$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft File: l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft (raw, json) Hash identifier: MuDA3etxi30JbAAc/XTJnLH/0fQ4oRbDDPpWpKdNUQA= Subject key identifier: 2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34 Authority key identifier: 97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15 Certificate issuer: /CN=974591FE6CE9D9B1D7338743509FD4920BA15715 Certificate serial: 0106 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft Manifest number: 0106 Signing time: Sat 23 Aug 2025 16:02:17 +0000 Manifest this update: Sat 23 Aug 2025 16:02:17 +0000 Manifest next update: Sat 23 Aug 2025 22:02:17 +0000 Files and hashes: 1: l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl (hash: cdj7rYm38CUHbME/083H6i9GPXfJscQ7K0SkO6N92WE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 21:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974591FE6CE9D9B1D7338743509FD4920BA15715 Validity Not Before: Aug 23 16:02:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2EC1A35BE4D5AD0A5782E218CDA2B72EB5D49634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:45:27:cd:1f:be:d0:60:27:8d:73:ea:12: e7:5a:68:6b:ed:15:49:34:f6:20:5b:0e:e1:7a:7a: a6:ce:9e:d8:08:32:51:26:de:e7:a1:54:80:33:9a: 0e:68:4d:4a:64:82:5c:e8:79:1d:18:91:77:c7:f8: 61:6f:b4:96:0a:42:85:72:a2:72:d5:91:02:1d:37: 21:45:f2:93:68:aa:e6:d2:e7:68:a2:2a:c1:ae:2d: c3:9d:2a:fb:46:04:71:c6:44:87:31:d7:ab:08:0b: 50:b8:62:fa:80:b2:2c:6b:66:3f:8a:78:6a:40:b3: 63:59:1b:a7:04:a1:d6:ff:fc:43:5a:2a:10:63:94: 08:d0:3a:fa:c5:d0:c5:7f:3d:c2:b8:5c:2e:52:eb: bd:91:2d:51:9f:f4:97:28:3a:44:8d:c1:a6:2a:f5: 39:d9:5e:8b:63:39:b9:09:05:50:c5:34:8f:44:86: 3c:b2:08:c9:f0:f3:99:2d:b1:35:81:9b:38:0c:74: 2e:56:57:bd:dc:70:60:4f:9d:3a:ec:8e:a9:bb:91: 3d:f0:fc:d8:c7:54:a2:44:3c:f8:9e:c1:64:a3:67: 8a:6b:a2:53:1e:79:38:3b:c3:12:58:e5:de:34:5c: 8f:3b:f7:37:23:86:70:0f:ed:f9:e1:64:ff:b1:07: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C1:A3:5B:E4:D5:AD:0A:57:82:E2:18:CD:A2:B7:2E:B5:D4:96:34 X509v3 Authority Key Identifier: keyid:97:45:91:FE:6C:E9:D9:B1:D7:33:87:43:50:9F:D4:92:0B:A1:57:15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/l0WR_mzp2bHXM4dDUJ_UkguhVxU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/628/l0WR_mzp2bHXM4dDUJ_UkguhVxU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:21:a6:34:8c:01:ed:5b:9f:37:1a:34:e5:03:92:0c:b5:af: 8d:e2:c2:f0:eb:13:29:35:99:4b:ef:06:b8:af:ef:f5:8f:4c: d0:65:0a:2b:73:66:1a:69:97:f6:39:e4:43:80:68:66:ea:c6: 7a:60:d1:6a:59:db:e6:59:8c:b5:4d:e4:37:4a:73:73:47:dc: e0:be:c5:f4:f8:72:bc:89:e5:36:6a:3d:ae:72:d9:c7:a8:26: 0b:c6:dc:eb:f8:4c:10:9f:12:be:40:b1:bd:12:44:91:b9:68: 79:0f:57:f2:cb:f5:7d:9a:0a:4c:d2:1c:65:8f:82:b2:00:1b: 5e:ce:a6:6c:80:5f:58:8d:58:0a:a2:75:9c:be:56:d5:ab:ef: b1:f0:25:ab:bd:03:af:8f:fc:8a:71:b6:e7:e6:b0:1b:27:33: 8d:ad:96:3a:f8:a0:0e:fa:a1:90:94:1d:f2:65:7b:44:d2:ae: 11:fd:77:5a:cb:e9:b9:d0:d1:29:30:9c:10:6a:fc:51:79:bd: a2:c7:9e:cb:e8:a7:de:26:95:a6:bb:e6:c2:70:e5:45:e6:52: 75:e6:25:0c:60:f1:1b:f8:dd:2c:44:68:fa:76:7d:44:6b:ca: 4a:cc:ce:14:23:cf:5f:7c:84:d5:85:b8:09:48:be:f7:d4:c6: 90:2e:05:73 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTc0 NTkxRkU2Q0U5RDlCMUQ3MzM4NzQzNTA5RkQ0OTIwQkExNTcxNTAeFw0yNTA4MjMx NjAyMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDJFQzFBMzVCRTRENUFE MEE1NzgyRTIxOENEQTJCNzJFQjVENDk2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC70kUnzR++0GAnjXPqEudaaGvtFUk09iBbDuF6eqbOntgIMlEm 3uehVIAzmg5oTUpkglzoeR0YkXfH+GFvtJYKQoVyonLVkQIdNyFF8pNoqubS52ii KsGuLcOdKvtGBHHGRIcx16sIC1C4YvqAsixrZj+KeGpAs2NZG6cEodb//ENaKhBj lAjQOvrF0MV/PcK4XC5S672RLVGf9JcoOkSNwaYq9TnZXotjObkJBVDFNI9Ehjyy CMnw85ktsTWBmzgMdC5WV73ccGBPnTrsjqm7kT3w/NjHVKJEPPiewWSjZ4prolMe eTg7wxJY5d40XI879zcjhnAP7fnhZP+xB4xXAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQULsGjW+TVrQpXguIYzaK3LrXUljQwHwYDVR0jBBgwFoAUl0WR/mzp2bHXM4dD UJ/UkguhVxUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjI4 L2wwV1JfbXpwMmJIWE00ZERVSl9Va2d1aFZ4VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvbDBXUl9tenAyYkhYTTRkRFVKX1VrZ3VoVnhVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjI4L2wwV1JfbXpwMmJIWE00 ZERVSl9Va2d1aFZ4VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0IaY0jAHtW583GjTlA5IMta+N4sLw6xMpNZlL7wa4r+/1j0zQZQorc2YaaZf2 OeRDgGhm6sZ6YNFqWdvmWYy1TeQ3SnNzR9zgvsX0+HK8ieU2aj2uctnHqCYLxtzr +EwQnxK+QLG9EkSRuWh5D1fyy/V9mgpM0hxlj4KyABtezqZsgF9YjVgKonWcvlbV q++x8CWrvQOvj/yKcbbn5rAbJzONrZY6+KAO+qGQlB3yZXtE0q4R/Xday+m50NEp MJwQavxReb2ix57L6KfeJpWmu+bCcOVF5lJ15iUMYPEb+N0sRGj6dn1Ea8pKzM4U I89ffITVhbgJSL731MaQLgVz -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:35 2025 by rpki-client