$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft File: 5pgpU98Hd67biO4_8goVJkBXF4U.mft (raw, json) Hash identifier: ZSCgzTcHZTqKKy7nMXweFxpi3qI2OVcSVWdp22+BPII= Subject key identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E Authority key identifier: E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 Certificate issuer: /CN=E6982953DF0777AEDB88EE3FF20A152640571785 Certificate serial: 202D Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft Manifest number: 202B Signing time: Sat 23 Aug 2025 21:03:37 +0000 Manifest this update: Sat 23 Aug 2025 21:03:37 +0000 Manifest next update: Sun 24 Aug 2025 03:03:37 +0000 Files and hashes: 1: 5pgpU98Hd67biO4_8goVJkBXF4U.crl (hash: KhU8Th8AV7NBZY2S3WCckG3FhwA8gzoX908iRBe8wng=) 2: QwvD7ilHysLGynnkEaRLtZ8S6Us.roa (hash: YP5VY/+ASkz1LfhocyuQ44niccX27uswh8o+HNY2T1o=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8237 (0x202d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6982953DF0777AEDB88EE3FF20A152640571785 Validity Not Before: Aug 23 21:03:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F56C6695780DDAF190BA5FB98C6980AADF62154E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:f9:ff:3a:5a:43:5a:91:63:2e:4d:ef:18: 5b:0b:0a:09:ca:d7:1d:0c:25:df:6d:00:13:84:bd: fd:4f:6a:e7:d8:48:ff:f1:f2:0a:62:d4:37:a4:a1: c8:bd:54:7c:b6:a7:72:d6:61:a8:39:d7:0f:52:21: 3f:56:13:3a:d7:be:50:e4:5b:ad:e0:18:7f:ce:34: de:d6:2e:28:36:a7:f3:59:66:fd:13:12:63:a4:21: ac:37:54:a9:5b:91:31:0c:15:3f:cb:1e:cf:cd:37: 59:e1:40:9e:da:92:74:06:f9:07:19:af:a2:a9:e5: 7c:fe:a1:6b:8a:8e:e2:4a:2d:63:fb:4f:20:fd:a5: 82:54:f0:25:ce:f4:b9:a1:da:b1:10:8a:7e:43:98: b9:7f:8f:c9:11:e8:cd:59:de:a7:ed:85:b4:44:61: a0:99:ce:f4:9b:46:27:fd:88:c1:30:d7:9a:4c:16: 20:04:49:a8:eb:96:d8:98:96:09:01:3f:2a:9a:c0: 19:ee:f8:17:ad:8d:e8:fa:b8:64:0e:f7:82:87:a6: c0:59:dc:77:98:b5:6f:80:40:f6:ad:7d:c9:e9:5f: 21:41:b0:64:c9:53:61:c7:99:72:da:92:99:cf:ac: c1:e3:dc:49:79:c2:2e:c7:58:bf:e9:f4:6a:4e:95: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:66:95:78:0D:DA:F1:90:BA:5F:B9:8C:69:80:AA:DF:62:15:4E X509v3 Authority Key Identifier: keyid:E6:98:29:53:DF:07:77:AE:DB:88:EE:3F:F2:0A:15:26:40:57:17:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5pgpU98Hd67biO4_8goVJkBXF4U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/709/5pgpU98Hd67biO4_8goVJkBXF4U.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a1:72:f7:aa:64:94:f5:f8:3e:32:55:5d:41:06:85:65:d0: 7b:b5:82:3c:02:71:3c:49:93:59:e1:42:6a:93:d9:93:b7:9c: 0f:84:65:43:bf:04:72:c2:67:ae:09:6e:b8:29:80:97:39:8c: 43:03:eb:0d:30:ed:73:86:7a:5c:28:a3:b7:9a:17:20:1b:92: 4b:b0:ce:8e:5d:a6:e6:b9:27:e5:fa:cd:7a:56:41:3a:d2:58: 57:0c:d2:02:94:11:59:55:35:db:6d:7c:58:98:6e:25:17:90: 83:df:2c:68:48:89:23:49:27:6d:28:7a:4d:a7:be:24:d7:d2: 2c:43:a5:bd:e8:ce:17:7b:56:b1:36:c6:80:f1:b5:4a:1e:2e: aa:00:8b:82:bb:bb:33:43:5c:d5:bd:ec:09:ae:7b:d8:9b:e2: 98:62:ad:5b:8d:f1:34:bc:57:4b:14:3a:9c:e7:d7:ae:9d:c3: 11:4d:b1:e5:c8:5c:58:ce:73:57:60:ae:52:c6:d6:4e:26:78: c5:dc:1c:1f:d7:44:df:6e:31:06:47:f2:a8:8e:d6:75:ad:ac: 69:09:c3:e0:9f:84:68:e9:8a:f8:3b:fe:75:4f:12:20:14:0f: 1b:47:ba:96:43:c0:b8:67:fb:72:a2:e4:29:38:3b:ec:e7:d2: 05:ac:13:c0 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICIC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTY5 ODI5NTNERjA3NzdBRURCODhFRTNGRjIwQTE1MjY0MDU3MTc4NTAeFw0yNTA4MjMy MTAzMzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEY1NkM2Njk1NzgwRERB RjE5MEJBNUZCOThDNjk4MEFBREY2MjE1NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa3vn/OlpDWpFjLk3vGFsLCgnK1x0MJd9tABOEvf1PaufYSP/x 8gpi1Dekoci9VHy2p3LWYag51w9SIT9WEzrXvlDkW63gGH/ONN7WLig2p/NZZv0T EmOkIaw3VKlbkTEMFT/LHs/NN1nhQJ7aknQG+QcZr6Kp5Xz+oWuKjuJKLWP7TyD9 pYJU8CXO9Lmh2rEQin5DmLl/j8kR6M1Z3qfthbREYaCZzvSbRif9iMEw15pMFiAE SajrltiYlgkBPyqawBnu+Betjej6uGQO94KHpsBZ3HeYtW+AQPatfcnpXyFBsGTJ U2HHmXLakpnPrMHj3El5wi7HWL/p9GpOlTODAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU9WxmlXgN2vGQul+5jGmAqt9iFU4wHwYDVR0jBBgwFoAU5pgpU98Hd67biO4/ 8goVJkBXF4UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5 LzVwZ3BVOThIZDY3YmlPNF84Z29WSmtCWEY0VS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvNXBncFU5OEhkNjdiaU80Xzhnb1ZKa0JYRjRVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzA5LzVwZ3BVOThIZDY3YmlP NF84Z29WSmtCWEY0VS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAToXL3qmSU9fg+MlVdQQaFZdB7tYI8AnE8SZNZ4UJqk9mTt5wPhGVDvwRywmeu CW64KYCXOYxDA+sNMO1zhnpcKKO3mhcgG5JLsM6OXabmuSfl+s16VkE60lhXDNIC lBFZVTXbbXxYmG4lF5CD3yxoSIkjSSdtKHpNp74k19IsQ6W96M4Xe1axNsaA8bVK Hi6qAIuCu7szQ1zVvewJrnvYm+KYYq1bjfE0vFdLFDqc59euncMRTbHlyFxYznNX YK5SxtZOJnjF3Bwf10TfbjEGR/KojtZ1raxpCcPgn4Ro6Yr4O/51TxIgFA8bR7qW Q8C4Z/tyouQpODvs59IFrBPA -----END CERTIFICATE-----Generated at Sun Aug 24 02:42:23 2025 by rpki-client