$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft File: yZxuUM1dFkZVP-VT5x64vu2RUKo.mft (raw, json) Hash identifier: IKy5Xne+Tplz4qhRvA9g/5xLOg44sPryia1A4u5GkpM= Subject key identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D Authority key identifier: C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA Certificate issuer: /CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Certificate serial: 1FAA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft Manifest number: 1FAA Signing time: Wed 13 Aug 2025 16:03:39 +0000 Manifest this update: Wed 13 Aug 2025 16:03:39 +0000 Manifest next update: Wed 13 Aug 2025 22:03:39 +0000 Files and hashes: 1: yZxuUM1dFkZVP-VT5x64vu2RUKo.crl (hash: xF+qIu2hTn3Sj8Odxu8ruU1VRHC4aNRhA7QNPdZQd/k=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8106 (0x1faa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99C6E50CD5D1646553FE553E71EB8BEED9150AA Validity Not Before: Aug 13 16:03:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=677201A6628230D0D633B6E41AA4EA04F127C18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:c7:7c:50:81:f4:7e:df:0b:fd:f4:0e:76: 24:1c:17:31:c1:3b:df:fe:96:84:35:f6:a5:1d:83: b6:df:67:63:94:53:eb:e3:1d:3b:a7:24:4b:c3:df: 09:fe:24:f4:f1:9e:27:7c:36:75:2b:ed:54:62:e9: 66:e3:14:7b:db:a7:d9:9e:1d:27:06:b7:9b:c7:84: e7:95:6c:78:68:d8:e9:ce:51:41:52:79:f2:1c:f1: 72:90:57:2b:05:a5:99:3a:ed:a9:e1:bb:3e:9b:f9: ff:da:34:39:a5:d2:56:fb:64:14:74:3f:86:cf:97: 7e:fb:89:38:af:f7:98:55:e1:d5:e3:61:5b:78:7e: 70:0f:9c:81:3b:37:fd:5e:db:9e:5f:e3:e8:0b:8f: 88:0b:d8:b4:fb:4e:22:96:cd:e2:d3:9a:7d:bd:8b: 8c:83:d7:e4:c3:7d:0a:e0:09:e8:fa:18:e0:db:f3: 8f:64:4b:21:e9:fa:57:88:21:82:de:6d:77:0f:fb: cb:69:12:d8:bf:87:7b:02:fc:77:b5:7a:ec:d0:93: c6:01:00:a6:a7:5a:bd:7d:fa:e4:ec:32:b7:47:e6: c0:42:f3:ef:df:84:9d:d0:1d:54:ff:51:9a:8e:d5: 5c:0d:f8:d7:11:b3:c2:16:a5:27:0d:01:3e:d2:c1: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:72:01:A6:62:82:30:D0:D6:33:B6:E4:1A:A4:EA:04:F1:27:C1:8D X509v3 Authority Key Identifier: keyid:C9:9C:6E:50:CD:5D:16:46:55:3F:E5:53:E7:1E:B8:BE:ED:91:50:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yZxuUM1dFkZVP-VT5x64vu2RUKo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2120/yZxuUM1dFkZVP-VT5x64vu2RUKo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f9:5d:55:ac:0f:40:61:b8:8f:f2:85:5a:c5:cc:75:59:57: 3e:51:a9:68:73:16:04:25:b0:ec:ad:ed:94:f2:c3:fe:a1:93: ee:47:fc:fd:53:18:ac:9e:d5:75:3b:d1:5b:fc:cf:86:12:4a: 0e:05:07:30:3e:38:61:48:7b:a2:38:df:e8:f7:47:ff:94:99: 67:ea:a0:6f:f0:ee:a3:e2:16:3f:54:a5:77:58:0a:dc:2b:e8: 0c:11:9d:22:7f:5e:69:0c:cd:02:1f:33:50:56:67:9a:07:83: 46:59:05:36:ff:b7:fa:7e:4f:95:52:a3:68:37:ec:97:60:64: d6:b9:2a:66:ee:ad:eb:6a:9d:12:35:d2:d2:11:6f:7d:33:16: d0:d4:2d:b6:e4:bd:39:94:29:8f:45:7b:a0:ec:08:5e:fb:69: ae:9f:88:42:ad:cf:a3:05:2b:fc:e9:ed:ab:35:1d:8b:4e:98: 93:a4:59:70:f0:c8:c5:d1:f5:9a:87:a2:a5:37:46:b2:7a:0d: bf:74:e0:64:5a:3f:0e:71:55:07:94:ea:0b:36:2c:05:7d:7f: 4d:47:fc:2a:b2:1e:17:c7:3d:b3:c1:d3:fe:3d:f7:f0:a6:2a: 96:89:b7:10:65:15:25:aa:05:b1:6b:51:69:b8:56:a6:34:28: 7a:52:e4:08 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICH6owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzk5 QzZFNTBDRDVEMTY0NjU1M0ZFNTUzRTcxRUI4QkVFRDkxNTBBQTAeFw0yNTA4MTMx NjAzMzlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY3NzIwMUE2NjI4MjMw RDBENjMzQjZFNDFBQTRFQTA0RjEyN0MxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXiMd8UIH0ft8L/fQOdiQcFzHBO9/+loQ19qUdg7bfZ2OUU+vj HTunJEvD3wn+JPTxnid8NnUr7VRi6WbjFHvbp9meHScGt5vHhOeVbHho2OnOUUFS efIc8XKQVysFpZk67anhuz6b+f/aNDml0lb7ZBR0P4bPl377iTiv95hV4dXjYVt4 fnAPnIE7N/1e255f4+gLj4gL2LT7TiKWzeLTmn29i4yD1+TDfQrgCej6GODb849k SyHp+leIIYLebXcP+8tpEti/h3sC/He1euzQk8YBAKanWr19+uTsMrdH5sBC8+/f hJ3QHVT/UZqO1VwN+NcRs8IWpScNAT7Swco5AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZ3IBpmKCMNDWM7bkGqTqBPEnwY0wHwYDVR0jBBgwFoAUyZxuUM1dFkZVP+VT 5x64vu2RUKowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy MC95Wnh1VU0xZEZrWlZQLVZUNXg2NHZ1MlJVS28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3laeHVVTTFkRmtaVlAtVlQ1eDY0dnUyUlVLby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjAveVp4dVVNMWRGa1pW UC1WVDV4NjR2dTJSVUtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAMP5XVWsD0BhuI/yhVrFzHVZVz5RqWhzFgQlsOyt7ZTyw/6hk+5H/P1TGKye 1XU70Vv8z4YSSg4FBzA+OGFIe6I43+j3R/+UmWfqoG/w7qPiFj9UpXdYCtwr6AwR nSJ/XmkMzQIfM1BWZ5oHg0ZZBTb/t/p+T5VSo2g37JdgZNa5KmburetqnRI10tIR b30zFtDULbbkvTmUKY9Fe6DsCF77aa6fiEKtz6MFK/zp7as1HYtOmJOkWXDwyMXR 9ZqHoqU3RrJ6Db904GRaPw5xVQeU6gs2LAV9f01H/CqyHhfHPbPB0/499/CmKpaJ txBlFSWqBbFrUWm4VqY0KHpS5Ag= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:09 2025 by rpki-client