$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft File: FCweOZsxNmQg7EfS4xcbGllluJM.mft (raw, json) Hash identifier: R9yFITQzgC+/3DsiITvjDi4QKjE2vyHyx0aIXCyhnJg= Subject key identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B Authority key identifier: 14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 Certificate issuer: /CN=142C1E399B31366420EC47D2E3171B1A5965B893 Certificate serial: 65 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft Manifest number: 65 Signing time: Mon 11 Aug 2025 09:02:47 +0000 Manifest this update: Mon 11 Aug 2025 09:02:47 +0000 Manifest next update: Mon 11 Aug 2025 15:02:47 +0000 Files and hashes: 1: FCweOZsxNmQg7EfS4xcbGllluJM.crl (hash: 6fJR5WGSAhIzvGaa4W7O4NqSQ38p6BDA5m25O1oQloE=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142C1E399B31366420EC47D2E3171B1A5965B893 Validity Not Before: Aug 11 09:02:47 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1C51D217224E6245574DA14CCBA48E0C1C765B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a4:f0:43:1b:b9:27:9d:81:d0:4f:48:bd: 71:b6:a1:c2:e3:36:9a:84:9c:6a:64:6f:df:e6:5c: c6:7c:71:0d:6d:00:c1:5c:db:4a:ae:04:1e:fb:22: 9d:f7:ea:82:10:e1:a7:70:6d:94:a9:10:ed:32:ae: 03:77:df:6a:65:a1:64:04:dc:d1:94:b7:fa:07:20: a9:cd:17:14:eb:d9:c9:e2:07:dc:ee:81:9d:bc:9f: b1:52:5d:3a:49:af:f7:bc:8f:4f:d6:5f:e6:86:20: 4a:d0:d5:36:e4:b1:72:51:01:18:82:c3:cc:18:3e: 9d:40:b8:fc:8d:93:ad:0f:b8:aa:a3:3a:6a:3e:88: 71:ff:b9:de:ff:e3:54:31:58:1b:e5:42:ed:91:bb: 0f:20:eb:bf:1a:77:61:a3:2f:e5:0c:4c:e7:9e:52: b9:04:b5:b5:26:49:37:97:2e:64:c2:c7:e5:53:d3: 0e:dd:02:27:ea:aa:93:23:8a:4d:80:2f:17:c9:a5: 63:51:89:e1:60:01:49:ca:1d:95:a9:3a:f5:04:bb: 98:6b:b8:b8:25:67:1c:f9:4f:21:a6:17:a1:22:51: 0d:57:66:26:5c:1b:be:1c:a6:35:67:31:83:7c:bc: ed:a7:f8:0c:9e:58:6d:ca:1a:78:74:09:14:5b:7b: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:51:D2:17:22:4E:62:45:57:4D:A1:4C:CB:A4:8E:0C:1C:76:5B:0B X509v3 Authority Key Identifier: keyid:14:2C:1E:39:9B:31:36:64:20:EC:47:D2:E3:17:1B:1A:59:65:B8:93 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FCweOZsxNmQg7EfS4xcbGllluJM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/FCweOZsxNmQg7EfS4xcbGllluJM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:81:ba:b2:7a:27:ea:01:e3:50:33:11:e7:af:eb:84:30:dd: 21:4c:a8:2f:38:6c:ba:8c:00:12:6c:01:ce:5a:b8:48:a8:55: 70:ee:d9:1c:7b:e5:2a:8d:8d:b6:55:5e:df:ae:ea:11:10:39: 14:b6:cb:1b:20:4a:e7:00:b0:b7:79:83:59:25:b7:14:bc:c9: 48:d4:b6:3d:dc:92:4b:bf:27:01:ba:73:5a:8a:ca:5e:f1:35: b9:b7:f8:c3:25:6a:5a:ed:16:ed:aa:d1:f2:a6:73:dc:50:e3: 7b:ba:10:e7:9a:07:a5:55:a4:7f:0b:6e:82:6a:be:d1:79:ed: c8:7e:c6:73:1d:93:6d:ea:b0:32:b4:e3:0c:f0:61:ad:cc:94: 1a:5d:3c:e6:67:9b:d8:6b:34:34:da:36:a8:6b:a5:45:76:7d: 05:d6:42:d5:01:ff:8a:7a:af:ec:c7:88:97:1e:32:f2:1d:32: 70:41:2f:5a:49:92:5d:71:95:d4:44:d1:80:78:03:78:d7:a4: 7f:c9:89:51:31:70:e4:c6:b8:c8:97:b4:62:80:73:53:6a:31: d5:d6:c7:bd:12:dc:42:fc:08:16:cf:99:8c:42:d5:60:e1:3a: af:59:0f:17:ac:93:54:fd:16:78:82:2b:40:38:57:bf:f4:c1: 4a:62:74:91 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDJD MUUzOTlCMzEzNjY0MjBFQzQ3RDJFMzE3MUIxQTU5NjVCODkzMB4XDTI1MDgxMTA5 MDI0N1oXDTI2MDgwMzA4NDQ0MFowMzExMC8GA1UEAxMoMUM1MUQyMTcyMjRFNjI0 NTU3NERBMTRDQ0JBNDhFMEMxQzc2NUIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALDQpPBDG7knnYHQT0i9cbahwuM2moScamRv3+ZcxnxxDW0AwVzb Sq4EHvsinffqghDhp3BtlKkQ7TKuA3ffamWhZATc0ZS3+gcgqc0XFOvZyeIH3O6B nbyfsVJdOkmv97yPT9Zf5oYgStDVNuSxclEBGILDzBg+nUC4/I2TrQ+4qqM6aj6I cf+53v/jVDFYG+VC7ZG7DyDrvxp3YaMv5QxM555SuQS1tSZJN5cuZMLH5VPTDt0C J+qqkyOKTYAvF8mlY1GJ4WABScodlak69QS7mGu4uCVnHPlPIaYXoSJRDVdmJlwb vhymNWcxg3y87af4DJ5YbcoaeHQJFFt7LYcCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBQcUdIXIk5iRVdNoUzLpI4MHHZbCzAfBgNVHSMEGDAWgBQULB45mzE2ZCDsR9Lj FxsaWWW4kzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg1 L0ZDd2VPWnN4Tm1RZzdFZlM0eGNiR2xsbHVKTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvRkN3ZU9ac3hObVFnN0VmUzR4Y2JHbGxsdUpNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4NS9GQ3dlT1pzeE5tUWc3 RWZTNHhjYkdsbGx1Sk0ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUIG6snon6gHjUDMR56/rhDDdIUyoLzhsuowAEmwBzlq4SKhVcO7ZHHvlKo2N tlVe367qERA5FLbLGyBK5wCwt3mDWSW3FLzJSNS2PdySS78nAbpzWorKXvE1ubf4 wyVqWu0W7arR8qZz3FDje7oQ55oHpVWkfwtugmq+0XntyH7Gcx2TbeqwMrTjDPBh rcyUGl085meb2Gs0NNo2qGulRXZ9BdZC1QH/inqv7MeIlx4y8h0ycEEvWkmSXXGV 1ETRgHgDeNekf8mJUTFw5Ma4yJe0YoBzU2ox1dbHvRLcQvwIFs+ZjELVYOE6r1kP F6yTVP0WeIIrQDhXv/TBSmJ0kQ== -----END CERTIFICATE-----Generated at Mon Aug 11 12:58:23 2025 by rpki-client