$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft File: q8wu6vrqrw1E480gBAmZ7T6LblY.mft (raw, json) Hash identifier: /garcRMP0Ae0Cd2nToskWyRS0rXgm09I0OApor41n2U= Subject key identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D Authority key identifier: AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 Certificate issuer: /CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Certificate serial: 0189 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft Manifest number: 0187 Signing time: Wed 13 Aug 2025 16:03:29 +0000 Manifest this update: Wed 13 Aug 2025 16:03:29 +0000 Manifest next update: Wed 13 Aug 2025 22:03:29 +0000 Files and hashes: 1: k2fsIbftQRjCuaw8vM9IdWoUcpg.roa (hash: QUuqwryAn7tNC/7s8b5C6mc0fqcFuWn03lmSuHGpGJ8=) 2: q8wu6vrqrw1E480gBAmZ7T6LblY.crl (hash: opkQ5jEB+FMAjnLtEHsWYRkpMppAWratFlLF+VqHSVM=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABCC2EEAFAEAAF0D44E3CD20040999ED3E8B6E56 Validity Not Before: Aug 13 16:03:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=37625CC0E618E351120BD6539F60DC6CF0F3184D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:21:2a:f1:4f:0b:88:c5:c9:4f:f8:1f:dc: 8d:38:b9:6c:c0:8f:70:99:ab:ca:13:f6:42:5e:68: fa:88:53:a7:89:b6:0f:97:c4:5d:ee:f2:18:74:b1: fd:95:8f:d9:97:fd:ea:cb:91:04:c0:ad:8c:dd:8d: 85:f7:3f:c9:02:11:c2:69:5b:a4:58:7d:bd:b6:a7: 81:8a:27:43:70:c6:9e:ec:6c:e2:1b:a7:91:10:83: 4c:ee:19:3c:f2:4c:a6:35:dd:a3:0a:af:88:92:20: 0f:a5:d6:bb:1a:5a:ad:ac:0a:a8:48:f8:fd:99:5b: d8:d4:3c:8d:ec:b6:a7:d7:06:f5:67:f9:d4:c4:a2: df:91:6e:58:6b:e2:ef:b0:43:66:a6:1a:1f:97:ea: eb:f7:06:6f:f6:34:79:f9:b4:29:d7:20:0b:5e:d3: bc:74:28:0c:ef:74:d6:9e:20:66:1c:6b:57:4c:d4: 24:2c:aa:2d:f4:22:9c:15:af:1b:08:2f:4f:fb:44: cc:b6:0e:3a:0b:8b:2f:80:f5:75:95:86:39:ad:29: fd:0f:57:10:50:86:ba:17:82:66:84:60:b5:8b:3d: f8:35:9d:67:04:15:ed:ac:91:72:6e:79:b7:eb:af: 0f:56:6a:ec:90:39:f0:66:8e:7c:ab:5c:35:76:b5: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:5C:C0:E6:18:E3:51:12:0B:D6:53:9F:60:DC:6C:F0:F3:18:4D X509v3 Authority Key Identifier: keyid:AB:CC:2E:EA:FA:EA:AF:0D:44:E3:CD:20:04:09:99:ED:3E:8B:6E:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q8wu6vrqrw1E480gBAmZ7T6LblY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3317/q8wu6vrqrw1E480gBAmZ7T6LblY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:89:a6:82:b8:d9:bc:b2:4e:83:65:d1:fa:44:0d:95:f9: 90:30:13:1a:67:7c:02:b7:16:06:2d:84:27:53:f7:7b:a1:1b: eb:70:b4:69:bd:25:24:d3:42:af:88:32:ae:62:ca:ae:55:8e: f8:8a:b2:82:b0:a4:ec:1a:63:c1:dc:c9:50:57:5a:ea:3b:e8: b9:6e:33:a3:b1:3f:d6:5c:ea:10:30:74:64:e3:e2:8d:35:b7: 29:f1:06:68:06:33:8b:e4:f9:3b:65:87:72:db:9a:9e:7e:8a: 5a:11:ea:e5:3b:01:22:c9:da:bc:1f:25:89:59:2a:5c:00:f9: e8:d5:cd:63:39:ac:13:c9:d1:91:f8:7c:7e:6f:5f:29:9f:93: be:ad:54:33:3f:78:c5:23:fb:42:b8:37:1d:aa:4c:d9:95:2d: 28:76:58:95:6f:c8:f4:94:f3:5e:52:77:ce:52:64:10:03:01: 9a:83:a5:d4:82:df:28:af:c4:f7:76:00:97:cb:84:76:94:68: fe:84:31:1a:72:e5:39:d3:8e:b7:64:d0:ed:23:e7:d3:80:9a: 70:45:94:9c:c4:4e:d2:a6:54:39:77:c4:5a:39:6f:49:95:84: 17:26:85:84:01:dd:bb:35:f7:5a:c8:ab:16:fb:28:80:9c:24: 2d:61:0b:84 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD QzJFRUFGQUVBQUYwRDQ0RTNDRDIwMDQwOTk5RUQzRThCNkU1NjAeFw0yNTA4MTMx NjAzMjlaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDM3NjI1Q0MwRTYxOEUz NTExMjBCRDY1MzlGNjBEQzZDRjBGMzE4NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdXSEq8U8LiMXJT/gf3I04uWzAj3CZq8oT9kJeaPqIU6eJtg+X xF3u8hh0sf2Vj9mX/erLkQTArYzdjYX3P8kCEcJpW6RYfb22p4GKJ0Nwxp7sbOIb p5EQg0zuGTzyTKY13aMKr4iSIA+l1rsaWq2sCqhI+P2ZW9jUPI3stqfXBvVn+dTE ot+Rblhr4u+wQ2amGh+X6uv3Bm/2NHn5tCnXIAte07x0KAzvdNaeIGYca1dM1CQs qi30IpwVrxsIL0/7RMy2DjoLiy+A9XWVhjmtKf0PVxBQhroXgmaEYLWLPfg1nWcE Fe2skXJuebfrrw9WauyQOfBmjnyrXDV2tTafAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUN2JcwOYY41ESC9ZTn2DcbPDzGE0wHwYDVR0jBBgwFoAUq8wu6vrqrw1E480g BAmZ7T6LblYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMx Ny9xOHd1NnZycXJ3MUU0ODBnQkFtWjdUNkxibFkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3E4d3U2dnJxcncxRTQ4MGdCQW1aN1Q2TGJsWS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMTcvcTh3dTZ2cnFydzFF NDgwZ0JBbVo3VDZMYmxZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFk1iaaCuNm8sk6DZdH6RA2V+ZAwExpnfAK3FgYthCdT93uhG+twtGm9JSTT Qq+IMq5iyq5VjviKsoKwpOwaY8HcyVBXWuo76LluM6OxP9Zc6hAwdGTj4o01tynx BmgGM4vk+Ttlh3Lbmp5+iloR6uU7ASLJ2rwfJYlZKlwA+ejVzWM5rBPJ0ZH4fH5v Xymfk76tVDM/eMUj+0K4Nx2qTNmVLSh2WJVvyPSU815Sd85SZBADAZqDpdSC3yiv xPd2AJfLhHaUaP6EMRpy5TnTjrdk0O0j59OAmnBFlJzETtKmVDl3xFo5b0mVhBcm hYQB3bs191rIqxb7KICcJC1hC4Q= -----END CERTIFICATE-----Generated at Wed Aug 13 20:24:11 2025 by rpki-client