$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft File: lmzVCUReWNdVvBqFJWP5uy_uzbk.mft (raw, json) Hash identifier: g8aFQZE1HIAMJOpHoI6LI+u4h8ARuC5FJP9dM9dUTwg= Subject key identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 Authority key identifier: 96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 Certificate issuer: /CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Certificate serial: 0228 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft Manifest number: 0228 Signing time: Wed 13 Aug 2025 16:02:17 +0000 Manifest this update: Wed 13 Aug 2025 16:02:17 +0000 Manifest next update: Wed 13 Aug 2025 22:02:17 +0000 Files and hashes: 1: lmzVCUReWNdVvBqFJWP5uy_uzbk.crl (hash: fdDIiZw88andf461hubnO794Zf9CZJRLWLsTLuibeCE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966CD509445E58D755BC1A852563F9BB2FEECDB9 Validity Not Before: Aug 13 16:02:17 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=652AC6D45D74F000FFFCA5A6AFB02690651A8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:a6:94:b4:d1:5b:79:37:2b:14:1b:ea:76: b7:a1:db:e8:f1:8b:44:bd:c4:0f:3e:b8:d1:a0:54: 23:64:d7:c8:ce:64:6f:20:76:56:ca:01:ae:86:04: 17:29:aa:60:e3:4d:a2:b1:72:3a:b0:b4:39:8e:0d: e6:b2:ea:13:13:2a:5e:c3:ab:93:ea:66:b0:dc:5e: 6b:65:ce:31:61:45:e2:16:30:88:09:a2:57:bd:2e: 36:b0:ef:51:98:df:a8:3d:36:3e:1a:37:47:71:1f: a3:9b:67:6f:d5:4d:f3:87:82:b3:ce:b3:08:d5:a2: 01:4f:fe:46:90:8b:15:df:a6:c7:4b:26:4a:f6:b0: 89:6c:0c:ad:85:11:5b:36:07:61:90:0b:d8:7e:d6: b0:32:04:6a:80:9a:8f:32:c2:df:4c:e8:1b:79:67: 4f:c2:21:b0:62:c3:72:71:f2:c5:4f:c9:a3:0a:03: 1e:5b:fe:b6:f4:df:47:09:8b:d2:21:b2:46:8f:8c: 88:72:cc:a7:2f:ee:e3:52:aa:60:bc:f2:34:a9:8b: f9:59:2f:57:ef:92:66:58:f6:da:a7:d6:b7:c0:23: 42:6b:a1:ba:24:9e:a3:4a:bb:98:f5:ad:96:f6:b3: ea:51:ca:ba:aa:16:8a:5c:29:11:96:8f:14:49:3a: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:C6:D4:5D:74:F0:00:FF:FC:A5:A6:AF:B0:26:90:65:1A:88:12 X509v3 Authority Key Identifier: keyid:96:6C:D5:09:44:5E:58:D7:55:BC:1A:85:25:63:F9:BB:2F:EE:CD:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lmzVCUReWNdVvBqFJWP5uy_uzbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3366/lmzVCUReWNdVvBqFJWP5uy_uzbk.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:38:d6:f7:02:4b:00:b8:69:fe:f5:08:ba:c0:5c:ce:e0: 38:7f:07:4f:5c:99:d2:1a:f9:63:64:ea:00:07:dc:ea:07:16: 8e:f0:7f:ea:c5:d5:a6:30:a8:a9:62:51:01:76:4e:53:c1:7d: e3:6f:b8:1c:e1:1c:35:85:2e:79:8c:4e:d3:20:e9:05:14:a7: c5:8c:96:39:d4:f0:59:1f:24:f4:aa:e3:e8:f1:5c:d2:b3:f5: 24:02:ff:f3:3a:47:a7:76:35:04:dc:07:9a:b8:2d:ed:78:40: fe:68:e1:63:01:9a:e3:e2:7a:94:2d:54:e9:c1:70:48:8d:e0: 53:45:38:20:c1:aa:24:cb:2b:58:22:2e:a8:1e:ff:cf:b0:aa: 48:6c:9c:94:95:60:09:45:e9:36:7a:fe:0a:82:b7:58:ca:ed: 9a:8c:90:f7:d9:69:d0:7f:02:5f:86:f4:53:c6:9b:64:9a:d9: 36:d3:cb:a4:ce:96:75:2a:87:56:f4:ac:bf:bc:9e:d9:ba:84: 20:3e:4b:b0:47:6f:1f:ad:78:86:e7:cc:af:2a:01:bd:2c:4a: c3:45:51:c8:a0:e9:ed:14:6a:b0:42:fa:be:11:b0:5c:25:f7: b4:ac:1e:42:fb:b4:42:b4:3c:f5:4c:61:73:fd:87:ff:45:bd: 93:71:57:2f -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAigwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY2 Q0Q1MDk0NDVFNThENzU1QkMxQTg1MjU2M0Y5QkIyRkVFQ0RCOTAeFw0yNTA4MTMx NjAyMTdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDY1MkFDNkQ0NUQ3NEYw MDBGRkZDQTVBNkFGQjAyNjkwNjUxQTg4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIfKaUtNFbeTcrFBvqdreh2+jxi0S9xA8+uNGgVCNk18jOZG8g dlbKAa6GBBcpqmDjTaKxcjqwtDmODeay6hMTKl7Dq5PqZrDcXmtlzjFhReIWMIgJ ole9Ljaw71GY36g9Nj4aN0dxH6ObZ2/VTfOHgrPOswjVogFP/kaQixXfpsdLJkr2 sIlsDK2FEVs2B2GQC9h+1rAyBGqAmo8ywt9M6Bt5Z0/CIbBiw3Jx8sVPyaMKAx5b /rb030cJi9IhskaPjIhyzKcv7uNSqmC88jSpi/lZL1fvkmZY9tqn1rfAI0Jrobok nqNKu5j1rZb2s+pRyrqqFopcKRGWjxRJOiIlAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUZSrG1F108AD//KWmr7AmkGUaiBIwHwYDVR0jBBgwFoAUlmzVCUReWNdVvBqF JWP5uy/uzbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM2 Ni9sbXpWQ1VSZVdOZFZ2QnFGSldQNXV5X3V6YmsuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL2xtelZDVVJlV05kVnZCcUZKV1A1dXlfdXpiay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzNjYvbG16VkNVUmVXTmRW dkJxRkpXUDV1eV91emJrLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABeWONb3AksAuGn+9Qi6wFzO4Dh/B09cmdIa+WNk6gAH3OoHFo7wf+rF1aYw qKliUQF2TlPBfeNvuBzhHDWFLnmMTtMg6QUUp8WMljnU8FkfJPSq4+jxXNKz9SQC //M6R6d2NQTcB5q4Le14QP5o4WMBmuPiepQtVOnBcEiN4FNFOCDBqiTLK1giLqge /8+wqkhsnJSVYAlF6TZ6/gqCt1jK7ZqMkPfZadB/Al+G9FPGm2Sa2TbTy6TOlnUq h1b0rL+8ntm6hCA+S7BHbx+teIbnzK8qAb0sSsNFUcig6e0UarBC+r4RsFwl97Ss HkL7tEK0PPVMYXP9h/9FvZNxVy8= -----END CERTIFICATE-----Generated at Wed Aug 13 20:19:12 2025 by rpki-client