$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft File: ldntqLoorwPp7aZMarFbbPYvoGM.mft (raw, json) Hash identifier: 8qcICaZ5Je8GOyX/MqbAXdip2FX4HDuX+mH32cZwHDo= Subject key identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 Authority key identifier: 95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 Certificate issuer: /CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Certificate serial: 04BC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft Manifest number: 04BC Signing time: Wed 13 Aug 2025 16:05:27 +0000 Manifest this update: Wed 13 Aug 2025 16:05:27 +0000 Manifest next update: Wed 13 Aug 2025 22:05:27 +0000 Files and hashes: 1: ldntqLoorwPp7aZMarFbbPYvoGM.crl (hash: 65IfEQ7L8wWGtF8bPbHn6KeTMciqwWGtEKwlMCpnqMU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9EDA8BA28AF03E9EDA64C6AB15B6CF62FA063 Validity Not Before: Aug 13 16:05:27 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=F1422785AEB77794E677E837686C920829C22C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:1f:1b:36:2f:ba:66:78:29:1c:e0:a7:3a: 97:52:e5:09:dd:d1:91:b2:73:8a:72:5a:fc:a9:11: 97:73:c7:c1:13:86:59:6c:bd:a3:25:61:19:5c:d7: b5:44:e8:47:12:14:87:85:36:53:cd:b7:8c:5a:0a: 86:22:22:05:c5:8e:1c:9f:27:8d:d0:8a:82:f3:20: ca:3c:41:96:1d:51:34:21:07:d8:78:7a:f9:35:f9: f0:0d:4c:70:c8:71:b5:74:b6:34:d8:38:6c:88:c6: b8:48:bd:24:d3:29:c3:d7:86:b8:08:12:f8:a0:01: 3c:63:5f:36:f8:36:15:90:cb:02:62:21:8b:4e:5d: 90:cd:e8:cb:d7:7c:6f:e4:54:09:01:77:f8:bc:8a: 71:90:b1:fc:a6:ad:c1:17:d0:66:90:b7:1e:53:98: e1:d6:30:e6:60:ef:29:8c:1e:48:d6:b0:cf:53:d7: 3a:22:b5:cd:53:64:8f:76:ca:4b:21:ec:90:ce:06: cd:4b:35:e0:75:02:fd:aa:fe:22:75:36:99:ea:32: 1d:4e:04:8a:56:3a:06:14:0f:f4:d5:60:02:81:2d: 20:30:5f:c3:48:55:ed:db:e7:72:77:e6:2c:99:ef: 84:7d:e3:ba:fc:f6:c7:f9:a2:35:46:c8:65:41:76: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:27:85:AE:B7:77:94:E6:77:E8:37:68:6C:92:08:29:C2:2C:70 X509v3 Authority Key Identifier: keyid:95:D9:ED:A8:BA:28:AF:03:E9:ED:A6:4C:6A:B1:5B:6C:F6:2F:A0:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ldntqLoorwPp7aZMarFbbPYvoGM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3339/ldntqLoorwPp7aZMarFbbPYvoGM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:35:bf:c5:f1:6c:29:ad:d5:fb:b5:20:be:d5:ee:27:47:ac: e2:ef:c6:be:6e:e2:30:c0:25:6f:f8:42:3f:5f:99:30:0e:12: 54:67:55:ee:08:54:07:66:cc:f4:2a:f6:b3:38:6c:b3:76:d5: 7c:2a:95:82:44:a4:ae:a1:77:e8:87:0b:0f:b6:09:a1:32:e5: 69:9e:b5:48:52:eb:e6:c5:d3:45:fd:e6:1c:33:cc:b8:c9:f7: 80:2c:c2:e8:ef:ab:0c:f1:e0:e3:6f:e8:cf:a5:66:3e:f4:84: 98:4a:5d:8a:0b:1f:7d:7d:6c:f9:51:dc:8d:30:38:56:06:60: 17:7f:b0:ed:6d:51:ce:c0:51:e4:8c:ec:8a:46:98:c8:c7:e1: 86:02:8d:d0:11:18:a7:34:38:fe:ef:39:ef:a0:48:7c:45:96: c6:e6:39:2d:4f:2b:68:1f:2d:34:af:a8:d7:fd:34:f8:5a:b7: 20:d7:b1:84:0f:d4:08:59:1b:dd:52:0d:ec:27:1f:b3:1c:b4: 15:1f:c4:fb:89:84:3f:54:a8:01:39:fa:f8:65:37:5f:de:75: 54:e0:fa:0f:35:06:a8:ba:6a:3f:90:a3:1f:6a:0f:31:38:7c: ca:21:67:cc:28:6a:23:95:02:69:b0:63:1e:18:be:3b:1e:1a: 97:a7:88:86 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTVE OUVEQThCQTI4QUYwM0U5RURBNjRDNkFCMTVCNkNGNjJGQTA2MzAeFw0yNTA4MTMx NjA1MjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEYxNDIyNzg1QUVCNzc3 OTRFNjc3RTgzNzY4NkM5MjA4MjlDMjJDNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVJB8bNi+6ZngpHOCnOpdS5Qnd0ZGyc4pyWvypEZdzx8EThlls vaMlYRlc17VE6EcSFIeFNlPNt4xaCoYiIgXFjhyfJ43QioLzIMo8QZYdUTQhB9h4 evk1+fANTHDIcbV0tjTYOGyIxrhIvSTTKcPXhrgIEvigATxjXzb4NhWQywJiIYtO XZDN6MvXfG/kVAkBd/i8inGQsfymrcEX0GaQtx5TmOHWMOZg7ymMHkjWsM9T1zoi tc1TZI92yksh7JDOBs1LNeB1Av2q/iJ1NpnqMh1OBIpWOgYUD/TVYAKBLSAwX8NI Ve3b53J35iyZ74R947r89sf5ojVGyGVBdp5/AgMBAAGjggIMMIICCDAdBgNVHQ4E FgQU8UInha63d5Tmd+g3aGySCCnCLHAwHwYDVR0jBBgwFoAUldntqLoorwPp7aZM arFbbPYvoGMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMz OS9sZG50cUxvb3J3UHA3YVpNYXJGYmJQWXZvR00uY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xkbnRxTG9vcndQcDdhWk1hckZiYlBZdm9HTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzMzkvbGRudHFMb29yd1Bw N2FaTWFyRmJiUFl2b0dNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJI1v8XxbCmt1fu1IL7V7idHrOLvxr5u4jDAJW/4Qj9fmTAOElRnVe4IVAdm zPQq9rM4bLN21XwqlYJEpK6hd+iHCw+2CaEy5WmetUhS6+bF00X95hwzzLjJ94As wujvqwzx4ONv6M+lZj70hJhKXYoLH319bPlR3I0wOFYGYBd/sO1tUc7AUeSM7IpG mMjH4YYCjdARGKc0OP7vOe+gSHxFlsbmOS1PK2gfLTSvqNf9NPhatyDXsYQP1AhZ G91SDewnH7MctBUfxPuJhD9UqAE5+vhlN1/edVTg+g81Bqi6aj+Qox9qDzE4fMoh Z8woaiOVAmmwYx4YvjseGpeniIY= -----END CERTIFICATE-----Generated at Wed Aug 13 19:10:45 2025 by rpki-client