$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft File: YZGqzc5WCnTYPAXajqkyevlE270.mft (raw, json) Hash identifier: nBbVKiz6lYN5KjOb77MM5kCRzPPjGW9IXRX9SM/o5xA= Subject key identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Certificate serial: 16C1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft Manifest number: 16B9 Signing time: Wed 13 Aug 2025 16:03:18 +0000 Manifest this update: Wed 13 Aug 2025 16:03:18 +0000 Manifest next update: Wed 13 Aug 2025 22:03:18 +0000 Files and hashes: 1: 2XEBblbU0AtO7E6g_mThkL95ubE.roa (hash: DUInj+jg8J7IJSWSU2YD6iUFjAi3mK5xuxno0tl+ZGU=) 2: QVGtqSaVkscnVb64lhRi-cMEHSc.roa (hash: Ww6dLhQGxl5xTNIHfw+jluIsVDrzSDLMJsr6pk3RFXE=) 3: YZGqzc5WCnTYPAXajqkyevlE270.crl (hash: 9KxNQsrpipP8/i4Rfcgj2H4d7rSWMDNpxENwoCID274=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5825 (0x16c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD Validity Not Before: Aug 13 16:03:18 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=392146B2D9EFE68D1BC9A903BD96C84CFE72E7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:c6:45:4d:1c:a7:eb:e7:1f:0b:2d:a9:e5: 5f:e0:7f:a5:cd:aa:2d:a3:07:3c:62:14:a0:d7:4f: f4:31:5f:84:b5:75:66:df:de:9c:66:26:13:2a:90: 6b:8b:30:8b:01:3e:85:20:bd:b7:e7:60:e4:7d:f9: 14:ef:0b:38:c0:7b:fc:8a:e8:58:6e:fd:d6:94:dc: ee:5e:9e:d0:b0:61:99:84:05:32:96:87:7b:fb:0c: 3d:be:9a:04:2b:58:c3:0d:49:a6:67:3a:78:b0:b2: 68:6c:64:1b:e3:5c:79:0a:86:4b:ce:8d:6d:0b:0a: 3c:56:02:62:41:14:fa:73:b9:80:7d:5a:12:27:2e: a3:2f:04:23:3d:40:7a:57:da:57:75:59:5f:65:b1: 23:33:53:2b:b0:a6:ad:82:0c:86:21:09:30:91:54: 76:71:27:c5:d3:8b:a2:96:68:55:ee:f8:5e:8b:47: 5a:51:db:88:e7:84:e8:03:cf:f7:af:36:9e:88:e8: 8d:91:9d:93:08:c8:ff:b6:ab:0c:ff:ad:68:df:e7: b9:25:5e:7f:79:a4:ce:db:43:ed:12:28:8a:44:59: 48:d4:ce:aa:97:52:a1:7d:31:08:41:00:79:fb:91: 7c:9e:99:03:6e:ca:72:47:f4:4b:16:fd:47:32:dc: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:46:B2:D9:EF:E6:8D:1B:C9:A9:03:BD:96:C8:4C:FE:72:E7:D3 X509v3 Authority Key Identifier: keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:88:c4:f1:71:03:8f:4f:85:18:e5:f8:e4:24:69:9d:85:d3: 23:d2:7d:03:c0:65:8d:bb:28:ef:10:5f:af:b1:03:88:6e:4f: cf:6f:87:0c:50:60:ca:f0:72:d7:e5:b0:d9:b3:ee:52:02:03: 58:ed:28:af:19:9f:91:68:30:1a:8c:0b:74:bd:1f:49:f8:93: a1:ad:de:58:d6:78:7b:54:63:a3:c7:67:41:eb:89:ad:43:f3: 78:55:31:ec:5d:c8:22:7d:95:27:24:ae:39:c6:62:53:1e:d4: c1:74:df:44:c4:17:60:42:ae:d6:a4:ca:6d:06:26:23:d3:00: b8:ff:20:19:a2:46:74:e7:56:2e:f7:f4:f0:09:8b:ca:c3:e3: 51:c0:f1:bf:4d:ae:58:55:42:75:56:c1:11:86:e6:42:35:85: ce:bb:fc:c9:b4:1c:91:a7:50:e1:26:d3:43:d5:4f:45:a6:8e: 71:35:4c:cf:cd:9a:50:5b:41:ff:1a:1a:56:95:0a:3c:a1:e7: fe:db:fa:85:de:bb:91:e9:81:e1:11:cd:a9:41:c1:0b:4a:fe: 64:9e:16:bc:31:03:55:54:55:42:1b:b2:fc:60:e0:8a:f4:85: 90:58:cc:29:68:53:1f:aa:fc:e8:f4:46:3d:5e:1b:33:5a:33: 56:f7:5a:ca -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE5 MUFBQ0RDRTU2MEE3NEQ4M0MwNURBOEVBOTMyN0FGOTQ0REJCRDAeFw0yNTA4MTMx NjAzMThaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM5MjE0NkIyRDlFRkU2 OEQxQkM5QTkwM0JEOTZDODRDRkU3MkU3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLpsZFTRyn6+cfCy2p5V/gf6XNqi2jBzxiFKDXT/QxX4S1dWbf 3pxmJhMqkGuLMIsBPoUgvbfnYOR9+RTvCzjAe/yK6Fhu/daU3O5entCwYZmEBTKW h3v7DD2+mgQrWMMNSaZnOniwsmhsZBvjXHkKhkvOjW0LCjxWAmJBFPpzuYB9WhIn LqMvBCM9QHpX2ld1WV9lsSMzUyuwpq2CDIYhCTCRVHZxJ8XTi6KWaFXu+F6LR1pR 24jnhOgDz/evNp6I6I2RnZMIyP+2qwz/rWjf57klXn95pM7bQ+0SKIpEWUjUzqqX UqF9MQhBAHn7kXyemQNuynJH9EsW/Ucy3NXnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUOSFGstnv5o0byakDvZbITP5y59MwHwYDVR0jBBgwFoAUYZGqzc5WCnTYPAXa jqkyevlE270wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIw MC9ZWkdxemM1V0NuVFlQQVhhanFreWV2bEUyNzAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMDAvWVpHcXpjNVdDblRZ UEFYYWpxa3lldmxFMjcwLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAECIxPFxA49PhRjl+OQkaZ2F0yPSfQPAZY27KO8QX6+xA4huT89vhwxQYMrw ctflsNmz7lICA1jtKK8Zn5FoMBqMC3S9H0n4k6Gt3ljWeHtUY6PHZ0Hria1D83hV MexdyCJ9lSckrjnGYlMe1MF030TEF2BCrtakym0GJiPTALj/IBmiRnTnVi739PAJ i8rD41HA8b9NrlhVQnVWwRGG5kI1hc67/Mm0HJGnUOEm00PVT0WmjnE1TM/NmlBb Qf8aGlaVCjyh5/7b+oXeu5HpgeERzalBwQtK/mSeFrwxA1VUVUIbsvxg4Ir0hZBY zCloUx+q/Oj0Rj1eGzNaM1b3Wso= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:03 2025 by rpki-client