$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft File: cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft (raw, json) Hash identifier: qYcSFmWgfv3xWkERgwfbLEsm/ibmElbtehfSa8VGbe8= Subject key identifier: A7:C6:7A:D9:70:B1:B2:45:85:9C:43:65:90:A7:D2:ED:09:22:11:2F Authority key identifier: 72:38:3E:89:7A:75:83:C9:D1:E3:3C:19:18:60:10:E6:6A:0D:03:F3 Certificate issuer: /CN=72383E897A7583C9D1E33C19186010E66A0D03F3 Certificate serial: 66 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft Manifest number: 66 Signing time: Wed 13 Aug 2025 16:04:11 +0000 Manifest this update: Wed 13 Aug 2025 16:04:11 +0000 Manifest next update: Wed 13 Aug 2025 22:04:11 +0000 Files and hashes: 1: cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl (hash: jeTyNkRsa/YweFKzu+TyG4JcPrTB5EI1LHkh+JbpvRI=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72383E897A7583C9D1E33C19186010E66A0D03F3 Validity Not Before: Aug 13 16:04:11 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=A7C67AD970B1B245859C436590A7D2ED0922112F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:cd:33:19:a7:85:64:ef:77:0f:0f:43:f0: 6f:3f:65:6c:9b:a2:4b:2e:ee:f4:7f:ef:c2:fe:dd: 10:0a:02:5b:b2:b6:03:90:68:d9:8e:df:65:b6:2b: 28:a8:24:34:f5:35:da:a8:63:55:90:e0:f2:f3:1e: 61:fc:1e:85:fc:a4:5d:f4:df:c5:81:75:29:aa:26: 05:26:78:1b:4a:5d:6f:4f:aa:91:92:2e:9a:4a:8e: d8:69:0d:0e:75:6e:fd:4c:5b:ae:8a:0b:2e:8c:75: 21:df:28:3d:82:c1:5c:37:ef:bd:dc:99:00:89:d0: b3:1f:f6:90:8b:ee:78:ec:33:57:2b:c8:b1:73:9f: 85:f3:df:fc:4a:f1:60:a5:68:16:a9:d5:d3:10:f7: c4:b8:cf:83:a3:c5:2e:48:b5:4d:0c:7b:ce:6b:f5: cb:e7:44:3f:96:fd:51:f0:ff:76:bb:37:e4:fc:7d: 87:7d:d0:c7:85:fa:dd:c8:78:85:ea:19:15:80:50: be:62:d1:08:ad:73:80:bf:bb:de:f8:77:6c:97:2d: dd:c9:ee:af:4a:f2:ec:c7:fb:22:d5:66:59:e9:74: e5:be:ed:c5:e9:af:31:73:2b:df:43:ae:dd:ed:af: 5c:76:1b:1c:10:89:dd:87:6b:76:61:77:f5:39:d6: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:7A:D9:70:B1:B2:45:85:9C:43:65:90:A7:D2:ED:09:22:11:2F X509v3 Authority Key Identifier: keyid:72:38:3E:89:7A:75:83:C9:D1:E3:3C:19:18:60:10:E6:6A:0D:03:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cjg-iXp1g8nR4zwZGGAQ5moNA_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3386/cjg-iXp1g8nR4zwZGGAQ5moNA_M.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:cc:e9:e8:05:2f:a7:51:b3:2d:2a:1b:70:d9:4a:a7:ef:3a: 33:27:b9:69:9b:bb:8e:9a:37:f1:76:77:8f:46:4f:2e:39:4a: 8a:a4:6f:ff:d6:32:b1:42:23:d8:e4:c3:5c:a2:ea:bc:7e:5f: d3:67:b4:ce:6b:2b:28:92:31:09:29:b4:f3:2e:38:93:f4:32: ba:cd:da:d3:1b:1c:ac:f7:b8:95:bc:18:64:7a:b3:65:44:57: 81:ec:fe:95:ef:2f:73:1b:7a:75:27:62:29:6d:a3:2b:6e:22: 4a:25:13:fa:84:10:d3:f9:4c:2f:9a:04:e5:5b:72:26:76:fe: 4e:1e:af:b0:19:cd:7a:34:ca:7c:cf:2e:98:9c:30:c2:36:d6: fc:4d:a5:b3:60:29:bf:91:77:b3:38:89:89:ed:84:c8:42:de: 94:42:d2:f3:64:e6:a0:4e:2b:ec:63:98:99:37:61:72:67:bb: 38:fc:14:05:65:e6:ab:8b:93:0b:8c:14:30:5a:59:85:ec:65: c1:10:0c:72:05:db:e4:47:10:eb:a1:5e:37:70:04:cf:0f:70: 0a:6f:fa:7e:fd:48:2f:c5:56:56:99:a4:64:43:b9:32:07:24: 35:d9:01:cf:ca:ad:cc:ec:b0:fa:82:0b:b3:d8:0c:4e:52:28: d8:34:6d:e5 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MjM4 M0U4OTdBNzU4M0M5RDFFMzNDMTkxODYwMTBFNjZBMEQwM0YzMB4XDTI1MDgxMzE2 MDQxMVoXDTI2MDgwMzA4NDQ0MFowMzExMC8GA1UEAxMoQTdDNjdBRDk3MEIxQjI0 NTg1OUM0MzY1OTBBN0QyRUQwOTIyMTEyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK9OzTMZp4Vk73cPD0Pwbz9lbJuiSy7u9H/vwv7dEAoCW7K2A5Bo 2Y7fZbYrKKgkNPU12qhjVZDg8vMeYfwehfykXfTfxYF1KaomBSZ4G0pdb0+qkZIu mkqO2GkNDnVu/UxbrooLLox1Id8oPYLBXDfvvdyZAInQsx/2kIvueOwzVyvIsXOf hfPf/ErxYKVoFqnV0xD3xLjPg6PFLki1TQx7zmv1y+dEP5b9UfD/drs35Px9h33Q x4X63ch4heoZFYBQvmLRCK1zgL+73vh3bJct3cnur0ry7Mf7ItVmWel05b7txemv MXMr30Ou3e2vXHYbHBCJ3YdrdmF39TnW3+8CAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSnxnrZcLGyRYWcQ2WQp9LtCSIRLzAfBgNVHSMEGDAWgBRyOD6JenWDydHjPBkY YBDmag0D8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMzg2 L2NqZy1pWHAxZzhuUjR6d1pHR0FRNW1vTkFfTS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvY2pnLWlYcDFnOG5SNHp3WkdHQVE1bW9OQV9NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM4Ni9jamctaVhwMWc4blI0 endaR0dBUTVtb05BX00ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvszp6AUvp1GzLSobcNlKp+86Mye5aZu7jpo38XZ3j0ZPLjlKiqRv/9YysUIj 2OTDXKLqvH5f02e0zmsrKJIxCSm08y44k/Qyus3a0xscrPe4lbwYZHqzZURXgez+ le8vcxt6dSdiKW2jK24iSiUT+oQQ0/lML5oE5VtyJnb+Th6vsBnNejTKfM8umJww wjbW/E2ls2Apv5F3sziJie2EyELelELS82TmoE4r7GOYmTdhcme7OPwUBWXmq4uT C4wUMFpZhexlwRAMcgXb5EcQ66FeN3AEzw9wCm/6fv1IL8VWVpmkZEO5MgckNdkB z8qtzOyw+oILs9gMTlIo2DRt5Q== -----END CERTIFICATE-----Generated at Wed Aug 13 20:21:22 2025 by rpki-client