$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft File: wrEFUbAKIe7r4enJQLSZntFcIfM.mft (raw, json) Hash identifier: 4/tFvovrS7y4b9acqwjyZDJpyjydiO5/7vjGZTkqiPY= Subject key identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A Authority key identifier: C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 Certificate issuer: /CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Certificate serial: 281B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft Manifest number: 281B Signing time: Wed 13 Aug 2025 15:02:43 +0000 Manifest this update: Wed 13 Aug 2025 15:02:43 +0000 Manifest next update: Wed 13 Aug 2025 21:02:43 +0000 Files and hashes: 1: wrEFUbAKIe7r4enJQLSZntFcIfM.crl (hash: pFgZxJSpzCxiMVkEO0rXD8SVGBnwpzl6hgt38onmk8w=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10267 (0x281b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2B10551B00A21EEEBE1E9C940B4999ED15C21F3 Validity Not Before: Aug 13 15:02:43 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=74C6E5BCFCAD2046F375D2A8B10240F7DCCAF44A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:25:a7:70:ec:92:88:a7:f5:83:b7:60:f5: e2:e1:8b:dd:20:b0:fe:13:2f:66:4c:3f:65:f2:25: 16:b7:98:d6:07:9b:6b:03:e9:67:0b:53:cd:0a:ad: 05:36:29:bb:39:d9:82:6a:0f:c1:8d:61:7f:30:d8: 8a:b1:f0:1b:ec:ff:a0:6c:ff:61:d9:12:50:fa:e0: af:0d:32:88:e1:23:85:86:f8:66:29:00:0b:2f:b5: 9d:aa:d1:17:7e:3f:81:df:47:9c:29:0e:3e:ab:5e: 50:d6:a3:36:c1:16:16:4b:f8:d3:b4:5a:0a:21:20: 1a:60:e8:56:8f:04:64:8d:e8:59:28:2c:f6:54:d5: 0a:56:b8:dd:23:ec:c1:2b:8f:5f:8f:24:6b:4a:74: 3e:65:09:c7:d0:95:5b:db:07:15:57:d0:52:a1:4c: 69:a9:02:42:e1:95:a4:0c:a1:1e:ec:b6:92:71:7f: 73:83:ed:80:07:33:10:9c:8d:93:ce:f3:e4:e1:ac: 45:5c:ed:80:70:4e:ca:0b:bd:97:ad:28:93:d6:68: bc:2e:85:38:2f:57:89:58:88:9d:5e:ec:79:fe:32: 3c:79:a9:62:aa:b6:9d:1e:1f:27:db:5f:fe:b5:54: e0:b9:1c:bf:58:20:d3:87:d7:eb:9e:5f:8b:f0:c2: 0b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C6:E5:BC:FC:AD:20:46:F3:75:D2:A8:B1:02:40:F7:DC:CA:F4:4A X509v3 Authority Key Identifier: keyid:C2:B1:05:51:B0:0A:21:EE:EB:E1:E9:C9:40:B4:99:9E:D1:5C:21:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrEFUbAKIe7r4enJQLSZntFcIfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2897/wrEFUbAKIe7r4enJQLSZntFcIfM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:7d:48:89:15:25:79:d9:e2:8f:c4:c8:59:c4:e1:b3:57:bd: b9:8d:b6:25:9c:f8:00:c8:45:77:ca:97:ec:93:fa:b8:1c:db: 1b:9d:7a:ac:2e:de:21:b9:44:d2:d0:da:e4:cf:88:91:8d:f5: 03:3f:0b:7a:c5:03:04:fd:18:f1:bf:59:bf:86:a8:3c:ef:dc: ca:87:ca:c9:da:0c:4e:e6:26:2b:cf:a0:3e:1f:2a:00:0e:c8: 16:90:a8:24:fd:23:36:0f:e7:ce:c3:1f:bd:9c:2c:a5:65:67: 70:54:25:92:30:06:db:1c:8d:35:e1:37:8d:f3:22:ed:91:b0: 50:fe:43:a9:20:3f:21:2b:dd:bc:ff:7e:12:c3:c5:97:39:65: 48:d0:46:17:18:73:5b:cb:75:66:a7:af:e9:e3:6a:d5:9d:56: 05:bf:de:f9:d2:01:61:bc:dc:ba:5a:f9:a7:aa:7e:fa:a5:d2: 6d:f9:a9:b7:a4:0e:4e:c9:51:bd:25:0e:58:1a:4b:36:0b:6d: d8:68:04:21:79:3f:37:c1:9d:0e:3d:d9:b9:ad:e1:77:26:3f: 87:fa:f0:1a:ac:17:df:cd:8f:11:3c:d8:42:2e:a6:b7:88:7a: c3:ab:88:7c:cb:5a:e2:a5:03:02:58:7a:82:13:30:7a:90:1a: a8:7c:64:dd -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICKBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzJC MTA1NTFCMDBBMjFFRUVCRTFFOUM5NDBCNDk5OUVEMTVDMjFGMzAeFw0yNTA4MTMx NTAyNDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDc0QzZFNUJDRkNBRDIw NDZGMzc1RDJBOEIxMDI0MEY3RENDQUY0NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJyWncOySiKf1g7dg9eLhi90gsP4TL2ZMP2XyJRa3mNYHm2sD 6WcLU80KrQU2Kbs52YJqD8GNYX8w2Iqx8Bvs/6Bs/2HZElD64K8NMojhI4WG+GYp AAsvtZ2q0Rd+P4HfR5wpDj6rXlDWozbBFhZL+NO0WgohIBpg6FaPBGSN6FkoLPZU 1QpWuN0j7MErj1+PJGtKdD5lCcfQlVvbBxVX0FKhTGmpAkLhlaQMoR7stpJxf3OD 7YAHMxCcjZPO8+ThrEVc7YBwTsoLvZetKJPWaLwuhTgvV4lYiJ1e7Hn+Mjx5qWKq tp0eHyfbX/61VOC5HL9YINOH1+ueX4vwwgsZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUdMblvPytIEbzddKosQJA99zK9EowHwYDVR0jBBgwFoAUwrEFUbAKIe7r4enJ QLSZntFcIfMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5 Ny93ckVGVWJBS0llN3I0ZW5KUUxTWm50RmNJZk0uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3dyRUZVYkFLSWU3cjRlbkpRTFNabnRGY0lmTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTcvd3JFRlViQUtJZTdy NGVuSlFMU1pudEZjSWZNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJZ9SIkVJXnZ4o/EyFnE4bNXvbmNtiWc+ADIRXfKl+yT+rgc2xudeqwu3iG5 RNLQ2uTPiJGN9QM/C3rFAwT9GPG/Wb+GqDzv3MqHysnaDE7mJivPoD4fKgAOyBaQ qCT9IzYP587DH72cLKVlZ3BUJZIwBtscjTXhN43zIu2RsFD+Q6kgPyEr3bz/fhLD xZc5ZUjQRhcYc1vLdWanr+njatWdVgW/3vnSAWG83Lpa+aeqfvql0m35qbekDk7J Ub0lDlgaSzYLbdhoBCF5PzfBnQ492bmt4XcmP4f68BqsF9/NjxE82EIupreIesOr iHzLWuKlAwJYeoITMHqQGqh8ZN0= -----END CERTIFICATE-----Generated at Wed Aug 13 19:09:36 2025 by rpki-client