$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft File: tRlLGMyNlt0mESh8YqnqgiDbOm4.mft (raw, json) Hash identifier: wbhn30qtb+dFme34dOFsyTBmRLzxv62T24dpiMziyNc= Subject key identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 Authority key identifier: B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E Certificate issuer: /CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Certificate serial: 1F90 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft Manifest number: 1F90 Signing time: Wed 13 Aug 2025 16:05:20 +0000 Manifest this update: Wed 13 Aug 2025 16:05:20 +0000 Manifest next update: Wed 13 Aug 2025 22:05:20 +0000 Files and hashes: 1: tRlLGMyNlt0mESh8YqnqgiDbOm4.crl (hash: 2OSlfn1mjoJx92E+YS4F96FdBx4WQ3mNDDAuYTRsoxU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8080 (0x1f90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5194B18CC8D96DD2611287C62A9EA8220DB3A6E Validity Not Before: Aug 13 16:05:20 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=FC15367BFB397F457D46540D18CDC227561DD019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:6a:5d:65:5d:09:10:b4:a6:69:c8:52:95: 7f:4c:5e:f7:6c:89:81:46:8c:3f:05:14:e8:8f:2c: 4c:c8:f2:be:ac:96:de:34:60:2d:b0:31:6b:c1:1c: a7:d0:ef:9a:30:0e:a4:1e:14:0f:d0:cd:f7:0d:7d: 89:20:6b:14:2b:78:07:87:cf:0f:a3:88:d1:62:8f: 11:9c:20:d0:6e:df:52:40:19:50:26:64:b1:d5:14: 49:bc:31:33:d7:c4:f3:96:50:95:56:8a:00:cf:7c: 8b:c7:42:f3:d0:9c:9c:42:8d:7f:32:f9:2d:cf:8d: a3:fb:cf:b2:e7:55:39:1f:b4:35:73:2c:b4:89:34: bc:5a:5a:99:3f:48:55:2d:59:39:c3:4e:55:77:87: c4:4e:fd:8c:02:6a:08:d5:5d:76:e7:d4:70:e5:67: fb:80:3a:07:88:b6:1c:dd:d1:dc:ab:75:8d:71:85: 3e:92:f6:e8:24:de:d7:98:62:27:9d:15:08:71:22: 24:1d:5d:ad:c9:aa:fe:a3:a2:c0:89:d4:94:b6:ef: 0a:81:e7:6a:19:41:11:56:e2:50:85:6d:04:04:c0: b2:fd:6c:63:f9:72:a5:56:c8:3a:c3:60:7f:1a:a6: 36:f9:06:0d:68:b6:69:ed:bf:67:62:d7:22:51:2f: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:36:7B:FB:39:7F:45:7D:46:54:0D:18:CD:C2:27:56:1D:D0:19 X509v3 Authority Key Identifier: keyid:B5:19:4B:18:CC:8D:96:DD:26:11:28:7C:62:A9:EA:82:20:DB:3A:6E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tRlLGMyNlt0mESh8YqnqgiDbOm4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/727/tRlLGMyNlt0mESh8YqnqgiDbOm4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fc:c3:76:0b:14:86:9c:76:ad:29:c0:51:ef:2a:26:7a:8a: a8:04:12:e1:95:c3:d4:15:11:47:27:f2:1b:6c:74:56:b0:6b: dd:92:90:69:9b:3e:f1:50:94:fb:b7:d4:24:70:33:43:29:1e: d7:91:5e:83:3d:de:a2:43:91:db:15:23:c1:4d:b3:ed:2c:ce: f7:c4:ad:ce:7b:50:3e:b9:90:b1:d7:2b:aa:0b:19:37:67:f2: 48:52:91:a1:4f:cf:66:f2:db:dd:0d:fe:88:f4:32:72:2b:5b: 13:58:01:a4:d8:e1:1f:b7:11:8d:b6:de:e7:0b:e1:3d:7c:98: 9a:71:45:f9:9b:8c:42:8f:63:7c:10:c4:a8:47:87:e4:f1:82: 2b:8c:59:38:4d:10:fe:53:ee:09:c1:de:25:17:b5:97:87:6c: 3a:5d:f3:8e:cb:53:23:d6:af:46:41:02:3d:a2:91:2a:6a:6e: 50:a7:29:80:ab:55:78:5a:73:02:3d:ee:36:b8:d5:b5:46:27: 62:77:b1:2e:2f:52:c1:3b:f1:85:57:dd:e5:c8:5b:2d:d7:7b: 3d:44:36:79:f4:01:5c:97:b9:a5:12:78:11:5d:80:32:c9:cf: 8b:99:e5:1c:ba:2d:85:d6:99:5c:89:29:22:2e:a4:df:59:9f: d0:ba:f1:4d -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICH5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjUx OTRCMThDQzhEOTZERDI2MTEyODdDNjJBOUVBODIyMERCM0E2RTAeFw0yNTA4MTMx NjA1MjBaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKEZDMTUzNjdCRkIzOTdG NDU3RDQ2NTQwRDE4Q0RDMjI3NTYxREQwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVtmpdZV0JELSmachSlX9MXvdsiYFGjD8FFOiPLEzI8r6slt40 YC2wMWvBHKfQ75owDqQeFA/QzfcNfYkgaxQreAeHzw+jiNFijxGcINBu31JAGVAm ZLHVFEm8MTPXxPOWUJVWigDPfIvHQvPQnJxCjX8y+S3PjaP7z7LnVTkftDVzLLSJ NLxaWpk/SFUtWTnDTlV3h8RO/YwCagjVXXbn1HDlZ/uAOgeIthzd0dyrdY1xhT6S 9ugk3teYYiedFQhxIiQdXa3Jqv6josCJ1JS27wqB52oZQRFW4lCFbQQEwLL9bGP5 cqVWyDrDYH8apjb5Bg1otmntv2di1yJRLyj9AgMBAAGjggIKMIICBjAdBgNVHQ4E FgQU/BU2e/s5f0V9RlQNGM3CJ1Yd0BkwHwYDVR0jBBgwFoAUtRlLGMyNlt0mESh8 YqnqgiDbOm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3 L3RSbExHTXlObHQwbUVTaDhZcW5xZ2lEYk9tNC5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvdFJsTEdNeU5sdDBtRVNoOFlxbnFnaURiT200LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzI3L3RSbExHTXlObHQwbUVT aDhZcW5xZ2lEYk9tNC5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAf/MN2CxSGnHatKcBR7yomeoqoBBLhlcPUFRFHJ/IbbHRWsGvdkpBpmz7xUJT7 t9QkcDNDKR7XkV6DPd6iQ5HbFSPBTbPtLM73xK3Oe1A+uZCx1yuqCxk3Z/JIUpGh T89m8tvdDf6I9DJyK1sTWAGk2OEftxGNtt7nC+E9fJiacUX5m4xCj2N8EMSoR4fk 8YIrjFk4TRD+U+4Jwd4lF7WXh2w6XfOOy1Mj1q9GQQI9opEqam5QpymAq1V4WnMC Pe42uNW1Ridid7EuL1LBO/GFV93lyFst13s9RDZ59AFcl7mlEngRXYAyyc+LmeUc ui2F1plciSkiLqTfWZ/QuvFN -----END CERTIFICATE-----Generated at Wed Aug 13 20:20:19 2025 by rpki-client