$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft File: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft (raw, json) Hash identifier: CqT1wkOKv274EvwLOMHkNuMsVoIMHJf5D/0ccU56Ems= Subject key identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 Authority key identifier: 60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 Certificate issuer: /CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Certificate serial: 0EE0 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft Manifest number: 0EE0 Signing time: Wed 13 Aug 2025 16:02:51 +0000 Manifest this update: Wed 13 Aug 2025 16:02:51 +0000 Manifest next update: Wed 13 Aug 2025 22:02:51 +0000 Files and hashes: 1: YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl (hash: nBmqHGc72yKDc5Y6JPo19nm8o+768cUjMVjzqPknu00=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3808 (0xee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B2D8F90D2105C8EB876856AA975B53C4326996 Validity Not Before: Aug 13 16:02:51 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4417D6FBFFB0DC025A87456F40A5FEAD98D1BAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d3:b3:11:0c:da:e4:3c:97:50:8b:7c:6d:03: b5:6c:ca:8e:44:3c:8b:55:d7:96:cc:6a:28:e2:a2: ea:14:25:db:38:84:83:92:2d:26:f8:6e:0f:9e:4a: c5:17:05:51:fa:ed:c5:11:aa:0b:f5:ec:d6:26:64: f6:37:df:19:04:18:2b:87:35:b9:76:6c:78:52:44: de:96:23:8e:da:82:8a:a8:63:60:1a:5f:e3:f6:c4: 5e:da:ab:fa:c2:c7:60:89:fb:29:f0:38:90:ff:e3: df:02:6b:c6:f0:c3:fe:ee:a5:68:95:ad:58:8d:ba: db:a5:03:34:b1:d6:74:e4:c1:30:6c:07:b7:6f:29: b0:60:91:70:a1:8a:ce:89:e8:39:a9:26:3a:98:f7: 87:63:6f:d6:b7:42:38:a5:e6:72:4f:f5:52:07:4e: 85:5a:2e:6a:a5:1a:7f:e5:4f:7a:94:61:be:22:52: b3:ec:86:fe:50:fa:c0:18:5a:a5:27:95:8f:10:f4: 19:fd:18:2b:8c:0b:91:70:fb:d6:59:77:b1:c7:7c: c0:57:2e:b8:2c:8f:4b:46:04:ad:46:90:9a:73:dc: 0d:7d:41:a7:f0:0d:8a:6c:50:89:5f:b4:36:3a:8e: 6a:52:89:ac:46:b5:10:bd:0f:7e:7b:38:4f:df:52: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:D6:FB:FF:B0:DC:02:5A:87:45:6F:40:A5:FE:AD:98:D1:BA:E1 X509v3 Authority Key Identifier: keyid:60:B2:D8:F9:0D:21:05:C8:EB:87:68:56:AA:97:5B:53:C4:32:69:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3227/YLLY-Q0hBcjrh2hWqpdbU8QyaZY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c4:10:a7:e6:dc:4e:50:65:4d:e7:f2:56:f1:58:28:b4:d2: 72:3f:7b:71:0b:0b:26:f1:08:03:fd:fc:9b:f8:c3:95:50:f0: dc:d6:fa:18:a5:43:2f:20:1d:bd:0e:3f:e2:a7:da:8b:49:0f: 96:9b:84:a7:6f:5b:81:ac:f5:47:b6:7c:81:3f:85:6b:48:00: c6:40:bf:e9:94:e2:35:13:a3:4c:c6:87:b7:17:68:82:5f:73: 4e:76:01:cb:c1:a0:b8:a4:ef:41:04:39:4c:9a:04:f4:f8:93: fd:15:32:25:d0:37:8a:7e:19:a0:73:3b:bc:02:83:4a:22:5c: b3:67:29:38:7b:88:90:96:f3:65:1c:7e:52:58:43:05:38:90: 68:a7:e4:cf:1d:06:56:91:f4:af:cf:e8:67:0d:68:61:7b:47: 54:21:50:94:bb:50:7c:d6:50:85:c0:35:9e:fa:d0:81:c9:ae: e8:88:48:c1:56:8b:36:d9:c9:81:8f:30:cb:cb:6c:7c:f5:df: 85:71:5b:65:41:f0:28:f8:a2:76:eb:23:40:b5:75:f7:13:d7: 5e:1d:14:9c:71:04:8e:58:66:76:55:06:0a:5b:6b:47:1e:40: f4:0e:9c:56:4a:56:26:36:18:1c:16:ec:7e:ed:c7:4a:ca:4f: 11:0c:76:a4 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICDuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjBC MkQ4RjkwRDIxMDVDOEVCODc2ODU2QUE5NzVCNTNDNDMyNjk5NjAeFw0yNTA4MTMx NjAyNTFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ0MTdENkZCRkZCMERD MDI1QTg3NDU2RjQwQTVGRUFEOThEMUJBRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk07MRDNrkPJdQi3xtA7Vsyo5EPItV15bMaijiouoUJds4hIOS LSb4bg+eSsUXBVH67cURqgv17NYmZPY33xkEGCuHNbl2bHhSRN6WI47agoqoY2Aa X+P2xF7aq/rCx2CJ+ynwOJD/498Ca8bww/7upWiVrViNutulAzSx1nTkwTBsB7dv KbBgkXChis6J6DmpJjqY94djb9a3Qjil5nJP9VIHToVaLmqlGn/lT3qUYb4iUrPs hv5Q+sAYWqUnlY8Q9Bn9GCuMC5Fw+9ZZd7HHfMBXLrgsj0tGBK1GkJpz3A19Qafw DYpsUIlftDY6jmpSiaxGtRC9D357OE/fUoIxAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQURBfW+/+w3AJah0VvQKX+rZjRuuEwHwYDVR0jBBgwFoAUYLLY+Q0hBcjrh2hW qpdbU8QyaZYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzIy Ny9ZTExZLVEwaEJjanJoMmhXcXBkYlU4UXlhWlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1lMTFktUTBoQmNqcmgyaFdxcGRiVThReWFaWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyMjcvWUxMWS1RMGhCY2py aDJoV3FwZGJVOFF5YVpZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABfEEKfm3E5QZU3n8lbxWCi00nI/e3ELCybxCAP9/Jv4w5VQ8NzW+hilQy8g Hb0OP+Kn2otJD5abhKdvW4Gs9Ue2fIE/hWtIAMZAv+mU4jUTo0zGh7cXaIJfc052 AcvBoLik70EEOUyaBPT4k/0VMiXQN4p+GaBzO7wCg0oiXLNnKTh7iJCW82UcflJY QwU4kGin5M8dBlaR9K/P6GcNaGF7R1QhUJS7UHzWUIXANZ760IHJruiISMFWizbZ yYGPMMvLbHz134VxW2VB8Cj4onbrI0C1dfcT114dFJxxBI5YZnZVBgpba0ceQPQO nFZKViY2GBwW7H7tx0rKTxEMdqQ= -----END CERTIFICATE-----Generated at Wed Aug 13 19:18:34 2025 by rpki-client