$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft File: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft (raw, json) Hash identifier: urCPc+dZ9uRhYBJxy82UjTd4vPDLkhqyiotn/KZyu0A= Subject key identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 Authority key identifier: 1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 Certificate issuer: /CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Certificate serial: 0B3C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft Manifest number: 0B3C Signing time: Mon 11 Aug 2025 09:03:02 +0000 Manifest this update: Mon 11 Aug 2025 09:03:02 +0000 Manifest next update: Mon 11 Aug 2025 15:03:02 +0000 Files and hashes: 1: HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl (hash: OZCVQXBv8gzLLaMpTz3/SmPpVxZVbTZobN7tJhpjaV0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E099E05E6C1A101EF057912FBC133F170DEE0A7 Validity Not Before: Aug 11 09:03:02 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DF2B630C2F6B918F026FB0C2B233BA075BC472A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:4a:be:88:df:bc:8a:aa:56:f4:0c:14: e3:4b:49:e5:78:fb:38:31:46:38:0f:90:f2:e7:7e: 04:d7:35:a3:76:a4:d9:a2:27:a6:da:fd:91:9b:d9: 5f:ed:ed:2b:ad:3f:2f:ee:de:c5:11:69:ac:f7:a0: c5:0c:d4:17:9d:d3:d5:65:dc:65:fa:93:03:01:ed: 66:90:40:c2:5e:7d:96:97:31:cd:b4:d8:14:e0:b9: 23:67:e5:43:0f:4b:3b:f9:6d:1b:ea:98:f4:b5:6b: 63:dc:18:5a:af:eb:46:6e:77:0d:bc:f4:48:09:5d: 28:9c:b3:ee:a3:bb:d8:04:d6:04:ca:26:21:14:c1: 58:ad:c3:94:d3:8c:c1:06:1c:84:79:67:98:6a:9b: 3b:ae:18:7f:f1:09:9c:67:76:7d:04:84:77:17:55: bb:0e:16:e2:3e:ac:46:b1:56:03:1a:c6:78:69:cb: 3b:ad:c1:87:73:dd:d7:3d:59:e5:4d:51:30:17:9e: 63:30:db:ac:f9:21:df:11:68:3b:b3:6a:ae:91:e7: 92:52:ce:94:27:84:b7:66:82:59:eb:6b:c5:55:05: 75:bc:73:da:70:aa:b0:5d:d1:a5:43:3d:88:04:0c: 37:d0:ff:5c:30:20:03:d7:ef:75:2b:e0:38:63:b7: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2B:63:0C:2F:6B:91:8F:02:6F:B0:C2:B2:33:BA:07:5B:C4:72:A7 X509v3 Authority Key Identifier: keyid:1E:09:9E:05:E6:C1:A1:01:EF:05:79:12:FB:C1:33:F1:70:DE:E0:A7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3256/HgmeBebBoQHvBXkS-8Ez8XDe4Kc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:1a:4c:e4:2f:c6:49:a8:31:19:c0:0b:31:f8:46:17:38:cf: b2:ef:47:1a:9c:24:e3:1a:70:ce:a5:6b:a1:b0:85:a9:d7:03: 4b:4b:17:d9:d4:bf:ae:1c:be:90:11:f8:7b:63:9a:dc:c4:67: 6b:24:c6:17:2d:56:d6:2f:63:f7:22:32:7a:11:ef:0c:ae:36: 05:1c:d0:f1:77:11:c1:31:bf:bb:7f:ff:e0:6d:4f:c5:89:6f: 7e:6f:3c:8d:06:00:91:b1:67:a9:eb:dc:52:a0:11:f9:a7:35: e5:cf:3e:c7:7f:26:c0:f9:1a:b3:fe:06:28:7e:df:2b:a8:de: dd:8f:85:de:f8:f4:cd:ac:fb:a1:56:4e:14:07:78:de:56:90: 70:ed:aa:fd:e8:59:c4:94:e9:c1:a1:70:59:c9:60:a2:4e:09: a3:3d:95:68:6e:2d:53:ef:48:30:68:a5:99:62:b0:71:8f:cb: c1:d2:78:95:c5:cd:b4:f6:b9:c5:97:4d:17:c5:97:a3:71:9d: 38:e0:00:d5:ee:41:22:f5:4d:a4:6a:fa:67:f8:af:c7:6b:ef: e4:67:19:55:a7:bc:2b:ae:2a:99:c2:09:21:aa:99:4f:78:7c: 11:9c:ae:27:51:1b:62:0e:b6:00:45:74:41:7f:97:c8:3b:f8: c0:25:a3:03 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUUw OTlFMDVFNkMxQTEwMUVGMDU3OTEyRkJDMTMzRjE3MERFRTBBNzAeFw0yNTA4MTEw OTAzMDJaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKERGMkI2MzBDMkY2Qjkx OEYwMjZGQjBDMkIyMzNCQTA3NUJDNDcyQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr9GhKvojfvIqqVvQMFONLSeV4+zgxRjgPkPLnfgTXNaN2pNmi J6ba/ZGb2V/t7SutPy/u3sURaaz3oMUM1Bed09Vl3GX6kwMB7WaQQMJefZaXMc20 2BTguSNn5UMPSzv5bRvqmPS1a2PcGFqv60Zudw289EgJXSics+6ju9gE1gTKJiEU wVitw5TTjMEGHIR5Z5hqmzuuGH/xCZxndn0EhHcXVbsOFuI+rEaxVgMaxnhpyzut wYdz3dc9WeVNUTAXnmMw26z5Id8RaDuzaq6R55JSzpQnhLdmglnra8VVBXW8c9pw qrBd0aVDPYgEDDfQ/1wwIAPX73Ur4Dhjt8YvAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU3ytjDC9rkY8Cb7DCsjO6B1vEcqcwHwYDVR0jBBgwFoAUHgmeBebBoQHvBXkS +8Ez8XDe4KcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI1 Ni9IZ21lQmViQm9RSHZCWGtTLThFejhYRGU0S2MuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0hnbWVCZWJCb1FIdkJYa1MtOEV6OFhEZTRLYy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNTYvSGdtZUJlYkJvUUh2 QlhrUy04RXo4WERlNEtjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBALUaTOQvxkmoMRnACzH4Rhc4z7LvRxqcJOMacM6la6GwhanXA0tLF9nUv64c vpAR+HtjmtzEZ2skxhctVtYvY/ciMnoR7wyuNgUc0PF3EcExv7t//+BtT8WJb35v PI0GAJGxZ6nr3FKgEfmnNeXPPsd/JsD5GrP+Bih+3yuo3t2Phd749M2s+6FWThQH eN5WkHDtqv3oWcSU6cGhcFnJYKJOCaM9lWhuLVPvSDBopZlisHGPy8HSeJXFzbT2 ucWXTRfFl6NxnTjgANXuQSL1TaRq+mf4r8dr7+RnGVWnvCuuKpnCCSGqmU94fBGc ridRG2IOtgBFdEF/l8g7+MAlowM= -----END CERTIFICATE-----Generated at Mon Aug 11 10:41:47 2025 by rpki-client