$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft File: COaEfe781aS_jvY6VWfs2gflVik.mft (raw, json) Hash identifier: nRBq8wZb22pRJtNtiEJRLnuerzdkgkgmpcagQX1xGQM= Subject key identifier: F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE Authority key identifier: 08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29 Certificate issuer: /CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629 Certificate serial: 1F12 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft Manifest number: 1F12 Signing time: Wed 13 Aug 2025 00:04:23 +0000 Manifest this update: Wed 13 Aug 2025 00:04:23 +0000 Manifest next update: Wed 13 Aug 2025 06:04:23 +0000 Files and hashes: 1: COaEfe781aS_jvY6VWfs2gflVik.crl (hash: ELVz4kcZ9RxTQstZWkjM30/oB6NbkquCVIFgA4DdT60=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7954 (0x1f12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E6847DEEFCD5A4BF8EF63A5567ECDA07E55629 Validity Not Before: Aug 13 00:04:23 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=F297CAF489E2A5257F9B475E5C3B8A7EC666EECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:00:96:3c:bd:65:31:9d:3a:11:dd:03:ac: a6:b4:e5:b2:2e:3d:a0:96:51:07:d6:51:88:3e:97: b5:64:c6:ff:e7:d1:0a:d2:10:e4:d6:4f:20:be:b5: 24:c2:a0:68:4e:48:78:2e:7b:ab:75:f2:3a:9c:06: 2a:5e:ae:c5:53:25:12:b6:ef:79:af:0c:53:00:de: 2a:52:70:55:9e:e3:cc:a5:b6:80:7f:cd:b5:f2:e9: b4:c5:12:fc:b7:87:45:8d:ff:f6:67:a9:93:da:f8: d5:9b:e4:45:8b:bf:64:9e:90:27:5d:ca:29:bc:41: 0d:d7:99:c2:74:02:87:dd:3b:1b:71:f7:bf:26:45: 28:0a:8a:ec:84:d6:16:be:e6:08:64:27:b4:f8:87: 86:a1:e0:0e:f6:e9:00:8f:bd:2e:18:07:99:34:9e: 9c:2c:30:ad:75:a2:d7:f7:7a:09:9a:d3:8a:76:65: e0:24:44:85:f4:46:82:bf:69:9e:03:bb:13:ce:d1: 20:02:2f:49:73:74:0d:7b:6b:38:6e:45:d5:5b:56: cc:63:c8:b8:57:45:79:72:60:98:52:b0:bd:bf:d3: 29:c7:57:7d:74:35:2d:bc:8b:ba:f3:bc:59:4c:a9: 8a:3d:58:31:5b:90:1a:bd:2c:0e:6a:97:31:3f:8a: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:CA:F4:89:E2:A5:25:7F:9B:47:5E:5C:3B:8A:7E:C6:66:EE:CE X509v3 Authority Key Identifier: keyid:08:E6:84:7D:EE:FC:D5:A4:BF:8E:F6:3A:55:67:EC:DA:07:E5:56:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/COaEfe781aS_jvY6VWfs2gflVik.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2528/COaEfe781aS_jvY6VWfs2gflVik.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:6c:db:58:39:29:1b:be:1a:95:e2:42:5c:12:a2:d6:fe:7f: 72:21:4b:8e:f4:e8:eb:aa:a2:f4:4b:c7:1c:d4:c7:75:df:ad: 7f:da:cc:0c:0d:2c:8c:85:35:82:6d:65:1f:78:74:6d:34:8c: 71:de:d6:85:53:da:c3:6e:44:14:b6:04:d6:23:ca:8e:73:e9: 18:12:f7:63:d8:29:d3:02:a6:f2:a8:9f:fe:48:98:72:d4:e9: 16:9e:4b:99:c2:f4:20:3e:38:1e:fa:af:53:ec:4f:68:20:1f: c2:cb:1a:a2:2a:c4:2f:6f:41:da:47:ad:f2:6d:c6:7a:01:89: 60:e7:35:ec:1c:a7:9f:37:65:5b:9a:6a:76:41:24:7b:80:df: f3:9a:92:50:e4:46:de:67:27:64:c2:55:4d:aa:44:6d:e5:19: 1e:c0:fa:da:02:0f:1c:e0:41:a9:56:ed:69:43:63:4a:7c:9d: f3:98:c5:3b:5e:f0:e7:9e:76:3f:3f:14:1f:f4:06:9b:67:47: fd:88:dd:da:31:aa:6a:f4:9e:03:c9:a6:06:98:15:51:2b:79: fb:44:0c:5b:a8:bb:4d:7b:54:aa:49:a0:8b:61:5e:6c:f5:a6: b6:b2:d3:51:67:95:46:6b:c4:f9:dc:9a:f4:f2:e8:38:0d:93: aa:d9:23:8f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICHxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDhF Njg0N0RFRUZDRDVBNEJGOEVGNjNBNTU2N0VDREEwN0U1NTYyOTAeFw0yNTA4MTMw MDA0MjNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEYyOTdDQUY0ODlFMkE1 MjU3RjlCNDc1RTVDM0I4QTdFQzY2NkVFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx2gCWPL1lMZ06Ed0DrKa05bIuPaCWUQfWUYg+l7Vkxv/n0QrS EOTWTyC+tSTCoGhOSHgue6t18jqcBipersVTJRK273mvDFMA3ipScFWe48yltoB/ zbXy6bTFEvy3h0WN//ZnqZPa+NWb5EWLv2SekCddyim8QQ3XmcJ0AofdOxtx978m RSgKiuyE1ha+5ghkJ7T4h4ah4A726QCPvS4YB5k0npwsMK11otf3egma04p2ZeAk RIX0RoK/aZ4DuxPO0SACL0lzdA17azhuRdVbVsxjyLhXRXlyYJhSsL2/0ynHV310 NS28i7rzvFlMqYo9WDFbkBq9LA5qlzE/ijF9AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8pfK9InipSV/m0deXDuKfsZm7s4wHwYDVR0jBBgwFoAUCOaEfe781aS/jvY6 VWfs2gflVikwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy OC9DT2FFZmU3ODFhU19qdlk2VldmczJnZmxWaWsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0NPYUVmZTc4MWFTX2p2WTZWV2ZzMmdmbFZpay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjgvQ09hRWZlNzgxYVNf anZZNlZXZnMyZ2ZsVmlrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIFs21g5KRu+GpXiQlwSotb+f3IhS4706OuqovRLxxzUx3XfrX/azAwNLIyF NYJtZR94dG00jHHe1oVT2sNuRBS2BNYjyo5z6RgS92PYKdMCpvKon/5ImHLU6Rae S5nC9CA+OB76r1PsT2ggH8LLGqIqxC9vQdpHrfJtxnoBiWDnNewcp583ZVuaanZB JHuA3/OaklDkRt5nJ2TCVU2qRG3lGR7A+toCDxzgQalW7WlDY0p8nfOYxTte8Oee dj8/FB/0BptnR/2I3doxqmr0ngPJpgaYFVEreftEDFuou017VKpJoIthXmz1pray 01FnlUZrxPncmvTy6DgNk6rZI48= -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:49 2025 by rpki-client