$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft File: aNHWIOHqFxAY048aCIaBCXhdurE.mft (raw, json) Hash identifier: zI8q1cjLGVRidtn82jJGjg5WLJVes9U4Gnc/PPjV4UA= Subject key identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 Authority key identifier: 68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 Certificate issuer: /CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Certificate serial: 39 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft Manifest number: 39 Signing time: Mon 08 Sep 2025 04:05:27 +0000 Manifest this update: Mon 08 Sep 2025 04:05:27 +0000 Manifest next update: Mon 08 Sep 2025 10:05:27 +0000 Files and hashes: 1: aNHWIOHqFxAY048aCIaBCXhdurE.crl (hash: e7EsbDLmiZIZW/BOueDIS3YDjZQ5TMvMVT68eS4ffo4=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68D1D620E1EA171018D38F1A08868109785DBAB1 Validity Not Before: Sep 8 04:05:27 2025 GMT Not After : Aug 28 02:43:41 2026 GMT Subject: CN=B236EA55FB0269C3807F4E9AD6D0E16157CB18E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:0b:0f:04:f5:c8:e4:00:9e:ea:f0:b3:6c: 8f:4d:4c:9f:9d:fa:90:e4:d0:84:eb:43:f5:08:fa: c8:dd:af:b5:93:39:75:5b:a6:b9:56:f7:cf:cf:78: a3:f8:4d:f6:93:a2:99:3e:05:d3:d1:8b:fc:a4:39: 6c:91:36:65:56:e6:79:fc:fe:c9:bb:6d:30:e1:35: a5:bc:97:42:a0:61:5c:96:c0:1b:af:07:e7:9e:ee: 0c:96:4c:b0:19:31:34:a6:7c:3a:b1:04:fd:59:76: 36:0c:39:c4:12:02:52:0d:83:af:92:37:e0:07:bf: ac:4f:99:e7:b8:a9:6b:5f:41:51:17:cc:fb:4c:49: 0a:75:b4:11:d3:eb:ca:8f:c0:8b:a6:93:e9:ff:6f: c3:58:78:77:2d:cb:e3:64:55:80:8e:fc:b4:c7:31: bb:ef:18:74:10:aa:6a:e5:a1:4f:89:6a:2a:49:e5: e1:73:a6:05:7b:c5:23:5f:d0:96:55:4f:a8:ec:e5: 36:e4:98:64:94:23:88:5f:e4:3a:59:9a:25:b4:34: d0:a4:bb:6a:9b:e1:6f:cc:74:7b:3c:63:d0:72:fd: 73:bb:5c:14:75:48:a8:d5:1b:3a:ca:cc:c9:6e:3e: 30:02:27:6f:28:34:c6:8a:d7:6e:78:65:6f:e8:4f: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EA:55:FB:02:69:C3:80:7F:4E:9A:D6:D0:E1:61:57:CB:18:E7 X509v3 Authority Key Identifier: keyid:68:D1:D6:20:E1:EA:17:10:18:D3:8F:1A:08:86:81:09:78:5D:BA:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aNHWIOHqFxAY048aCIaBCXhdurE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1585/aNHWIOHqFxAY048aCIaBCXhdurE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:bd:be:db:95:5b:d1:65:ad:68:c6:22:ee:81:00:b8:ed: 21:07:8a:46:0d:c9:a2:14:42:36:3e:e7:09:c9:1b:af:4b:0b: 53:4e:3f:f4:7d:77:7d:4b:87:de:e6:a0:91:30:c3:e8:88:ac: 59:36:94:03:41:73:69:6b:30:5b:da:1f:ed:b1:d4:ef:37:4e: 3c:32:04:ca:2b:24:ea:a6:b9:41:bb:b2:2a:c4:d0:72:76:7a: 6b:27:ee:3b:d6:ff:5f:48:82:f7:66:e2:49:85:df:03:af:f5: 0c:c8:b4:c6:f2:1b:a0:9a:4b:ce:e4:b1:e9:40:5d:02:98:a9: 45:81:ca:ec:4b:41:df:a7:9e:ba:d9:f6:72:7a:0b:b6:02:e8: 7e:e4:60:d1:e6:0b:25:20:80:22:e7:bc:55:5b:ed:1c:0c:15: 8f:3c:f5:3f:70:83:19:84:05:3f:87:af:7d:f7:ca:cd:3d:fa: 30:b8:44:d8:03:c7:ac:ec:07:79:9c:5c:b6:c5:19:ec:bc:96: 3a:e3:43:e1:62:40:28:f5:da:f6:8e:aa:87:99:e6:a2:6a:ec: a3:a0:cb:22:67:a5:a8:00:fa:4b:2a:ea:d9:d9:0a:49:ea:b5: 6c:3c:d6:6b:f8:3b:cc:d8:f6:9e:fc:ab:21:97:11:6f:b3:37: b2:ff:c9:b6 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEQx RDYyMEUxRUExNzEwMThEMzhGMUEwODg2ODEwOTc4NURCQUIxMB4XDTI1MDkwODA0 MDUyN1oXDTI2MDgyODAyNDM0MVowMzExMC8GA1UEAxMoQjIzNkVBNTVGQjAyNjlD MzgwN0Y0RTlBRDZEMEUxNjE1N0NCMThFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/0Cw8E9cjkAJ7q8LNsj01Mn536kOTQhOtD9Qj6yN2vtZM5dVum uVb3z894o/hN9pOimT4F09GL/KQ5bJE2ZVbmefz+ybttMOE1pbyXQqBhXJbAG68H 557uDJZMsBkxNKZ8OrEE/Vl2Ngw5xBICUg2Dr5I34Ae/rE+Z57ipa19BURfM+0xJ CnW0EdPryo/Ai6aT6f9vw1h4dy3L42RVgI78tMcxu+8YdBCqauWhT4lqKknl4XOm BXvFI1/QllVPqOzlNuSYZJQjiF/kOlmaJbQ00KS7apvhb8x0ezxj0HL9c7tcFHVI qNUbOsrMyW4+MAInbyg0xorXbnhlb+hPALkCAwEAAaOCAgwwggIIMB0GA1UdDgQW BBSyNupV+wJpw4B/TprW0OFhV8sY5zAfBgNVHSMEGDAWgBRo0dYg4eoXEBjTjxoI hoEJeF26sTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNTg1 L2FOSFdJT0hxRnhBWTA0OGFDSWFCQ1hoZHVyRS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvYU5IV0lPSHFGeEFZMDQ4YUNJYUJDWGhkdXJFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4NS9hTkhXSU9IcUZ4QVkw NDhhQ0lhQkNYaGR1ckUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADLK9vtuVW9FlrWjGIu6BALjtIQeKRg3JohRCNj7nCckbr0sLU04/9H13fUuH 3uagkTDD6IisWTaUA0FzaWswW9of7bHU7zdOPDIEyisk6qa5QbuyKsTQcnZ6ayfu O9b/X0iC92biSYXfA6/1DMi0xvIboJpLzuSx6UBdApipRYHK7EtB36eeutn2cnoL tgLofuRg0eYLJSCAIue8VVvtHAwVjzz1P3CDGYQFP4evfffKzT36MLhE2APHrOwH eZxctsUZ7LyWOuND4WJAKPXa9o6qh5nmomrso6DLImelqAD6Syrq2dkKSeq1bDzW a/g7zNj2nvyrIZcRb7M3sv/Jtg== -----END CERTIFICATE-----Generated at Mon Sep 8 05:54:59 2025 by rpki-client