$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft File: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft (raw, json) Hash identifier: 8baN6Oywh2Mlw6omYocHowA9RDfwLsLWbHLihaRFcWQ= Subject key identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B Authority key identifier: AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 Certificate issuer: /CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Certificate serial: 07F8 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft Manifest number: 07F8 Signing time: Mon 11 Aug 2025 09:04:26 +0000 Manifest this update: Mon 11 Aug 2025 09:04:26 +0000 Manifest next update: Mon 11 Aug 2025 15:04:26 +0000 Files and hashes: 1: rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl (hash: nzO5Lqjb6fGAnTikhjSpYksoFZK7foaA3yp3YvTBcD0=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACD7C0749E53A10A0025CD9CAFF878BE2DDB5638 Validity Not Before: Aug 11 09:04:26 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=C95006BDDC4D9538F86B94D2F10A03B33D839E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:3e:d1:98:1a:5e:b9:06:33:2a:5d:0b:8a: 68:fa:99:a8:b8:39:6d:48:f2:36:5e:ee:a8:1b:70: 60:02:23:38:d0:dd:46:c7:60:cc:31:df:67:47:7a: db:fd:ec:e5:9f:b1:f9:33:b6:2e:6c:7d:7b:cc:1b: 71:0e:0b:77:95:f7:7a:2f:ed:aa:14:0c:0a:f4:df: 53:32:8f:e9:e8:36:73:85:7a:44:25:49:4e:53:b2: 73:39:dd:77:9d:a6:c3:da:61:ef:50:4a:01:c6:02: a3:ed:1e:32:14:23:61:26:2d:a1:46:0c:a5:f3:fa: d5:0b:71:4b:42:e5:83:91:e5:42:3b:32:92:a0:0b: e3:aa:80:7e:2c:41:69:db:59:4b:cc:c3:2b:5e:6c: d4:6f:62:c0:b7:8a:20:bd:97:c3:52:21:40:f7:e2: 7c:e6:b0:86:ce:32:56:5b:a3:94:df:4c:cb:a3:15: ce:8b:12:70:1b:6b:3e:38:3e:cc:d7:1b:a3:46:b3: a3:5b:57:63:05:c4:5a:e0:78:3d:e4:69:e1:92:0e: bc:4c:2c:1d:12:98:6d:3b:53:4d:cc:9e:9a:9e:49: a7:fc:1d:5a:08:fd:9c:7b:31:e9:c5:f0:3e:fc:b4: b1:7e:38:17:4c:b0:03:f7:4c:13:ea:c5:18:cb:67: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:50:06:BD:DC:4D:95:38:F8:6B:94:D2:F1:0A:03:B3:3D:83:9E:2B X509v3 Authority Key Identifier: keyid:AC:D7:C0:74:9E:53:A1:0A:00:25:CD:9C:AF:F8:78:BE:2D:DB:56:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3296/rNfAdJ5ToQoAJc2cr_h4vi3bVjg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:26:19:9a:29:4b:9b:ab:d3:1b:a9:e0:3a:82:14:07:30:a0: 84:e9:b2:03:9a:d4:b4:7f:9a:78:57:f0:90:8e:31:c8:c8:0c: 8d:f8:84:46:82:22:48:da:a2:97:eb:ee:ea:4e:fd:f0:09:d8: cd:f8:8d:f8:77:d2:5a:17:82:5d:fe:15:0d:2e:1f:cd:ef:bb: e3:f5:f7:8f:4d:ae:5c:11:89:93:d4:df:d5:85:be:87:46:2f: 56:6b:45:3a:e8:cb:ed:ee:c4:7d:09:29:a0:3d:76:8e:ec:ef: ef:f3:22:63:01:7e:9c:b0:64:d4:0d:47:60:d3:ce:79:ff:66: 8a:f8:8f:96:40:64:a7:96:d5:dc:8c:be:6e:5f:2a:53:22:ea: cc:df:19:bc:a2:ea:29:b3:1b:51:e8:2c:60:43:80:e5:a8:2e: 47:42:52:01:4b:60:45:01:38:41:b9:ae:f5:98:ff:1a:be:31: 68:c9:c3:bc:8e:79:c8:8a:b9:cf:b7:f9:68:b4:81:65:a1:6a: 9c:10:f6:d4:68:1e:52:e3:36:23:49:6b:22:5b:e1:00:a6:0c: 66:a3:e2:a7:bc:a9:37:ba:3b:36:b7:7d:fb:3d:b8:a7:c6:5e: 95:a3:5d:81:2f:82:b8:ae:a7:02:60:05:ad:38:c3:12:ca:c6: 9e:88:76:46 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUNE N0MwNzQ5RTUzQTEwQTAwMjVDRDlDQUZGODc4QkUyRERCNTYzODAeFw0yNTA4MTEw OTA0MjZaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEM5NTAwNkJEREM0RDk1 MzhGODZCOTREMkYxMEEwM0IzM0Q4MzlFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvVT7RmBpeuQYzKl0Limj6mai4OW1I8jZe7qgbcGACIzjQ3UbH YMwx32dHetv97OWfsfkzti5sfXvMG3EOC3eV93ov7aoUDAr031Myj+noNnOFekQl SU5TsnM53XedpsPaYe9QSgHGAqPtHjIUI2EmLaFGDKXz+tULcUtC5YOR5UI7MpKg C+OqgH4sQWnbWUvMwytebNRvYsC3iiC9l8NSIUD34nzmsIbOMlZbo5TfTMujFc6L EnAbaz44PszXG6NGs6NbV2MFxFrgeD3kaeGSDrxMLB0SmG07U03MnpqeSaf8HVoI /Zx7MenF8D78tLF+OBdMsAP3TBPqxRjLZ4eDAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUyVAGvdxNlTj4a5TS8QoDsz2DniswHwYDVR0jBBgwFoAUrNfAdJ5ToQoAJc2c r/h4vi3bVjgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 Ni9yTmZBZEo1VG9Rb0FKYzJjcl9oNHZpM2JWamcuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3JOZkFkSjVUb1FvQUpjMmNyX2g0dmkzYlZqZy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTYvck5mQWRKNVRvUW9B SmMyY3JfaDR2aTNiVmpnLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIomGZopS5ur0xup4DqCFAcwoITpsgOa1LR/mnhX8JCOMcjIDI34hEaCIkja opfr7upO/fAJ2M34jfh30loXgl3+FQ0uH83vu+P1949NrlwRiZPU39WFvodGL1Zr RTroy+3uxH0JKaA9do7s7+/zImMBfpywZNQNR2DTznn/Zor4j5ZAZKeW1dyMvm5f KlMi6szfGbyi6imzG1HoLGBDgOWoLkdCUgFLYEUBOEG5rvWY/xq+MWjJw7yOeciK uc+3+Wi0gWWhapwQ9tRoHlLjNiNJayJb4QCmDGaj4qe8qTe6Oza3ffs9uKfGXpWj XYEvgriupwJgBa04wxLKxp6IdkY= -----END CERTIFICATE-----Generated at Mon Aug 11 13:11:55 2025 by rpki-client