$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft File: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft (raw, json) Hash identifier: Nhg2oiybjZ658/0e2G6t8OHBOHfCdgqMF9640n4c2AM= Subject key identifier: B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87 Authority key identifier: 13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75 Certificate issuer: /CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75 Certificate serial: 0D97 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft Manifest number: 0D94 Signing time: Wed 13 Aug 2025 16:03:03 +0000 Manifest this update: Wed 13 Aug 2025 16:03:03 +0000 Manifest next update: Wed 13 Aug 2025 22:03:03 +0000 Files and hashes: 1: E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl (hash: nsz7DWG+iHVM1peWBEc4awpE4PTBtfOh7lUUShQXHXI=) 2: dZXEqaGxmzAzSwQfOSuj4GVQ0gg.roa (hash: acKWSIHX1ZbTm99RSURHM2kfCk/nXcKQCe+6vMB1VMY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136A39C7630A3C7491050D3E9DBD5B6F7906FD75 Validity Not Before: Aug 13 16:03:03 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=B9438C5506FCB9C47B7F7F60BA4C123BFB484F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:84:3c:bc:71:4c:46:3d:ab:2e:d8:52:f4: b7:ec:1a:b2:26:2c:91:04:ab:9d:e5:db:17:1c:5a: 30:36:89:dd:3e:9a:0f:9a:16:e5:8b:34:05:67:0f: da:fe:e5:81:1b:06:9d:46:f5:de:30:76:34:a6:34: ce:34:e5:88:0b:72:dd:0c:e7:11:59:cb:06:28:04: be:61:e0:cf:8a:93:47:cc:16:df:d1:94:62:f7:60: 26:f4:c5:25:97:28:90:96:0e:51:0b:f4:56:0b:87: b5:28:e8:ff:45:69:e9:35:08:5c:a5:91:c5:6b:a5: c2:07:fe:f2:c3:6f:cb:44:ec:25:1f:36:e2:4e:de: 60:ab:54:cd:87:10:48:68:cb:88:62:d0:f5:4f:4f: ac:92:4b:7a:a6:a4:4e:ee:68:0e:67:4f:f1:2a:36: 0e:f1:43:e0:3a:da:78:ee:ca:89:a0:dc:88:54:c6: 04:f5:1e:a2:58:04:04:85:8b:8a:b0:9e:21:b8:61: 66:42:61:84:53:f6:ef:4f:45:9c:f8:a5:83:ad:9b: 9a:1c:a4:0b:1d:63:b8:9e:67:c0:4f:8a:e0:d2:02: 88:84:91:d9:06:b0:1c:b3:1e:ed:54:d8:34:e5:34: 50:4e:c8:2e:4f:7c:1c:74:a0:e4:65:a5:f7:a5:8e: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:8C:55:06:FC:B9:C4:7B:7F:7F:60:BA:4C:12:3B:FB:48:4F:87 X509v3 Authority Key Identifier: keyid:13:6A:39:C7:63:0A:3C:74:91:05:0D:3E:9D:BD:5B:6F:79:06:FD:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3181/E2o5x2MKPHSRBQ0-nb1bb3kG_XU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:98:cb:74:21:f0:e2:e3:56:ae:a3:9d:4f:ae:61:9f:dd:e1: 32:26:2e:94:39:ad:ae:5f:fa:1b:49:17:c4:12:af:25:a1:77: ae:71:49:c2:4e:c4:53:b0:80:3e:10:a9:e0:03:cf:87:e1:be: 7e:3d:ae:3e:d2:3e:ad:92:ec:f6:de:8f:55:6a:3f:44:b2:91: fa:b6:a5:33:42:fb:83:82:3d:7d:04:ba:76:40:82:47:b2:ff: cc:d4:0a:7e:d3:b9:04:b8:d4:04:d8:37:44:34:9d:b9:a4:d7: d1:41:15:0a:fb:a3:33:cd:60:38:8e:d6:25:01:66:1c:a7:21: 17:ae:d5:a3:e5:59:62:c7:a2:50:ea:89:8d:a4:5d:9e:92:23: a9:78:44:d9:96:ef:9a:25:58:bf:ec:18:f8:b6:d6:10:d6:39: a5:76:8e:9d:17:3e:9f:03:7b:64:02:99:6c:47:eb:7d:7c:01: 22:7a:d1:b2:b2:23:6a:c4:eb:93:44:dd:28:a7:dd:c6:21:27: 86:d2:fd:3e:27:d0:6f:90:d8:ac:4c:37:06:52:a4:24:14:bc: d6:b7:62:5c:10:c1:33:e3:a9:15:80:ad:d4:76:b6:b3:8d:2c: dc:bd:55:80:99:39:58:7d:1f:91:ed:9e:31:93:59:a3:9c:30: 78:29:f4:d4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTM2 QTM5Qzc2MzBBM0M3NDkxMDUwRDNFOURCRDVCNkY3OTA2RkQ3NTAeFw0yNTA4MTMx NjAzMDNaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEI5NDM4QzU1MDZGQ0I5 QzQ3QjdGN0Y2MEJBNEMxMjNCRkI0ODRGODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1AYQ8vHFMRj2rLthS9LfsGrImLJEEq53l2xccWjA2id0+mg+a FuWLNAVnD9r+5YEbBp1G9d4wdjSmNM405YgLct0M5xFZywYoBL5h4M+Kk0fMFt/R lGL3YCb0xSWXKJCWDlEL9FYLh7Uo6P9Faek1CFylkcVrpcIH/vLDb8tE7CUfNuJO 3mCrVM2HEEhoy4hi0PVPT6ySS3qmpE7uaA5nT/EqNg7xQ+A62njuyomg3IhUxgT1 HqJYBASFi4qwniG4YWZCYYRT9u9PRZz4pYOtm5ocpAsdY7ieZ8BPiuDSAoiEkdkG sByzHu1U2DTlNFBOyC5PfBx0oORlpfeljsnzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUuUOMVQb8ucR7f39gukwSO/tIT4cwHwYDVR0jBBgwFoAUE2o5x2MKPHSRBQ0+ nb1bb3kG/XUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE4 MS9FMm81eDJNS1BIU1JCUTAtbmIxYmIza0dfWFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0UybzV4Mk1LUEhTUkJRMC1uYjFiYjNrR19YVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxODEvRTJvNXgyTUtQSFNS QlEwLW5iMWJiM2tHX1hVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADqYy3Qh8OLjVq6jnU+uYZ/d4TImLpQ5ra5f+htJF8QSryWhd65xScJOxFOw gD4QqeADz4fhvn49rj7SPq2S7Pbej1VqP0Sykfq2pTNC+4OCPX0EunZAgkey/8zU Cn7TuQS41ATYN0Q0nbmk19FBFQr7ozPNYDiO1iUBZhynIReu1aPlWWLHolDqiY2k XZ6SI6l4RNmW75olWL/sGPi21hDWOaV2jp0XPp8De2QCmWxH6318ASJ60bKyI2rE 65NE3Sin3cYhJ4bS/T4n0G+Q2KxMNwZSpCQUvNa3YlwQwTPjqRWArdR2trONLNy9 VYCZOVh9H5HtnjGTWaOcMHgp9NQ= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:08 2025 by rpki-client