$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft File: BFagwwe9oIjxq3j2p-wFemB5Yy4.mft (raw, json) Hash identifier: p03KiRvBLVEeOsKz3C3kbpntKb07Dk5hCWjvNp6ziUk= Subject key identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 Authority key identifier: 04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E Certificate issuer: /CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Certificate serial: 33DD Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft Manifest number: 33DD Signing time: Wed 13 Aug 2025 16:01:56 +0000 Manifest this update: Wed 13 Aug 2025 16:01:56 +0000 Manifest next update: Wed 13 Aug 2025 22:01:56 +0000 Files and hashes: 1: BFagwwe9oIjxq3j2p-wFemB5Yy4.crl (hash: l7qKvVHJ5RwDxU7JuhU62OhcgYoTeWrv8NC/UhLlovw=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13277 (0x33dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0456A0C307BDA088F1AB78F6A7EC057A6079632E Validity Not Before: Aug 13 16:01:56 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=458891FA790C06BC3506F01EC58C2286F412A8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:bc:c9:e8:e6:04:bb:64:b8:68:bb:18:11: 8b:8d:7e:fc:53:d0:c1:e4:bb:57:e3:e0:48:ec:3a: 3d:fb:a6:04:d4:97:f3:f3:9c:be:f8:19:0e:60:7a: 56:bb:35:09:d7:90:56:0d:db:4b:0b:de:8d:98:83: af:fc:0f:80:17:f2:13:72:5a:5e:34:02:c5:7d:c9: 97:81:89:9d:43:8a:8f:51:13:34:e0:1a:8e:94:dc: 8c:12:4f:6c:1e:f1:2d:c2:7e:5f:62:88:40:96:c4: 93:5e:bb:4b:9b:08:ce:36:da:15:6b:40:d3:b0:38: 1d:52:78:09:1f:87:df:1e:0c:27:e1:fa:75:b8:07: b1:2a:2e:19:cf:80:28:b4:24:f8:bc:56:5b:cb:06: d7:64:27:0f:6b:fa:05:ed:94:2e:a8:94:3c:d7:fe: 0c:21:30:53:a3:07:c6:5a:36:48:d3:ca:81:fd:49: 2c:88:93:b5:9e:11:3f:f6:a1:cd:bf:27:71:0c:23: e7:23:f2:f6:ff:4b:50:77:17:23:ab:40:c5:5e:6f: dd:5b:0e:8f:a8:84:a8:2a:cf:9e:b5:b3:ba:62:61: f2:17:3e:00:9a:d2:82:a9:2a:a6:bf:5f:0c:72:30: d6:0e:a7:33:18:fe:aa:ff:8c:38:42:54:2f:b3:af: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:91:FA:79:0C:06:BC:35:06:F0:1E:C5:8C:22:86:F4:12:A8:A3 X509v3 Authority Key Identifier: keyid:04:56:A0:C3:07:BD:A0:88:F1:AB:78:F6:A7:EC:05:7A:60:79:63:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BFagwwe9oIjxq3j2p-wFemB5Yy4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/77/BFagwwe9oIjxq3j2p-wFemB5Yy4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a6:f4:1e:73:47:f7:85:d8:50:f1:96:5f:f3:c2:25:81:1c: 97:3b:bc:29:90:c5:51:9e:f5:a3:7c:07:70:a7:e6:81:6f:23: 8c:9f:fe:ae:71:2b:7b:b5:8b:04:83:ac:9c:78:94:fb:49:b1: aa:09:15:13:69:9f:2f:69:e8:fb:44:1d:cf:77:06:93:9d:6e: ae:b4:72:0e:94:b4:f4:f6:56:af:e6:66:f1:ec:5e:a2:9e:00: 28:36:48:c0:e8:22:4f:fb:1b:79:8d:6d:d6:ea:ed:93:4f:3c: f5:bd:1d:32:67:b2:71:07:2e:97:c6:fb:a2:17:c0:94:a2:12: 74:4c:37:7b:c4:84:d4:29:e2:45:10:98:11:55:97:60:9c:93: 89:72:3b:9a:4a:b8:fe:ff:2a:0b:40:16:b1:24:e6:6d:68:a3: 45:c8:27:72:9d:58:70:d4:59:44:11:dc:b6:06:70:52:84:ac: 12:9f:49:8f:3e:28:9d:44:08:f8:1d:cf:82:12:81:4a:80:39: 3e:bf:d7:ee:f8:f9:6c:f2:22:2d:1d:98:24:18:4a:11:1d:b3: a6:ef:a2:44:8a:d9:2e:12:4b:f6:e1:e7:7f:94:e5:b3:c1:cf: 28:38:11:51:bc:ec:40:51:f8:9a:71:29:9f:6b:cd:43:9e:b4: 66:7b:61:00 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICM90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ1 NkEwQzMwN0JEQTA4OEYxQUI3OEY2QTdFQzA1N0E2MDc5NjMyRTAeFw0yNTA4MTMx NjAxNTZaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDQ1ODg5MUZBNzkwQzA2 QkMzNTA2RjAxRUM1OEMyMjg2RjQxMkE4QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVvbzJ6OYEu2S4aLsYEYuNfvxT0MHku1fj4EjsOj37pgTUl/Pz nL74GQ5gela7NQnXkFYN20sL3o2Yg6/8D4AX8hNyWl40AsV9yZeBiZ1Dio9REzTg Go6U3IwST2we8S3Cfl9iiECWxJNeu0ubCM422hVrQNOwOB1SeAkfh98eDCfh+nW4 B7EqLhnPgCi0JPi8VlvLBtdkJw9r+gXtlC6olDzX/gwhMFOjB8ZaNkjTyoH9SSyI k7WeET/2oc2/J3EMI+cj8vb/S1B3FyOrQMVeb91bDo+ohKgqz561s7piYfIXPgCa 0oKpKqa/XwxyMNYOpzMY/qr/jDhCVC+zr7L/AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQURYiR+nkMBrw1BvAexYwihvQSqKMwHwYDVR0jBBgwFoAUBFagwwe9oIjxq3j2 p+wFemB5Yy4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzcv QkZhZ3d3ZTlvSWp4cTNqMnAtd0ZlbUI1WXk0LmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9CRmFnd3dlOW9JanhxM2oycC13RmVtQjVZeTQuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ny9CRmFnd3dlOW9JanhxM2oy cC13RmVtQjVZeTQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA PKb0HnNH94XYUPGWX/PCJYEclzu8KZDFUZ71o3wHcKfmgW8jjJ/+rnEre7WLBIOs nHiU+0mxqgkVE2mfL2no+0Qdz3cGk51urrRyDpS09PZWr+Zm8exeop4AKDZIwOgi T/sbeY1t1urtk0889b0dMmeycQcul8b7ohfAlKISdEw3e8SE1CniRRCYEVWXYJyT iXI7mkq4/v8qC0AWsSTmbWijRcgncp1YcNRZRBHctgZwUoSsEp9Jjz4onUQI+B3P ghKBSoA5Pr/X7vj5bPIiLR2YJBhKER2zpu+iRIrZLhJL9uHnf5Tls8HPKDgRUbzs QFH4mnEpn2vNQ560ZnthAA== -----END CERTIFICATE-----Generated at Wed Aug 13 19:17:42 2025 by rpki-client