$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json) Hash identifier: /5Vma5PFFXkZoc+LcCigB35UCgtlDeTS2C0+4GdJHD0= Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Certificate serial: 1FC2 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft Manifest number: 1FC2 Signing time: Sun 24 Aug 2025 02:05:37 +0000 Manifest this update: Sun 24 Aug 2025 02:05:37 +0000 Manifest next update: Sun 24 Aug 2025 08:05:37 +0000 Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: XAiQutwR8MZ+UpsIxk/dW/jUWlOIzkk1fkbaihwH2e0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8130 (0x1fc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Validity Not Before: Aug 24 02:05:37 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95: 7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c: 4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c: a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d: 89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f: 11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14: 49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c: 8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d: a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34: bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87: c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67: fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85: 3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22: 24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef: 0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0: b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6: 36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 X509v3 Authority Key Identifier: keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:86:ae:77:60:64:a6:e9:56:21:3e:ec:e5:ee:87:1b:dc:37: 46:e8:4c:a2:76:34:27:50:1e:a8:6a:d4:b8:72:8b:c9:21:70: ff:84:c4:9e:dc:a3:cb:fd:94:e6:12:2d:d1:c1:1b:fc:95:d2: 20:f1:f7:dd:f6:26:26:33:d3:8f:c3:59:1e:09:f8:3f:e1:f8: 5c:eb:45:86:55:c6:c9:6f:9d:dd:28:80:a8:d9:76:0c:ca:f9: 54:e5:99:b8:35:60:db:41:51:cb:88:16:a7:64:13:c5:96:b9: 3d:65:5d:51:aa:53:7e:e8:d7:8f:50:2c:2d:a1:73:a0:c8:3c: 2d:9a:8b:57:50:90:b7:d6:02:ca:11:4a:f6:33:8a:cd:25:97: 1b:93:ae:7c:43:5c:b9:9d:5c:5d:07:35:7d:1d:4c:cf:96:36: 57:4c:ec:bf:21:8f:86:13:80:52:a8:e0:d8:b9:0b:a8:2a:86: 07:b1:79:44:ad:83:74:e1:6b:66:f6:78:60:3f:51:d6:3b:2f: 35:7a:5b:7c:fe:3e:92:07:84:ee:d0:eb:ca:07:f9:58:65:b5: e6:03:0e:04:fa:e6:8f:fc:3f:41:7b:07:98:10:7a:7d:5c:ce: 71:3d:bd:a5:08:1d:c7:77:9c:58:63:3e:5b:10:95:10:f9:1e: 3c:46:2c:66 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICH8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNTA4MjQw MjA1MzdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40 YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S 9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5 cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8 YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3 L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmhq53YGSm6VYhPuzl7ocb3DdG6EyidjQnUB6oatS4covJIXD/hMSe3KPL/ZTm Ei3RwRv8ldIg8ffd9iYmM9OPw1keCfg/4fhc60WGVcbJb53dKICo2XYMyvlU5Zm4 NWDbQVHLiBanZBPFlrk9ZV1RqlN+6NePUCwtoXOgyDwtmotXUJC31gLKEUr2M4rN JZcbk658Q1y5nVxdBzV9HUzPljZXTOy/IY+GE4BSqODYuQuoKoYHsXlErYN04Wtm 9nhgP1HWOy81elt8/j6SB4Tu0OvKB/lYZbXmAw4E+uaP/D9BeweYEHp9XM5xPb2l CB3Hd5xYYz5bEJUQ+R48Rixm -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:15 2025 by rpki-client