$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft File: TQ0SNEQmepjKGFWTV9H6GADgHlw.mft (raw, json) Hash identifier: Fh8ASMfmA0QCb37uGuq0iLzfJR0b6snhl0qQpDhLEik= Subject key identifier: CC:23:31:1E:1D:CB:41:84:11:8E:24:42:84:65:E0:D9:D5:DD:3A:2C Authority key identifier: 4D:0D:12:34:44:26:7A:98:CA:18:55:93:57:D1:FA:18:00:E0:1E:5C Certificate issuer: /CN=4D0D123444267A98CA18559357D1FA1800E01E5C Certificate serial: 97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TQ0SNEQmepjKGFWTV9H6GADgHlw.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 21:04:28 +0000 Manifest this update: Sat 23 Aug 2025 21:04:28 +0000 Manifest next update: Sun 24 Aug 2025 03:04:28 +0000 Files and hashes: 1: TQ0SNEQmepjKGFWTV9H6GADgHlw.crl (hash: 47m0OwsbPAhcjF558bQNQ+p8kQ5jRits3o/eL79k8Vo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TQ0SNEQmepjKGFWTV9H6GADgHlw.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D0D123444267A98CA18559357D1FA1800E01E5C Validity Not Before: Aug 23 21:04:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CC23311E1DCB4184118E24428465E0D9D5DD3A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:38:e6:77:37:72:b1:6a:0d:90:a3:55:59: c0:2d:05:c9:47:f5:15:ba:cf:ab:3a:e6:37:63:28: 17:d4:33:87:f5:8d:24:fa:2e:97:1f:64:c6:24:db: a4:a2:1d:4d:d4:0d:62:ce:3b:0b:c3:ea:5c:7f:4b: a1:f6:d6:dc:5f:6a:1b:ed:de:17:28:80:0c:54:15: 5b:e0:40:82:61:e1:d6:1e:0b:87:1c:b0:33:3a:d4: 7a:4b:59:f3:13:a9:ef:0e:a9:ca:3b:97:dd:8a:ca: a1:08:63:84:92:be:59:ac:9f:42:07:aa:c7:1c:7c: 9d:98:4b:82:57:24:19:2e:45:f4:c6:dc:30:e9:fd: cf:97:ce:b0:63:bb:d3:2e:0b:d0:13:58:41:11:95: e4:76:67:66:2d:c3:37:0a:37:5c:8a:ff:7d:1b:94: ad:48:82:d1:85:f5:39:a1:25:dc:ee:8e:bd:16:6c: 00:77:8a:a7:dd:f2:6f:72:49:38:d6:2d:6c:a4:9c: dc:20:eb:88:94:61:a2:c2:48:a3:ca:13:c4:67:73: 3f:8a:3b:a0:3b:49:0d:e4:93:5b:f3:3f:30:75:76: ae:6d:26:72:14:00:c7:24:a0:ab:36:e0:0c:c0:38: 92:c7:76:59:eb:54:2e:4a:34:5f:0d:cd:5d:e7:be: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:31:1E:1D:CB:41:84:11:8E:24:42:84:65:E0:D9:D5:DD:3A:2C X509v3 Authority Key Identifier: keyid:4D:0D:12:34:44:26:7A:98:CA:18:55:93:57:D1:FA:18:00:E0:1E:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TQ0SNEQmepjKGFWTV9H6GADgHlw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/TQ0SNEQmepjKGFWTV9H6GADgHlw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e6:18:98:3b:f0:f7:24:33:23:ed:6d:57:af:e9:51:f0:f6: f2:a1:bb:8d:f9:74:29:95:67:0a:6e:a5:b6:42:13:23:1e:3d: ab:17:b2:de:52:69:d2:3e:80:d6:1b:de:00:e4:c5:e6:a6:97: 91:95:5b:db:35:df:03:33:1d:cf:41:7c:f6:35:dc:7c:f5:34: 48:20:d4:be:f8:86:8d:2d:ed:bb:d5:49:ed:cd:6c:43:97:4d: 2c:dd:8d:f5:49:2a:ec:b0:5a:b9:66:6d:79:f0:bd:12:80:55: d2:1b:97:17:9d:66:e0:dc:67:93:c1:ff:33:1b:2e:f6:65:0c: f0:38:aa:0c:62:a0:a4:e1:c3:27:b2:17:91:ef:0b:2e:46:71: 9d:1e:23:76:be:c7:f3:52:0c:1b:1a:44:53:ef:02:0c:b1:6c: c4:36:49:d3:cd:2b:0b:20:cd:7f:89:2a:28:8c:63:8a:dd:6d: 88:bc:db:2d:fb:f7:5d:b8:8b:16:5b:7d:26:9d:c8:a3:ce:35: 89:d8:f6:d8:d7:ec:30:b5:9d:84:78:b1:4d:0d:2f:44:7d:54: 22:25:4f:9f:35:a0:e1:70:49:8f:f2:13:70:d6:2b:97:70:db: 5b:30:bd:25:89:dd:7a:11:1f:53:f1:07:e7:64:dc:6c:2c:84: b7:7c:32:db -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEQw RDEyMzQ0NDI2N0E5OENBMTg1NTkzNTdEMUZBMTgwMEUwMUU1QzAeFw0yNTA4MjMy MTA0MjhaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENDMjMzMTFFMURDQjQx ODQxMThFMjQ0Mjg0NjVFMEQ5RDVERDNBMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6PzjmdzdysWoNkKNVWcAtBclH9RW6z6s65jdjKBfUM4f1jST6 LpcfZMYk26SiHU3UDWLOOwvD6lx/S6H21txfahvt3hcogAxUFVvgQIJh4dYeC4cc sDM61HpLWfMTqe8Oqco7l92KyqEIY4SSvlmsn0IHqsccfJ2YS4JXJBkuRfTG3DDp /c+XzrBju9MuC9ATWEERleR2Z2YtwzcKN1yK/30blK1IgtGF9TmhJdzujr0WbAB3 iqfd8m9ySTjWLWyknNwg64iUYaLCSKPKE8Rncz+KO6A7SQ3kk1vzPzB1dq5tJnIU AMckoKs24AzAOJLHdlnrVC5KNF8NzV3nvsTxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzCMxHh3LQYQRjiRChGXg2dXdOiwwHwYDVR0jBBgwFoAUTQ0SNEQmepjKGFWT V9H6GADgHlwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4 Ni9UUTBTTkVRbWVwaktHRldUVjlINkdBRGdIbHcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1RRMFNORVFtZXBqS0dGV1RWOUg2R0FEZ0hsdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzODYvVFEwU05FUW1lcGpL R0ZXVFY5SDZHQURnSGx3Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHrmGJg78PckMyPtbVev6VHw9vKhu435dCmVZwpupbZCEyMePasXst5SadI+ gNYb3gDkxeaml5GVW9s13wMzHc9BfPY13Hz1NEgg1L74ho0t7bvVSe3NbEOXTSzd jfVJKuywWrlmbXnwvRKAVdIblxedZuDcZ5PB/zMbLvZlDPA4qgxioKThwyeyF5Hv Cy5GcZ0eI3a+x/NSDBsaRFPvAgyxbMQ2SdPNKwsgzX+JKiiMY4rdbYi82y379124 ixZbfSadyKPONYnY9tjX7DC1nYR4sU0NL0R9VCIlT581oOFwSY/yE3DWK5dw21sw vSWJ3XoRH1PxB+dk3GwshLd8Mts= -----END CERTIFICATE-----Generated at Sun Aug 24 01:28:31 2025 by rpki-client