$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft File: u11oF9lc0Cjy8wUtxskakjFFby4.mft (raw, json) Hash identifier: zMMDVa7OyhBKBAAZS7Ft9a3EqM59K70bzC6oarKRLf4= Subject key identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F Authority key identifier: BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E Certificate issuer: /CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Certificate serial: 106E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft Manifest number: 106E Signing time: Wed 13 Aug 2025 16:02:32 +0000 Manifest this update: Wed 13 Aug 2025 16:02:32 +0000 Manifest next update: Wed 13 Aug 2025 22:02:32 +0000 Files and hashes: 1: u11oF9lc0Cjy8wUtxskakjFFby4.crl (hash: n5YJlx76suSXoOETgEVqBGzk545I90DDz2NWh/yYoyw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4206 (0x106e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5D6817D95CD028F2F3052DC6C91A9231456F2E Validity Not Before: Aug 13 16:02:32 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=6E8FFE1636887BE4014F2452CECBF2732922939F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:75:57:1f:be:57:74:dc:b3:b8:22:16:74: 94:ec:17:a1:22:00:0d:6d:2d:91:80:b7:a3:7d:40: a3:1a:1a:f0:91:04:99:a9:fb:4a:aa:38:38:82:a6: 61:02:01:5a:68:28:fa:7d:ed:9f:6f:a9:9b:c2:81: c0:9b:2d:06:58:6c:09:9c:07:3a:29:6d:58:be:6a: 8e:98:75:23:66:29:d2:0f:3b:71:d5:01:8d:2a:08: 6b:a9:d4:b1:6d:c0:21:27:de:8d:e0:b1:69:26:09: db:88:32:6e:b0:23:0d:e8:b5:f3:2d:c0:13:71:9d: b3:17:84:a7:a9:0e:de:95:72:11:52:20:71:f5:1f: 23:1e:eb:6b:f6:a5:8a:18:15:24:81:ee:6c:76:1f: 5e:e2:6b:9f:41:88:e5:86:12:97:45:ba:4a:40:b6: 49:d8:66:5e:40:ec:b9:66:c1:11:91:89:36:8c:ce: 7b:84:5e:6d:3b:6a:a1:9b:5d:61:9c:ab:6f:35:72: 1f:7e:31:9a:8a:12:db:8c:bb:dc:2c:63:5f:1b:eb: a0:3e:60:24:20:89:ae:f2:d0:a0:51:3b:51:00:3a: 47:1d:16:9e:5a:26:d4:3d:c7:d5:f5:ab:a6:24:2f: 5b:8b:2c:5e:e5:29:48:80:91:df:33:c5:4b:c2:7e: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:FE:16:36:88:7B:E4:01:4F:24:52:CE:CB:F2:73:29:22:93:9F X509v3 Authority Key Identifier: keyid:BB:5D:68:17:D9:5C:D0:28:F2:F3:05:2D:C6:C9:1A:92:31:45:6F:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/u11oF9lc0Cjy8wUtxskakjFFby4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3161/u11oF9lc0Cjy8wUtxskakjFFby4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:4c:e2:2b:9d:9d:f4:7d:1d:3a:29:29:01:c4:46:c2:1c: 11:21:0c:be:92:f4:9e:fc:79:47:df:d0:29:a0:30:46:f7:bd: 32:c2:bc:5d:f1:e2:53:55:70:17:af:79:97:62:89:74:9b:7e: b2:b3:bd:37:ce:e8:b3:94:4b:34:01:75:5b:46:3d:ca:a7:88: 2b:6e:77:56:31:98:28:f5:12:12:eb:31:20:86:20:8e:db:d1: 8d:0e:ae:ff:82:fe:b1:dd:1e:bd:03:14:c5:5a:ae:00:24:e6: f3:c9:75:c2:4b:95:76:dc:ad:3a:fe:1d:f1:4d:6d:85:a0:ad: 7b:0b:07:ef:bf:06:4a:4b:24:9c:5a:f9:e1:98:b9:04:7f:e6: f0:ff:d3:59:44:f4:d2:a5:da:24:33:a5:a5:0c:6a:99:fc:a9: 70:9d:97:67:9b:0b:4e:59:c6:b7:9b:15:13:da:87:7b:db:72: d7:a1:a4:5d:28:1c:ea:d1:6c:43:5e:a3:48:0b:dd:08:c9:49: c3:c2:f7:8e:67:00:a1:50:fa:cc:89:5f:08:0e:69:58:27:37: 42:3a:fe:52:26:73:a7:6c:3b:ba:38:e6:1f:92:fc:00:75:06: 07:a0:d0:8c:c7:d4:6a:e0:8c:92:03:0d:25:24:08:7a:ca:c2: 09:01:ae:14 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkI1 RDY4MTdEOTVDRDAyOEYyRjMwNTJEQzZDOTFBOTIzMTQ1NkYyRTAeFw0yNTA4MTMx NjAyMzJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDZFOEZGRTE2MzY4ODdC RTQwMTRGMjQ1MkNFQ0JGMjczMjkyMjkzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuFnVXH75XdNyzuCIWdJTsF6EiAA1tLZGAt6N9QKMaGvCRBJmp +0qqODiCpmECAVpoKPp97Z9vqZvCgcCbLQZYbAmcBzopbVi+ao6YdSNmKdIPO3HV AY0qCGup1LFtwCEn3o3gsWkmCduIMm6wIw3otfMtwBNxnbMXhKepDt6VchFSIHH1 HyMe62v2pYoYFSSB7mx2H17ia59BiOWGEpdFukpAtknYZl5A7LlmwRGRiTaMznuE Xm07aqGbXWGcq281ch9+MZqKEtuMu9wsY18b66A+YCQgia7y0KBRO1EAOkcdFp5a JtQ9x9X1q6YkL1uLLF7lKUiAkd8zxUvCflSlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUbo/+FjaIe+QBTyRSzsvycykik58wHwYDVR0jBBgwFoAUu11oF9lc0Cjy8wUt xskakjFFby4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 MS91MTFvRjlsYzBDank4d1V0eHNrYWtqRkZieTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3UxMW9GOWxjMENqeTh3VXR4c2tha2pGRmJ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjEvdTExb0Y5bGMwQ2p5 OHdVdHhza2FrakZGYnk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIwUTOIrnZ30fR06KSkBxEbCHBEhDL6S9J78eUff0CmgMEb3vTLCvF3x4lNV cBeveZdiiXSbfrKzvTfO6LOUSzQBdVtGPcqniCtud1YxmCj1EhLrMSCGII7b0Y0O rv+C/rHdHr0DFMVargAk5vPJdcJLlXbcrTr+HfFNbYWgrXsLB++/BkpLJJxa+eGY uQR/5vD/01lE9NKl2iQzpaUMapn8qXCdl2ebC05ZxrebFRPah3vbctehpF0oHOrR bENeo0gL3QjJScPC945nAKFQ+syJXwgOaVgnN0I6/lImc6dsO7o45h+S/AB1Bgeg 0IzH1GrgjJIDDSUkCHrKwgkBrhQ= -----END CERTIFICATE-----Generated at Wed Aug 13 19:18:33 2025 by rpki-client