$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft File: iUp18p1qbq-EUdP-mXPCDuMBfko.mft (raw, json) Hash identifier: OJRnH/f21m2ImlzKUkz01xDqOSzg3oBLYq1Q6I3oSKA= Subject key identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E Authority key identifier: 89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A Certificate issuer: /CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Certificate serial: 17BF Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft Manifest number: 17BF Signing time: Wed 13 Aug 2025 16:03:42 +0000 Manifest this update: Wed 13 Aug 2025 16:03:42 +0000 Manifest next update: Wed 13 Aug 2025 22:03:42 +0000 Files and hashes: 1: iUp18p1qbq-EUdP-mXPCDuMBfko.crl (hash: 2ppJv47Pp3n7aHotYr97We1n1KlISxYcFd+rD4fAlDo=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6079 (0x17bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894A75F29D6A6EAF8451D3FE9973C20EE3017E4A Validity Not Before: Aug 13 16:03:42 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=351FA044BC46D490B9A0AAF205332735092DFF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:32:78:01:e5:64:b2:d9:44:36:8d:90:ca: 46:14:c7:09:8f:10:d0:61:6b:ef:5d:b6:54:b6:5f: f8:12:bb:3d:58:1e:59:d3:b5:59:a6:2f:76:e8:17: 50:2b:76:d6:ca:4e:d7:bc:93:ba:01:34:0e:56:e0: 9e:37:af:eb:6d:6c:ab:41:83:30:81:02:63:78:6d: da:21:73:4b:84:da:89:bb:59:ea:50:4d:58:08:5f: 82:d3:ef:72:0c:90:94:70:4e:b0:53:5a:2c:bd:8d: b4:aa:e9:36:1e:cf:13:5d:fc:4f:05:3a:92:b4:ae: fb:ec:5e:4e:d2:0e:f1:a9:08:69:13:22:e7:e3:11: a5:1e:a9:fa:74:5e:fa:08:e2:e9:d0:df:9f:0e:3c: fc:80:a2:34:94:23:f2:e6:1a:81:1c:6f:42:5a:4d: 85:fd:e6:cf:df:dd:d7:78:4b:97:f2:6d:3e:db:61: 56:55:a6:f5:c3:be:10:ab:a8:f7:77:a5:b2:9b:7b: bb:b3:f1:0e:d0:b4:d6:13:d9:08:c9:3f:b3:c7:19: a1:b4:b7:67:eb:67:64:9f:68:b8:56:1e:03:ca:d1: 77:39:2e:10:a7:80:b7:db:09:37:b5:e5:63:51:ef: 02:8f:b6:37:07:0e:59:e1:d3:16:37:d6:f3:36:12: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:A0:44:BC:46:D4:90:B9:A0:AA:F2:05:33:27:35:09:2D:FF:7E X509v3 Authority Key Identifier: keyid:89:4A:75:F2:9D:6A:6E:AF:84:51:D3:FE:99:73:C2:0E:E3:01:7E:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iUp18p1qbq-EUdP-mXPCDuMBfko.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3143/iUp18p1qbq-EUdP-mXPCDuMBfko.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7c:33:1d:0b:e6:ac:3e:da:72:87:5f:83:98:8e:22:3c:f3: 65:7d:bc:ae:c0:25:0f:92:be:ea:dc:9b:f6:e2:b1:5b:93:8d: 9e:e9:e4:bd:24:ad:ee:54:ed:cd:dd:eb:2f:49:18:49:1e:c5: d4:fd:8d:8f:44:1c:45:86:31:2a:de:c3:a0:0e:e5:83:e6:73: 00:8c:3c:83:c4:0c:f6:8d:6f:c0:5a:51:a5:1b:d2:a4:c3:ac: 11:02:e3:d7:d3:9d:b8:5a:99:42:83:a1:24:49:26:ff:2e:26: d6:23:1f:e0:b0:7a:cc:d7:0f:e1:c9:3e:04:3f:64:a2:b3:8e: 29:53:e9:f9:1a:b3:0b:15:ed:50:49:97:0c:25:a9:68:82:66: 05:87:96:d9:43:ca:da:26:63:6d:0a:d2:ec:00:44:b2:d5:59: b3:05:78:fd:7a:ae:5c:dd:cb:6f:45:52:66:15:63:9e:0e:a3: 1a:bc:5f:9e:33:76:3d:f8:e1:2a:e0:3a:82:e0:ae:28:64:a2: 76:ae:4d:c3:96:0f:88:a9:4d:3c:50:0b:a7:aa:45:2d:51:3a: 34:6d:c9:55:5e:e6:87:9c:28:ca:a8:46:86:5d:a2:8a:0f:ee: 4d:1c:d2:c3:84:f2:1f:44:49:87:31:02:4a:9f:ab:df:d1:44: 5b:4b:b2:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICF78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODk0 QTc1RjI5RDZBNkVBRjg0NTFEM0ZFOTk3M0MyMEVFMzAxN0U0QTAeFw0yNTA4MTMx NjAzNDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM1MUZBMDQ0QkM0NkQ0 OTBCOUEwQUFGMjA1MzMyNzM1MDkyREZGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEuDJ4AeVkstlENo2QykYUxwmPENBha+9dtlS2X/gSuz1YHlnT tVmmL3boF1ArdtbKTte8k7oBNA5W4J43r+ttbKtBgzCBAmN4bdohc0uE2om7WepQ TVgIX4LT73IMkJRwTrBTWiy9jbSq6TYezxNd/E8FOpK0rvvsXk7SDvGpCGkTIufj EaUeqfp0XvoI4unQ358OPPyAojSUI/LmGoEcb0JaTYX95s/f3dd4S5fybT7bYVZV pvXDvhCrqPd3pbKbe7uz8Q7QtNYT2QjJP7PHGaG0t2frZ2SfaLhWHgPK0Xc5LhCn gLfbCTe15WNR7wKPtjcHDlnh0xY31vM2ElBZAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUNR+gRLxG1JC5oKryBTMnNQkt/34wHwYDVR0jBBgwFoAUiUp18p1qbq+EUdP+ mXPCDuMBfkowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE0 My9pVXAxOHAxcWJxLUVVZFAtbVhQQ0R1TUJma28uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2lVcDE4cDFxYnEtRVVkUC1tWFBDRHVNQmZrby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNDMvaVVwMThwMXFicS1F VWRQLW1YUENEdU1CZmtvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAA98Mx0L5qw+2nKHX4OYjiI882V9vK7AJQ+Svurcm/bisVuTjZ7p5L0kre5U 7c3d6y9JGEkexdT9jY9EHEWGMSrew6AO5YPmcwCMPIPEDPaNb8BaUaUb0qTDrBEC 49fTnbhamUKDoSRJJv8uJtYjH+CweszXD+HJPgQ/ZKKzjilT6fkaswsV7VBJlwwl qWiCZgWHltlDytomY20K0uwARLLVWbMFeP16rlzdy29FUmYVY54Ooxq8X54zdj34 4SrgOoLgrihkonauTcOWD4ipTTxQC6eqRS1ROjRtyVVe5oecKMqoRoZdoooP7k0c 0sOE8h9ESYcxAkqfq9/RRFtLstQ= -----END CERTIFICATE-----Generated at Wed Aug 13 19:12:07 2025 by rpki-client