$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft File: -DEYqbYNbw6dOVbPQZKnnEAgR2U.mft (raw, json) Hash identifier: adA8HFQhV3zis2R3xLqtf390vR02JA2zMj1BYREdeJU= Subject key identifier: F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B Authority key identifier: F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65 Certificate issuer: /CN=F83118A9B60D6F0E9D3956CF4192A79C40204765 Certificate serial: 16A7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft Manifest number: 16A7 Signing time: Sat 23 Aug 2025 11:06:34 +0000 Manifest this update: Sat 23 Aug 2025 11:06:34 +0000 Manifest next update: Sat 23 Aug 2025 17:06:34 +0000 Files and hashes: 1: -DEYqbYNbw6dOVbPQZKnnEAgR2U.crl (hash: /VO38lOb42laWLtvMc2PhX+psLZxFY/pukD7kPqxs1w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 16:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5799 (0x16a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F83118A9B60D6F0E9D3956CF4192A79C40204765 Validity Not Before: Aug 23 11:06:34 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F73C33380749B2F820943FC0E05EF0396B3D4E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:53:04:f2:1a:ef:c0:c9:a5:77:de:4e:45: 7f:9f:77:fb:ad:b1:b0:6d:16:2f:dc:07:b0:3f:e0: e8:f7:33:5b:c1:5c:5c:2b:f4:71:ef:b4:ec:60:7e: 1e:38:33:fa:1b:bb:9a:9f:7c:f5:68:e0:72:88:a0: e5:ed:1a:00:af:93:06:b6:46:78:87:d5:82:88:f4: 88:ee:fa:44:10:49:db:62:95:a0:df:4f:c3:ea:fa: 49:d5:3d:18:49:4b:7c:70:7c:ee:de:40:25:ca:ae: 5f:9f:6f:2e:56:04:4a:59:58:9e:df:71:e3:73:fd: 74:13:fa:33:1a:c6:23:7e:80:92:e6:8c:dd:d5:9b: d8:9f:f3:f4:eb:bb:01:c9:31:d6:96:e2:f0:94:7f: 91:d6:b0:a2:2f:09:e1:a7:0e:68:b2:f0:ec:6d:5d: 00:5a:00:a6:32:b1:55:65:3a:c5:a2:8a:b1:a1:62: 6b:89:1e:74:af:50:e5:9e:4b:81:a6:77:cd:62:56: 36:30:10:1a:21:32:8a:72:eb:56:8d:6a:13:ff:50: f3:81:0f:b9:3a:cd:46:79:e2:a7:7e:df:a8:cb:0e: fc:ac:4c:11:c8:57:93:e4:07:bc:e0:da:2c:fa:70: e9:00:3f:13:b0:9f:77:f6:a8:6f:0a:0c:fd:a9:34: f1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3C:33:38:07:49:B2:F8:20:94:3F:C0:E0:5E:F0:39:6B:3D:4E:2B X509v3 Authority Key Identifier: keyid:F8:31:18:A9:B6:0D:6F:0E:9D:39:56:CF:41:92:A7:9C:40:20:47:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-DEYqbYNbw6dOVbPQZKnnEAgR2U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4/-DEYqbYNbw6dOVbPQZKnnEAgR2U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fe:fc:07:90:be:d1:25:fb:0a:99:24:d1:a0:93:89:d0:4a: fa:92:31:d8:2a:6e:05:2e:7a:76:6e:86:66:64:de:d7:ae:fa: 03:31:09:ff:c0:72:e9:b2:6d:54:56:c5:4f:9e:53:40:bc:29: 6f:9c:3f:29:ed:ad:32:7b:f2:f7:f4:fb:6d:92:65:4b:f8:2a: 39:6f:8c:3d:54:c4:9f:89:c0:cb:a1:39:78:00:f0:dc:cb:c1: 43:f2:cb:fe:53:5a:f6:f5:b5:98:a6:7e:82:1e:c4:76:23:ee: f1:88:df:aa:a6:84:72:45:34:4a:a3:bf:6e:a2:55:49:34:b9: 38:03:c1:98:6d:32:8f:85:85:8c:f9:70:85:09:8d:ee:bd:ff: 64:ed:2a:2c:67:cc:30:98:9e:af:7d:30:c7:17:6a:59:e2:a2: 19:ae:01:44:73:f4:1b:e3:a1:f7:a4:83:41:c2:7a:ea:b8:d5: 0c:f4:35:2f:e4:df:62:7a:fd:b1:af:4b:d1:19:20:b1:06:98: 95:f6:73:32:64:dc:f5:66:d7:40:db:a0:7f:ee:5d:f4:46:be: 05:40:3c:2a:e3:dd:4d:3e:fb:d2:a1:29:3f:58:43:8a:5b:e0: 92:84:bf:7a:69:3c:b4:05:63:b0:fe:3b:3a:31:d6:7d:df:e7: 6a:e1:79:bb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgICFqcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjgz MTE4QTlCNjBENkYwRTlEMzk1NkNGNDE5MkE3OUM0MDIwNDc2NTAeFw0yNTA4MjMx MTA2MzRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY3M0MzMzM4MDc0OUIy RjgyMDk0M0ZDMEUwNUVGMDM5NkIzRDRFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQyFME8hrvwMmld95ORX+fd/utsbBtFi/cB7A/4Oj3M1vBXFwr 9HHvtOxgfh44M/obu5qffPVo4HKIoOXtGgCvkwa2RniH1YKI9Iju+kQQSdtilaDf T8Pq+knVPRhJS3xwfO7eQCXKrl+fby5WBEpZWJ7fceNz/XQT+jMaxiN+gJLmjN3V m9if8/TruwHJMdaW4vCUf5HWsKIvCeGnDmiy8OxtXQBaAKYysVVlOsWiirGhYmuJ HnSvUOWeS4Gmd81iVjYwEBohMopy61aNahP/UPOBD7k6zUZ54qd+36jLDvysTBHI V5PkB7zg2iz6cOkAPxOwn3f2qG8KDP2pNPG5AgMBAAGjggIGMIICAjAdBgNVHQ4E FgQU9zwzOAdJsvgglD/A4F7wOWs9TiswHwYDVR0jBBgwFoAU+DEYqbYNbw6dOVbP QZKnnEAgR2UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNC8t REVZcWJZTmJ3NmRPVmJQUVpLbm5FQWdSMlUuY3JsMGMGCCsGAQUFBwEBBFcwVTBT BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw MDAwLy1ERVlxYllOYnc2ZE9WYlBRWktubkVBZ1IyVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzQvLURFWXFiWU5idzZkT1ZiUFFa S25uRUFnUjJVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAAv+ /AeQvtEl+wqZJNGgk4nQSvqSMdgqbgUuenZuhmZk3teu+gMxCf/AcumybVRWxU+e U0C8KW+cPyntrTJ78vf0+22SZUv4KjlvjD1UxJ+JwMuhOXgA8NzLwUPyy/5TWvb1 tZimfoIexHYj7vGI36qmhHJFNEqjv26iVUk0uTgDwZhtMo+FhYz5cIUJje69/2Tt KixnzDCYnq99MMcXalniohmuAURz9Bvjofekg0HCeuq41Qz0NS/k32J6/bGvS9EZ ILEGmJX2czJk3PVm10DboH/uXfRGvgVAPCrj3U0++9KhKT9YQ4pb4JKEv3ppPLQF Y7D+Ozox1n3f52rhebs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:31 2025 by rpki-client