$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json) Hash identifier: IvTLDL63QfW6Wueie7CVZb1KiWcXMkVRs8c7mWiRVDI= Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA Certificate serial: 387D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft Manifest number: 387D Signing time: Sat 23 Aug 2025 19:02:35 +0000 Manifest this update: Sat 23 Aug 2025 19:02:35 +0000 Manifest next update: Sun 24 Aug 2025 01:02:35 +0000 Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: 0LaIkRVuDqddVl/+z/MC2AmyQ10h3+7dhqlEFLTT3JI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14461 (0x387d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA Validity Not Before: Aug 23 19:02:35 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6: f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20: 29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46: eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2: 5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc: 9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77: e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7: b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d: 5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9: 96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6: 33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5: d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11: fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f: 5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d: e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15: 11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa: e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A X509v3 Authority Key Identifier: keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0c:d4:c2:ca:c1:96:e4:dd:17:33:d7:b2:2c:cf:5c:a1:56: b7:1c:8e:ff:6e:85:e9:79:d9:16:7b:0c:9e:a9:b5:f8:bd:56: 4a:cb:76:52:2c:7b:61:9b:7a:3d:96:d4:47:df:d1:3d:c3:48: 13:f7:cc:83:64:e1:00:3a:c8:4c:fa:c8:fe:a0:42:49:2f:ee: a7:a1:8e:6c:5c:73:e9:4a:77:00:8a:fc:ce:64:58:9d:7e:56: c5:2c:44:a2:2c:f6:ed:c5:24:c9:0c:50:91:eb:23:b6:e6:87: f8:5b:1d:ee:14:20:b5:5c:53:cd:94:ce:a1:61:bc:61:76:ab: b6:b9:69:e6:08:f5:9a:81:9f:c0:b4:aa:10:02:2c:41:53:91: f6:6d:e1:e8:7d:b5:d6:bb:39:47:d9:bc:be:0c:00:20:96:f9: 4b:13:ce:38:e6:c7:6f:d1:1a:b7:6a:4a:66:75:c3:b7:b9:4c: f5:2c:3e:26:33:fb:c6:e9:f9:35:5e:d2:08:86:e3:2a:76:75: dd:ec:1f:76:94:9b:10:1b:3b:f0:06:dd:0e:65:5c:f4:60:2f: 7b:ff:ee:16:57:58:33:f4:98:36:c2:d7:1f:98:2e:39:5b:d3: 85:76:a9:0e:53:c7:48:63:3a:32:21:9b:c4:64:73:3a:d3:be: b6:c5:0e:f5 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICOH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I3 NUIyMkM0NzlDMTY5QkE2MDU5MUMxREVENDQyMEM1MzY4MURCQTAeFw0yNTA4MjMx OTAyMzVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYxOTkwMjczNzY1QTE1 NjlGQjkxMjRFQ0Q0MUQxRTY1QTNCQ0UyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f3DDUfxF9jxCQcxsxvY7EKbqS44fujzBQA2+ICnmJcPKy8N2 rNIlZikhRutZnAT1aaD68rGJIGRYwl4zvd1faWvz96B5AZ9AzJ+xIOqXHt5SRtwu W75Zd+EfhWSXyFzeJp55UKRCx7AFsmp7gJcKAA2KZKPNjV4Y9Ww7f28nXyddQpn2 2ZaeEZA1ljGfol9KOyAZxjM6Gg5Kc3nldXWeTJvHxdKuiFrZmKorbVAZx72GEfrG BSeq6RVW5mF8YwdTb1ucmQzbNaV4t+keL2sdbed6rlS6JP6K7a2QIaL3FRERy0pT unkImSdTrq/SqufLJYnssVD+dzFpCYVqbwebAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUYZkCc3ZaFWn7kSTs1B0eZaO84kowHwYDVR0jBBgwFoAUO3WyLEecFpumBZHB 3tRCDFNoHbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5 L08zV3lMRWVjRnB1bUJaSEIzdFJDREZOb0hiby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5L08zV3lMRWVjRnB1bUJa SEIzdFJDREZOb0hiby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8DNTCysGW5N0XM9eyLM9coVa3HI7/boXpedkWewyeqbX4vVZKy3ZSLHthm3o9 ltRH39E9w0gT98yDZOEAOshM+sj+oEJJL+6noY5sXHPpSncAivzOZFidflbFLESi LPbtxSTJDFCR6yO25of4Wx3uFCC1XFPNlM6hYbxhdqu2uWnmCPWagZ/AtKoQAixB U5H2beHofbXWuzlH2by+DAAglvlLE8445sdv0Rq3akpmdcO3uUz1LD4mM/vG6fk1 XtIIhuMqdnXd7B92lJsQGzvwBt0OZVz0YC97/+4WV1gz9Jg2wtcfmC45W9OFdqkO U8dIYzoyIZvEZHM60762xQ71 -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:01 2025 by rpki-client