$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft File: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft (raw, json) Hash identifier: RKFO3awZb4EyGFK05K00WNf6LVaKZ3JExruhkDHnnww= Subject key identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 Authority key identifier: 6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 Certificate issuer: /CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Certificate serial: 72 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft Manifest number: 72 Signing time: Wed 13 Aug 2025 21:02:49 +0000 Manifest this update: Wed 13 Aug 2025 21:02:49 +0000 Manifest next update: Thu 14 Aug 2025 03:02:49 +0000 Files and hashes: 1: bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl (hash: 8Xy0LAfHIYxCEYG1M5IvzyUTvZaGbvym6Ewb6RNO0F4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D5E0F2BC7B6CA33A14F327A94459F9D5AE0A974 Validity Not Before: Aug 13 21:02:49 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=4F37AC7133852E9A205BC5879E706788C5BB1AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:b5:f6:93:22:b5:ad:56:4e:7f:8f:99:4d: bc:1e:85:7b:07:2f:5d:a9:7d:25:78:c3:fc:8e:ae: e7:0a:94:5f:a4:0a:83:25:9f:c6:e8:60:89:03:81: 1b:aa:04:62:5b:dd:b9:86:a1:5a:ac:c6:82:e2:1f: 61:df:3d:01:da:c4:87:17:6a:24:b6:af:46:7b:22: bd:ad:0b:8c:fa:93:ed:46:8a:3e:48:44:3a:78:3b: f8:b4:a5:19:15:79:8c:c2:d2:56:a5:b5:90:3b:39: 19:f3:79:a4:60:9e:15:cd:ed:94:87:ec:49:34:9a: 91:54:32:09:8d:b6:e7:df:fa:84:50:95:31:ce:b0: 88:74:81:53:bb:f7:00:fd:a7:cc:e1:4e:b4:ea:11: 89:89:88:fa:1d:ee:58:b1:e3:f0:52:cd:4c:52:4b: d1:e7:ee:68:2b:88:d9:41:46:51:a4:bf:9a:54:b9: 14:ce:4d:4c:85:52:1d:84:59:2e:74:95:d3:26:d3: 11:82:84:f3:c8:a4:c3:81:53:e7:a5:0c:fa:f4:36: bf:86:20:aa:96:b4:35:0f:87:95:0b:5d:bd:66:fa: 4a:cd:c0:8b:a2:ab:70:28:c6:6e:a2:5e:e9:9f:02: 7c:32:aa:84:56:f8:4e:fb:6d:c5:71:5f:1f:96:ed: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:37:AC:71:33:85:2E:9A:20:5B:C5:87:9E:70:67:88:C5:BB:1A:B0 X509v3 Authority Key Identifier: keyid:6D:5E:0F:2B:C7:B6:CA:33:A1:4F:32:7A:94:45:9F:9D:5A:E0:A9:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3385/bV4PK8e2yjOhTzJ6lEWfnVrgqXQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f1:97:f4:56:2c:30:c7:5a:3a:32:8f:e2:ee:dc:69:25:80: af:18:58:0b:51:2a:2a:23:d4:eb:f1:09:f9:29:d9:13:c8:f9: 45:40:3e:02:a0:fa:c3:3d:d4:2d:dd:b3:d1:f9:8e:c4:31:39: 21:9e:1e:54:cc:3d:2f:98:9b:b3:c3:2e:3c:93:76:48:c1:75: 5e:88:77:b3:74:f0:8f:65:71:12:c2:32:36:46:b2:5f:7f:d4: 89:f4:5e:41:c4:d7:35:82:a0:be:2c:bf:33:00:93:80:8e:e6: 0a:6f:b9:43:1a:64:8e:46:f2:5c:9c:69:a8:ec:1f:42:41:ca: 38:a9:d8:29:2f:80:06:7c:92:4b:03:ec:cf:0a:c8:6f:5a:cd: 30:32:c2:3a:37:d4:f9:5a:88:76:18:ee:f1:af:97:46:9b:39: ec:77:f0:06:15:0d:76:d5:a4:eb:c0:fd:c3:f9:79:47:b2:3b: a6:95:7d:99:79:74:0d:29:79:ae:0e:3d:1b:4f:bd:01:c9:15: 7f:18:f9:0f:39:f2:f6:1d:9a:a8:3c:21:88:49:03:9a:84:ef: 56:d8:b9:d9:22:21:8d:cd:9c:e1:f1:44:e1:40:e8:67:be:5d: 49:d7:29:14:57:06:a9:1c:04:64:48:b5:63:d5:99:03:bd:c1: 5a:72:c8:4b -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2RDVF MEYyQkM3QjZDQTMzQTE0RjMyN0E5NDQ1OUY5RDVBRTBBOTc0MB4XDTI1MDgxMzIx MDI0OVoXDTI2MDgwMzA4NDQ0MFowMzExMC8GA1UEAxMoNEYzN0FDNzEzMzg1MkU5 QTIwNUJDNTg3OUU3MDY3ODhDNUJCMUFCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOwWtfaTIrWtVk5/j5lNvB6FewcvXal9JXjD/I6u5wqUX6QKgyWf xuhgiQOBG6oEYlvduYahWqzGguIfYd89AdrEhxdqJLavRnsiva0LjPqT7UaKPkhE Ong7+LSlGRV5jMLSVqW1kDs5GfN5pGCeFc3tlIfsSTSakVQyCY2259/6hFCVMc6w iHSBU7v3AP2nzOFOtOoRiYmI+h3uWLHj8FLNTFJL0efuaCuI2UFGUaS/mlS5FM5N TIVSHYRZLnSV0ybTEYKE88ikw4FT56UM+vQ2v4Ygqpa0NQ+HlQtdvWb6Ss3Ai6Kr cCjGbqJe6Z8CfDKqhFb4TvttxXFfH5btRJsCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBRPN6xxM4UumiBbxYeecGeIxbsasDAfBgNVHSMEGDAWgBRtXg8rx7bKM6FPMnqU RZ+dWuCpdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg1 L2JWNFBLOGUyeWpPaFR6SjZsRVdmblZyZ3FYUS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvYlY0UEs4ZTJ5ak9oVHpKNmxFV2ZuVnJncVhRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4NS9iVjRQSzhlMnlqT2hU eko2bEVXZm5WcmdxWFEubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWfGX9FYsMMdaOjKP4u7caSWArxhYC1EqKiPU6/EJ+SnZE8j5RUA+AqD6wz3U Ld2z0fmOxDE5IZ4eVMw9L5ibs8MuPJN2SMF1Xoh3s3Twj2VxEsIyNkayX3/UifRe QcTXNYKgviy/MwCTgI7mCm+5QxpkjkbyXJxpqOwfQkHKOKnYKS+ABnySSwPszwrI b1rNMDLCOjfU+VqIdhju8a+XRps57HfwBhUNdtWk68D9w/l5R7I7ppV9mXl0DSl5 rg49G0+9AckVfxj5Dzny9h2aqDwhiEkDmoTvVti52SIhjc2c4fFE4UDoZ75dSdcp FFcGqRwEZEi1Y9WZA73BWnLISw== -----END CERTIFICATE-----Generated at Wed Aug 13 22:12:31 2025 by rpki-client