$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft (raw, json) Hash identifier: E/2Lto96DADQ7C2TVNDB2vQXtODCJ/82F8W6/tR+iNM= Subject key identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 Authority key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Certificate issuer: /CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Certificate serial: 07DA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft Manifest number: 07DA Signing time: Wed 13 Aug 2025 16:02:41 +0000 Manifest this update: Wed 13 Aug 2025 16:02:41 +0000 Manifest next update: Wed 13 Aug 2025 22:02:41 +0000 Files and hashes: 1: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl (hash: +1JM/tecYQC/5fk2RW5ciH0cCqWQjFeFIklhCPuE2lU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Validity Not Before: Aug 13 16:02:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1F69946BDFFBCBE8EDE7A4D46B9143B895AB27A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:41:5e:8c:db:b0:01:a5:ed:6a:45:10:13: b3:1c:be:e8:22:60:92:bf:21:07:3e:da:14:e1:05: eb:85:b8:22:d8:0a:c7:80:5a:b1:3d:36:2d:78:db: ac:82:c7:fc:20:d1:37:c2:46:e2:c7:0e:7b:ea:7f: c8:c8:44:0c:f1:04:fb:6a:4d:c1:72:b6:58:a5:68: 0f:8f:99:2d:1b:9b:f8:e4:9b:61:b4:76:fb:36:07: f5:58:65:8c:fd:1d:be:8b:9a:42:a9:c6:19:32:ef: d6:7f:40:e3:1e:e8:ba:cd:f5:47:05:54:b0:9d:de: 9a:e9:93:1a:51:f1:b9:4f:34:f6:78:09:f4:f8:35: 32:41:52:75:fb:4d:43:e6:6f:10:27:bc:08:d4:0f: f5:a5:ea:fd:7c:e0:ee:d7:76:fd:f7:76:38:44:b5: d4:89:fb:e9:8d:f3:e8:27:2e:51:da:13:22:37:da: e4:d5:1b:ec:4a:51:88:75:d2:ea:73:8d:32:dc:54: a5:7c:81:39:e3:ae:04:d6:41:9a:0f:7b:92:c3:bf: 55:82:b7:ae:f3:91:0c:39:6a:67:db:c7:bb:c7:23: 19:e4:c1:c0:61:1c:35:15:ad:45:56:79:5f:28:9f: bd:f4:0c:60:e1:54:f7:40:e8:4b:8c:0b:a3:cb:5a: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:94:6B:DF:FB:CB:E8:ED:E7:A4:D4:6B:91:43:B8:95:AB:27:A6 X509v3 Authority Key Identifier: keyid:32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:22:31:3c:8a:73:70:f7:b1:4c:4e:cb:85:44:0e:b1:0f:81: fe:f7:3f:8c:41:45:05:4d:0a:c1:14:18:94:d8:e0:e6:09:72: 64:d7:db:f6:f6:9b:c4:c6:9e:16:0c:ac:bc:25:ba:35:df:39: 5a:e5:b4:d9:f1:5d:29:57:a3:c1:38:35:e1:33:e7:c8:f7:72: 62:a3:c3:4c:93:13:bd:7a:07:4c:cd:e1:c5:d5:34:2d:17:46: 1c:32:48:3c:67:77:92:9c:8a:77:c3:dc:2d:96:eb:95:9b:ee: 86:7c:fc:f5:92:92:74:32:d2:0e:38:7a:07:c7:b5:49:1e:cc: 12:3c:05:c7:48:c8:72:53:4b:cd:ed:09:33:e2:1b:cc:c9:5c: 5b:bb:0e:a5:34:12:e3:38:b7:75:58:54:9d:52:ca:32:a6:b2: 9e:2f:6c:3d:b3:20:b1:52:8b:4a:cc:16:23:da:d1:c0:e4:8c: ec:1b:27:f6:69:eb:8a:4d:4a:d8:90:a7:8a:1b:81:3d:b8:01: be:06:e5:48:eb:24:65:d0:a0:c6:03:c4:4f:59:c5:d3:b7:dc: 63:41:2f:e9:92:d3:3b:b0:61:88:ba:f4:28:ff:a2:11:4f:05: 28:ad:41:ed:3b:19:23:11:21:55:b3:b5:4b:1d:07:dd:2f:ec: a6:b0:4c:be -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICB9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5 RjJBRkM4NkZFOUYxRkFDOUYyRjhCQjMxMkI1QUI5QzkxOEMyNjAeFw0yNTA4MTMx NjAyNDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDFGNjk5NDZCREZGQkNC RThFREU3QTRENDZCOTE0M0I4OTVBQjI3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLgkFejNuwAaXtakUQE7McvugiYJK/IQc+2hThBeuFuCLYCseA WrE9Ni1426yCx/wg0TfCRuLHDnvqf8jIRAzxBPtqTcFytlilaA+PmS0bm/jkm2G0 dvs2B/VYZYz9Hb6LmkKpxhky79Z/QOMe6LrN9UcFVLCd3prpkxpR8blPNPZ4CfT4 NTJBUnX7TUPmbxAnvAjUD/Wl6v184O7Xdv33djhEtdSJ++mN8+gnLlHaEyI32uTV G+xKUYh10upzjTLcVKV8gTnjrgTWQZoPe5LDv1WCt67zkQw5amfbx7vHIxnkwcBh HDUVrUVWeV8on730DGDhVPdA6EuMC6PLWlxVAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUH2mUa9/7y+jt56TUa5FDuJWrJ6YwHwYDVR0jBBgwFoAUMp8q/Ib+nx+sny+L sxK1q5yRjCYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMw MS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL01wOHFfSWItbngtc255LUxzeEsxcTV5UmpDWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMDEvTXA4cV9JYi1ueC1z bnktTHN4SzFxNXlSakNZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEwiMTyKc3D3sUxOy4VEDrEPgf73P4xBRQVNCsEUGJTY4OYJcmTX2/b2m8TG nhYMrLwlujXfOVrltNnxXSlXo8E4NeEz58j3cmKjw0yTE716B0zN4cXVNC0XRhwy SDxnd5KcinfD3C2W65Wb7oZ8/PWSknQy0g44egfHtUkezBI8BcdIyHJTS83tCTPi G8zJXFu7DqU0EuM4t3VYVJ1SyjKmsp4vbD2zILFSi0rMFiPa0cDkjOwbJ/Zp64pN StiQp4obgT24Ab4G5UjrJGXQoMYDxE9ZxdO33GNBL+mS0zuwYYi69Cj/ohFPBSit Qe07GSMRIVWztUsdB90v7KawTL4= -----END CERTIFICATE-----Generated at Wed Aug 13 19:17:45 2025 by rpki-client