$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft File: gZQTSW-NG4qcKpMSrCzZAljzOwY.mft (raw, json) Hash identifier: /kizMDTiCh7v/T956Ts4mDDPLfJNP4hb0SKmEZDUjQc= Subject key identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 Authority key identifier: 81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 Certificate issuer: /CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Certificate serial: 0974 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft Manifest number: 0974 Signing time: Mon 11 Aug 2025 09:02:31 +0000 Manifest this update: Mon 11 Aug 2025 09:02:31 +0000 Manifest next update: Mon 11 Aug 2025 15:02:31 +0000 Files and hashes: 1: gZQTSW-NG4qcKpMSrCzZAljzOwY.crl (hash: Akqt0o5xsCkpoz6P6EjqpUvwfHmMijkEzzWUXibtocA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819413496F8D1B8A9C2A9312AC2CD90258F33B06 Validity Not Before: Aug 11 09:02:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F2C73B6A70D55B1DCC1B9C1A49EC30072DE52F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:33:cf:4b:fb:56:6e:ed:e3:50:6f:3b:53: 3c:bb:0b:40:dc:1c:90:08:49:23:e6:ce:50:45:7f: ff:23:c6:2b:58:ae:5a:0d:3f:47:dc:5b:8c:4d:93: 7f:6c:19:c2:d5:1d:d8:79:2f:45:20:67:86:c3:cd: 9b:f5:0a:27:d9:8d:82:23:4a:de:4e:47:39:e1:80: 00:72:05:d9:18:64:98:cc:e7:39:03:f7:38:e4:b6: 0f:6d:6a:f5:25:bb:2a:ac:d6:c1:4c:dc:fa:14:ee: 12:68:09:3b:35:e1:99:1d:35:c7:92:c8:ab:6a:f0: c1:2d:c0:74:9e:3e:15:69:5a:6a:f5:4c:82:49:70: 62:73:b4:80:d7:d7:1d:62:b5:e6:cc:a0:fb:fb:60: 9f:de:64:cf:d0:57:c7:c2:a9:ee:1f:1e:0c:16:23: d3:91:cc:14:eb:63:79:5c:ef:a5:bf:96:dc:2d:e4: 0a:2c:fa:06:44:e2:95:9b:2e:f2:8e:c0:7e:54:88: 49:ce:58:b5:b5:35:72:e6:a2:a7:7c:e4:ae:2f:4b: 9e:ff:e4:44:0e:d7:1f:8d:77:f2:f1:b8:87:a1:f4: 8e:b9:ae:07:8f:e5:cc:b5:d3:ed:e0:dd:0d:21:1f: 20:c3:2b:cc:10:4e:d6:78:68:65:14:62:a3:d0:c5: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:3B:6A:70:D5:5B:1D:CC:1B:9C:1A:49:EC:30:07:2D:E5:2F:51 X509v3 Authority Key Identifier: keyid:81:94:13:49:6F:8D:1B:8A:9C:2A:93:12:AC:2C:D9:02:58:F3:3B:06 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gZQTSW-NG4qcKpMSrCzZAljzOwY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3274/gZQTSW-NG4qcKpMSrCzZAljzOwY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:aa:cb:92:6d:f4:a6:7b:e4:53:3f:69:72:75:ab:ba:d8:34: 96:49:4e:ae:63:f4:bc:86:84:60:42:3e:46:b3:2e:fc:a3:23: 82:99:95:8c:19:09:69:e9:22:6b:21:12:91:92:b5:13:3f:a7: 55:ea:17:56:53:93:19:f3:c3:79:bb:cc:5d:a8:c1:e3:29:e5: e3:ba:b5:a6:e9:5f:5c:00:1e:cf:a9:49:99:81:58:ee:c6:bc: 06:6f:d2:b8:0d:e3:7e:32:15:59:11:48:f2:a2:b2:96:fb:ce: 0a:7f:a4:ce:18:40:b2:20:35:99:3c:47:86:b9:f5:1c:4b:6e: 69:9c:45:7f:4e:bb:5f:91:36:aa:a0:30:c0:b3:65:22:7e:aa: ff:f6:79:d4:6e:31:e9:8b:f8:33:73:31:70:b5:81:55:11:b5: 70:94:dd:e1:44:d0:d2:90:51:e1:ee:6e:8b:94:6e:2c:49:07: 9b:cb:2a:87:41:d8:a5:81:0e:dc:aa:47:c8:ac:be:da:81:8a: 3c:ae:60:1e:e3:9c:25:70:a0:bb:b1:6a:a8:71:86:d3:76:e9: ad:b4:6f:62:9a:78:a8:16:3a:db:5f:6d:e1:a0:02:83:e5:13: c5:58:22:5d:7a:3d:6e:73:32:04:9f:85:12:dd:be:77:25:6a: bb:70:55:b1 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODE5 NDEzNDk2RjhEMUI4QTlDMkE5MzEyQUMyQ0Q5MDI1OEYzM0IwNjAeFw0yNTA4MTEw OTAyMzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYyQzczQjZBNzBENTVC MURDQzFCOUMxQTQ5RUMzMDA3MkRFNTJGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNFzPPS/tWbu3jUG87Uzy7C0DcHJAISSPmzlBFf/8jxitYrloN P0fcW4xNk39sGcLVHdh5L0UgZ4bDzZv1CifZjYIjSt5ORznhgAByBdkYZJjM5zkD 9zjktg9tavUluyqs1sFM3PoU7hJoCTs14ZkdNceSyKtq8MEtwHSePhVpWmr1TIJJ cGJztIDX1x1itebMoPv7YJ/eZM/QV8fCqe4fHgwWI9ORzBTrY3lc76W/ltwt5Aos +gZE4pWbLvKOwH5UiEnOWLW1NXLmoqd85K4vS57/5EQO1x+Nd/LxuIeh9I65rgeP 5cy10+3g3Q0hHyDDK8wQTtZ4aGUUYqPQxebtAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8sc7anDVWx3MG5waSewwBy3lL1EwHwYDVR0jBBgwFoAUgZQTSW+NG4qcKpMS rCzZAljzOwYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 NC9nWlFUU1ctTkc0cWNLcE1TckN6WkFsanpPd1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2daUVRTVy1ORzRxY0twTVNyQ3paQWxqek93WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNzQvZ1pRVFNXLU5HNHFj S3BNU3JDelpBbGp6T3dZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACiqy5Jt9KZ75FM/aXJ1q7rYNJZJTq5j9LyGhGBCPkazLvyjI4KZlYwZCWnp ImshEpGStRM/p1XqF1ZTkxnzw3m7zF2oweMp5eO6tabpX1wAHs+pSZmBWO7GvAZv 0rgN434yFVkRSPKispb7zgp/pM4YQLIgNZk8R4a59RxLbmmcRX9Ou1+RNqqgMMCz ZSJ+qv/2edRuMemL+DNzMXC1gVURtXCU3eFE0NKQUeHubouUbixJB5vLKodB2KWB DtyqR8isvtqBijyuYB7jnCVwoLuxaqhxhtN26a20b2KaeKgWOttfbeGgAoPlE8VY Il16PW5zMgSfhRLdvnclartwVbE= -----END CERTIFICATE-----Generated at Mon Aug 11 10:56:18 2025 by rpki-client