$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft File: XSMqeS0E-zeXTqWu-6sefwyOAhM.mft (raw, json) Hash identifier: 442XKcuVaUI8dOmoXTIalb/K25/3VUfmu6A5BnqM+tI= Subject key identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A Authority key identifier: 5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 Certificate issuer: /CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Certificate serial: 169E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft Manifest number: 169E Signing time: Wed 13 Aug 2025 15:03:44 +0000 Manifest this update: Wed 13 Aug 2025 15:03:44 +0000 Manifest next update: Wed 13 Aug 2025 21:03:44 +0000 Files and hashes: 1: XSMqeS0E-zeXTqWu-6sefwyOAhM.crl (hash: 8EcMw0lQF4DRbT8Bdl1XvOKQYKCzmHu4ZtALMw+ax+A=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5790 (0x169e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D232A792D04FB37974EA5AEFBAB1E7F0C8E0213 Validity Not Before: Aug 13 15:03:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=06E2B852F326A714D630B7C7935E37BC5C65664A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:fa:bb:af:be:84:b6:9c:3f:4a:be:50:e5: fc:08:5b:ff:b1:fb:ee:f3:d9:06:8c:bb:b0:6a:db: 8a:52:2f:92:60:39:6a:77:ce:f7:16:41:e6:fb:ea: 7e:a9:2a:dd:c3:91:53:26:3e:62:d2:0e:a3:23:e4: f2:3f:6d:ff:3b:51:42:c1:ea:d6:d7:02:86:c7:cc: 9e:e2:a0:c0:bc:e0:56:e7:27:81:e0:53:81:41:ab: 0e:aa:e6:9d:25:1a:d1:c8:16:96:78:33:f4:a9:fb: 38:4c:a5:fd:2d:ef:63:d6:48:8b:eb:37:7a:77:ae: e3:2f:20:d3:c2:79:1d:16:7b:9b:5d:80:79:01:ea: 5c:18:6f:ce:e4:ff:04:f8:aa:d1:77:e8:15:d6:86: 04:5b:09:02:50:ba:68:31:36:b3:ce:62:17:8a:c4: 37:b2:84:bc:6a:c4:eb:ea:9c:5c:08:0a:5f:a3:4c: da:2d:29:fe:6b:13:23:b4:54:c1:8d:58:fb:d2:d9: 00:78:bf:9d:fc:89:31:a6:e8:67:b3:74:e9:67:54: 7d:66:b6:cb:a1:2d:19:c5:34:72:67:a5:04:ae:ca: 5e:1a:c2:da:e4:6b:7e:47:e1:d0:ed:94:5b:cd:f2: 89:ad:b5:96:d7:56:b9:b7:99:20:92:ad:49:fc:84: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E2:B8:52:F3:26:A7:14:D6:30:B7:C7:93:5E:37:BC:5C:65:66:4A X509v3 Authority Key Identifier: keyid:5D:23:2A:79:2D:04:FB:37:97:4E:A5:AE:FB:AB:1E:7F:0C:8E:02:13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XSMqeS0E-zeXTqWu-6sefwyOAhM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2556/XSMqeS0E-zeXTqWu-6sefwyOAhM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9a:11:fd:3a:18:aa:4a:f8:15:4c:19:fd:92:03:5d:0f:34: ba:df:6d:99:0a:80:df:2e:97:e1:73:1d:ca:2a:d3:70:1d:a7: 64:f4:24:0b:d7:bd:e7:d2:2b:3c:b5:ba:f6:a3:f2:41:87:fe: b1:20:06:17:95:5e:62:04:e6:a0:5d:c5:14:15:66:81:47:6b: c2:73:ac:f9:21:fa:cf:51:0b:72:7c:2f:9d:83:e9:9f:5a:66: b5:db:91:65:d0:d4:37:36:fa:6a:0d:09:3f:2c:30:5c:7e:9e: 51:73:de:72:98:61:42:ef:16:ef:a0:90:67:07:c9:25:d7:b2: 90:fd:69:de:d1:ee:0c:f8:9f:3d:70:7c:49:88:bb:50:65:26: 4c:06:a7:49:ff:66:f5:6c:65:30:83:65:39:f7:df:c0:1e:3f: c4:ac:7d:e4:77:39:81:ec:55:b7:d3:76:d2:83:5c:db:0c:5d: 18:31:7f:28:05:3e:c5:c4:72:43:57:1e:0e:98:6e:ae:4d:a4: 4a:23:1f:b2:c9:98:3e:60:57:dd:12:98:8b:f1:07:d5:f3:34: 10:47:72:0d:92:59:af:48:ad:99:8e:eb:27:2a:31:15:a5:ad: 35:5e:9f:38:a0:bb:36:5f:2c:71:66:b8:9c:5a:af:10:9b:95: 83:2a:e3:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQy MzJBNzkyRDA0RkIzNzk3NEVBNUFFRkJBQjFFN0YwQzhFMDIxMzAeFw0yNTA4MTMx NTAzNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDA2RTJCODUyRjMyNkE3 MTRENjMwQjdDNzkzNUUzN0JDNUM2NTY2NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIo/q7r76Etpw/Sr5Q5fwIW/+x++7z2QaMu7Bq24pSL5JgOWp3 zvcWQeb76n6pKt3DkVMmPmLSDqMj5PI/bf87UULB6tbXAobHzJ7ioMC84FbnJ4Hg U4FBqw6q5p0lGtHIFpZ4M/Sp+zhMpf0t72PWSIvrN3p3ruMvINPCeR0We5tdgHkB 6lwYb87k/wT4qtF36BXWhgRbCQJQumgxNrPOYheKxDeyhLxqxOvqnFwICl+jTNot Kf5rEyO0VMGNWPvS2QB4v538iTGm6GezdOlnVH1mtsuhLRnFNHJnpQSuyl4awtrk a35H4dDtlFvN8omttZbXVrm3mSCSrUn8hPKrAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUBuK4UvMmpxTWMLfHk143vFxlZkowHwYDVR0jBBgwFoAUXSMqeS0E+zeXTqWu +6sefwyOAhMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU1 Ni9YU01xZVMwRS16ZVhUcVd1LTZzZWZ3eU9BaE0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1hTTXFlUzBFLXplWFRxV3UtNnNlZnd5T0FoTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NTYvWFNNcWVTMEUtemVY VHFXdS02c2Vmd3lPQWhNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH+aEf06GKpK+BVMGf2SA10PNLrfbZkKgN8ul+FzHcoq03Adp2T0JAvXvefS Kzy1uvaj8kGH/rEgBheVXmIE5qBdxRQVZoFHa8JzrPkh+s9RC3J8L52D6Z9aZrXb kWXQ1Dc2+moNCT8sMFx+nlFz3nKYYULvFu+gkGcHySXXspD9ad7R7gz4nz1wfEmI u1BlJkwGp0n/ZvVsZTCDZTn338AeP8SsfeR3OYHsVbfTdtKDXNsMXRgxfygFPsXE ckNXHg6Ybq5NpEojH7LJmD5gV90SmIvxB9XzNBBHcg2SWa9IrZmO6ycqMRWlrTVe nziguzZfLHFmuJxarxCblYMq44Y= -----END CERTIFICATE-----Generated at Wed Aug 13 19:17:44 2025 by rpki-client