$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft File: 4G9RPYtETnmh9YTzwpOWosJuXzk.mft (raw, json) Hash identifier: Ysqvgp+k9wNhJydQs4A2bZL2ck90KuKknzEJ1xS3hpg= Subject key identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Certificate serial: 16A0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft Manifest number: 169D Signing time: Wed 13 Aug 2025 16:05:09 +0000 Manifest this update: Wed 13 Aug 2025 16:05:09 +0000 Manifest next update: Wed 13 Aug 2025 22:05:09 +0000 Files and hashes: 1: 4G9RPYtETnmh9YTzwpOWosJuXzk.crl (hash: NL6t4RxtAVts5X3JPtRGNJHKdFIt8uXXOlsAyC0hCn8=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5792 (0x16a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39 Validity Not Before: Aug 13 16:05:09 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=5101FBA0CB07E8ABD26F6410038F6590E71DDDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:c3:bc:90:87:ae:6d:03:db:f8:21:62:72: 42:61:4b:66:d0:a5:e5:0a:ee:e9:d2:36:94:ba:b8: 13:a8:4e:7a:5f:ff:e8:96:d6:7f:04:10:af:ea:de: f2:c2:49:35:dc:b0:69:c6:7e:1a:36:f8:59:f7:e9: 59:97:d1:60:23:78:df:84:fc:83:13:f0:da:4e:75: 6f:b2:bb:07:c9:0d:0b:d1:2d:d3:06:38:83:c6:13: 26:d7:7a:08:43:8f:d7:58:52:43:67:46:a7:84:bc: a1:db:e6:e2:6c:02:ee:9e:a6:28:86:88:43:4a:66: 3c:ec:f6:b7:90:bb:71:ed:b0:16:d7:ed:f5:d2:69: 48:d3:b5:24:c6:a4:30:62:c9:a9:c6:db:8d:39:14: 8a:4d:05:14:b0:4d:75:f1:17:95:d6:ec:79:5d:7e: 22:d6:9e:28:ff:19:72:ba:ce:46:aa:ae:4a:72:64: 0b:3d:9c:d2:f4:00:6a:7c:f6:f9:e9:e0:52:29:ee: 9a:f3:9d:79:04:a5:e7:75:34:5c:d9:93:1f:e3:83: ca:a6:d8:6f:07:43:59:ca:70:5f:e8:33:99:78:cb: c3:9c:5b:dc:36:14:2f:99:af:b4:ea:3c:fa:df:99: a5:8e:68:91:fb:fc:ae:80:58:56:04:4d:d7:d6:05: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:FB:A0:CB:07:E8:AB:D2:6F:64:10:03:8F:65:90:E7:1D:DD:D0 X509v3 Authority Key Identifier: keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:97:02:d0:da:4e:a4:4b:da:f4:c0:ea:56:20:6d:ba:85:b5: 15:1f:ff:3b:af:ad:1e:1d:7f:a1:1f:f7:a0:13:bd:99:5a:83: 40:68:2b:2c:b2:71:ab:b8:32:32:fe:b5:66:5d:9b:1d:31:1e: ff:1e:6e:3f:da:35:5b:1e:a3:78:df:c2:be:17:b3:c0:35:ac: b9:f5:88:34:65:b5:9b:de:f5:18:ba:41:0c:32:40:94:71:c6: f8:9e:1f:27:2e:6a:65:b4:d8:e1:55:ee:48:dd:1a:1b:88:02: 4d:60:3e:c8:98:9f:93:10:3c:cc:4a:8a:62:0f:0c:c5:bf:59: da:78:a9:f2:1a:7f:fc:ee:30:05:d3:5f:fb:a8:d3:af:d1:70: a1:6c:12:e2:77:6a:74:8f:3c:09:3d:f0:5b:51:af:58:1e:a9: 99:44:fc:96:96:8b:1a:09:e2:d5:cd:cf:b6:66:56:e5:29:2a: 54:cd:a4:c9:c4:2b:ef:26:10:ea:a4:74:2e:29:f1:12:6a:e2: 68:ae:73:17:eb:47:f6:b7:15:5e:90:94:e8:1e:6e:ca:be:f5: 77:93:9f:63:de:a7:53:71:ed:62:27:f2:bb:0a:50:20:f7:c2: 47:0c:23:0b:5b:a9:57:15:32:42:8e:a6:e5:54:41:82:1f:d2: ee:b4:3f:0b -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTA2 RjUxM0Q4QjQ0NEU3OUExRjU4NEYzQzI5Mzk2QTJDMjZFNUYzOTAeFw0yNTA4MTMx NjA1MDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDUxMDFGQkEwQ0IwN0U4 QUJEMjZGNjQxMDAzOEY2NTkwRTcxRERERDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0sMO8kIeubQPb+CFickJhS2bQpeUK7unSNpS6uBOoTnpf/+iW 1n8EEK/q3vLCSTXcsGnGfho2+Fn36VmX0WAjeN+E/IMT8NpOdW+yuwfJDQvRLdMG OIPGEybXeghDj9dYUkNnRqeEvKHb5uJsAu6epiiGiENKZjzs9reQu3HtsBbX7fXS aUjTtSTGpDBiyanG2405FIpNBRSwTXXxF5XW7HldfiLWnij/GXK6zkaqrkpyZAs9 nNL0AGp89vnp4FIp7prznXkEped1NFzZkx/jg8qm2G8HQ1nKcF/oM5l4y8OcW9w2 FC+Zr7TqPPrfmaWOaJH7/K6AWFYETdfWBRsxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUUQH7oMsH6KvSb2QQA49lkOcd3dAwHwYDVR0jBBgwFoAU4G9RPYtETnmh9YTz wpOWosJuXzkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3 Mi80RzlSUFl0RVRubWg5WVR6d3BPV29zSnVYemsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvNEc5UlBZdEVUbm1o OVlUendwT1dvc0p1WHprLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAM2XAtDaTqRL2vTA6lYgbbqFtRUf/zuvrR4df6Ef96ATvZlag0BoKyyycau4 MjL+tWZdmx0xHv8ebj/aNVseo3jfwr4Xs8A1rLn1iDRltZve9Ri6QQwyQJRxxvie HycuamW02OFV7kjdGhuIAk1gPsiYn5MQPMxKimIPDMW/Wdp4qfIaf/zuMAXTX/uo 06/RcKFsEuJ3anSPPAk98FtRr1geqZlE/JaWixoJ4tXNz7ZmVuUpKlTNpMnEK+8m EOqkdC4p8RJq4miucxfrR/a3FV6QlOgebsq+9XeTn2Pep1Nx7WIn8rsKUCD3wkcM IwtbqVcVMkKOpuVUQYIf0u60Pws= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:11 2025 by rpki-client