$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft File: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft (raw, json) Hash identifier: Zimt2S+LqPrZXjNFFUZxOzEM1dnS5qLDOijZv0anEfI= Subject key identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 Authority key identifier: 1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA Certificate issuer: /CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Certificate serial: 05E7 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft Manifest number: 05E7 Signing time: Wed 13 Aug 2025 16:05:31 +0000 Manifest this update: Wed 13 Aug 2025 16:05:31 +0000 Manifest next update: Wed 13 Aug 2025 22:05:31 +0000 Files and hashes: 1: Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl (hash: agYiK5M+EyKAVdXPdaVexnSQIM7JFRjwTDivcNFoKOI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1511 (0x5e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACDC26C4E0F670DFE0BA63C2F234DE46F622BAA Validity Not Before: Aug 13 16:05:31 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=BF7821F78FFC418D66ABC2C904523A53F50E1AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:f6:2f:ee:1a:47:a8:a0:29:f3:cf:46:70: 8f:f3:f1:6a:c8:f5:d0:a5:56:7d:e1:dc:f9:f8:60: 61:a1:07:60:57:c0:44:0b:ec:63:1e:9b:05:27:4e: 9f:de:07:ae:49:55:1d:20:94:37:27:c2:dc:e0:80: 30:b2:af:71:d5:69:62:b3:e0:1d:d8:e0:5d:86:ef: 5c:aa:fe:bb:7c:7a:d5:63:33:89:d9:49:28:7a:4f: c5:fb:91:b2:48:6d:7b:09:e0:dd:a1:23:d1:92:f6: 21:e7:6e:d6:92:5e:71:e6:0b:e2:35:80:dc:c8:a3: 51:ad:06:4f:0d:51:00:d9:6f:eb:04:82:ec:a4:07: e5:af:06:44:95:6d:12:68:20:5d:f6:1f:00:83:11: 65:25:e0:01:ce:0d:ad:cc:28:7e:d2:8d:da:62:61: 89:ba:7f:b3:e6:09:6e:03:f0:49:67:b6:5c:68:01: c7:54:40:58:58:b1:4d:28:64:27:38:56:f8:f4:f9: c9:d3:ea:64:e9:2d:f1:ac:4c:27:84:b4:e1:40:0a: df:39:65:80:3a:1f:ca:84:bc:46:55:fd:89:2e:97: 27:a5:4a:ff:3d:99:8e:b7:0a:e5:78:0f:2c:d9:12: 3f:c1:a8:c5:14:cd:24:f1:a3:60:50:08:e0:09:19: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:78:21:F7:8F:FC:41:8D:66:AB:C2:C9:04:52:3A:53:F5:0E:1A:B7 X509v3 Authority Key Identifier: keyid:1A:CD:C2:6C:4E:0F:67:0D:FE:0B:A6:3C:2F:23:4D:E4:6F:62:2B:AA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3322/Gs3CbE4PZw3-C6Y8LyNN5G9iK6o.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:39:d5:2a:78:ce:29:87:c9:18:2f:43:fc:38:f4:c2:68: 62:09:da:29:bf:e7:0c:31:f7:5a:a1:e6:ed:08:b2:89:0f:00: b6:d5:b9:39:76:a7:8b:6b:4a:86:27:23:ee:e5:4b:77:81:07: 85:a0:8d:00:70:61:d6:1e:c2:c2:62:b2:2d:27:eb:30:25:32: 71:8b:ac:9e:b0:c3:29:a0:e7:e8:85:07:d2:60:ff:fc:a9:b5: 1f:1b:ac:2c:2b:75:21:26:b0:2a:dc:84:b4:03:f8:d9:f1:da: a6:ac:68:8e:47:6d:61:5b:3b:c6:f8:d8:29:21:3c:b8:73:cf: 03:4f:1b:ac:34:f3:53:c5:5f:81:7d:1a:f0:b1:ba:c0:c7:28: 5c:f9:c8:a6:20:9f:77:c2:76:c7:0b:cf:e1:7f:d2:0e:3b:f5: 72:5b:91:ff:ca:4f:e6:41:36:96:80:c5:1b:a9:77:0f:a8:8b: 94:9a:e5:92:cb:b5:00:0b:01:4e:54:f0:5e:ea:bc:69:8e:9a: 69:a2:db:3a:a1:2b:60:38:a2:fa:16:30:f8:4d:d5:bd:d8:5f: 31:af:34:80:c7:12:2e:c8:03:ad:cd:9c:53:cb:75:46:cc:33: 86:c8:b9:22:68:ac:cf:38:b7:a6:6d:5e:92:74:19:f9:b8:8b: 87:7a:27:61 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFD REMyNkM0RTBGNjcwREZFMEJBNjNDMkYyMzRERTQ2RjYyMkJBQTAeFw0yNTA4MTMx NjA1MzFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEJGNzgyMUY3OEZGQzQx OEQ2NkFCQzJDOTA0NTIzQTUzRjUwRTFBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjvYv7hpHqKAp889GcI/z8WrI9dClVn3h3Pn4YGGhB2BXwEQL 7GMemwUnTp/eB65JVR0glDcnwtzggDCyr3HVaWKz4B3Y4F2G71yq/rt8etVjM4nZ SSh6T8X7kbJIbXsJ4N2hI9GS9iHnbtaSXnHmC+I1gNzIo1GtBk8NUQDZb+sEguyk B+WvBkSVbRJoIF32HwCDEWUl4AHODa3MKH7SjdpiYYm6f7PmCW4D8ElntlxoAcdU QFhYsU0oZCc4Vvj0+cnT6mTpLfGsTCeEtOFACt85ZYA6H8qEvEZV/YkulyelSv89 mY63CuV4DyzZEj/BqMUUzSTxo2BQCOAJGf1BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUv3gh94/8QY1mq8LJBFI6U/UOGrcwHwYDVR0jBBgwFoAUGs3CbE4PZw3+C6Y8 LyNN5G9iK6owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMy Mi9HczNDYkU0UFp3My1DNlk4THlOTjVHOWlLNm8uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0dzM0NiRTRQWnczLUM2WThMeU5ONUc5aUs2by5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMjIvR3MzQ2JFNFBadzMt QzZZOEx5Tk41RzlpSzZvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIofOdUqeM4ph8kYL0P8OPTCaGIJ2im/5wwx91qh5u0IsokPALbVuTl2p4tr SoYnI+7lS3eBB4WgjQBwYdYewsJisi0n6zAlMnGLrJ6wwymg5+iFB9Jg//yptR8b rCwrdSEmsCrchLQD+Nnx2qasaI5HbWFbO8b42CkhPLhzzwNPG6w081PFX4F9GvCx usDHKFz5yKYgn3fCdscLz+F/0g479XJbkf/KT+ZBNpaAxRupdw+oi5Sa5ZLLtQAL AU5U8F7qvGmOmmmi2zqhK2A4ovoWMPhN1b3YXzGvNIDHEi7IA63NnFPLdUbMM4bI uSJorM84t6ZtXpJ0Gfm4i4d6J2E= -----END CERTIFICATE-----Generated at Wed Aug 13 20:17:24 2025 by rpki-client