: Sun 24 Aug 2025 03:02:58 +0000 Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: rXM3mLzU9PGvetZIdRVfdbmfNehSy53MWjceO9O8JjU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893 Validity Not Before: Aug 23 21:02:58 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd: 71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c: c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22: 9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae: 03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20: a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f: b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20: 4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e: 9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88: 71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb: 0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52: b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3: 0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5: 63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb: 98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51: 0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc: ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B X509v3 Authority Key Identifier: keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ed:3b:06:4a:09:14:78:65:37:6c:c3:99:42:46:c6:67:b9: 03:67:a3:3a:e3:b4:e4:21:aa:02:46:1a:7e:d1:d8:21:61:72: 8d:b2:41:6e:a1:ae:b0:5e:7d:a3:5d:c1:a4:10:50:98:f6:8e: 0e:b8:62:14:bd:e9:c1:ef:7b:75:cd:ff:f5:67:c7:ff:ac:ac: a4:a7:ac:0c:b0:59:dd:e3:68:1c:5c:ce:7b:de:58:03:a5:d3: d2:22:41:55:4d:96:66:e2:3e:2f:29:70:36:79:32:73:90:6b: 95:a7:4e:83:95:4e:7f:6f:4f:ba:b1:76:f4:43:66:ae:d6:f1: 58:aa:49:28:00:d5:6f:52:e1:b8:6c:7d:71:0c:ee:69:a3:fd: df:3f:09:66:5f:e4:f7:00:de:e4:e2:b2:14:3c:e5:18:85:78: 42:7e:f8:6e:11:b9:24:e6:40:ab:0b:93:b8:8d:54:75:f5:e2: 9a:b5:ba:18:63:48:f9:ce:cb:63:3b:57:a5:44:be:19:d9:14: ed:e5:e7:8b:36:81:35:fd:eb:a4:60:48:f1:f4:47:b2:af:ee: d8:2b:47:61:18:4c:59:33:5b:de:b6:61:bf:c0:73:95:82:81: 48:88:b2:2f:9c:04:f5:7b:a5:61:a5:24:55:27:11:68:30:54: 25:ac:cd:00 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTQy QzFFMzk5QjMxMzY2NDIwRUM0N0QyRTMxNzFCMUE1OTY1Qjg5MzAeFw0yNTA4MjMy MTAyNThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFDNTFEMjE3MjI0RTYy NDU1NzREQTE0Q0NCQTQ4RTBDMUM3NjVCMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw0KTwQxu5J52B0E9IvXG2ocLjNpqEnGpkb9/mXMZ8cQ1tAMFc 20quBB77Ip336oIQ4adwbZSpEO0yrgN332ploWQE3NGUt/oHIKnNFxTr2cniB9zu gZ28n7FSXTpJr/e8j0/WX+aGIErQ1TbksXJRARiCw8wYPp1AuPyNk60PuKqjOmo+ iHH/ud7/41QxWBvlQu2Ruw8g678ad2GjL+UMTOeeUrkEtbUmSTeXLmTCx+VT0w7d AifqqpMjik2ALxfJpWNRieFgAUnKHZWpOvUEu5hruLglZxz5TyGmF6EiUQ1XZiZc G74cpjVnMYN8vO2n+AyeWG3KGnh0CRRbey2HAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUHFHSFyJOYkVXTaFMy6SODBx2WwswHwYDVR0jBBgwFoAUFCweOZsxNmQg7EfS 4xcbGllluJMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 NS9GQ3dlT1pzeE5tUWc3RWZTNHhjYkdsbGx1Sk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0ZDd2VPWnN4Tm1RZzdFZlM0eGNiR2xsbHVKTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODUvRkN3ZU9ac3hObVFn N0VmUzR4Y2JHbGxsdUpNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHvtOwZKCRR4ZTdsw5lCRsZnuQNnozrjtOQhqgJGGn7R2CFhco2yQW6hrrBe faNdwaQQUJj2jg64YhS96cHve3XN//Vnx/+srKSnrAywWd3jaBxcznveWAOl09Ii QVVNlmbiPi8pcDZ5MnOQa5WnToOVTn9vT7qxdvRDZq7W8ViqSSgA1W9S4bhsfXEM 7mmj/d8/CWZf5PcA3uTishQ85RiFeEJ++G4RuSTmQKsLk7iNVHX14pq1uhhjSPnO y2M7V6VEvhnZFO3l54s2gTX966RgSPH0R7Kv7tgrR2EYTFkzW962Yb/Ac5WCgUiI si+cBPV7pWGlJFUnEWgwVCWszQA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:28:52 2025 by rpki-client