$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft File: WRxbA8l84P4-x44jxoVveSwg1AQ.mft (raw, json) Hash identifier: gzvcvRBRQ/rawTaNV6h81AtsHeGBPTCNyXwLq78BDMg= Subject key identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Certificate serial: 1707 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft Manifest number: 16FE Signing time: Sun 24 Aug 2025 00:02:51 +0000 Manifest this update: Sun 24 Aug 2025 00:02:51 +0000 Manifest next update: Sun 24 Aug 2025 06:02:51 +0000 Files and hashes: 1: Eiz4UhuTTi63d_GLPqRNdBYiZAk.roa (hash: m4W5sYfutDIBGUa1Xlob/CH9YeApB50kyDS7XSN9X8k=) 2: WRxbA8l84P4-x44jxoVveSwg1AQ.crl (hash: ZvJvnXt/biHplc+SrW+d/8WnGlsBXgZkt09gMoP4mx4=) 3: dhzeY3_OxcHAtiIl3zszftT0K6M.roa (hash: Bh1vZMx8G1lOICwP2E+cHe0uEMRdbBxn1G0CwSCXWF0=) 4: hSA0GN3vrBMOwEnZYiQXH6DYuc8.roa (hash: 2Vn8f0lm4bXJ6phvRt7XoC++jp3dCf7kzB9LVXj1jVc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 06:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5895 (0x1707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404 Validity Not Before: Aug 24 00:02:51 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=060B73E0178A24DA932755B1B93C3A654C8743F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:43:1f:96:d4:be:91:b4:92:bf:46:af:95: 9c:5a:b7:f7:c0:3f:1f:ba:fb:2e:7f:55:20:41:8c: 12:de:18:be:a7:e8:86:a8:6b:ae:dd:e9:09:84:5a: fb:f9:6d:84:cb:0f:26:69:59:b8:6a:4c:ae:43:72: dc:84:60:1f:09:b1:40:e9:64:8a:25:60:fa:f6:db: 6a:aa:13:57:5e:96:39:f3:23:2d:79:ac:81:f7:e5: 76:54:53:e3:64:56:5e:f1:5a:50:d5:6e:1d:19:78: ad:b6:0f:64:de:2c:63:5f:a7:18:20:1b:41:ae:92: f5:42:e1:63:4e:66:83:fb:c2:ad:d6:69:b9:d5:0e: e5:b4:87:b9:27:75:7d:29:51:d3:cc:2b:3a:0d:79: 96:cb:3a:00:67:a0:68:59:56:f9:66:61:34:3b:26: db:45:e0:15:61:2b:03:68:dd:33:6f:4d:a9:02:87: 5d:2c:f7:51:5e:cf:52:3a:27:56:2d:46:af:44:a3: 1d:ac:98:b0:94:50:a9:57:b6:d7:e4:27:a5:a7:4b: df:23:23:6b:b3:d4:08:21:51:e2:47:cb:67:3d:48: 1a:3c:4f:20:2c:f1:75:63:ec:7d:01:94:c0:ac:df: 45:c2:90:44:9f:f9:22:cc:e7:15:55:dc:d7:83:a8: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0B:73:E0:17:8A:24:DA:93:27:55:B1:B9:3C:3A:65:4C:87:43:F4 X509v3 Authority Key Identifier: keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:38:40:ea:47:fc:63:c8:bc:47:6d:1c:34:63:64:37:42:9b: e2:83:79:13:af:c3:07:13:37:9b:e3:a9:ce:df:ca:b8:0f:80: 7c:70:92:6a:0a:1e:47:3e:5f:e0:5d:ed:fe:42:ea:a0:c7:b2: 69:b7:0a:8a:2d:22:9b:97:88:68:f6:fe:79:36:65:7b:64:85: 6c:50:88:e5:6f:33:78:82:bf:f1:ed:ee:7f:67:27:40:ab:1c: 04:54:0a:77:cb:c1:88:0f:e3:3f:f0:99:95:a5:d5:cf:66:37: c5:a8:04:9f:96:8d:6f:3f:17:97:19:19:0e:7e:09:20:8f:43: ad:ff:fc:f1:65:5a:17:5b:b2:59:0b:a3:c6:b8:2a:c7:d9:56: c6:5e:fa:c2:b9:49:39:6e:26:26:37:38:0b:d6:c7:94:bc:56: 2d:43:4b:15:fc:7f:11:c9:c3:ab:b1:64:28:2b:46:d3:ba:49: 65:1a:3a:3c:1c:82:ac:26:dd:b0:90:2e:0e:bc:5e:31:2e:48: 3e:a8:43:71:e8:fe:7f:ac:e3:42:e8:c5:2c:1c:2f:89:1c:c8: a1:4b:1a:5d:a7:96:d0:c7:89:f5:9f:02:87:ab:46:52:4a:7c: b6:d5:6f:c9:10:f5:d3:8c:f7:0f:40:ac:27:21:42:e8:1a:ba: 64:a9:54:a3 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkx QzVCMDNDOTdDRTBGRTNFQzc4RTIzQzY4NTZGNzkyQzIwRDQwNDAeFw0yNTA4MjQw MDAyNTFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2MEI3M0UwMTc4QTI0 REE5MzI3NTVCMUI5M0MzQTY1NEM4NzQzRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxEMfltS+kbSSv0avlZxat/fAPx+6+y5/VSBBjBLeGL6n6Iao a67d6QmEWvv5bYTLDyZpWbhqTK5DctyEYB8JsUDpZIolYPr222qqE1deljnzIy15 rIH35XZUU+NkVl7xWlDVbh0ZeK22D2TeLGNfpxggG0GukvVC4WNOZoP7wq3WabnV DuW0h7kndX0pUdPMKzoNeZbLOgBnoGhZVvlmYTQ7JttF4BVhKwNo3TNvTakCh10s 91Fez1I6J1YtRq9Eox2smLCUUKlXttfkJ6WnS98jI2uz1AghUeJHy2c9SBo8TyAs 8XVj7H0BlMCs30XCkESf+SLM5xVV3NeDqH2fAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUBgtz4BeKJNqTJ1WxuTw6ZUyHQ/QwHwYDVR0jBBgwFoAUWRxbA8l84P4+x44j xoVveSwg1AQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2 L1dSeGJBOGw4NFA0LXg0NGp4b1Z2ZVN3ZzFBUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvV1J4YkE4bDg0UDQteDQ0anhvVnZlU3dnMUFRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzU2L1dSeGJBOGw4NFA0LXg0 NGp4b1Z2ZVN3ZzFBUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBFOEDqR/xjyLxHbRw0Y2Q3Qpvig3kTr8MHEzeb46nO38q4D4B8cJJqCh5HPl/g Xe3+Quqgx7JptwqKLSKbl4ho9v55NmV7ZIVsUIjlbzN4gr/x7e5/ZydAqxwEVAp3 y8GID+M/8JmVpdXPZjfFqASflo1vPxeXGRkOfgkgj0Ot//zxZVoXW7JZC6PGuCrH 2VbGXvrCuUk5biYmNzgL1seUvFYtQ0sV/H8RycOrsWQoK0bTukllGjo8HIKsJt2w kC4OvF4xLkg+qENx6P5/rONC6MUsHC+JHMihSxpdp5bQx4n1nwKHq0ZSSny21W/J EPXTjPcPQKwnIULoGrpkqVSj -----END CERTIFICATE-----Generated at Sun Aug 24 05:18:13 2025 by rpki-client