$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft File: k3fSYykHgztKOfdV9B9C-yOpSdI.mft (raw, json) Hash identifier: MAbYP4g0etBYSm9Mv9OjZf1ig4MQiF0oSrQc8j9GZWI= Subject key identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 Authority key identifier: 93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 Certificate issuer: /CN=9377D2632907833B4A39F755F41F42FB23A949D2 Certificate serial: 1C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft Manifest number: 1C Signing time: Sat 23 Aug 2025 16:03:09 +0000 Manifest this update: Sat 23 Aug 2025 16:03:09 +0000 Manifest next update: Sat 23 Aug 2025 22:03:09 +0000 Files and hashes: 1: k3fSYykHgztKOfdV9B9C-yOpSdI.crl (hash: F3rxq1B873D9dmFTyrDrUn+DGuU4wEfqXJcMN2jgpic=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9377D2632907833B4A39F755F41F42FB23A949D2 Validity Not Before: Aug 23 16:03:09 2025 GMT Not After : Aug 18 08:08:12 2026 GMT Subject: CN=F4853C9CB5E88A02A1505C2C9283A34FC9C12BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:4e:39:6b:2a:a1:1c:72:5c:27:a3:6e:3b: 20:90:90:4c:62:e2:b5:7a:60:66:52:71:04:9f:3a: 0d:70:d7:23:c4:be:48:6b:f8:68:13:e9:ae:c7:2f: c6:11:3e:7f:f7:f0:2d:33:e5:30:f7:91:44:9c:4d: a6:d0:a1:ae:b0:ad:67:f6:51:3e:09:7b:d5:58:da: ff:ac:ee:67:85:78:f1:c6:5d:2a:00:f4:85:6e:1d: b0:d2:98:a9:9c:d4:e7:e3:0a:39:03:45:27:26:e0: 34:01:46:e4:36:3f:26:13:ea:20:10:c8:9d:a6:28: 43:db:cd:e7:d8:e4:50:38:7f:b5:73:25:86:76:01: 08:75:c7:27:56:9f:f6:23:07:ee:09:05:a6:e3:9b: c0:4a:ee:01:f3:b0:48:49:b9:e0:c6:98:d1:a7:c5: 87:b0:dd:45:60:9b:7c:0c:32:7b:b0:27:20:ee:14: a3:79:58:0d:e4:c4:f5:1b:36:b1:aa:65:c6:eb:ec: 9f:9a:42:19:5e:e0:5f:97:29:9d:a4:09:e2:59:5d: 84:ec:ff:47:24:b8:85:c2:00:0e:23:c0:57:8e:e3: b6:e3:a2:42:3a:06:19:1f:2f:ea:df:b7:77:11:7a: 5d:34:8b:16:de:2c:2c:c3:b1:36:5a:34:d6:b8:45: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:85:3C:9C:B5:E8:8A:02:A1:50:5C:2C:92:83:A3:4F:C9:C1:2B:F1 X509v3 Authority Key Identifier: keyid:93:77:D2:63:29:07:83:3B:4A:39:F7:55:F4:1F:42:FB:23:A9:49:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k3fSYykHgztKOfdV9B9C-yOpSdI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3388/k3fSYykHgztKOfdV9B9C-yOpSdI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:a2:10:cf:5a:57:03:6b:70:8b:1c:e6:fe:f2:88:c6:49:0d: 3c:40:bf:51:18:42:c2:9e:58:e0:43:d9:79:11:d7:5f:e2:cc: 8e:b7:aa:48:75:50:f5:9d:8a:dd:3a:9f:94:03:0b:73:c8:54: 46:11:92:33:a0:fb:16:f2:58:be:c8:4c:90:f0:5c:fe:7e:84: 60:51:4d:6d:f5:ff:d1:11:57:54:62:fd:34:e0:32:05:e1:0b: 48:3e:bb:0d:38:6a:e0:85:b6:f5:21:b3:88:7f:94:5e:da:82: 7e:3c:ac:6d:db:11:3c:37:c6:96:18:85:15:5c:8a:96:f6:24: f6:4a:ca:f0:27:60:23:e1:ef:57:83:27:2f:e3:97:eb:48:d4: a0:47:8a:3d:f2:95:ce:9b:4a:f1:a7:77:4c:2f:b8:1b:c2:17: 90:21:58:8f:87:89:da:9c:61:29:f8:0d:9d:a7:f9:bf:6c:31: 67:87:c9:f4:73:fe:07:8e:72:7a:4c:c8:e9:5f:17:17:c3:92: b6:23:d2:f8:68:b1:44:ab:04:8e:82:49:6d:4d:a6:da:6f:6f: 8f:7c:a8:c2:e0:ca:6d:ac:be:c4:d5:91:03:95:c7:dd:be:48: 89:d0:73:26:6e:f7:b7:3f:37:86:43:9f:21:97:8d:1a:47:d6: 6e:99:d2:74 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzc3 RDI2MzI5MDc4MzNCNEEzOUY3NTVGNDFGNDJGQjIzQTk0OUQyMB4XDTI1MDgyMzE2 MDMwOVoXDTI2MDgxODA4MDgxMlowMzExMC8GA1UEAxMoRjQ4NTNDOUNCNUU4OEEw MkExNTA1QzJDOTI4M0EzNEZDOUMxMkJGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMdkTjlrKqEcclwno247IJCQTGLitXpgZlJxBJ86DXDXI8S+SGv4 aBPprscvxhE+f/fwLTPlMPeRRJxNptChrrCtZ/ZRPgl71Vja/6zuZ4V48cZdKgD0 hW4dsNKYqZzU5+MKOQNFJybgNAFG5DY/JhPqIBDInaYoQ9vN59jkUDh/tXMlhnYB CHXHJ1af9iMH7gkFpuObwEruAfOwSEm54MaY0afFh7DdRWCbfAwye7AnIO4Uo3lY DeTE9Rs2saplxuvsn5pCGV7gX5cpnaQJ4lldhOz/RyS4hcIADiPAV47jtuOiQjoG GR8v6t+3dxF6XTSLFt4sLMOxNlo01rhFhMkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBT0hTycteiKAqFQXCySg6NPycEr8TAfBgNVHSMEGDAWgBSTd9JjKQeDO0o591X0 H0L7I6lJ0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg4 L2szZlNZeWtIZ3p0S09mZFY5QjlDLXlPcFNkSS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvazNmU1l5a0hnenRLT2ZkVjlCOUMteU9wU2RJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4OC9rM2ZTWXlrSGd6dEtP ZmRWOUI5Qy15T3BTZEkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy6IQz1pXA2twixzm/vKIxkkNPEC/URhCwp5Y4EPZeRHXX+LMjreqSHVQ9Z2K 3TqflAMLc8hURhGSM6D7FvJYvshMkPBc/n6EYFFNbfX/0RFXVGL9NOAyBeELSD67 DThq4IW29SGziH+UXtqCfjysbdsRPDfGlhiFFVyKlvYk9krK8CdgI+HvV4MnL+OX 60jUoEeKPfKVzptK8ad3TC+4G8IXkCFYj4eJ2pxhKfgNnaf5v2wxZ4fJ9HP+B45y ekzI6V8XF8OStiPS+GixRKsEjoJJbU2m2m9vj3yowuDKbay+xNWRA5XH3b5IidBz Jm73tz83hkOfIZeNGkfWbpnSdA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:00 2025 by rpki-client