$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft File: JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft (raw, json) Hash identifier: 69SLucNdRbjgTQs/n8FwEwx9NxZE7yWrKsK3hxs/0Ps= Subject key identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E Authority key identifier: 24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 Certificate issuer: /CN=246B8D869C83018945DF9F99009342903D076471 Certificate serial: 0F24 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft Manifest number: 0F24 Signing time: Wed 13 Aug 2025 16:03:44 +0000 Manifest this update: Wed 13 Aug 2025 16:03:44 +0000 Manifest next update: Wed 13 Aug 2025 22:03:44 +0000 Files and hashes: 1: JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl (hash: oPuZExCzCvNPDw3bKzf7mtRCuBUiiFsg1ldvnuUMXcs=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3876 (0xf24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=246B8D869C83018945DF9F99009342903D076471 Validity Not Before: Aug 13 16:03:44 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=8FDA8E1F762C3187576420B9E92948475E97BB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:41:ef:79:37:1e:c4:f8:1c:e5:0e:71:9d: c9:14:b5:45:c8:aa:4a:b6:7f:b6:64:6d:9c:c5:b4: 9d:64:a4:5d:ae:e0:ed:5a:99:90:d5:ed:c7:09:85: 0b:c6:66:ea:de:08:3b:27:c5:cf:0c:8c:3f:54:ad: 62:47:28:69:25:ab:e7:ba:5c:a2:35:85:40:00:ca: db:57:06:09:65:3d:dd:07:b0:1b:9b:da:10:2f:f3: 9a:68:b7:36:09:06:0a:4a:aa:1b:46:6f:b1:e6:45: d8:1a:ea:3f:5c:63:42:76:05:d5:24:29:3b:9b:7e: 1b:eb:34:ff:53:23:ab:6e:da:9a:59:45:35:96:30: 93:60:cb:65:9d:a8:c8:1b:e3:ab:f7:c7:ec:b0:b3: da:48:9c:79:e5:ac:6f:fc:af:ec:2b:30:f4:69:7a: 5b:07:4e:6a:5f:49:a9:b0:d5:ac:08:92:3f:c5:6e: 0a:fd:89:aa:7b:61:23:03:8e:ba:cd:f3:07:2e:54: c1:d9:42:92:6d:36:57:70:93:04:79:95:a2:d4:f7: c0:6c:c6:dd:1a:1c:88:96:b8:36:74:cf:47:aa:f9: ea:58:a5:1b:b4:05:52:37:ba:62:65:7b:4b:4f:39: a9:19:cf:aa:b3:fc:e9:18:0f:6c:f6:2f:52:2b:d1: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8E:1F:76:2C:31:87:57:64:20:B9:E9:29:48:47:5E:97:BB:9E X509v3 Authority Key Identifier: keyid:24:6B:8D:86:9C:83:01:89:45:DF:9F:99:00:93:42:90:3D:07:64:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JGuNhpyDAYlF35-ZAJNCkD0HZHE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3224/JGuNhpyDAYlF35-ZAJNCkD0HZHE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d2:87:80:33:3b:36:ff:00:1e:59:8b:f4:e4:78:67:2b:77: f6:b3:38:2b:92:b7:ba:f0:7e:ea:40:75:0a:f4:dd:68:eb:0f: 70:75:8f:82:c1:4c:4c:bb:6e:99:6b:15:95:3c:88:01:4f:df: 5a:c2:05:be:6d:0a:bd:63:25:b7:76:2f:67:7a:4a:6b:97:ea: 60:37:bc:e9:6d:a1:15:81:db:7b:af:4e:08:d1:02:b3:bb:7a: 4b:16:d1:fc:68:e9:f0:5e:92:98:f2:32:c3:94:bf:a6:e3:7d: 02:52:4a:73:ba:8d:d5:a4:75:74:88:82:b2:08:04:2d:3f:11: bf:14:31:1f:12:c8:81:c0:91:83:33:11:d4:c1:57:a9:29:fa: ea:81:f2:ef:ca:f6:c8:9d:a2:ef:86:5e:ff:3a:bf:24:d5:c8: 43:c6:eb:87:67:10:64:f4:13:58:79:fa:a8:4b:f8:db:9e:6a: fb:da:1d:1f:0a:7a:c5:98:13:22:4e:61:d2:aa:d2:38:6b:87: 07:b5:f4:38:3d:19:68:91:a7:99:b8:54:e2:08:5b:3c:60:67: e9:27:da:0a:64:b0:86:f4:39:bf:04:fb:f1:4b:2e:2c:d2:5d: 8c:73:3f:5e:67:1a:56:34:87:d0:b2:36:c3:6c:65:09:ce:53: dd:ec:25:3a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQ2 QjhEODY5QzgzMDE4OTQ1REY5Rjk5MDA5MzQyOTAzRDA3NjQ3MTAeFw0yNTA4MTMx NjAzNDRaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDhGREE4RTFGNzYyQzMx ODc1NzY0MjBCOUU5Mjk0ODQ3NUU5N0JCOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvv0HveTcexPgc5Q5xnckUtUXIqkq2f7ZkbZzFtJ1kpF2u4O1a mZDV7ccJhQvGZureCDsnxc8MjD9UrWJHKGklq+e6XKI1hUAAyttXBgllPd0HsBub 2hAv85potzYJBgpKqhtGb7HmRdga6j9cY0J2BdUkKTubfhvrNP9TI6tu2ppZRTWW MJNgy2WdqMgb46v3x+yws9pInHnlrG/8r+wrMPRpelsHTmpfSamw1awIkj/Fbgr9 iap7YSMDjrrN8wcuVMHZQpJtNldwkwR5laLU98Bsxt0aHIiWuDZ0z0eq+epYpRu0 BVI3umJle0tPOakZz6qz/OkYD2z2L1Ir0ZmXAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUj9qOH3YsMYdXZCC56SlIR16Xu54wHwYDVR0jBBgwFoAUJGuNhpyDAYlF35+Z AJNCkD0HZHEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy NC9KR3VOaHB5REFZbEYzNS1aQUpOQ2tEMEhaSEUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pHdU5ocHlEQVlsRjM1LVpBSk5Da0QwSFpIRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjQvSkd1TmhweURBWWxG MzUtWkFKTkNrRDBIWkhFLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHvSh4AzOzb/AB5Zi/TkeGcrd/azOCuSt7rwfupAdQr03WjrD3B1j4LBTEy7 bplrFZU8iAFP31rCBb5tCr1jJbd2L2d6SmuX6mA3vOltoRWB23uvTgjRArO7eksW 0fxo6fBekpjyMsOUv6bjfQJSSnO6jdWkdXSIgrIIBC0/Eb8UMR8SyIHAkYMzEdTB V6kp+uqB8u/K9sidou+GXv86vyTVyEPG64dnEGT0E1h5+qhL+NueavvaHR8KesWY EyJOYdKq0jhrhwe19Dg9GWiRp5m4VOIIWzxgZ+kn2gpksIb0Ob8E+/FLLizSXYxz P15nGlY0h9CyNsNsZQnOU93sJTo= -----END CERTIFICATE-----Generated at Wed Aug 13 20:22:53 2025 by rpki-client