$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft File: KnUvQ6QxoheyTTXOiiVkyVhFESE.mft (raw, json) Hash identifier: 6afG2Ze7XWuNd3ZQnyXZ+JautUWFWcKnka4GzoIw44M= Subject key identifier: CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B Authority key identifier: 2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21 Certificate issuer: /CN=2A752F43A431A217B24D35CE8A2564C958451121 Certificate serial: 16A3 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft Manifest number: 16A3 Signing time: Wed 13 Aug 2025 16:03:09 +0000 Manifest this update: Wed 13 Aug 2025 16:03:09 +0000 Manifest next update: Wed 13 Aug 2025 22:03:09 +0000 Files and hashes: 1: KnUvQ6QxoheyTTXOiiVkyVhFESE.crl (hash: bweB6YEY6lHU2PB0VsSBLZhTMWJenYfMU4n/G5+GtUg=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5795 (0x16a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A752F43A431A217B24D35CE8A2564C958451121 Validity Not Before: Aug 13 16:03:09 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=CE4FCCCC7FC406446F9BC034DA0C680660F5E58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:2d:b6:33:50:4d:fe:37:bc:70:77:b3:3b: 5c:c4:d9:4b:6f:6b:50:47:d3:96:39:23:fd:62:a7: bc:f0:80:44:25:f9:77:a8:a9:81:dd:32:24:3a:d0: a3:8b:19:9f:05:ab:0c:41:ef:10:dc:2c:ba:a5:d8: 87:4f:ba:2f:f7:c7:40:85:12:02:0c:4e:89:24:f7: 11:b2:b9:d2:0d:2c:87:0b:ff:54:65:c9:ec:23:fb: 80:d8:aa:15:af:7f:8e:ed:f6:f6:a0:c0:83:a4:16: 41:93:41:cc:4b:32:cf:0f:1d:81:3f:27:b8:42:8f: e4:73:c9:5b:da:c2:77:96:1a:c0:65:45:b6:54:45: 32:7d:ac:88:a7:bf:03:68:12:6d:2a:7b:96:02:21: f8:93:dd:e1:97:78:4d:c4:90:ec:ab:53:6b:53:6b: 17:1b:c3:50:6c:88:60:90:cb:99:46:65:f5:71:8d: 61:c9:f6:23:7c:b1:5e:bd:12:73:b5:63:5c:f2:f6: 06:a5:86:e0:38:60:46:7f:ac:47:2f:75:a1:64:7e: e2:4e:23:18:a8:19:59:65:88:7a:e8:08:a3:ea:2b: 84:71:32:08:51:28:b2:1e:44:83:86:3a:c4:30:8f: 5c:c1:f6:25:5b:61:6d:a7:d4:4b:16:1d:9a:25:bb: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:CC:CC:7F:C4:06:44:6F:9B:C0:34:DA:0C:68:06:60:F5:E5:8B X509v3 Authority Key Identifier: keyid:2A:75:2F:43:A4:31:A2:17:B2:4D:35:CE:8A:25:64:C9:58:45:11:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnUvQ6QxoheyTTXOiiVkyVhFESE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2991/KnUvQ6QxoheyTTXOiiVkyVhFESE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8f:a7:1b:75:09:54:d9:b1:75:be:97:9d:46:5a:48:1c:f5: 8a:4d:14:0e:5f:17:0e:9e:f9:c0:bb:bb:95:c7:81:da:b5:a1: cd:b6:bb:96:47:e4:22:d2:80:32:2c:a8:b0:db:48:fd:13:a9: 34:86:4b:0c:63:7e:b2:d3:4b:81:f2:7c:47:1c:9d:30:ac:a7: d0:21:ca:7c:e6:ed:24:1b:3f:9f:81:2b:c7:1f:b3:5b:f4:f5: 0f:e5:7c:81:5a:b8:38:ed:28:65:c6:60:39:74:e3:a1:ef:93: db:8b:01:e9:8f:ab:17:cf:34:2f:16:8a:14:2b:3f:78:98:bc: fe:7f:3d:40:a9:e1:ce:86:eb:a3:fa:0c:c8:a9:e4:fc:dd:a9: 2b:90:b0:71:9a:bd:57:04:9f:63:c4:7d:40:fd:cc:a5:12:c6: b4:f5:bb:b3:62:7f:a9:92:b1:00:48:39:51:d3:d6:ab:de:5d: 40:3f:7f:2f:e6:29:e0:71:c4:cd:71:ed:0d:37:3c:d6:83:d5: 23:ca:ac:de:af:bf:cf:18:98:ee:71:08:ec:2a:05:4c:46:63: cf:0e:d1:58:f0:b0:b1:72:a2:b7:0b:5a:97:58:32:dc:b8:d1: 61:19:75:c0:9b:b6:22:bb:ed:17:5b:30:f2:7e:01:95:51:48: b0:b4:ed:f9 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3 NTJGNDNBNDMxQTIxN0IyNEQzNUNFOEEyNTY0Qzk1ODQ1MTEyMTAeFw0yNTA4MTMx NjAzMDlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKENFNEZDQ0NDN0ZDNDA2 NDQ2RjlCQzAzNERBMEM2ODA2NjBGNUU1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGCi22M1BN/je8cHezO1zE2Utva1BH05Y5I/1ip7zwgEQl+Xeo qYHdMiQ60KOLGZ8FqwxB7xDcLLql2IdPui/3x0CFEgIMTokk9xGyudINLIcL/1Rl yewj+4DYqhWvf47t9vagwIOkFkGTQcxLMs8PHYE/J7hCj+RzyVvawneWGsBlRbZU RTJ9rIinvwNoEm0qe5YCIfiT3eGXeE3EkOyrU2tTaxcbw1BsiGCQy5lGZfVxjWHJ 9iN8sV69EnO1Y1zy9galhuA4YEZ/rEcvdaFkfuJOIxioGVlliHroCKPqK4RxMghR KLIeRIOGOsQwj1zB9iVbYW2n1EsWHZolu+kHAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUzk/MzH/EBkRvm8A02gxoBmD15YswHwYDVR0jBBgwFoAUKnUvQ6QxoheyTTXO iiVkyVhFESEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk5 MS9LblV2UTZReG9oZXlUVFhPaWlWa3lWaEZFU0UuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0tuVXZRNlF4b2hleVRUWE9paVZreVZoRkVTRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5OTEvS25VdlE2UXhvaGV5 VFRYT2lpVmt5VmhGRVNFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADePpxt1CVTZsXW+l51GWkgc9YpNFA5fFw6e+cC7u5XHgdq1oc22u5ZH5CLS gDIsqLDbSP0TqTSGSwxjfrLTS4HyfEccnTCsp9Ahynzm7SQbP5+BK8cfs1v09Q/l fIFauDjtKGXGYDl046Hvk9uLAemPqxfPNC8WihQrP3iYvP5/PUCp4c6G66P6DMip 5PzdqSuQsHGavVcEn2PEfUD9zKUSxrT1u7Nif6mSsQBIOVHT1qveXUA/fy/mKeBx xM1x7Q03PNaD1SPKrN6vv88YmO5xCOwqBUxGY88O0VjwsLFyorcLWpdYMty40WEZ dcCbtiK77RdbMPJ+AZVRSLC07fk= -----END CERTIFICATE-----Generated at Wed Aug 13 20:23:16 2025 by rpki-client