$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft File: hPLNDLUaQjf34fOuhRnjzCZEi38.mft (raw, json) Hash identifier: Kd5jR5eaRoEcg1wezr84xEWNyIda6IckJrLrPh/i6lY= Subject key identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 Authority key identifier: 84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F Certificate issuer: /CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Certificate serial: 16AC Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft Manifest number: 16AC Signing time: Wed 13 Aug 2025 16:05:55 +0000 Manifest this update: Wed 13 Aug 2025 16:05:55 +0000 Manifest next update: Wed 13 Aug 2025 22:05:55 +0000 Files and hashes: 1: hPLNDLUaQjf34fOuhRnjzCZEi38.crl (hash: 0N3g54qLUgZw07DZjulGW8Jw3MQVfANBP31v3vnKhnc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5804 (0x16ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84F2CD0CB51A4237F7E1F3AE8519E3CC26448B7F Validity Not Before: Aug 13 16:05:55 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=45D7AFE026C8570C156C22E7C7BB2BA905E91F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:81:29:9b:33:04:d8:e0:06:be:7b:f6:7f: c6:b1:b8:45:75:d2:d8:ba:d8:83:ce:d8:e2:f7:e9: 30:9b:ba:8e:82:1a:4b:6c:f3:c2:11:24:d1:0a:d4: 42:b5:91:00:a8:ff:1c:0d:26:a7:74:21:dc:50:3e: 7b:5c:fe:01:d6:32:15:54:12:e5:08:02:19:4c:c1: b2:04:ad:76:0a:35:04:a3:9d:37:f7:7e:66:a0:9b: b5:08:a5:6d:66:65:97:57:3f:47:8c:03:59:db:55: da:14:e5:84:43:00:91:be:e2:44:b5:cc:a9:30:7f: 5e:e6:25:fb:7d:89:ec:2d:b6:f1:f9:c1:dc:9b:b7: da:d7:81:e5:d9:2e:a9:54:2f:8d:3d:bf:39:b6:e3: a1:b7:4b:85:57:f4:87:ba:79:21:0d:62:9e:60:d0: 9e:fe:a6:8a:c2:04:22:aa:2b:8a:fc:41:dc:c9:48: f5:74:fe:d8:25:73:d3:40:d9:f0:a1:1a:6a:7d:54: f1:04:53:ea:bd:a2:48:4d:a8:3d:ad:bd:d4:1f:7d: 89:3d:51:70:7c:3e:ef:ef:b2:90:86:55:07:37:66: f2:a8:17:9c:1d:93:41:5e:e4:1b:40:84:6a:87:fe: 68:02:df:a0:40:10:47:6d:39:c4:44:ce:53:2d:0e: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D7:AF:E0:26:C8:57:0C:15:6C:22:E7:C7:BB:2B:A9:05:E9:1F:14 X509v3 Authority Key Identifier: keyid:84:F2:CD:0C:B5:1A:42:37:F7:E1:F3:AE:85:19:E3:CC:26:44:8B:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hPLNDLUaQjf34fOuhRnjzCZEi38.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/415/hPLNDLUaQjf34fOuhRnjzCZEi38.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:15:7b:a9:ff:0a:14:c4:50:d2:24:2d:39:2e:3c:6b:44:33: 41:a9:f0:1d:99:c6:d6:6c:92:5a:8c:58:55:08:51:e8:7d:c1: 1e:8b:a8:73:22:99:9c:7a:bf:a4:7f:9b:58:7a:b0:b0:2f:6e: 01:05:6d:00:41:09:09:8b:29:22:92:aa:c2:2b:39:2e:8d:8f: 9f:49:d7:db:af:a2:22:54:23:19:48:46:39:93:2b:b1:df:ca: 48:00:86:49:77:90:7b:72:26:b6:1d:9f:a9:4c:0d:c0:de:cd: 88:1a:ef:25:41:cc:8d:84:24:49:da:de:09:b7:71:09:10:61: 37:65:73:05:06:b2:49:36:99:25:63:d6:55:15:60:ea:ac:ca: 21:11:70:f3:17:6f:f5:80:22:8a:5d:c3:4d:69:d7:f4:91:1d: 38:1e:9e:f0:00:49:a3:fa:1c:89:44:2f:20:ef:49:e4:74:1a: 93:41:ac:a4:55:16:6c:89:23:d5:a7:fc:2d:2d:e0:cb:19:b6: e8:f6:4b:9d:e2:b5:f7:c5:a4:b0:69:68:e7:38:a4:19:ad:e4: 12:00:04:8b:e5:17:f5:b3:ef:4d:c7:22:83:be:5d:0e:6f:0f: 58:f9:44:1c:cd:d9:c9:f5:d6:80:bd:26:2f:37:7d:53:03:86: da:e4:84:a5 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICFqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG MkNEMENCNTFBNDIzN0Y3RTFGM0FFODUxOUUzQ0MyNjQ0OEI3RjAeFw0yNTA4MTMx NjA1NTVaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDQ1RDdBRkUwMjZDODU3 MEMxNTZDMjJFN0M3QkIyQkE5MDVFOTFGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+ZIEpmzME2OAGvnv2f8axuEV10ti62IPO2OL36TCbuo6CGkts 88IRJNEK1EK1kQCo/xwNJqd0IdxQPntc/gHWMhVUEuUIAhlMwbIErXYKNQSjnTf3 fmagm7UIpW1mZZdXP0eMA1nbVdoU5YRDAJG+4kS1zKkwf17mJft9iewttvH5wdyb t9rXgeXZLqlUL409vzm246G3S4VX9Ie6eSENYp5g0J7+porCBCKqK4r8QdzJSPV0 /tglc9NA2fChGmp9VPEEU+q9okhNqD2tvdQffYk9UXB8Pu/vspCGVQc3ZvKoF5wd k0Fe5BtAhGqH/mgC36BAEEdtOcREzlMtDsjJAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQURdev4CbIVwwVbCLnx7srqQXpHxQwHwYDVR0jBBgwFoAUhPLNDLUaQjf34fOu hRnjzCZEi38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1 L2hQTE5ETFVhUWpmMzRmT3VoUm5qekNaRWkzOC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvaFBMTkRMVWFRamYzNGZPdWhSbmp6Q1pFaTM4LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDE1L2hQTE5ETFVhUWpmMzRm T3VoUm5qekNaRWkzOC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC7FXup/woUxFDSJC05LjxrRDNBqfAdmcbWbJJajFhVCFHofcEei6hzIpmcer+k f5tYerCwL24BBW0AQQkJiykikqrCKzkujY+fSdfbr6IiVCMZSEY5kyux38pIAIZJ d5B7cia2HZ+pTA3A3s2IGu8lQcyNhCRJ2t4Jt3EJEGE3ZXMFBrJJNpklY9ZVFWDq rMohEXDzF2/1gCKKXcNNadf0kR04Hp7wAEmj+hyJRC8g70nkdBqTQaykVRZsiSPV p/wtLeDLGbbo9kud4rX3xaSwaWjnOKQZreQSAASL5Rf1s+9NxyKDvl0Obw9Y+UQc zdnJ9daAvSYvN31TA4ba5ISl -----END CERTIFICATE-----Generated at Wed Aug 13 19:14:13 2025 by rpki-client