$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft File: bHGFaWGICFmFIGtbw8RT4SftD94.mft (raw, json) Hash identifier: OZ5+yVUOuNFye2lxXZkuIKK1YJAvzeYJwhy1zZY5hW8= Subject key identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D Authority key identifier: 6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE Certificate issuer: /CN=6C7185696188085985206B5BC3C453E127ED0FDE Certificate serial: 04FA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft Manifest number: 04FA Signing time: Mon 11 Aug 2025 08:03:44 +0000 Manifest this update: Mon 11 Aug 2025 08:03:44 +0000 Manifest next update: Mon 11 Aug 2025 14:03:44 +0000 Files and hashes: 1: bHGFaWGICFmFIGtbw8RT4SftD94.crl (hash: P+qSnNSbCCGtUyr9qbKvsyziGV5bmu/sDyBZeH2j0hU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C7185696188085985206B5BC3C453E127ED0FDE Validity Not Before: Aug 11 08:03:44 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=EBD0975A7BEC6943E8DF5934276DEB7EDD3A0A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:43:31:63:6a:f6:8a:7d:c3:cf:84:c1:85: 81:04:6f:3d:bf:3a:c9:34:64:5f:2b:3f:24:76:db: 0d:dc:01:fe:7b:bc:11:e5:2d:5f:3b:de:e7:87:14: 70:a5:35:bf:7d:29:a0:b8:16:16:5d:de:ad:c3:b2: 0f:0f:39:ff:1d:32:0d:f4:c5:6f:19:9e:62:c9:d6: 90:bf:33:57:c3:60:ea:8b:06:54:6f:5f:31:7a:9d: de:68:26:c3:2c:d2:5a:e0:9e:d8:c7:b6:8f:90:e1: 97:29:7b:aa:28:8b:1d:e1:0c:4c:50:f9:cc:a0:6b: d3:a6:a3:23:63:09:e9:4f:7d:0e:de:19:0e:76:00: 4c:17:04:d5:35:3e:3e:87:20:1c:46:bf:ca:34:b4: 9d:40:af:26:97:9e:8c:24:31:54:59:8e:6c:04:59: fe:c1:05:dc:1d:d3:6e:47:8d:55:7a:d6:45:87:b1: e8:f3:84:03:47:4a:60:83:e1:d4:c4:c8:81:e5:e9: ed:b5:20:e1:03:87:7d:5d:13:89:77:3d:81:a6:14: 06:b3:c4:92:09:8a:e2:76:28:48:b9:2e:b3:61:85: c0:dd:96:22:bf:85:d3:cd:7a:9b:e0:55:c5:6c:8f: 1b:86:69:74:8e:f5:90:5a:7c:89:2e:95:76:b3:60: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D0:97:5A:7B:EC:69:43:E8:DF:59:34:27:6D:EB:7E:DD:3A:0A:2D X509v3 Authority Key Identifier: keyid:6C:71:85:69:61:88:08:59:85:20:6B:5B:C3:C4:53:E1:27:ED:0F:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bHGFaWGICFmFIGtbw8RT4SftD94.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3333/bHGFaWGICFmFIGtbw8RT4SftD94.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4c:53:08:ef:6d:af:ce:ee:0f:48:95:66:90:2b:33:6c:28: 4d:7f:bc:e8:1c:9d:26:8a:d2:08:c6:6b:09:b9:fc:d4:60:d5: 3b:68:c4:20:0b:f1:51:6f:e5:0b:71:cd:99:58:27:9d:2b:c4: c8:75:47:92:fe:9f:2f:d6:72:1a:93:25:61:79:4a:6a:6e:43: a1:eb:f2:8a:4a:8e:42:4b:42:29:e2:6f:53:d8:55:92:68:40: 9f:09:bb:d7:29:5b:39:17:ea:13:9f:35:ed:83:6e:ab:35:a6: d7:21:08:ce:22:6b:55:05:64:44:e6:c7:12:f3:b1:68:53:ed: 52:14:10:47:53:96:20:9d:6f:c5:07:99:c8:cf:40:c8:ea:76: 71:8e:e6:dc:bc:08:1a:13:ed:57:82:2f:65:1d:41:b3:bd:81: 41:da:7f:be:fa:8a:06:c6:b8:44:38:f8:48:16:d6:9a:d1:69: 47:68:a5:3f:83:dc:30:cb:0f:26:cb:b7:b7:cf:4e:a8:13:ae: 8b:c2:03:d1:90:9f:b2:00:26:74:5d:2f:7b:6e:56:75:39:d5: 94:4e:b7:fd:d7:49:2e:e0:87:89:ce:aa:9b:89:10:af:4e:2f: 76:e2:44:3f:8b:4c:d4:89:cf:6e:32:34:3f:d3:49:f2:af:f0: c1:b9:29:66 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkM3 MTg1Njk2MTg4MDg1OTg1MjA2QjVCQzNDNDUzRTEyN0VEMEZERTAeFw0yNTA4MTEw ODAzNDRaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEVCRDA5NzVBN0JFQzY5 NDNFOERGNTkzNDI3NkRFQjdFREQzQTBBMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOlEMxY2r2in3Dz4TBhYEEbz2/Osk0ZF8rPyR22w3cAf57vBHl LV873ueHFHClNb99KaC4FhZd3q3Dsg8POf8dMg30xW8ZnmLJ1pC/M1fDYOqLBlRv XzF6nd5oJsMs0lrgntjHto+Q4Zcpe6ooix3hDExQ+cyga9OmoyNjCelPfQ7eGQ52 AEwXBNU1Pj6HIBxGv8o0tJ1AryaXnowkMVRZjmwEWf7BBdwd025HjVV61kWHsejz hANHSmCD4dTEyIHl6e21IOEDh31dE4l3PYGmFAazxJIJiuJ2KEi5LrNhhcDdliK/ hdPNepvgVcVsjxuGaXSO9ZBafIkulXazYGtPAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU69CXWnvsaUPo31k0J23rft06Ci0wHwYDVR0jBBgwFoAUbHGFaWGICFmFIGtb w8RT4SftD94wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz My9iSEdGYVdHSUNGbUZJR3RidzhSVDRTZnREOTQuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2JIR0ZhV0dJQ0ZtRklHdGJ3OFJUNFNmdEQ5NC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzMvYkhHRmFXR0lDRm1G SUd0Ync4UlQ0U2Z0RDk0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACpMUwjvba/O7g9IlWaQKzNsKE1/vOgcnSaK0gjGawm5/NRg1TtoxCAL8VFv 5QtxzZlYJ50rxMh1R5L+ny/WchqTJWF5SmpuQ6Hr8opKjkJLQinib1PYVZJoQJ8J u9cpWzkX6hOfNe2Dbqs1ptchCM4ia1UFZETmxxLzsWhT7VIUEEdTliCdb8UHmcjP QMjqdnGO5ty8CBoT7VeCL2UdQbO9gUHaf776igbGuEQ4+EgW1prRaUdopT+D3DDL DybLt7fPTqgTrovCA9GQn7IAJnRdL3tuVnU51ZROt/3XSS7gh4nOqpuJEK9OL3bi RD+LTNSJz24yND/TSfKv8MG5KWY= -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:40 2025 by rpki-client