$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft File: O3WyLEecFpumBZHB3tRCDFNoHbo.mft (raw, json) Hash identifier: kYNhJ+sN9r1RCDFxRt/1LpokGsubpGprqsLOs2VAWKs= Subject key identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A Authority key identifier: 3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA Certificate issuer: /CN=3B75B22C479C169BA60591C1DED4420C53681DBA Certificate serial: 384C Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft Manifest number: 384C Signing time: Wed 13 Aug 2025 15:02:40 +0000 Manifest this update: Wed 13 Aug 2025 15:02:40 +0000 Manifest next update: Wed 13 Aug 2025 21:02:40 +0000 Files and hashes: 1: O3WyLEecFpumBZHB3tRCDFNoHbo.crl (hash: k/QWhMJSZTDrB7QsdBAyWMCu4qpATk+9D7t/I7qs0HY=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14412 (0x384c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B75B22C479C169BA60591C1DED4420C53681DBA Validity Not Before: Aug 13 15:02:40 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=61990273765A1569FB9124ECD41D1E65A3BCE24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:70:c3:51:fc:45:f6:3c:42:41:cc:6c:c6: f6:3b:10:a6:ea:4b:8e:1f:ba:3c:c1:40:0d:be:20: 29:e6:25:c3:ca:cb:c3:76:ac:d2:25:66:29:21:46: eb:59:9c:04:f5:69:a0:fa:f2:b1:89:20:64:58:c2: 5e:33:bd:dd:5f:69:6b:f3:f7:a0:79:01:9f:40:cc: 9f:b1:20:ea:97:1e:de:52:46:dc:2e:5b:be:59:77: e1:1f:85:64:97:c8:5c:de:26:9e:79:50:a4:42:c7: b0:05:b2:6a:7b:80:97:0a:00:0d:8a:64:a3:cd:8d: 5e:18:f5:6c:3b:7f:6f:27:5f:27:5d:42:99:f6:d9: 96:9e:11:90:35:96:31:9f:a2:5f:4a:3b:20:19:c6: 33:3a:1a:0e:4a:73:79:e5:75:75:9e:4c:9b:c7:c5: d2:ae:88:5a:d9:98:aa:2b:6d:50:19:c7:bd:86:11: fa:c6:05:27:aa:e9:15:56:e6:61:7c:63:07:53:6f: 5b:9c:99:0c:db:35:a5:78:b7:e9:1e:2f:6b:1d:6d: e7:7a:ae:54:ba:24:fe:8a:ed:ad:90:21:a2:f7:15: 11:11:cb:4a:53:ba:79:08:99:27:53:ae:af:d2:aa: e7:cb:25:89:ec:b1:50:fe:77:31:69:09:85:6a:6f: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:02:73:76:5A:15:69:FB:91:24:EC:D4:1D:1E:65:A3:BC:E2:4A X509v3 Authority Key Identifier: keyid:3B:75:B2:2C:47:9C:16:9B:A6:05:91:C1:DE:D4:42:0C:53:68:1D:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O3WyLEecFpumBZHB3tRCDFNoHbo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/389/O3WyLEecFpumBZHB3tRCDFNoHbo.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:b7:96:fd:f9:8a:b0:bd:b3:3b:00:d7:1c:a4:bd:b6:73: ec:1d:13:a2:8e:d6:b1:59:55:fb:ff:36:e5:da:e7:42:76:45: fc:b4:a9:13:95:77:cf:d1:3e:75:55:ea:f2:c9:ed:d6:6d:fb: bf:97:bd:c4:ab:a3:9d:08:9a:44:a8:df:ad:a4:e2:73:a7:66: de:c8:5e:f6:f5:13:61:fe:40:2d:6d:92:e2:a6:fb:af:ca:b8: 4f:a1:3d:ec:5f:a0:e6:6f:10:14:6d:67:c7:5f:13:a7:bb:69: 26:56:8b:bb:b1:36:62:60:df:ba:09:9d:42:ca:e7:67:30:61: 98:40:70:f7:3d:6f:46:a0:6c:6f:fc:69:f3:d7:02:bd:d7:c6: 52:c1:57:37:5b:c5:ea:3c:01:69:fd:90:09:eb:fa:9b:90:e7: d2:bd:68:8c:72:ce:b3:78:d3:cd:0c:12:07:7a:96:1f:60:e7: 84:fd:af:e1:8d:d4:79:e8:d1:72:c4:5e:b1:a3:cf:3f:2f:9c: 64:56:cc:4f:00:8f:c4:ab:1f:93:44:73:93:53:21:ab:24:05: be:34:1d:0c:f2:12:bc:86:11:a0:f7:35:86:75:79:cc:9c:e2: e9:22:44:0a:25:08:c3:7e:69:58:55:83:b5:75:8a:a4:5e:d4: 91:f7:e4:17 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICOEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0I3 NUIyMkM0NzlDMTY5QkE2MDU5MUMxREVENDQyMEM1MzY4MURCQTAeFw0yNTA4MTMx NTAyNDBaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYxOTkwMjczNzY1QTE1 NjlGQjkxMjRFQ0Q0MUQxRTY1QTNCQ0UyNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2f3DDUfxF9jxCQcxsxvY7EKbqS44fujzBQA2+ICnmJcPKy8N2 rNIlZikhRutZnAT1aaD68rGJIGRYwl4zvd1faWvz96B5AZ9AzJ+xIOqXHt5SRtwu W75Zd+EfhWSXyFzeJp55UKRCx7AFsmp7gJcKAA2KZKPNjV4Y9Ww7f28nXyddQpn2 2ZaeEZA1ljGfol9KOyAZxjM6Gg5Kc3nldXWeTJvHxdKuiFrZmKorbVAZx72GEfrG BSeq6RVW5mF8YwdTb1ucmQzbNaV4t+keL2sdbed6rlS6JP6K7a2QIaL3FRERy0pT unkImSdTrq/SqufLJYnssVD+dzFpCYVqbwebAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUYZkCc3ZaFWn7kSTs1B0eZaO84kowHwYDVR0jBBgwFoAUO3WyLEecFpumBZHB 3tRCDFNoHbowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5 L08zV3lMRWVjRnB1bUJaSEIzdFJDREZOb0hiby5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvTzNXeUxFZWNGcHVtQlpIQjN0UkNERk5vSGJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzg5L08zV3lMRWVjRnB1bUJa SEIzdFJDREZOb0hiby5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAn/reW/fmKsL2zOwDXHKS9tnPsHROijtaxWVX7/zbl2udCdkX8tKkTlXfP0T51 Veryye3Wbfu/l73Eq6OdCJpEqN+tpOJzp2beyF729RNh/kAtbZLipvuvyrhPoT3s X6DmbxAUbWfHXxOnu2kmVou7sTZiYN+6CZ1CyudnMGGYQHD3PW9GoGxv/Gnz1wK9 18ZSwVc3W8XqPAFp/ZAJ6/qbkOfSvWiMcs6zeNPNDBIHepYfYOeE/a/hjdR56NFy xF6xo88/L5xkVsxPAI/Eqx+TRHOTUyGrJAW+NB0M8hK8hhGg9zWGdXnMnOLpIkQK JQjDfmlYVYO1dYqkXtSR9+QX -----END CERTIFICATE-----Generated at Wed Aug 13 20:22:10 2025 by rpki-client